last executing test programs: 7m55.159128597s ago: executing program 2 (id=2523): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x121281, 0x0) io_setup(0x4fb, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x1a, 0x1, 0x0, r2, 0x0, 0xffe5, 0x8, 0x0, 0x2}]) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x10000000, 0x6, 0x5}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="de6c0000", @ANYRES16=r7, @ANYBLOB="08002dbd7000ffdbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r8 = accept(r4, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000005"], 0x50) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r10, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x84}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xf9}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x811) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r8}, 0x47) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x8000000000000000) keyctl$update(0x2, 0x0, &(0x7f00000010c0)="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", 0x1000) rt_sigtimedwait(&(0x7f0000000040)={[0x1]}, 0x0, &(0x7f0000001080)={0x77359400}, 0x8) shutdown(r8, 0x0) recvfrom$unix(r8, 0x0, 0x0, 0x22060, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x20, 0x0, 0x0, @local, @local, {[@dstopts={0x0, 0x3, '\x00', [@generic={0x31, 0x16, "461e964f8380d23437be1692529d83e1698fd412231c"}]}]}}}}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c000009f36375372f170624ecfee075d1c78166aa975712020185a7fcf307b9296b2759613ffbc3eb61ee44fb42133a01186dc9ca2db4422fbc4", @ANYRES16=r1, @ANYBLOB="01002bbd72000000000039000000ac005a80a800018004000100140003000700730004000300020004000500080014000300020009000a000700120f050000010400050004000000000005000400000000001400030009000000fbff0a000400f7ff0300040005000400010000000500060001000000390002004519400433533a3802402f44500f101e354051523c4a0c294b050e0a425531014750092c3d1f022655243c094a182e553c102701370000000500060002000000"], 0xc0}, 0x1, 0x0, 0x0, 0x20000855}, 0x0) 7m54.932435159s ago: executing program 2 (id=2527): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x149a82, 0x0) sendfile(r0, r0, 0x0, 0xff) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080ab22f778940c}, 0x20000045) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 7m54.849224355s ago: executing program 2 (id=2528): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001280)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f00000003c0)="525d1d6941211676289851586883b5488f8c7b86ddd0df6a3a697afe947604b5867bef34d5308dd04614c4cc6c9070db7b5596622e0b4002df8c7360f618b5c9f880f3fe87de120730cccbe10c0f4dc8cc6cc4bd15250a1f03d4973ce0a6c39f3f6a7a393d8d1f582bb8e43011ffa28b38cd3b16037b64cabee428b11fd4dbd96f24503f140ad0b7e3", 0x89}], 0x1, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000005c0)="38ba34451d480f86872eeac3d097b511a98cf7ba6409a06bd846ba22b74d457e8ae96cdd72d793e69061a7c8c2ddea02dab3a3567b4c4d5faa22c30c69f1d32c5cfec8e8", 0x44}, {&(0x7f0000000740)="3d80aa245f884c89c3de60bf1e2ac1dd966adfd19665a50c9a562f8bd85374f3a572712c6eb25ccb81225056db2c13411bc0575509019996ede5f2a3f62c214185fbc07a319613b465659e1f93d10f66e96568a8a723ec27e10fb4e0aef8e147972fcae0f28b3545b0678a27297d7f5418f330a29d0df5d5270a3ff9ae5f4d936e90dd2b8e70a6ce27a37f97a6865257d62a8ba4c99e2030", 0x98}, {&(0x7f0000000800)}, {0x0}, {&(0x7f0000000940)="8df859c50623bf6a6957c52ef9f79460a1af6ff991d6296e9dbe5203d77294c85355df135c6dfa37c17a6e25118d5f19ac4a23352cdd9db191b734e9dd9c96023a", 0x41}], 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="afe3fb8400010000000000000000020000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x80, 0x40011}}, {{0x0, 0x0, &(0x7f0000000f80)=[{0x0}, {&(0x7f0000001000)="cb29068e420c216d1da6e15860bc2aaf473e3a6579e0bf6d87f20f7e478f14247b6b3fe5af45c05235c63375aaa5700c494db6dc3fa3eaccd63415b002bcec70ada9ce46f05b539cb9cc4be6e622bfd2", 0x50}, {&(0x7f0000000bc0)="787e5db26b9044d12aba5d96e5084ed6659e54a67e", 0x15}, {0x0}, {0x0}], 0x5, &(0x7f0000001140), 0x0, 0x4000000}}], 0x3, 0xc040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000232000/0x2000)=nil, &(0x7f000068b000/0x2000)=nil, &(0x7f0000371000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000070d000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000af0000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x6a52, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x39a}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 7m54.187184616s ago: executing program 2 (id=2532): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000280)='./file0/file1\x00', 0xb) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)={0x20, r1, 0x421, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4088}, 0x840) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file1\x00', 0x0, 0x2243005, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, 0x0}}], 0x1, 0x4000040) syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x22000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0xc000003, 0x0, 0x0, 0x0, 0x4000007}) 7m53.65234382s ago: executing program 2 (id=2533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0xddd86000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@inode32}]}) 7m52.025776126s ago: executing program 2 (id=2543): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x0, 0x0, 0x0, 0x130, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'bond_slave_0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}, {{@ip={@private, @local, 0x0, 0x0, 'vcan0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x4}}}, {{@ip={@multicast2, @private, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) 7m51.677303341s ago: executing program 32 (id=2543): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x0, 0x0, 0x0, 0x130, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'bond_slave_0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}, {{@ip={@private, @local, 0x0, 0x0, 'vcan0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x4}}}, {{@ip={@multicast2, @private, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) 2m29.735212187s ago: executing program 0 (id=3574): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) gettid() prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000020c0), 0x3, 0x80) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000002100)=0x40) close(r2) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x8}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0x0, 0x0}, 0x10) open(0x0, 0x682080, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r4], 0x68}}, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 2m28.701459565s ago: executing program 0 (id=3578): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYRES8], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffff, 0x2}, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000800000000e0ffffff82000400000000000000400006040000000000eb4765899f864d5ab181b6182bb4298619326abcad4102780febfd6733fdf2c4ce2cf8c6b5e49bb6ef217a"], 0x0, 0x32, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7ce8001602000000008cc01d76bcbb50e8000000", @ANYBLOB='\x00'/17, @ANYRES32=0x0], 0x50) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000003c0)={{0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf2}, {0xa, 0x4e21, 0x4, @mcast2, 0x7}, 0x0, {[0x5, 0x8, 0x0, 0x1, 0x8001, 0x3, 0x0, 0x4]}}, 0x5c) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40000, 0x0, 0x1000000, 0x0, 0xc5c4, 0x2}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000000)={0x6, {"e512864f2c63b42b1e937260904ce544", "b80b00", "98fed86df169f801002f69ff0008e800"}, 0x3ff, 0x5}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="20110800005110e1fbc057bbcc61dc56f17e35dc4dcd58a92aa78d038f521e4487ce68bf539a9ab7c8581df2e4aa798919759b61474cac911347462cc680a5f6f4720180557dc8d128633de2959efafffffffe2785c55725f4c1f04f5d93cf"], 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040), 0xc) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r5, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) 2m27.224678849s ago: executing program 0 (id=3583): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedb3025010000000e0001006e65742f6c326361700000000800020005"], 0x2c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x24000080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r3, 0x30d, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={0x394, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_LLC_SDP={0x1d0, 0x13, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [{0x7, 0x1, '-^-'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}]}, {0x44, 0x0, 0x0, 0x1, [{0xe, 0x1, 'NLBL_MGMT\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x4}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xa, 0x1, ':)].:/'}]}, {0x44, 0x0, 0x0, 0x1, [{0xe, 0x1, 'NLBL_MGMT\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x4}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x4}, {0x7, 0x1, '^}-'}]}, {0x44, 0x0, 0x0, 0x1, [{0x5, 0x1, '@'}, {0x4}, {0x17, 0x1, '[\xf1{+&/^\')\xfe#/%/-.%})'}, {0x4}, {0x6, 0x1, '-]'}, {0xe, 0x1, 'NLBL_MGMT\x00'}]}, {0x44, 0x0, 0x0, 0x1, [{0xb, 0x1, '-t-**\'.'}, {0xc, 0x1, '^]]#.\x19&\''}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x7, 0x1, '${&'}, {0xe, 0x1, 'NLBL_MGMT\x00'}]}, {0x80, 0x0, 0x0, 0x1, [{0x4}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x4}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x4}, {0xf, 0x1, ',-/.d[${.*\x1d'}, {0xe, 0x1, 'NLBL_MGMT\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, '(-*&@@'}]}]}, @NFC_ATTR_LLC_SDP={0x1a0, 0x13, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [{0xe, 0x1, 'NLBL_MGMT\x00'}, {0x9, 0x1, '{+}E/'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x8, 0x1, '#-(:'}, {0x5, 0x1, '\xde'}]}, {0x38, 0x0, 0x0, 0x1, [{0x6, 0x1, ']@'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x9, 0x1, ',\',*+'}, {0xe, 0x1, 'NLBL_MGMT\x00'}]}, {0x88, 0x0, 0x0, 0x1, [{0xe, 0x1, 'NLBL_MGMT\x00'}, {0xa, 0x1, '$-\'-:)'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x5, 0x1, '#'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xd, 0x1, '%\'(#\xdc\'/*{'}]}, {0x8c, 0x0, 0x0, 0x1, [{0x8, 0x1, '-[\'&'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x5, 0x1, '\''}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x5, 0x1, '['}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}]}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x18001}, 0x8000) 2m26.381821884s ago: executing program 0 (id=3585): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 2m26.243679965s ago: executing program 0 (id=3586): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x103042, 0x47) write$evdev(r1, &(0x7f0000000500)=[{{0x77359400}, 0x2, 0x35, 0x6}], 0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x7, 0x2, 0x10, 0x1, 0x311}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000480)={r2, 0x266, 0x4, 0x85, 0x8, 0x10000}, &(0x7f00000005c0)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001"], 0x30}}, 0x0) r3 = syz_clone(0x100480, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, 0x0) kcmp(r3, r3, 0x3, r4, r4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000400) socket(0x28, 0x5, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x238303, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$inet(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)}, 0x8000) accept4$packet(r7, 0x0, 0x0, 0x80000) sendto$inet6(r0, &(0x7f0000000140)="9f", 0x34000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2m25.316632603s ago: executing program 0 (id=3591): r0 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x40000) ioctl$BLKZEROOUT(r0, 0xc0c0128e, &(0x7f0000000240)={0x6, 0x8000080002}) (fail_nth: 2) 2m10.15572781s ago: executing program 33 (id=3591): r0 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x40000) ioctl$BLKZEROOUT(r0, 0xc0c0128e, &(0x7f0000000240)={0x6, 0x8000080002}) (fail_nth: 2) 14.218367985s ago: executing program 6 (id=4030): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x488c0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0xe8, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_REG_RULES={0xc4, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1ff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x78c3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x810) writev(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0x0, 0x70000000}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) sched_setscheduler(0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r6 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xa}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) close_range(r6, 0xffffffffffffffff, 0x0) 13.952899967s ago: executing program 5 (id=4032): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) kexec_load(0x4, 0xfffffe1a, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0x7e) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) kexec_load(0x4, 0xfffffe1a, 0x0, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x202, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0x7e) (async) 13.90325128s ago: executing program 5 (id=4033): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8942, &(0x7f0000000900)={'veth1_virt_wifi\x00', @random='\x00\x00\x00 \x00'}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000200)={0x0, {0x0, 0xfffffffffffffffa, 0xd59, 0xffd7, 0x6}}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r3, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100030e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa0000000000000000020013"], 0x70}}, 0x0) sendmmsg(r9, &(0x7f0000000180), 0x400008a, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18, 0x1, {0xffffffff}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) 13.708352727s ago: executing program 5 (id=4035): openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000140), 0x4) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ipvlan1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="95", 0x1}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e20, @private=0xa010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) 10.52066895s ago: executing program 6 (id=4043): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000404f045db60000060000010902240001"], 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) socket$qrtr(0x2a, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40000, 0x0, 0x1000000, 0x0, 0xc5c4, 0x2}, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000000)={0x6, {"e512864f2c63b42b1e937260904ce544", "b80b00", "98fed86df169f801002f69ff0008e800"}, 0x3ff, 0x5}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="20110800005110e1fbc057bbcc61dc56f17e35dc4dcd58a92aa78d038f521e4487ce68bf539a9ab7c8581df2e4aa798919759b61474cac911347462cc680a5f6f4720180557dc8d128633de2959efafffffffe2785c55725f4c1f04f5d93cf"], 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0}) 9.127577838s ago: executing program 5 (id=4044): getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x0, 0x56}, 0x28) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0x1000, 0x2, 0x40, 0x8002}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0xe256610c62001369}, 0x600000c0) r5 = fsmount(r1, 0x0, 0x0) fchdir(r5) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) getpriority(0x2, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000800)={"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"}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_ep_write(r7, 0x81, 0x0, &(0x7f00000002c0)) 7.516831695s ago: executing program 4 (id=4052): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x400200, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) syz_open_dev$dri(0x0, 0x1ff, 0x140) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x33c}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r5, &(0x7f0000000000), 0x0, 0x5, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 7.436883684s ago: executing program 6 (id=4053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1816c1, 0x1ff) close(r4) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYBLOB="b1b348"], 0x0) 6.256551289s ago: executing program 4 (id=4054): socket$igmp6(0xa, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r0, &(0x7f0000002400)=[{&(0x7f0000000200)=""/237, 0xed}], 0x1, 0xd9, 0xff00) 6.110589818s ago: executing program 4 (id=4056): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133e6bafc6eb170fb006", "211475fc21552dce5cda9c00"}}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000180)="480000001400197f09004b0101048c59028800ffff0001000000000028213ee20600d4ff4affff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace35ee8b12c00", 0x48}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz0\x00', {0x5, 0x0, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x200, 0x0, 0x1, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x80000000, 0x0, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x7f], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x2ee19903, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x42ac, 0x0, 0x10000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe46, 0x2000000, 0xffffffff, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0x400008, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x0, 0x335, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0xfffffff8, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x956, 0x0, 0x1]}, 0x45c) 5.562013064s ago: executing program 4 (id=4057): mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x60}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x15}, 0x80) r3 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x3352, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, 0x0) io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 4.765775071s ago: executing program 3 (id=4060): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ba79679, 0x2d}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x23c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x16508b98}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r1 = getpgid(0x0) rt_sigqueueinfo(r1, 0x29, &(0x7f0000000080)={0x13, 0x200, 0x6}) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r6, 0xc0384707, &(0x7f0000000500)={0x5, 0x0, 0xfffffffe, 0x5, 0x0, "3eccd8f9d20000000000001000000200000500"}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x18}}, 0x0) 4.473662461s ago: executing program 1 (id=4061): open(&(0x7f0000000100)='./bus\x00', 0x64842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x64880, 0x0) r0 = io_uring_setup(0x1197, &(0x7f0000000040)={0x0, 0x2550, 0xc000, 0x405, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) sysfs$1(0x1, 0x0) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2}) 3.932528213s ago: executing program 6 (id=4062): r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, &(0x7f0000000000)=@rc={0x1f, @fixed}, &(0x7f0000000080)=0x80, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={r2, 0x7, 0x80010, 0x4}, &(0x7f0000000100)=0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x2c, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4811}, 0x4008094) 3.920491025s ago: executing program 3 (id=4063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setuid(0x0) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x2b2}, &(0x7f0000000180)=0x0, &(0x7f0000000640)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r4 = eventfd2(0x6, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040)=r4, 0x1) io_uring_enter(0xffffffffffffffff, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x8, 0x2007, @fd_index=0xa, 0x5, 0x0, 0x0, 0x35, 0x0, {0x0, r7}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x12, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.824624878s ago: executing program 5 (id=4064): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x0, 0x90) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_misc(r0, &(0x7f0000000700)="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", 0xfc) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/165, 0xa5}, {&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000140)=""/19, 0x13}, {&(0x7f0000000300)=""/98, 0x62}, {&(0x7f0000000380)=""/50, 0x32}, {&(0x7f00000003c0)=""/121, 0x79}, {&(0x7f0000000440)=""/184, 0xb8}, {&(0x7f0000000600)=""/206, 0xce}], 0x8, 0x0, 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000080)={0x2}) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 3.434035769s ago: executing program 1 (id=4065): syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async, rerun: 32) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c40), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000002cc0)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x47}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) (async) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x4fcb6231, {0x1, 0xfffffff5, 0x0, '\x00', {0x8000, 0x7, 0xadf, 0x804, r6, r7, 0xa000, '\x00', 0x7, 0x83, 0x2ff, 0x3, {0x8, 0x8}, {0x4000000000006, 0x2003}, {0x2f, 0x6}, {0x7ff, 0xa00}, 0x80008003, 0xa, 0xffffffff, 0x806}}}}) (async) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x22000100, 0x0, 0xfffb, 0x7}}, 0x50) (async, rerun: 64) r8 = open(&(0x7f0000000200)='./file0\x00', 0x108843, 0xb0) (rerun: 64) fcntl$setlease(r8, 0x400, 0x1) (async) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x204000, 0x100) openat(r9, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000001200)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) (async) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) (async) getitimer(0x1, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 3.271696116s ago: executing program 1 (id=4066): sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (fail_nth: 5) 3.214331954s ago: executing program 3 (id=4067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2c, 0x3, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1, 0x2}, 0x20) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400009de867ae2e1fcb9400000000005196401c2872bafe4aa469b0c9260000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000700000000000000010000010900010073797a30000000000900020073ffff300000000014000380080001400000000008000240ffff000038000000180a0101000b0000000000010000000900010073797a30000000000c00fa0e00000140000000200900020073797a3095e5ae5dcb220000001000010000000000000000000000000a2cddbe44027e5094000000000000"], 0xc0}}, 0x0) 3.152167093s ago: executing program 5 (id=4068): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004}) poll(&(0x7f00000000c0)=[{r4, 0x1009}], 0x1, 0x8000007) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f00000013c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6, 0x4956bb8d, 0x4, 0xe0, 0x9}, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000100)='cgroup.clone_children\x00', 0x2, 0x0) ioctl$TCFLSH(r6, 0x400455c8, 0x4) r8 = add_key(&(0x7f0000000340)='logon\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r9 = gettid() sched_setattr(r9, &(0x7f0000000140)={0x38, 0x5, 0x3, 0x5, 0x6, 0x3, 0x2, 0xa1, 0x7, 0xe}, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r8) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) 3.151934648s ago: executing program 6 (id=4069): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000400)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, 0x0) 3.057928292s ago: executing program 3 (id=4070): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 2.92001083s ago: executing program 3 (id=4071): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9, 0xfff3}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x131) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r6 = semget(0x1, 0x2, 0x50) semctl$GETNCNT(r6, 0x0, 0xe, &(0x7f00000004c0)=""/174) r7 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'wlan1\x00', @random="0134010100bf"}) 1.982503887s ago: executing program 3 (id=4072): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) eventfd2(0xff, 0x80001) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r7, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x2, 0x1}) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40000) io_uring_enter(r4, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) 1.232890003s ago: executing program 1 (id=4073): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ba79679, 0x2d}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x23c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x16508b98}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r1 = getpgid(0x0) rt_sigqueueinfo(r1, 0x29, &(0x7f0000000080)={0x13, 0x200, 0x6}) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r6, 0xc0384707, &(0x7f0000000500)={0x5, 0x0, 0xfffffffe, 0x5, 0x0, "3eccd8f9d20000000000001000000200000500"}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x18}}, 0x0) 533.460773ms ago: executing program 1 (id=4074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0xa, 0x1, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x4a, [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d52c0], [0x0, 0x0, 0x8, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf], [0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x0, 0x0, 0x0, 0x400, 0x9, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(0xffffffffffffffff, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) 340.118238ms ago: executing program 1 (id=4075): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000400), 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = inotify_init1(0x0) r3 = fanotify_init(0x1a, 0x800) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r3, 0x641, 0x1028, r4, 0x0) inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0x2000434) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_mmap={0x6, 0x1, 0x4, 0x0, 0x2, {r6, r7/1000+10000}, {0x4, 0x0, 0x9, 0x1, 0x0, 0x6, "dae51c4d"}, 0xc, 0x1, {&(0x7f00000000c0)=[{0xa, 0x6, {0x1}, 0x9b4}, {0x5, 0x3, {0x9}, 0x9}]}, 0x1, 0x0, r8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r10 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f000079f000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r12, &(0x7f0000005ac0)=[{{&(0x7f0000000440)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000280)="a5707f287b11017b9aebb335afe31a4d462b7b3f1ef053648cfacde8ef9ac46ee531b390d335581811b994c20eb0e4df", 0x30}, {&(0x7f00000004c0)="8ab5454df936031496509d34cb56471989921401fa2a56728819da2bda7acdb1d953f3dd53bd2e8a65acdf4ab353deb8aa85e9e5306caeb9065eb7f67168aba4195174a5f5b7fc0aa01c219091eed6b08a311c043412647d67cd354efeddac5937054c83a1024373a3a1738a78415688c52e2bb6f9266cd16c3979d7d2912e37791821e7567711a532761eb0093a2fcb33d68a8240788f7b804aaa4e915a56e1b4ef519af0c6d0fd3becaf", 0xab}, {&(0x7f0000000580)="9ff054177656bfad6592c68cdfa6ba21d32f3fd756e8254dcf1bf7bbdf8dbc9419c646646b04b222e5ffb5725f9814df3cb715835817976415abd6e6aa676f51978daea8baf509315b8b42476e8770f1f97dfbd3a3d55d37d35a44b36962c5a0c32f1d39e359acbd95841ca3afa9ac8c71dcdd5b2b096c452078e63b672855562fe6517deaeb6403d9bf8bcca74cc90b60098122892b75a52abae6523273342c62c2a5af259834dce56f4b033aa989ceea827e82610b4ba81a75d949c12c0a110cd2c54846eb607a9902c7437c0c822d2670b23780568b4c6f243e1a69a138f11d8d6bdf", 0xe4}], 0x3, &(0x7f0000000780)=[@rights={{0x18, 0x1, 0x1, [r2, r3]}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r8, 0xffffffffffffffff, r5, r5, r3, r3, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x20, 0x1, 0x1, [r9, r9, r0, r0]}}], 0xb0}}, {{&(0x7f0000000840)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000e00)=[{&(0x7f00000008c0)="d33079da24f1a910d6554c6b4be75852274ff3a8f91300834042c06f86d980d8068a879caa397d7e9031fff887d91754980c3a76781fc348c975935da18ff9d4597155a8b9efa70d1f3b7ba106a3a11012131261ab053267703189ed85d2582ee27570ac97627ac96624a8b29dfb63e0f9f53c3d98ed32b427b8ef60d36cd54942abf75b0c34fb5e44a70daec08ad4221daf06f40cb904cf3dd231c607050e8017bf37da80d3ea14", 0xa8}, {&(0x7f0000000980)="01062c78bac4818cd8d810897ea032f8fcb23f4ff5265b44a9dc64bc0d1e6f92e59272adc5cf419cf0a1561901def6dbcaf3d6bf146311a38a9d824e90cb56f4563bc06a67f37ec79155edf4ebc8b56a45086ca63be60478b9f2ebbdd6d6d58ad20ce3a3cc2b353bc4823e6682599782567c57ba1d9b6e3b53239316c7c6bd4e429cad49331086e013e81a5ebc98fad238e9a5678233b95a8bf6aa9e8200767eddfbc0310d49ff82e1d462f8", 0xac}, {&(0x7f0000000a40)="a9b6a021c4a57f180ae3ee8ba5019d67760be599aab7ff86f93d58a8b932f18c1a5392787b4e3319f64a5cad4188977b1f4f8e74efbc1daaeb568798098c8b54525a6e1bad959a8e933c29383d86310a73642ee1d00c9905a835c283ac2e160199d435a84d170edccbaaef967d61e144714b0bb51d8fe7cf4493a584360482b84fe0029f0c04b42ce840499a", 0x8c}, {&(0x7f0000000b00)="35ac494bc545c45734601be96e43fcb55c6c2751f9b1471e6e2005c08fdabe82ffc7e565df591e26e32247f1e3667cbf0fdb8aa3f356b85fae9171659ee1f536ce332a2f3f3de1d5c208e4e32892c56f53ecafa3827e3ecf2c37a44ded90e1b2a9d5dc1c7fdc4663b8cf5fda807d3a6349b477fe4968053dc2daa7d37d72ce1e57f8f49ef874ebf473c003f6ee0fe5435ed7fde46572b0428722a377d5264a63f184a22da9cc135a6d8f6f6a1ff60bfd2bd9c0df8748492e7252a4462ea529c806f659fd102bbfa9adef3f", 0xcb}, {&(0x7f0000000c00)="adb7bbf7f937870fb38209b13f973c4d1253beb337d09989470d4b196497214ba519d1a545b8e0ff603bde2a50c8a1e37bab8f670f6bd6c22ab4ba21f4fa4e69ea13fdfbb34f59455d838e0ee0eed3834c1a625d7353c9b475c8aa46f9164a0e7af17bfc7925b5d57f796a8dfeabadf085eb51f46efc51b826f9fb9f32c87f9fc0eb11982600ee54a0f2794ca56631b85e1c63aa276f0de971bd97be8c9142d9", 0xa0}, {&(0x7f0000000cc0)="efdd49c2bbc34bdc71c14a9756540fed1cc05aa216943a78865ce539", 0x1c}, {&(0x7f0000000d80)="a0ae744c5815105930c7e3960cb5d5a292a174aa2d998237229a0bbed692bf4436296e47952c00ccb4f8851908a2f7817c09d58010959148b15426073ef6b1b671bd967ac1b5abd8b390ddcae75d3d152dc6dd93e13f0f397b470ae8516f3f9e6d1246af4be8", 0x66}], 0x7, &(0x7f0000000f00)=[@rights={{0x18, 0x1, 0x1, [r5, r3]}}, @rights={{0x38, 0x1, 0x1, [r1, r12, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r11, r11, 0xffffffffffffffff, r12]}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r8]}}, @rights={{0x18, 0x1, 0x1, [r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {r10}}}], 0xc0, 0x80}}, {{&(0x7f0000000fc0)=@file={0x1, '.\x00'}, 0x6e, &(0x7f0000003200)=[{&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="7b328d524d4ef57cbb1b6e6271653b8bb612d83337bd1e3e0775578c5a2416b17cd275104f20a981d06a204e2f20400c9b37fcc0d5af54241e7cb47671bc31eb84fbc25b818877653bba454d8562701a3143d2044f2a2ad9e3af60a5ee0e25184514c64c8b292cf161dd53325226b2b9d25ce1b1ae5732645222c380d951817bc710532b34852b37f96cb4786b38382be0eaf960c3598a5a1220dbc6a0c7d44edb3e0ab511f4f2c9de509786ec87bbba1ca8c3ffe2cd0899c65003e8f42a", 0xbe}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000003100)="2ebd07976345d86989527bf4b34e3b6fbcb6a8a37e848140b8b619a6c9b63294ad008b0a8a5d6f7672c0ceac7d0c42f30be12e831dc86b0fd9f304272a90dcbf17d690b939e21ead1bfa15c4a95ca463dee691f1be2244542c87bc54534844efac19f43d4780d4a17fc1856cde07ffa740115109f9b0", 0x76}, {&(0x7f0000003180)="1781f015a717e3cfc89cca9982657523be7f550ff1cff1dc51343fbaece1e28d3030f5bce7a41bde7fa2184e4e59eea85eacc3ef624db8e6eb7e73e22b5cc5c731407ce70bdea8f8ea81b96bf2c9224bc3cbfd5dcf2750198a117dbeb8db060a09037f1a67eb59eb3426baa127b8", 0x6e}], 0x5, &(0x7f0000003300)=[@rights={{0x38, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @rights={{0x1c, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r9, r9, 0xffffffffffffffff, r1, r12]}}, @rights={{0x2c, 0x1, 0x1, [r4, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0, 0x80}}, {{&(0x7f00000033c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004700)=[{&(0x7f0000003440)="d4b634f8305905cfc47ab2a3f40904d0fa5019f481d8958dd032c3d5b1246b213df55846c0a20df47083fc0e38790c2ac04902de1d30b8ee417b446a14987613d29896cb43bc22553f8adc19f1", 0x4d}, {&(0x7f00000034c0)="d40ec4eeef27d12b6482aa7a709f6b7424c36060b23921d030419dcf1e79164085abeef6d8deca986e647b0946aeeeb595510c8f52fc4c677c5f9ce0ddf6c9579da9bef699e94c22a562c24c70378846a6e1afec3f068ea806856ef3013224bad005535660156aed5eb3fea6812ab925ace40d5c298230a80d6fe4c71fcd491993adba4e54640cf15a1856484f179d691ea2f3745ad0ea863b8448f56e780047aa4cd9e29f4df099c5e7ffea48ec3ace9158b7282cdb77f0f241b07ef65caaaf6e6810759a00", 0xc6}, {&(0x7f00000035c0)="c49e82c6bad28eb7dac69db704a6c69a3e0aefeb737a88cae580e6a10887fa6ac835fe20ddafacb3c02a1b2b66cdbb5ee5b8a1c9decf", 0x36}, {&(0x7f0000003600)='O', 0x1}, {&(0x7f0000003640)="fbdf6d958e2d6e0c45b1a54ad5b6f1ed9d3a040e64f12c7ad860530d58191fb4b5dacc35af1956c9b45a1c043b0a7860d819d3e9ad1819c3a6a64a39ee7d6cb8271ba8d5e246f407f0350be017f4715a02a5cc82cce53fe668f8786b99b44b87fd086471a315b646b9156ea8cb74497d208ad77ce086dc0a650f2d575d1a7a4c9256806e6dda8897e11a2e057a074122dab91a32d642c13f9e252e9a469cf39c95126fc80700f0dc8092e572cff475caecba74", 0xb3}, {&(0x7f0000003700)="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", 0x1000}], 0x6, &(0x7f00000047c0)=[@rights={{0x24, 0x1, 0x1, [r12, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004800)="50e135b44ab8b8165e04d690485b78e3ce3dae8417578193d1b300d0543c072273fa6f839c8fc41bdc909a7b307f37f3a6503ce92987276b13d876b5c65fcdf8bd86fa5c047c6176d8b2cfec97025a2b376251d456bf632cda90f91c88dc5460de9228754d2bc162af2aef026aaa", 0x6e}, {&(0x7f0000004880)="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", 0xff}, {&(0x7f0000004980)="46a5a271fc6db7fab73e6ad3aee3c739d403e6a4cfc03835ce69d2b73750041c349e61428905393933f5c367d9f1cacc444ca5b33849648bcbf17cc4e5a6c778fcd806994ee31030089c18f2e5835c707b684ee86051ed94d06cf00813e6e45510b1dc8cc631d3711197336ba01f76037cec6ad95fbc14f6779572df5f824da49b1d3660531bc1e18a04f4b52df2e89955df4451faaa6b2c508fa849741453c02eb42015245d200479ca6e7641db20acca5fc2aa937f559af9de68b48343f61fea", 0xc1}, {&(0x7f0000004a80)="af2441230f6b149a342ec4541281f16515acd514142eb589b53d2db34e21cfdfbb433d33771e0d721d2872266aa4667d029438ea42fa86aa064955852248b55be460a910b206b3d4945716025dd669be4e8d08322b37755d79ff1fb0625c2b52b8a836eefc2e37cb75bd4a6021b1ffd71a3cd526d03550ef9e3b429f2203b0d28ec9438014a845dda377ce3dc6289a694978d2139ab29e51f14f737ceaa37d6d99abb1c0621f737b9e28f611222555032104773b30d0724af505dfaa8d3028e2", 0xc0}, {&(0x7f0000004b40)="1fca4d773bc05d1cff9fa94e96782d4d4083c590f8f233be44b6ce56b2ace05d95859797208c6bc802a597f1d1c20d4b909d04cc22b320e41af7fdb7c4064fb9b4853488afd51b22dc4e22ed5e4a5eb74e75f135c36a5845bc08e66c593eb2b081117a3a6fdb699bc0129cebac866de3bd8c204949107e664d", 0x79}, {&(0x7f0000004bc0)="2608ae7958c236ed3e8e8c43901e6a4aec129d615d762f60082836f1a6a49be10801847554a31d6bfee9ff41435e29d5309e9d3a72fa00fb7e07e7de350e8854903974367434976e5c969f4634d3eb175c7bcd270e2dc5c9a184223915e3689a96d700738a5204854d34b8894880d0484c2ed1e1802a35d7aacba3452bb08368df085b3eaa30f3374b3cbfd123f732e3612c5c3f451047125ce188d619d8a6439d79895d56", 0xa5}], 0x6, &(0x7f0000004e80)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r4, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r10}}}], 0xb8, 0x2004c001}}, {{&(0x7f0000004f40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000005640)=[{&(0x7f0000004fc0)="8d89d6effd8eca20614e384c5f2576a1224236850c2520bce11929336567e98d9ffa2401a264e558244445cbe37491702b0b404a578f1d155c1c68fb05aae69584cc1d2a5dbf58dfe83bad43ad21a8047dbb9040da3853e2c2db24e652841d060a9ab15fe1d1c25f74ce6b5283077bab13cd8f5cc7bba80de34c605a7fd20d9882970af59f09610487de1846e021fbf3e989676864c86c4bb0b5a24cf8df5fe33671b421586b6477b3c23f741983b8426c4f12024d9acd7a54ae175a03ffc087ac598e4bdfd40921b01fee695e33c40afe0624b730634f0262b11efcf51e0a509c6ee267c250c2", 0xe7}, {&(0x7f00000050c0)="8f2587f588650656cac171e8c483659a3730bb253ac1a61d2c93ebb315f143fea4b1f52cc32ec7c12899b65f8d1775cb3adcf982266b05e220e4e70d7188d2e57f", 0x41}, {&(0x7f0000005140)="ea056b21090581853a6dd884386d73e8e5bbe0085f2da07c45f1c521b8a96d1537fce121c526a74a691dcfb4ca8b6d20720abad893deb5cb7727df45bd22f0d7c9d980db49ddf9fe363581487ffc82c8d647a64dde0d1cfb8fee5c06abc7a39acd7c60cf5a12d802a3f8781e878238e005435428edff103f198796e18504b2fc547c376e81167676b51081fee46fd8447c40a17e1fb9c2285a591db5a86726227618504f8ff04a2d08f69e5ab2d8fd4d736e7056b12875f8e5dadb39774b4dcfad", 0xc1}, {&(0x7f0000005240)="ccb64214d25a9449f320a423048e04d178791e6bb8c66de1dd0af7307ed3df29723608d576aadb83c7d67f4a5431c8fb98e4c77dab", 0x35}, {&(0x7f0000005280)}, {&(0x7f00000052c0)="d643c39bdc9dfd8ec815a5cf1ef86f362455e256bdd7b0545efeb03b8bb616ac7769250d5f1379e498251efe8bcabe8477fcc586b810c2b5716bca6c070129b0e3c1954cf05ea003d58858400879238ad96568d3a5dc", 0x56}, {&(0x7f0000005340)="565b79c613637113380252e697359d3a10eb0ac401b072892f52497efab7d231e18c33266234a3e1e583fee568c7386421dc62bbc7d789cf035f17e8cd63e739d529dfec51677654f0900d31dbe6756b353ea67e10283a34bbf9af5b442ff9ab3290d5b6a193faf9405cf7d8be15f1e24396907d866f2badb2e47b5d572521a68b861cd4bd0da45c6670de16d3c514ece50c74853ce10ab7b82b2d6e75510a11f626c9c9ec260a43555237ecb3c848167f0e3dc50a886d6127df327d445f4d515097e75f438064bf895c39217f499818e2644b72bc713ce7390f423af2fe2d", 0xdf}, {&(0x7f0000005440)="1ca23dbfea48a5c387ae51c7224289e096a6e4faabd64ec7776cd446ad755e5a3ec00e5de574ded089ddaa5d717c4c2fdfb134874c57ce190ab11437b1e22bd60cc36e6fc6aa8511730ea5a1023b4fb140feb1cf5516eb9f5c92c31e92af8c012220deb8af52a984", 0x68}, {&(0x7f00000054c0)="c7611e6e56715ee9d3304d9b97ddeb3ef7e1045a92445146b3c308b11cc8096e1d329ca3aaae5c39da74ff3c9584e5d7cf550b69da781582386b8029ea52fd73cd9bd7b60c8500439651219d07effed096ed6e4503c21dec620380d0097abc5ebf7f130895817ca2ea737db2c6a8e81529c02ef15b48b41157571b6bcf15fe34867320abe5e0db7fe8a4684e8e2db19a9db451de4f46287db3a2bbbb1839b471fad4a3a564ece478bc0a3e796ebf1f931844cece2fed28f53bd0ef9aeaa3146a630ec21b2d79", 0xc6}, {&(0x7f00000055c0)="813a56358e618dfebc702d87ba96c8e0ffb57cdc781d2bf8cfd7012962d781f2e6c2700bc983d15a136d06bbb8422761b216ab388fba32c7f41a08cd0a9b44689115ba7c29", 0x45}], 0xa, &(0x7f0000005700)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18, 0x40000}}, {{0x0, 0x0, &(0x7f0000005980)=[{&(0x7f0000005740)="28d7d11091ddbb5a833b7aedac103476e7cc9540", 0x14}, {&(0x7f0000005780)="6edf41d320615b06", 0x8}, {&(0x7f00000057c0)="f9d668baea42b1ab39cae5460223aceb82d2462797bf798065beec576ab2a3dd4c22109ce4b4d9a99e67fe060b04c481d9ce233c040a00e72d6c24552dffa7c7b99ee824450ad92ca50076ae899a5d53d4820a876b5be6e886ae067b0bcaca6e2ed80a82005f91b15a73e8db2fc4dc0cf5f8b1639cf7cecd67e874b8b55e59028cbcb694040a9790560dab26169fd478f9760705c7", 0x95}, {&(0x7f0000005880)="176b1c58f3583f1ecb9f966c3b8c86f7ba1a4af49d9c4d9c619d3dd33801dd23a56400df3d5375478e18f829dc70e5445ad375bd85f2e75a99510d0eb1b5825aa091add3be5dc9fc28c4b5c763c304cd094064c47d9dc569d582e0e7f3a7f9dfce3e0c3fc0c07809ec74f89d5db1f21aa19ae7c27a75c772f4e2aa980886d98f9777c2c74a5cb6f13dc886092f48db428ad3db1ef30e5c523a85fc859c21495e8e7637531175df3d975b068fbc2ef552e4a03abf2ce40b2cc8fd343a45e2", 0xbe}, {&(0x7f0000005940)="7697641dcf9e2071c1e50e083b6460a5e46d858f135f4cebd0c37e00b3263a9a709ca909201f24c1064f08", 0x2b}], 0x5, &(0x7f0000004d00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x48, 0x4000004}}], 0x7, 0x48081) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r13 = pidfd_getfd(0xffffffffffffffff, r12, 0x0) ioctl$BLKTRACESETUP(r13, 0xc0481273, &(0x7f0000000340)={'\x00', 0x0, 0x401, 0x80000001, 0xd, 0x32, r10}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000080)="db", 0x1}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000d40)='net/llc/socket\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) 197.782309ms ago: executing program 4 (id=4076): r0 = syz_open_pts(0xffffffffffffffff, 0x801) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) 475.639µs ago: executing program 4 (id=4077): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x103042, 0x47) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x266, 0x4, 0x85, 0x8, 0x10000}, &(0x7f00000005c0)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001"], 0x30}}, 0x0) r2 = syz_clone(0x100480, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, 0x0) kcmp(r2, r2, 0x3, r3, r3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000400) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x28, 0x5, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x238303, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$inet(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)}, 0x8000) accept4$packet(r6, 0x0, 0x0, 0x80000) sendto$inet6(r0, &(0x7f0000000140)="9f", 0x34000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 0s ago: executing program 6 (id=4078): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2c81e0286aaaaaaaa0008ff"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x0, 0x100, 0x10004, 0x2c}, 0x50) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0)=0xb, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000008c0)={r3, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x101, 0x8205, 0x0, 0x5, r3}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff}}) kernel console output (not intermixed with test programs): x3d0 [ 1128.309378][T20280] security_file_ioctl+0xd3/0x230 [ 1128.309400][T20280] __x64_sys_ioctl+0xb7/0x210 [ 1128.309424][T20280] do_syscall_64+0x106/0xf80 [ 1128.309443][T20280] ? clear_bhb_loop+0x40/0x90 [ 1128.309462][T20280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.309479][T20280] RIP: 0033:0x7f1aa819c799 [ 1128.309495][T20280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.309511][T20280] RSP: 002b:00007f1aa9055028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1128.309537][T20280] RAX: ffffffffffffffda RBX: 00007f1aa8415fa0 RCX: 00007f1aa819c799 [ 1128.309549][T20280] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1128.309560][T20280] RBP: 00007f1aa9055090 R08: 0000000000000000 R09: 0000000000000000 [ 1128.309571][T20280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1128.309581][T20280] R13: 00007f1aa8416038 R14: 00007f1aa8415fa0 R15: 00007ffdef7bcd38 [ 1128.309606][T20280] [ 1128.309614][T20280] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1128.440920][T20288] __nla_validate_parse: 3 callbacks suppressed [ 1128.440942][T20288] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3665'. [ 1128.481952][T20280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1128.507275][T20209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.525625][T20286] netlink: 'syz.4.3665': attribute type 4 has an invalid length. [ 1128.583683][T20290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3665'. [ 1128.597319][T20286] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3665'. [ 1128.609777][T20209] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.649013][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.656188][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1128.676446][T20290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3665'. [ 1128.700072][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.707242][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1128.735360][ T29] audit: type=1326 audit(1772150382.273:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20275 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1128.815342][ T29] audit: type=1326 audit(1772150382.313:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20275 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1129.128581][ T29] audit: type=1326 audit(1772150382.313:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20275 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1129.219254][T20290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3665'. [ 1129.228418][T20290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3665'. [ 1129.334275][ T29] audit: type=1326 audit(1772150382.313:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20275 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1129.513356][ T29] audit: type=1326 audit(1772150382.313:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20275 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1129.582378][T20290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3665'. [ 1129.605052][T20290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3665'. [ 1129.630116][ T29] audit: type=1326 audit(1772150382.313:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20275 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1129.742760][ T29] audit: type=1326 audit(1772150382.313:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20275 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1129.788356][T20312] fuse: Bad value for 'group_id' [ 1129.803747][T20312] fuse: Bad value for 'group_id' [ 1129.840393][T20209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1129.850827][T20311] dummy0: entered promiscuous mode [ 1129.865691][ T29] audit: type=1326 audit(1772150382.313:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20275 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1130.169290][ T29] audit: type=1326 audit(1772150382.313:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20275 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1130.375283][ T5127] Bluetooth: hci4: command tx timeout [ 1130.424092][ T29] audit: type=1326 audit(1772150382.313:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20275 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1130.562405][ T29] audit: type=1326 audit(1772150382.313:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20275 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1130.671347][T20309] dummy0: left promiscuous mode [ 1130.680885][ T29] audit: type=1326 audit(1772150382.313:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20275 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1130.705033][ T5862] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1130.734199][ T29] audit: type=1326 audit(1772150382.313:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20275 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1130.769232][ T29] audit: type=1326 audit(1772150382.313:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20275 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1130.836352][ T29] audit: type=1326 audit(1772150382.313:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20275 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1130.862653][ T5862] usb 5-1: device descriptor read/64, error -71 [ 1130.881939][ T29] audit: type=1326 audit(1772150382.313:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20275 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1130.910264][ T29] audit: type=1326 audit(1772150382.393:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20275 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1130.938054][ T29] audit: type=1326 audit(1772150382.393:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20275 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1130.993992][T20209] veth0_vlan: entered promiscuous mode [ 1131.021658][T20209] veth1_vlan: entered promiscuous mode [ 1131.063741][T20209] veth0_macvtap: entered promiscuous mode [ 1131.081196][T20209] veth1_macvtap: entered promiscuous mode [ 1131.107269][ T5862] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1131.111011][T20209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1131.128003][T20209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1131.151107][ T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.161062][ T35] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.182318][ T5127] Bluetooth: hci6: command 0x1003 tx timeout [ 1131.192888][T15864] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1131.241307][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.256038][ T5862] usb 5-1: device descriptor read/64, error -71 [ 1131.304080][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.379771][ T5862] usb usb5-port1: attempt power cycle [ 1131.442256][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.490763][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.775598][ T5862] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1131.876654][ T5862] usb 5-1: device descriptor read/8, error -71 [ 1131.895826][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.916883][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.125090][T17229] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 1132.175662][ T5862] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1132.207379][ T5862] usb 5-1: device descriptor read/8, error -71 [ 1132.361163][ T5862] usb usb5-port1: unable to enumerate USB device [ 1132.455341][T15864] Bluetooth: hci4: command tx timeout [ 1132.801505][T17229] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1132.921386][T17229] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1132.975013][T17229] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1132.984184][T17229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.378961][ T5927] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1133.427414][T17229] usb 2-1: usb_control_msg returned -32 [ 1133.433102][T17229] usbtmc 2-1:16.0: can't read capabilities [ 1133.574241][ T5927] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.794709][ T5927] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1133.826616][ T5927] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1133.838069][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1133.850407][ T5927] usb 6-1: SerialNumber: syz [ 1133.920602][T20352] FAULT_INJECTION: forcing a failure. [ 1133.920602][T20352] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.961936][T20352] CPU: 0 UID: 0 PID: 20352 Comm: syz.3.3679 Tainted: G L syzkaller #0 PREEMPT(full) [ 1133.961969][T20352] Tainted: [L]=SOFTLOCKUP [ 1133.961975][T20352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1133.961986][T20352] Call Trace: [ 1133.961993][T20352] [ 1133.962001][T20352] dump_stack_lvl+0x100/0x190 [ 1133.962039][T20352] should_fail_ex.cold+0x5/0xa [ 1133.962064][T20352] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1133.962088][T20352] should_failslab+0xc2/0x120 [ 1133.962117][T20352] __kmalloc_noprof+0xe0/0x850 [ 1133.962146][T20352] tomoyo_realpath_from_path+0xb6/0x690 [ 1133.962169][T20352] tomoyo_path_number_perm+0x23c/0x580 [ 1133.962192][T20352] ? tomoyo_path_number_perm+0x22e/0x580 [ 1133.962218][T20352] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1133.962264][T20352] ? find_held_lock+0x2b/0x80 [ 1133.962286][T20352] ? __fget_files+0x215/0x3d0 [ 1133.962300][T20352] ? hook_file_ioctl_common+0x146/0x410 [ 1133.962328][T20352] ? __fget_files+0x21f/0x3d0 [ 1133.962349][T20352] security_file_ioctl+0xd3/0x230 [ 1133.962371][T20352] __x64_sys_ioctl+0xb7/0x210 [ 1133.962397][T20352] do_syscall_64+0x106/0xf80 [ 1133.962416][T20352] ? clear_bhb_loop+0x40/0x90 [ 1133.962437][T20352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.962455][T20352] RIP: 0033:0x7f1aa819c799 [ 1133.962471][T20352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.962487][T20352] RSP: 002b:00007f1aa9055028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1133.962505][T20352] RAX: ffffffffffffffda RBX: 00007f1aa8415fa0 RCX: 00007f1aa819c799 [ 1133.962516][T20352] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 [ 1133.962525][T20352] RBP: 00007f1aa9055090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.962535][T20352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.962545][T20352] R13: 00007f1aa8416038 R14: 00007f1aa8415fa0 R15: 00007ffdef7bcd38 [ 1133.962575][T20352] [ 1133.962627][T20352] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1134.191935][T20342] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3676'. [ 1134.291444][ T5927] usb 6-1: 0:2 : does not exist [ 1134.352205][ T5927] usb 6-1: USB disconnect, device number 59 [ 1134.433160][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1134.959089][ T5927] usb 2-1: USB disconnect, device number 92 [ 1135.302912][T20376] openvswitch: netlink: Flow actions attr not present in new flow. [ 1135.441755][T20376] hpfs: Bad magic ... probably not HPFS [ 1135.882001][T13960] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1135.979681][ T5127] Bluetooth: hci6: command 0x1003 tx timeout [ 1135.988927][T15864] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1136.045686][T13960] usb 7-1: Using ep0 maxpacket: 32 [ 1136.066076][T13960] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1136.083230][T13960] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.101910][T13960] usb 7-1: config 0 descriptor?? [ 1136.333863][T13960] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1136.362167][T13960] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1136.412728][T13960] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1136.420301][T13960] usb 7-1: media controller created [ 1136.473743][T13960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1136.533693][T20378] netlink: 'syz.6.3687': attribute type 83 has an invalid length. [ 1136.568711][T13960] az6027: usb out operation failed. (-71) [ 1136.581528][T13960] az6027: usb out operation failed. (-71) [ 1136.607009][T20399] FAULT_INJECTION: forcing a failure. [ 1136.607009][T20399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1136.607205][T13960] stb0899_attach: Driver disabled by Kconfig [ 1136.635764][T20399] CPU: 1 UID: 0 PID: 20399 Comm: syz.1.3694 Tainted: G L syzkaller #0 PREEMPT(full) [ 1136.635797][T20399] Tainted: [L]=SOFTLOCKUP [ 1136.635804][T20399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1136.635815][T20399] Call Trace: [ 1136.635822][T20399] [ 1136.635831][T20399] dump_stack_lvl+0x100/0x190 [ 1136.635869][T20399] should_fail_ex.cold+0x5/0xa [ 1136.635895][T20399] _copy_from_user+0x2e/0xd0 [ 1136.635924][T20399] copy_msghdr_from_user+0x9f/0x4f0 [ 1136.635952][T20399] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1136.635988][T20399] ___sys_sendmsg+0x106/0x1e0 [ 1136.636013][T20399] ? __pfx____sys_sendmsg+0x10/0x10 [ 1136.636067][T20399] __sys_sendmsg+0x170/0x220 [ 1136.636086][T20399] ? __pfx___sys_sendmsg+0x10/0x10 [ 1136.636121][T20399] do_syscall_64+0x106/0xf80 [ 1136.636140][T20399] ? clear_bhb_loop+0x40/0x90 [ 1136.636164][T20399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.636183][T20399] RIP: 0033:0x7f5b0279c799 [ 1136.636199][T20399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1136.636217][T20399] RSP: 002b:00007f5b036f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1136.636237][T20399] RAX: ffffffffffffffda RBX: 00007f5b02a15fa0 RCX: 00007f5b0279c799 [ 1136.636249][T20399] RDX: 0000000004040090 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1136.636260][T20399] RBP: 00007f5b036f2090 R08: 0000000000000000 R09: 0000000000000000 [ 1136.636270][T20399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1136.636281][T20399] R13: 00007f5b02a16038 R14: 00007f5b02a15fa0 R15: 00007ffcf88c0cc8 [ 1136.636306][T20399] [ 1136.681573][T13960] az6027: no front-end attached [ 1136.681573][T13960] [ 1136.825833][T17229] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1136.852863][T13960] az6027: usb out operation failed. (-71) [ 1136.860491][T13960] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1136.874407][T13960] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input67 [ 1136.969347][T13960] dvb-usb: schedule remote query interval to 400 msecs. [ 1136.982952][T13960] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1136.991164][T17229] usb 4-1: Using ep0 maxpacket: 32 [ 1137.006970][T13960] usb 7-1: USB disconnect, device number 2 [ 1137.016521][T17229] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1137.030241][T17229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.052942][T17229] usb 4-1: Product: syz [ 1137.068147][T17229] usb 4-1: Manufacturer: syz [ 1137.075039][ T5927] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1137.078111][T13960] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1137.093537][T17229] usb 4-1: SerialNumber: syz [ 1137.103121][T17229] usb 4-1: config 0 descriptor?? [ 1138.141019][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1138.141043][ T29] audit: type=1400 audit(1772150391.193:1468): avc: denied { module_load } for pid=20404 comm="syz.5.3697" path="/sys/power/pm_wakeup_irq" dev="sysfs" ino=1415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1138.172154][ T5927] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1138.172194][ T5927] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1138.172236][ T5927] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1138.172257][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.296035][T17229] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 113 [ 1138.402443][ T6172] bridge_slave_1: left allmulticast mode [ 1138.422171][ T5927] usb 2-1: usb_control_msg returned -32 [ 1138.439828][ T6172] bridge_slave_1: left promiscuous mode [ 1138.453563][ T5927] usbtmc 2-1:16.0: can't read capabilities [ 1138.466837][ T6172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.520953][ T6172] bridge_slave_0: left allmulticast mode [ 1138.535467][ T6172] bridge_slave_0: left promiscuous mode [ 1138.558970][ T6172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.954419][T20395] i2c i2c-1: failure reading status [ 1139.173347][T13960] usb 4-1: USB disconnect, device number 113 [ 1139.617226][ T6172] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1139.659400][ T6172] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1139.705684][ T6172] .` (unregistering): Released all slaves [ 1140.045714][ T6172] bond0 (unregistering): (slave veth3): Releasing active interface [ 1140.058925][ T6172] veth0_to_bond: entered promiscuous mode [ 1140.082949][T16836] usb 2-1: USB disconnect, device number 93 [ 1140.142821][ T6172] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1140.167966][ T6172] bond0 (unregistering): Released all slaves [ 1140.229122][ T6172] bond1 (unregistering): (slave veth5): Releasing active interface [ 1140.290594][ T6172] bond1 (unregistering): Released all slaves [ 1140.441325][T20444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3704'. [ 1140.450357][T20444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3704'. [ 1140.459441][T20444] netlink: 'syz.3.3704': attribute type 13 has an invalid length. [ 1140.467345][T20444] netlink: 'syz.3.3704': attribute type 12 has an invalid length. [ 1140.730286][T17229] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1140.804390][ T6172] : left promiscuous mode [ 1140.875012][T17229] usb 6-1: device descriptor read/64, error -71 [ 1140.896237][ T6172] tipc: Left network mode [ 1141.115058][T17229] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1141.305163][T17229] usb 6-1: device descriptor read/64, error -71 [ 1141.415533][ T6172] hsr_slave_0: left promiscuous mode [ 1141.447125][ T6172] hsr_slave_1: left promiscuous mode [ 1141.465927][ T6172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1141.480177][T17229] usb usb6-port1: attempt power cycle [ 1141.498748][ T6172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.521332][ T6172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1141.535102][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1141.557954][ T6172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1141.596888][ T6172] veth1_macvtap: left promiscuous mode [ 1141.602393][ T6172] veth0_macvtap: left promiscuous mode [ 1141.631238][ T6172] veth1_vlan: left promiscuous mode [ 1141.646117][ T6172] veth0_vlan: left promiscuous mode [ 1141.724949][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1141.742447][ T10] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1141.762281][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.793590][ T10] usb 7-1: config 0 descriptor?? [ 1141.825337][T17229] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1141.856208][T17229] usb 6-1: device descriptor read/8, error -71 [ 1142.015056][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1142.417160][T17229] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1142.426498][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1142.438617][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1142.446123][ T10] usb 7-1: media controller created [ 1142.462030][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1142.472276][T17229] usb 6-1: device descriptor read/8, error -71 [ 1142.595254][T17229] usb usb6-port1: unable to enumerate USB device [ 1142.614479][T20464] openvswitch: netlink: Flow actions attr not present in new flow. [ 1142.645960][T20464] hpfs: Bad magic ... probably not HPFS [ 1142.768334][ T6172] team0 (unregistering): Port device team_slave_1 removed [ 1142.801738][ T6172] team0 (unregistering): Port device team_slave_0 removed [ 1142.985196][T16836] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1143.161160][T16836] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.185954][T16836] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1143.212985][T16836] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1143.223266][T16836] usb 5-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 1143.232536][T16836] usb 5-1: Manufacturer: syz [ 1143.303206][T16836] usb 5-1: config 0 descriptor?? [ 1143.692722][ T6172] IPVS: stop unused estimator thread 0... [ 1144.174257][T20449] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1144.219940][ T10] az6027: usb out operation failed. (-71) [ 1144.235304][ T10] az6027: usb out operation failed. (-71) [ 1144.251771][ T10] stb0899_attach: Driver disabled by Kconfig [ 1144.258934][ T10] az6027: no front-end attached [ 1144.258934][ T10] [ 1144.265192][ T5927] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1144.279884][ T10] az6027: usb out operation failed. (-71) [ 1144.286187][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1144.304325][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input68 [ 1144.331317][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 1144.340632][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1144.354698][ T10] usb 7-1: USB disconnect, device number 3 [ 1144.384682][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1144.436574][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.449323][ T5927] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1144.455344][T18910] block nbd0: Possible stuck request ffff888027a90000: control (read@0,1024B). Runtime 210 seconds [ 1144.466374][ T5927] usb 6-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 1144.469494][T18910] block nbd0: Possible stuck request ffff888027a90200: control (read@1024,1024B). Runtime 210 seconds [ 1144.479211][ T5927] usb 6-1: Manufacturer: syz [ 1144.489068][T18910] block nbd0: Possible stuck request ffff888027a90400: control (read@2048,1024B). Runtime 210 seconds [ 1144.498591][ T5927] usb 6-1: config 0 descriptor?? [ 1144.510564][ T5862] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1144.535205][T18910] block nbd0: Possible stuck request ffff888027a90600: control (read@3072,1024B). Runtime 210 seconds [ 1144.675051][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 1144.683869][ T5862] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1144.693713][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.713156][ T5862] usb 4-1: Product: syz [ 1144.717474][ T5862] usb 4-1: Manufacturer: syz [ 1144.722247][ T5862] usb 4-1: SerialNumber: syz [ 1144.735787][ T5862] usb 4-1: config 0 descriptor?? [ 1145.684484][ T5927] hid-thrustmaster 0003:044F:B65D.003D: unknown main item tag 0x0 [ 1147.078227][ T5862] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: failure sending bit rate [ 1148.079511][T17229] usb 5-1: USB disconnect, device number 116 [ 1148.451841][ T5927] hid-thrustmaster 0003:044F:B65D.003D: unknown main item tag 0x0 [ 1148.465088][ T5862] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110 [ 1148.485576][ T5927] hid-thrustmaster 0003:044F:B65D.003D: unknown main item tag 0x0 [ 1148.503252][ T5927] hid-thrustmaster 0003:044F:B65D.003D: unknown main item tag 0x0 [ 1148.512037][ T5862] usb 4-1: USB disconnect, device number 114 [ 1148.519868][ T5927] hid-thrustmaster 0003:044F:B65D.003D: unknown main item tag 0x0 [ 1148.547112][ T5927] hid-thrustmaster 0003:044F:B65D.003D: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1148.559661][ T5927] hid-thrustmaster 0003:044F:B65D.003D: Wrong number of endpoints? [ 1148.577510][ C1] hid-thrustmaster 0003:044F:B65D.003D: URB to get model id failed with error -71 [ 1148.591666][ T5927] usb 6-1: USB disconnect, device number 64 [ 1148.919073][T20499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3718'. [ 1148.928105][T20499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3718'. [ 1148.937476][T20499] netlink: 'syz.4.3718': attribute type 13 has an invalid length. [ 1148.945410][T20499] netlink: 'syz.4.3718': attribute type 12 has an invalid length. [ 1149.267530][T17229] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1149.308003][T20494] fido_id[20494]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1149.575221][T17229] usb 7-1: Using ep0 maxpacket: 8 [ 1149.588226][T17229] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1150.095300][ T5927] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1150.174648][T17229] usb 7-1: config 0 has no interface number 0 [ 1150.185227][T17229] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1150.196355][T17229] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1150.206014][T17229] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.226011][T17229] usb 7-1: config 0 descriptor?? [ 1150.258755][T17229] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1150.303006][ T5927] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.315093][ T5927] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1150.329100][ T5927] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1150.361148][ T5927] usb 6-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 1150.685246][ T5927] usb 6-1: Manufacturer: syz [ 1150.705085][T17229] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1150.716151][ T5927] usb 6-1: config 0 descriptor?? [ 1150.746583][T20488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.763472][T20488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.857388][T20488] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3717'. [ 1150.878167][T17229] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.898247][T17229] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1150.907932][ T29] audit: type=1400 audit(1772150404.443:1469): avc: denied { setopt } for pid=20486 comm="syz.6.3717" lport=43619 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1150.934049][ T5927] usb 7-1: USB disconnect, device number 4 [ 1150.934058][ C0] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1150.957623][ T29] audit: type=1400 audit(1772150404.443:1470): avc: denied { write } for pid=20486 comm="syz.6.3717" lport=43619 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1150.982009][ T29] audit: type=1400 audit(1772150404.443:1471): avc: denied { setopt } for pid=20486 comm="syz.6.3717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1151.015441][T17229] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1151.031866][T17229] usb 5-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 1151.048791][T17229] usb 5-1: Manufacturer: syz [ 1151.057148][T17229] usb 5-1: config 0 descriptor?? [ 1151.108506][T20515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3725'. [ 1151.415082][T17229] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1151.584989][T17229] usb 4-1: Using ep0 maxpacket: 32 [ 1151.592314][T17229] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1151.602631][T17229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.620808][T17229] usb 4-1: config 0 descriptor?? [ 1151.866612][T20529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3728'. [ 1151.876338][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3728'. [ 1151.885818][T20529] netlink: 'syz.6.3728': attribute type 13 has an invalid length. [ 1151.893803][T20529] netlink: 'syz.6.3728': attribute type 12 has an invalid length. [ 1152.189808][T17229] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1152.202872][T17229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1152.217740][T17229] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1152.225065][T17229] usb 4-1: media controller created [ 1152.240503][T17229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1152.410106][T20517] netlink: 'syz.3.3726': attribute type 83 has an invalid length. [ 1152.509457][T17229] az6027: usb out operation failed. (-71) [ 1152.537530][T17229] az6027: usb out operation failed. (-71) [ 1152.548916][T17229] stb0899_attach: Driver disabled by Kconfig [ 1152.565057][T17229] az6027: no front-end attached [ 1152.565057][T17229] [ 1152.577249][T17229] az6027: usb out operation failed. (-71) [ 1152.589066][T20534] block nbd6: shutting down sockets [ 1152.590256][T17229] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1152.614515][T17229] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input69 [ 1152.642806][T17229] dvb-usb: schedule remote query interval to 400 msecs. [ 1152.713895][T20537] openvswitch: netlink: Flow actions attr not present in new flow. [ 1152.723819][T20537] hpfs: Bad magic ... probably not HPFS [ 1152.803949][T17229] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1152.829541][T17229] usb 4-1: USB disconnect, device number 115 [ 1152.871928][T17229] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1153.095027][ T5927] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1153.141680][T20541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1153.153137][T20541] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1153.286240][ T5862] usb 5-1: USB disconnect, device number 117 [ 1153.322488][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.343676][ T5927] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1153.356033][ T5927] usb 7-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 1153.364549][ T5927] usb 7-1: Manufacturer: syz [ 1153.383870][ T5927] usb 7-1: config 0 descriptor?? [ 1153.769714][T16836] usb 6-1: USB disconnect, device number 65 [ 1154.041278][ T5927] hid-thrustmaster 0003:044F:B65D.003E: unknown main item tag 0x0 [ 1155.847562][ T5927] hid-thrustmaster 0003:044F:B65D.003E: unknown main item tag 0x0 [ 1155.866798][ T5927] hid-thrustmaster 0003:044F:B65D.003E: unknown main item tag 0x0 [ 1155.883110][ T5927] hid-thrustmaster 0003:044F:B65D.003E: unknown main item tag 0x0 [ 1155.892115][ T5927] hid-thrustmaster 0003:044F:B65D.003E: unknown main item tag 0x0 [ 1155.908955][ T5927] hid-thrustmaster 0003:044F:B65D.003E: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1155.920999][ T5927] hid-thrustmaster 0003:044F:B65D.003E: Wrong number of endpoints? [ 1155.950243][ C1] hid-thrustmaster 0003:044F:B65D.003E: URB to get model id failed with error -71 [ 1155.950640][ T5883] usb 7-1: USB disconnect, device number 5 [ 1156.120303][T20558] syzkaller0: entered promiscuous mode [ 1156.157909][T20558] syzkaller0: entered allmulticast mode [ 1156.236669][T20559] fido_id[20559]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1156.735048][T13960] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1156.905017][T13960] usb 2-1: Using ep0 maxpacket: 8 [ 1156.946618][T13960] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1157.027429][T13960] usb 2-1: config 0 has no interface number 0 [ 1157.042664][T13960] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1157.078680][T13960] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1157.108909][T13960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.143607][T13960] usb 2-1: config 0 descriptor?? [ 1157.167897][T13960] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1157.350491][T20577] block nbd5: shutting down sockets [ 1157.464276][T20568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.507169][T20568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.529964][T20568] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3740'. [ 1157.695258][T20586] input: syz0 as /devices/virtual/input/input70 [ 1157.924240][ T5862] usb 2-1: USB disconnect, device number 94 [ 1157.924241][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1157.995049][T17229] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1158.145381][T17229] usb 7-1: Using ep0 maxpacket: 32 [ 1158.157081][T17229] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1158.172384][T17229] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.205450][T17229] usb 7-1: config 0 descriptor?? [ 1158.440544][ T5862] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1158.638423][T17229] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1158.660488][T17229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1158.701061][T17229] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1158.711909][T17229] usb 7-1: media controller created [ 1158.731516][T17229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1158.813313][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.001441][T20580] netlink: 'syz.6.3743': attribute type 83 has an invalid length. [ 1159.001599][ T5862] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1159.128324][ T5862] usb 4-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 1159.199246][T17229] az6027: usb out operation failed. (-71) [ 1159.215252][ T5862] usb 4-1: Manufacturer: syz [ 1159.218689][T17229] az6027: usb out operation failed. (-71) [ 1159.239486][T17229] stb0899_attach: Driver disabled by Kconfig [ 1159.253173][ T5862] usb 4-1: config 0 descriptor?? [ 1159.264992][T17229] az6027: no front-end attached [ 1159.264992][T17229] [ 1159.273631][T17229] az6027: usb out operation failed. (-71) [ 1159.280858][T17229] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1159.304736][T17229] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input71 [ 1159.356988][T17229] dvb-usb: schedule remote query interval to 400 msecs. [ 1159.376225][T17229] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1159.448318][T17229] usb 7-1: USB disconnect, device number 6 [ 1159.594269][T20616] openvswitch: netlink: Flow actions attr not present in new flow. [ 1159.604444][T20616] hpfs: Bad magic ... probably not HPFS [ 1159.739370][T17229] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1160.052666][ T5862] hid-thrustmaster 0003:044F:B65D.003F: unknown main item tag 0x0 [ 1160.390124][T20613] block nbd4: shutting down sockets [ 1161.311464][ T5862] hid-thrustmaster 0003:044F:B65D.003F: unknown main item tag 0x0 [ 1161.319520][ T5862] hid-thrustmaster 0003:044F:B65D.003F: unknown main item tag 0x0 [ 1161.329434][ T5862] hid-thrustmaster 0003:044F:B65D.003F: unknown main item tag 0x0 [ 1161.337429][ T5862] hid-thrustmaster 0003:044F:B65D.003F: unknown main item tag 0x0 [ 1161.348553][ T5862] hid-thrustmaster 0003:044F:B65D.003F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1161.360033][ T5862] hid-thrustmaster 0003:044F:B65D.003F: Wrong number of endpoints? [ 1161.370279][ C1] hid-thrustmaster 0003:044F:B65D.003F: Unknown packet type 0x0, unable to proceed further with wheel init [ 1161.569954][T20623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3756'. [ 1161.618180][T17229] usb 4-1: USB disconnect, device number 116 [ 1161.906431][T20631] FAULT_INJECTION: forcing a failure. [ 1161.906431][T20631] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.954276][T20631] CPU: 0 UID: 0 PID: 20631 Comm: syz.4.3758 Tainted: G L syzkaller #0 PREEMPT(full) [ 1161.954298][T20631] Tainted: [L]=SOFTLOCKUP [ 1161.954303][T20631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1161.954310][T20631] Call Trace: [ 1161.954315][T20631] [ 1161.954321][T20631] dump_stack_lvl+0x100/0x190 [ 1161.954350][T20631] should_fail_ex.cold+0x5/0xa [ 1161.954367][T20631] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1161.954383][T20631] should_failslab+0xc2/0x120 [ 1161.954404][T20631] __kmalloc_noprof+0xe0/0x850 [ 1161.954422][T20631] tomoyo_realpath_from_path+0xb6/0x690 [ 1161.954439][T20631] tomoyo_path_number_perm+0x23c/0x580 [ 1161.954456][T20631] ? tomoyo_path_number_perm+0x22e/0x580 [ 1161.954474][T20631] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1161.954505][T20631] ? find_held_lock+0x2b/0x80 [ 1161.954522][T20631] ? __fget_files+0x215/0x3d0 [ 1161.954532][T20631] ? hook_file_ioctl_common+0x146/0x410 [ 1161.954550][T20631] ? __fget_files+0x21f/0x3d0 [ 1161.954563][T20631] security_file_ioctl+0xd3/0x230 [ 1161.954576][T20631] __x64_sys_ioctl+0xb7/0x210 [ 1161.954594][T20631] do_syscall_64+0x106/0xf80 [ 1161.954613][T20631] ? clear_bhb_loop+0x40/0x90 [ 1161.954628][T20631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.954639][T20631] RIP: 0033:0x7fd8ef79c799 [ 1161.954650][T20631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.954661][T20631] RSP: 002b:00007fd8ed9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1161.954673][T20631] RAX: ffffffffffffffda RBX: 00007fd8efa15fa0 RCX: 00007fd8ef79c799 [ 1161.954680][T20631] RDX: 0000000000000000 RSI: 0000000000006411 RDI: 0000000000000003 [ 1161.954686][T20631] RBP: 00007fd8ed9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.954693][T20631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.954699][T20631] R13: 00007fd8efa16038 R14: 00007fd8efa15fa0 R15: 00007ffde85e9c28 [ 1161.954713][T20631] [ 1161.954718][T20631] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1162.277742][ T29] audit: type=1326 audit(1772150415.813:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20635 comm="syz.4.3760" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8ef79c799 code=0x0 [ 1162.585642][ T10] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 1162.624387][T20648] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1162.731461][T20651] FAULT_INJECTION: forcing a failure. [ 1162.731461][T20651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1162.745094][T20651] CPU: 0 UID: 0 PID: 20651 Comm: syz.5.3763 Tainted: G L syzkaller #0 PREEMPT(full) [ 1162.745121][T20651] Tainted: [L]=SOFTLOCKUP [ 1162.745125][T20651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1162.745133][T20651] Call Trace: [ 1162.745140][T20651] [ 1162.745148][T20651] dump_stack_lvl+0x100/0x190 [ 1162.745176][T20651] should_fail_ex.cold+0x5/0xa [ 1162.745192][T20651] _copy_to_user+0x32/0xd0 [ 1162.745214][T20651] simple_read_from_buffer+0xcb/0x170 [ 1162.745234][T20651] proc_fail_nth_read+0x1af/0x230 [ 1162.745252][T20651] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1162.745267][T20651] ? rw_verify_area+0xce/0x6d0 [ 1162.745282][T20651] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1162.745302][T20651] vfs_read+0x1e4/0xb30 [ 1162.745319][T20651] ? __pfx_vfs_read+0x10/0x10 [ 1162.745334][T20651] ? __fget_files+0x215/0x3d0 [ 1162.745348][T20651] ? __fget_files+0x21f/0x3d0 [ 1162.745363][T20651] ksys_read+0x12a/0x250 [ 1162.745378][T20651] ? __pfx_ksys_read+0x10/0x10 [ 1162.745393][T20651] ? fput+0x79/0x100 [ 1162.745407][T20651] do_syscall_64+0x106/0xf80 [ 1162.745419][T20651] ? clear_bhb_loop+0x40/0x90 [ 1162.745434][T20651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.745446][T20651] RIP: 0033:0x7fc3c2b5cfce [ 1162.745458][T20651] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1162.745469][T20651] RSP: 002b:00007fc3c3a0bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1162.745481][T20651] RAX: ffffffffffffffda RBX: 00007fc3c3a0c6c0 RCX: 00007fc3c2b5cfce [ 1162.745488][T20651] RDX: 000000000000000f RSI: 00007fc3c3a0c0a0 RDI: 0000000000000006 [ 1162.745494][T20651] RBP: 00007fc3c3a0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.745500][T20651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.745507][T20651] R13: 00007fc3c2e16128 R14: 00007fc3c2e16090 R15: 00007ffc07e53bf8 [ 1162.745521][T20651] [ 1163.203158][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1163.213002][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1163.226079][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1163.235203][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.468941][ T10] usb 4-1: usb_control_msg returned -32 [ 1163.478105][ T10] usbtmc 4-1:16.0: can't read capabilities [ 1163.544999][ T5862] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1163.635199][ T5883] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1163.695032][ T5862] usb 6-1: Using ep0 maxpacket: 32 [ 1163.708700][ T5862] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1163.721791][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.730521][ T5862] usb 6-1: Product: syz [ 1163.736674][ T5862] usb 6-1: Manufacturer: syz [ 1163.741316][ T5862] usb 6-1: SerialNumber: syz [ 1163.755856][T20657] block nbd1: shutting down sockets [ 1163.765571][T20660] fuse: Unknown parameter '0x0000000000000004' [ 1163.775341][ T5862] usb 6-1: config 0 descriptor?? [ 1163.785130][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 1163.804256][ T5883] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1163.814056][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.862859][ T5883] usb 5-1: config 0 descriptor?? [ 1164.105847][T16836] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1164.193247][ T5862] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 066 [ 1164.194027][ T5883] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1164.212870][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1164.231280][ T5883] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1164.238965][ T5883] usb 5-1: media controller created [ 1164.266479][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1164.300793][T16836] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1164.316902][T16836] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1164.327437][T16836] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1164.338215][T16836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.351373][T20664] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1164.376236][T16836] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1164.448327][T20670] netlink: 'syz.4.3765': attribute type 83 has an invalid length. [ 1164.619197][T16836] usb 2-1: USB disconnect, device number 95 [ 1164.828891][ T29] audit: type=1400 audit(1772150418.373:1473): avc: denied { map } for pid=20661 comm="syz.1.3768" path="socket:[79993]" dev="sockfs" ino=79993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1164.857011][T20653] i2c i2c-1: failure reading status [ 1165.055340][T20656] i2c i2c-1: failure reading data [ 1165.056110][T16836] usb 6-1: USB disconnect, device number 66 [ 1165.084445][ T5883] az6027: usb out operation failed. (-71) [ 1165.093984][ T5883] az6027: usb out operation failed. (-71) [ 1165.109338][ T5883] stb0899_attach: Driver disabled by Kconfig [ 1165.116715][ T5883] az6027: no front-end attached [ 1165.116715][ T5883] [ 1165.125312][ T5883] az6027: usb out operation failed. (-71) [ 1165.131319][ T5883] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1165.140400][ T5883] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input72 [ 1165.154198][ T5883] dvb-usb: schedule remote query interval to 400 msecs. [ 1165.161232][ T5883] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1165.176311][ T5883] usb 5-1: USB disconnect, device number 118 [ 1165.244617][ T5883] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1165.349094][ T10] usb 4-1: USB disconnect, device number 117 [ 1165.479433][T20679] FAULT_INJECTION: forcing a failure. [ 1165.479433][T20679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1165.494544][T20679] CPU: 1 UID: 0 PID: 20679 Comm: syz.1.3773 Tainted: G L syzkaller #0 PREEMPT(full) [ 1165.494575][T20679] Tainted: [L]=SOFTLOCKUP [ 1165.494581][T20679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1165.494591][T20679] Call Trace: [ 1165.494598][T20679] [ 1165.494606][T20679] dump_stack_lvl+0x100/0x190 [ 1165.494642][T20679] should_fail_ex.cold+0x5/0xa [ 1165.494666][T20679] _copy_from_user+0x2e/0xd0 [ 1165.494693][T20679] copy_msghdr_from_user+0x9f/0x4f0 [ 1165.494721][T20679] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1165.494754][T20679] ___sys_sendmsg+0x106/0x1e0 [ 1165.494778][T20679] ? __pfx____sys_sendmsg+0x10/0x10 [ 1165.494826][T20679] __sys_sendmsg+0x170/0x220 [ 1165.494842][T20679] ? __pfx___sys_sendmsg+0x10/0x10 [ 1165.494874][T20679] do_syscall_64+0x106/0xf80 [ 1165.494894][T20679] ? clear_bhb_loop+0x40/0x90 [ 1165.494915][T20679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.494932][T20679] RIP: 0033:0x7f5b0279c799 [ 1165.494948][T20679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.494966][T20679] RSP: 002b:00007f5b036f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1165.494984][T20679] RAX: ffffffffffffffda RBX: 00007f5b02a15fa0 RCX: 00007f5b0279c799 [ 1165.494995][T20679] RDX: 0000000000028000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1165.495005][T20679] RBP: 00007f5b036f2090 R08: 0000000000000000 R09: 0000000000000000 [ 1165.495015][T20679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.495026][T20679] R13: 00007f5b02a16038 R14: 00007f5b02a15fa0 R15: 00007ffcf88c0cc8 [ 1165.495050][T20679] [ 1165.784427][T20693] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3779'. [ 1165.797717][T16836] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1165.799646][T20693] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3779'. [ 1165.806158][T20688] block nbd1: shutting down sockets [ 1165.817627][T20693] netlink: 'syz.3.3779': attribute type 4 has an invalid length. [ 1165.859836][T20693] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3779'. [ 1165.955904][T20698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3779'. [ 1165.966885][T16836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1165.980071][T16836] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1165.990179][T20698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3779'. [ 1165.999323][T16836] usb 7-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 1166.011268][T16836] usb 7-1: Manufacturer: syz [ 1166.034943][ T5883] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1166.062707][T16836] usb 7-1: config 0 descriptor?? [ 1166.136753][T20698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3779'. [ 1166.155886][T20698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3779'. [ 1166.194985][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 1166.219410][ T5883] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1166.238565][ T5883] usb 5-1: config 0 has no interface number 0 [ 1166.253101][ T5883] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1166.272536][ T5883] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1166.287616][ T5883] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1166.302248][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.313426][ T5883] usb 5-1: Product: syz [ 1166.322439][ T5883] usb 5-1: Manufacturer: syz [ 1166.327844][ T5883] usb 5-1: SerialNumber: syz [ 1166.340279][ T5883] usb 5-1: config 0 descriptor?? [ 1166.513376][T20698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3779'. [ 1166.839848][T16836] hid-thrustmaster 0003:044F:B65D.0040: unknown main item tag 0x0 [ 1166.889553][ T5883] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1167.144682][T16836] hid-thrustmaster 0003:044F:B65D.0040: unknown main item tag 0x0 [ 1167.311579][T20698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3779'. [ 1167.438844][T16836] hid-thrustmaster 0003:044F:B65D.0040: unknown main item tag 0x0 [ 1167.691424][T16836] hid-thrustmaster 0003:044F:B65D.0040: unknown main item tag 0x0 [ 1167.883926][T16836] hid-thrustmaster 0003:044F:B65D.0040: unknown main item tag 0x0 [ 1168.329241][T16836] hid-thrustmaster 0003:044F:B65D.0040: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1168.329959][ T5883] cx231xx 5-1:0.1: Failed to read PCB config [ 1168.346746][ T5883] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 1168.361625][T16836] hid-thrustmaster 0003:044F:B65D.0040: Wrong number of endpoints? [ 1168.365214][ T5883] usb 5-1: USB disconnect, device number 119 [ 1168.435407][ C1] hid-thrustmaster 0003:044F:B65D.0040: Unknown packet type 0x0, unable to proceed further with wheel init [ 1168.667708][T13960] usb 7-1: USB disconnect, device number 7 [ 1168.692660][ T5883] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1168.775807][T16836] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 1168.799939][ T29] audit: type=1400 audit(1772150422.343:1474): avc: denied { connect } for pid=20711 comm="syz.5.3782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1168.830044][T20714] FAULT_INJECTION: forcing a failure. [ 1168.830044][T20714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1168.844932][T20714] CPU: 0 UID: 0 PID: 20714 Comm: syz.4.3783 Tainted: G L syzkaller #0 PREEMPT(full) [ 1168.844965][T20714] Tainted: [L]=SOFTLOCKUP [ 1168.844971][T20714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1168.844981][T20714] Call Trace: [ 1168.844987][T20714] [ 1168.844994][T20714] dump_stack_lvl+0x100/0x190 [ 1168.845030][T20714] should_fail_ex.cold+0x5/0xa [ 1168.845054][T20714] _copy_from_user+0x2e/0xd0 [ 1168.845080][T20714] copy_msghdr_from_user+0x9f/0x4f0 [ 1168.845108][T20714] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1168.845145][T20714] ___sys_sendmsg+0x106/0x1e0 [ 1168.845168][T20714] ? __pfx____sys_sendmsg+0x10/0x10 [ 1168.845210][T20714] __sys_sendmsg+0x170/0x220 [ 1168.845226][T20714] ? __pfx___sys_sendmsg+0x10/0x10 [ 1168.845284][T20714] do_syscall_64+0x106/0xf80 [ 1168.845302][T20714] ? clear_bhb_loop+0x40/0x90 [ 1168.845325][T20714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.845344][T20714] RIP: 0033:0x7fd8ef79c799 [ 1168.845361][T20714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.845380][T20714] RSP: 002b:00007fd8ed9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1168.845398][T20714] RAX: ffffffffffffffda RBX: 00007fd8efa15fa0 RCX: 00007fd8ef79c799 [ 1168.845409][T20714] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1168.845420][T20714] RBP: 00007fd8ed9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.845431][T20714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.845441][T20714] R13: 00007fd8efa16038 R14: 00007fd8efa15fa0 R15: 00007ffde85e9c28 [ 1168.845466][T20714] [ 1169.028221][T20716] qnx6: unable to read the first superblock [ 1169.106721][T16836] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1169.116914][T16836] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1169.172343][T20723] netlink: 'syz.1.3787': attribute type 3 has an invalid length. [ 1169.281213][T20725] FAULT_INJECTION: forcing a failure. [ 1169.281213][T20725] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.285249][T16836] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1169.303226][T16836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.311563][T20725] CPU: 0 UID: 0 PID: 20725 Comm: syz.1.3788 Tainted: G L syzkaller #0 PREEMPT(full) [ 1169.311598][T20725] Tainted: [L]=SOFTLOCKUP [ 1169.311604][T20725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1169.311615][T20725] Call Trace: [ 1169.311623][T20725] [ 1169.311630][T20725] dump_stack_lvl+0x100/0x190 [ 1169.311671][T20725] should_fail_ex.cold+0x5/0xa [ 1169.311693][T20725] should_failslab+0xc2/0x120 [ 1169.311724][T20725] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1169.311746][T20725] ? do_getname+0x35/0x390 [ 1169.311770][T20725] do_getname+0x35/0x390 [ 1169.311792][T20725] __x64_sys_statx+0x1a3/0x1e0 [ 1169.311814][T20725] do_syscall_64+0x106/0xf80 [ 1169.311833][T20725] ? clear_bhb_loop+0x40/0x90 [ 1169.311856][T20725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.311874][T20725] RIP: 0033:0x7f5b0279c799 [ 1169.311892][T20725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1169.311909][T20725] RSP: 002b:00007f5b036f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 1169.311927][T20725] RAX: ffffffffffffffda RBX: 00007f5b02a15fa0 RCX: 00007f5b0279c799 [ 1169.311938][T20725] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1169.311949][T20725] RBP: 00007f5b036f2090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.311960][T20725] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 1169.311970][T20725] R13: 00007f5b02a16038 R14: 00007f5b02a15fa0 R15: 00007ffcf88c0cc8 [ 1169.311995][T20725] [ 1169.938849][T20728] netlink: 'syz.5.3785': attribute type 23 has an invalid length. [ 1170.213716][T20734] FAULT_INJECTION: forcing a failure. [ 1170.213716][T20734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1170.228398][T20734] CPU: 1 UID: 0 PID: 20734 Comm: syz.6.3789 Tainted: G L syzkaller #0 PREEMPT(full) [ 1170.228433][T20734] Tainted: [L]=SOFTLOCKUP [ 1170.228439][T20734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1170.228450][T20734] Call Trace: [ 1170.228457][T20734] [ 1170.228464][T20734] dump_stack_lvl+0x100/0x190 [ 1170.228503][T20734] should_fail_ex.cold+0x5/0xa [ 1170.228532][T20734] _copy_from_user+0x2e/0xd0 [ 1170.228557][T20734] __sys_bpf+0x243/0x4b90 [ 1170.228578][T20734] ? __pfx___sys_bpf+0x10/0x10 [ 1170.228591][T20734] ? proc_fail_nth_write+0x9f/0x220 [ 1170.228613][T20734] ? find_held_lock+0x2b/0x80 [ 1170.228638][T20734] ? find_held_lock+0x2b/0x80 [ 1170.228657][T20734] ? ksys_write+0x190/0x250 [ 1170.228685][T20734] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1170.228708][T20734] ? __fget_files+0x215/0x3d0 [ 1170.228738][T20734] ? fput+0x79/0x100 [ 1170.228757][T20734] ? ksys_write+0x1ac/0x250 [ 1170.228779][T20734] ? __pfx_ksys_write+0x10/0x10 [ 1170.228803][T20734] __x64_sys_bpf+0x7b/0xc0 [ 1170.228820][T20734] ? lockdep_hardirqs_on+0x78/0x100 [ 1170.228836][T20734] do_syscall_64+0x106/0xf80 [ 1170.228852][T20734] ? clear_bhb_loop+0x40/0x90 [ 1170.228873][T20734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.228891][T20734] RIP: 0033:0x7f42c619c799 [ 1170.228909][T20734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.228925][T20734] RSP: 002b:00007f42c43f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1170.228945][T20734] RAX: ffffffffffffffda RBX: 00007f42c6415fa0 RCX: 00007f42c619c799 [ 1170.228957][T20734] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 1170.228967][T20734] RBP: 00007f42c43f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.228976][T20734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.228986][T20734] R13: 00007f42c6416038 R14: 00007f42c6415fa0 R15: 00007ffdfee5a958 [ 1170.229011][T20734] [ 1170.719379][T16836] usb 4-1: usb_control_msg returned -32 [ 1170.737088][T16836] usbtmc 4-1:16.0: can't read capabilities [ 1171.115138][ T5883] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1171.145476][T20727] syzkaller0: entered promiscuous mode [ 1171.151111][T20727] syzkaller0: entered allmulticast mode [ 1171.956591][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.966813][ T5883] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1171.983523][ T5883] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1172.025148][ T5883] usb 2-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 1172.033266][ T5883] usb 2-1: Manufacturer: syz [ 1172.055902][ T5883] usb 2-1: config 0 descriptor?? [ 1172.264293][ T5883] usb 4-1: USB disconnect, device number 118 [ 1172.452901][T20754] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3795'. [ 1172.461933][T20754] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3795'. [ 1172.823830][T20758] FAULT_INJECTION: forcing a failure. [ 1172.823830][T20758] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.849153][T20758] CPU: 1 UID: 0 PID: 20758 Comm: syz.3.3796 Tainted: G L syzkaller #0 PREEMPT(full) [ 1172.849174][T20758] Tainted: [L]=SOFTLOCKUP [ 1172.849178][T20758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1172.849186][T20758] Call Trace: [ 1172.849191][T20758] [ 1172.849196][T20758] dump_stack_lvl+0x100/0x190 [ 1172.849222][T20758] should_fail_ex.cold+0x5/0xa [ 1172.849238][T20758] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1172.849253][T20758] should_failslab+0xc2/0x120 [ 1172.849272][T20758] __kmalloc_noprof+0xe0/0x850 [ 1172.849298][T20758] tomoyo_realpath_from_path+0xb6/0x690 [ 1172.849314][T20758] tomoyo_path_number_perm+0x23c/0x580 [ 1172.849332][T20758] ? tomoyo_path_number_perm+0x22e/0x580 [ 1172.849350][T20758] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1172.849381][T20758] ? find_held_lock+0x2b/0x80 [ 1172.849396][T20758] ? __fget_files+0x215/0x3d0 [ 1172.849406][T20758] ? hook_file_ioctl_common+0x146/0x410 [ 1172.849424][T20758] ? __fget_files+0x21f/0x3d0 [ 1172.849436][T20758] security_file_ioctl+0xd3/0x230 [ 1172.849449][T20758] __x64_sys_ioctl+0xb7/0x210 [ 1172.849466][T20758] do_syscall_64+0x106/0xf80 [ 1172.849478][T20758] ? clear_bhb_loop+0x40/0x90 [ 1172.849492][T20758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.849503][T20758] RIP: 0033:0x7f1aa819c799 [ 1172.849514][T20758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1172.849525][T20758] RSP: 002b:00007f1aa9055028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1172.849539][T20758] RAX: ffffffffffffffda RBX: 00007f1aa8415fa0 RCX: 00007f1aa819c799 [ 1172.849546][T20758] RDX: 0000200000000540 RSI: 00000000c4c85513 RDI: 0000000000000003 [ 1172.849553][T20758] RBP: 00007f1aa9055090 R08: 0000000000000000 R09: 0000000000000000 [ 1172.849559][T20758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1172.849565][T20758] R13: 00007f1aa8416038 R14: 00007f1aa8415fa0 R15: 00007ffdef7bcd38 [ 1172.849579][T20758] [ 1172.849584][T20758] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1173.347446][T20767] FAULT_INJECTION: forcing a failure. [ 1173.347446][T20767] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.364987][T20767] CPU: 1 UID: 0 PID: 20767 Comm: syz.3.3800 Tainted: G L syzkaller #0 PREEMPT(full) [ 1173.365020][T20767] Tainted: [L]=SOFTLOCKUP [ 1173.365027][T20767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1173.365037][T20767] Call Trace: [ 1173.365044][T20767] [ 1173.365051][T20767] dump_stack_lvl+0x100/0x190 [ 1173.365088][T20767] should_fail_ex.cold+0x5/0xa [ 1173.365111][T20767] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1173.365133][T20767] should_failslab+0xc2/0x120 [ 1173.365162][T20767] __kmalloc_noprof+0xe0/0x850 [ 1173.365186][T20767] tomoyo_realpath_from_path+0xb6/0x690 [ 1173.365211][T20767] tomoyo_path_number_perm+0x23c/0x580 [ 1173.365236][T20767] ? tomoyo_path_number_perm+0x22e/0x580 [ 1173.365263][T20767] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1173.365290][T20767] ? finish_task_switch.isra.0+0x200/0xb80 [ 1173.365336][T20767] ? find_held_lock+0x2b/0x80 [ 1173.365357][T20767] ? __fget_files+0x215/0x3d0 [ 1173.365373][T20767] ? hook_file_ioctl_common+0x146/0x410 [ 1173.365401][T20767] ? __fget_files+0x21f/0x3d0 [ 1173.365420][T20767] security_file_ioctl+0xd3/0x230 [ 1173.365441][T20767] __x64_sys_ioctl+0xb7/0x210 [ 1173.365472][T20767] do_syscall_64+0x106/0xf80 [ 1173.365490][T20767] ? clear_bhb_loop+0x40/0x90 [ 1173.365512][T20767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.365528][T20767] RIP: 0033:0x7f1aa819c799 [ 1173.365544][T20767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1173.365558][T20767] RSP: 002b:00007f1aa9055028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1173.365574][T20767] RAX: ffffffffffffffda RBX: 00007f1aa8415fa0 RCX: 00007f1aa819c799 [ 1173.365584][T20767] RDX: 0000000000000000 RSI: 00000000c0184d16 RDI: 0000000000000004 [ 1173.365593][T20767] RBP: 00007f1aa9055090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.365602][T20767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.365611][T20767] R13: 00007f1aa8416038 R14: 00007f1aa8415fa0 R15: 00007ffdef7bcd38 [ 1173.365632][T20767] [ 1173.365670][T20767] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1173.614006][ T5862] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1173.882479][ T29] audit: type=1400 audit(1772150427.253:1475): avc: denied { ioctl } for pid=20766 comm="syz.3.3800" path="/439/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1173.960132][T16836] usb 2-1: USB disconnect, device number 96 [ 1174.038627][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.121369][ T5862] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1174.122535][T20778] input: syz0 as /devices/virtual/input/input74 [ 1174.363478][ T5862] usb 7-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 1174.433406][ T5862] usb 7-1: Manufacturer: syz [ 1174.444771][ T5862] usb 7-1: config 0 descriptor?? [ 1174.535531][T18910] block nbd0: Possible stuck request ffff888027a90000: control (read@0,1024B). Runtime 240 seconds [ 1174.552229][T18910] block nbd0: Possible stuck request ffff888027a90200: control (read@1024,1024B). Runtime 240 seconds [ 1174.564071][T18910] block nbd0: Possible stuck request ffff888027a90400: control (read@2048,1024B). Runtime 240 seconds [ 1174.585157][T18910] block nbd0: Possible stuck request ffff888027a90600: control (read@3072,1024B). Runtime 240 seconds [ 1175.109197][ T5862] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 1175.255240][T13960] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1176.009000][T13960] usb 5-1: Using ep0 maxpacket: 32 [ 1176.063402][T13960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1176.074249][T13960] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1176.083818][ T5862] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 1176.105768][ T5862] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 1176.134106][ T5862] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 1176.173494][ T5862] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 1176.257210][ T5862] hid-thrustmaster 0003:044F:B65D.0041: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1176.300961][ T5862] hid-thrustmaster 0003:044F:B65D.0041: Wrong number of endpoints? [ 1176.334639][ C1] hid-thrustmaster 0003:044F:B65D.0041: Unknown packet type 0x0, unable to proceed further with wheel init [ 1176.934640][T13960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.210541][T13960] usb 5-1: config 0 descriptor?? [ 1177.230886][ T5862] usb 7-1: USB disconnect, device number 8 [ 1177.231765][T13960] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1177.280407][T20796] fido_id[20796]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1177.625416][T20804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3809'. [ 1178.382844][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.390134][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.133683][T20826] FAULT_INJECTION: forcing a failure. [ 1179.133683][T20826] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.150301][T20826] CPU: 0 UID: 0 PID: 20826 Comm: syz.5.3814 Tainted: G L syzkaller #0 PREEMPT(full) [ 1179.150332][T20826] Tainted: [L]=SOFTLOCKUP [ 1179.150339][T20826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1179.150350][T20826] Call Trace: [ 1179.150358][T20826] [ 1179.150368][T20826] dump_stack_lvl+0x100/0x190 [ 1179.150404][T20826] should_fail_ex.cold+0x5/0xa [ 1179.150428][T20826] should_failslab+0xc2/0x120 [ 1179.150474][T20826] __kvmalloc_node_noprof+0xfa/0xa00 [ 1179.150500][T20826] ? traverse.part.0.constprop.0+0x397/0x650 [ 1179.150530][T20826] ? arch_stack_walk+0xa6/0xf0 [ 1179.150559][T20826] traverse.part.0.constprop.0+0x397/0x650 [ 1179.150597][T20826] seq_read_iter+0x93f/0x1270 [ 1179.150624][T20826] ? irqentry_exit+0x180/0x670 [ 1179.150655][T20826] seq_read+0x33b/0x4c0 [ 1179.150682][T20826] ? __pfx_seq_read+0x10/0x10 [ 1179.150710][T20826] ? import_ubuf+0x1b6/0x220 [ 1179.150738][T20826] ? __import_iovec+0x1d2/0x640 [ 1179.150761][T20826] ? avc_policy_seqno+0x9/0x20 [ 1179.150787][T20826] ? selinux_file_permission+0x8f/0x6d0 [ 1179.150814][T20826] ? rw_verify_area+0xce/0x6d0 [ 1179.150840][T20826] ? __pfx_seq_read+0x10/0x10 [ 1179.150866][T20826] vfs_readv+0x5d8/0x8d0 [ 1179.150897][T20826] ? __pfx_vfs_readv+0x10/0x10 [ 1179.150923][T20826] ? find_held_lock+0x2b/0x80 [ 1179.150963][T20826] ? __fget_files+0x21f/0x3d0 [ 1179.150988][T20826] ? do_preadv+0x1ac/0x270 [ 1179.151009][T20826] do_preadv+0x1ac/0x270 [ 1179.151035][T20826] ? __pfx_do_preadv+0x10/0x10 [ 1179.151067][T20826] do_syscall_64+0x106/0xf80 [ 1179.151084][T20826] ? clear_bhb_loop+0x40/0x90 [ 1179.151108][T20826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.151126][T20826] RIP: 0033:0x7fc3c2b9c799 [ 1179.151145][T20826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.151162][T20826] RSP: 002b:00007fc3c3a2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1179.151180][T20826] RAX: ffffffffffffffda RBX: 00007fc3c2e15fa0 RCX: 00007fc3c2b9c799 [ 1179.151190][T20826] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1179.151198][T20826] RBP: 00007fc3c3a2d090 R08: 00000000ffffffff R09: 0000000000000000 [ 1179.151208][T20826] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1179.151217][T20826] R13: 00007fc3c2e16038 R14: 00007fc3c2e15fa0 R15: 00007ffc07e53bf8 [ 1179.151239][T20826] [ 1179.657314][ T1626] usb 5-1: USB disconnect, device number 121 [ 1179.879778][ T10] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1180.015620][T20831] input: syz0 as /devices/virtual/input/input75 [ 1180.166778][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.179519][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1180.207190][ T10] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1180.232089][ T10] usb 2-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 1180.302697][ T10] usb 2-1: Manufacturer: syz [ 1180.347111][ T10] usb 2-1: config 0 descriptor?? [ 1180.765207][T20847] block nbd4: Device being setup by another task [ 1180.782386][T20843] block nbd4: shutting down sockets [ 1180.980348][T20855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3822'. [ 1183.174459][ T1626] usb 2-1: USB disconnect, device number 97 [ 1183.791957][ T29] audit: type=1400 audit(1772150437.223:1476): avc: denied { bind } for pid=20879 comm="syz.6.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1183.965035][T20887] input: syz0 as /devices/virtual/input/input77 [ 1184.229437][T20885] block nbd3: shutting down sockets [ 1185.275111][ T1626] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1185.290377][T20905] netlink: 'syz.4.3835': attribute type 1 has an invalid length. [ 1185.356721][T20905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1185.598730][ T1626] usb 6-1: Using ep0 maxpacket: 16 [ 1185.693895][ T1626] usb 6-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.724036][ T1626] usb 6-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 1185.761832][ T1626] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1185.782221][ T1626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.803349][ T1626] usb 6-1: Product: syz [ 1185.820003][ T1626] usb 6-1: Manufacturer: syz [ 1185.832488][ T1626] usb 6-1: SerialNumber: syz [ 1185.889594][T20905] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3835'. [ 1186.025652][T20911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3837'. [ 1186.175241][ T10] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 1186.216290][ T1626] usb 6-1: USB disconnect, device number 67 [ 1186.337500][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1186.346149][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 1186.355484][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.365973][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1186.377505][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1186.390762][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1186.400086][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.408302][ T10] usb 5-1: Product: syz [ 1186.412558][ T10] usb 5-1: Manufacturer: 䀎㍤釭Ѯ菉ꭱ섅榼옶▮離䒉誺뜕嗠᫙쩗흫壁⺲罥柃馧钺鬥㮡᷶ᶶꮰ쒂욟꽣涓쾲着糯꣎繟ᣎ긁䃎फ़⊚豄డꃔⲖౙ拃濗乌㲓腻츲缾臐躁԰痀옛儷ꕁ㟒䞷ؤ獀쪔蚩伻掂䦖㓉氉ﺆ蚅攣瀛ꬆᛵ촔吭夸릸埆쩆졚輍옮單 [ 1186.442641][ T10] usb 5-1: SerialNumber: syz [ 1186.465076][ T5862] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1186.617507][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.628016][ T5862] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1186.638316][ T5862] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1186.647604][ T5862] usb 4-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 1186.655802][ T5862] usb 4-1: Manufacturer: syz [ 1186.665063][ T5862] usb 4-1: config 0 descriptor?? [ 1186.673557][ T10] usb 5-1: unit 0 not found! [ 1186.691941][ T10] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1186.705871][ T10] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1186.727441][ T10] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1186.740702][ T10] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1186.763238][ T10] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1186.794603][ T10] usb 5-1: USB disconnect, device number 122 [ 1186.840147][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1187.038500][T20927] block nbd5: shutting down sockets [ 1187.136985][T20932] fuse: Unknown parameter 'gro00000000000000000000' [ 1187.385699][T13960] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 1187.500861][T20936] binder: BINDER_SET_CONTEXT_MGR already set [ 1187.508901][T20936] binder: 20934:20936 ioctl 4018620d 2000000002c0 returned -16 [ 1187.866727][T13960] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1187.875564][T13960] usb 6-1: not running at top speed; connect to a high speed hub [ 1187.884116][T13960] usb 6-1: config 129 has an invalid interface number: 42 but max is 0 [ 1187.893320][T13960] usb 6-1: config 129 has no interface number 0 [ 1187.909935][T13960] usb 6-1: config 129 interface 42 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1187.940196][T13960] usb 6-1: config 129 interface 42 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 1187.964628][T13960] usb 6-1: config 129 interface 42 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1187.994975][T13960] usb 6-1: config 129 interface 42 has no altsetting 0 [ 1188.019902][T13960] usb 6-1: New USB device found, idVendor=1199, idProduct=9078, bcdDevice= d.9b [ 1188.029305][T13960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.061329][T20930] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1188.571146][T13960] usb 6-1: USB disconnect, device number 68 [ 1189.001706][T20941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3848'. [ 1189.262087][T13960] usb 4-1: USB disconnect, device number 119 [ 1192.848806][T21003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1193.075039][T17229] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1193.296552][T17229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.345019][T17229] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1193.382247][T17229] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1193.412001][T17229] usb 2-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 1193.527679][T17229] usb 2-1: Manufacturer: syz [ 1193.539392][T17229] usb 2-1: config 0 descriptor?? [ 1195.229022][T21032] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1195.279841][T21032] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1195.626247][T21041] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3871'. [ 1195.640627][T21041] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3871'. [ 1195.985499][T16836] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1196.367643][T17229] usb 2-1: USB disconnect, device number 98 [ 1196.565351][T16836] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.584462][T16836] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1196.649280][T16836] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1196.666391][T16836] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1196.716775][T16836] usb 6-1: Manufacturer: syz [ 1196.808825][T16836] usb 6-1: config 0 descriptor?? [ 1196.835585][T16836] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1197.294965][ T29] audit: type=1400 audit(1772150450.833:1477): avc: denied { link } for pid=21042 comm="syz.5.3872" name="#27" dev="tmpfs" ino=1348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1197.332864][ T29] audit: type=1400 audit(1772150450.873:1478): avc: denied { rename } for pid=21042 comm="syz.5.3872" name="#28" dev="tmpfs" ino=1348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1197.411177][T21063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1198.547960][T21037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1199.151014][T21084] random: crng reseeded on system resumption [ 1200.248493][ T5927] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1200.905231][ T5927] usb 7-1: Using ep0 maxpacket: 8 [ 1200.916570][ T29] audit: type=1800 audit(1772150454.433:1479): pid=21089 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3884" name="bus" dev="ramfs" ino=81982 res=0 errno=0 [ 1200.975226][ T5927] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1201.006015][ T5927] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1201.019970][T21101] 9p: Bad value for 'rfdno' [ 1201.035619][ T5927] usb 7-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1201.053583][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.092903][ T5927] usb 7-1: config 0 descriptor?? [ 1201.195113][T16836] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1201.567847][T21107] syzkaller0: entered promiscuous mode [ 1201.573423][T21107] syzkaller0: entered allmulticast mode [ 1201.627329][T16836] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1201.643866][T16836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.652105][T16836] usb 5-1: Product: syz [ 1201.667479][T16836] usb 5-1: Manufacturer: syz [ 1201.690684][T16836] usb 5-1: SerialNumber: syz [ 1201.769833][T16836] usb 5-1: config 0 descriptor?? [ 1201.784299][T16836] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 123 [ 1201.842059][ T5927] a4tech 0003:09DA:022B.0042: hidraw0: USB HID v0.03 Device [HID 09da:022b] on usb-dummy_hcd.6-1/input0 [ 1202.307518][ T5927] usb 7-1: USB disconnect, device number 9 [ 1203.647074][ T5883] usb 6-1: USB disconnect, device number 69 [ 1203.856125][T21128] netlink: 'syz.3.3892': attribute type 3 has an invalid length. [ 1203.870510][T21112] fido_id[21112]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1203.907885][ T5927] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1203.917463][T16836] i2c i2c-1: failure reading functionality [ 1203.932652][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1203.957822][T16836] i2c i2c-1: connected i2c-tiny-usb device [ 1204.008436][T16836] usb 5-1: USB disconnect, device number 123 [ 1204.160855][ T5927] usb 2-1: device descriptor read/64, error -32 [ 1204.200246][T21139] FAULT_INJECTION: forcing a failure. [ 1204.200246][T21139] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.215080][T21135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3895'. [ 1204.270908][T21139] CPU: 1 UID: 0 PID: 21139 Comm: syz.6.3898 Tainted: G L syzkaller #0 PREEMPT(full) [ 1204.270944][T21139] Tainted: [L]=SOFTLOCKUP [ 1204.270950][T21139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1204.270957][T21139] Call Trace: [ 1204.270962][T21139] [ 1204.270967][T21139] dump_stack_lvl+0x100/0x190 [ 1204.270994][T21139] should_fail_ex.cold+0x5/0xa [ 1204.271010][T21139] ? tomoyo_encode2+0xfb/0x3c0 [ 1204.271024][T21139] should_failslab+0xc2/0x120 [ 1204.271045][T21139] __kmalloc_noprof+0xe0/0x850 [ 1204.271060][T21139] ? d_absolute_path+0x136/0x1b0 [ 1204.271079][T21139] tomoyo_encode2+0xfb/0x3c0 [ 1204.271093][T21139] tomoyo_encode+0x29/0x50 [ 1204.271105][T21139] tomoyo_realpath_from_path+0x18c/0x690 [ 1204.271121][T21139] tomoyo_path_number_perm+0x23c/0x580 [ 1204.271139][T21139] ? tomoyo_path_number_perm+0x22e/0x580 [ 1204.271157][T21139] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1204.271188][T21139] ? find_held_lock+0x2b/0x80 [ 1204.271204][T21139] ? __fget_files+0x215/0x3d0 [ 1204.271213][T21139] ? hook_file_ioctl_common+0x146/0x410 [ 1204.271232][T21139] ? __fget_files+0x21f/0x3d0 [ 1204.271244][T21139] security_file_ioctl+0xd3/0x230 [ 1204.271257][T21139] __x64_sys_ioctl+0xb7/0x210 [ 1204.271279][T21139] do_syscall_64+0x106/0xf80 [ 1204.271293][T21139] ? clear_bhb_loop+0x40/0x90 [ 1204.271308][T21139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.271319][T21139] RIP: 0033:0x7f42c619c799 [ 1204.271330][T21139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1204.271341][T21139] RSP: 002b:00007f42c43f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1204.271353][T21139] RAX: ffffffffffffffda RBX: 00007f42c6415fa0 RCX: 00007f42c619c799 [ 1204.271360][T21139] RDX: 0000200000000040 RSI: 00000000c02c564a RDI: 0000000000000003 [ 1204.271366][T21139] RBP: 00007f42c43f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.271373][T21139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.271379][T21139] R13: 00007f42c6416038 R14: 00007f42c6415fa0 R15: 00007ffdfee5a958 [ 1204.271393][T21139] [ 1204.273110][T21139] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1204.523770][T21142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1204.624951][ T5927] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1204.682897][T18910] block nbd0: Possible stuck request ffff888027a90000: control (read@0,1024B). Runtime 270 seconds [ 1204.693781][T18910] block nbd0: Possible stuck request ffff888027a90200: control (read@1024,1024B). Runtime 270 seconds [ 1204.704883][T18910] block nbd0: Possible stuck request ffff888027a90400: control (read@2048,1024B). Runtime 270 seconds [ 1204.718687][T18910] block nbd0: Possible stuck request ffff888027a90600: control (read@3072,1024B). Runtime 270 seconds [ 1204.784401][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.829060][ T5927] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1204.857191][ T5927] usb 2-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 1204.866820][ T5927] usb 2-1: Manufacturer: syz [ 1204.994349][ T5927] usb 2-1: config 0 descriptor?? [ 1205.243605][ T5927] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1205.414799][ T29] audit: type=1326 audit(1772150458.953:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21150 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c2b9c799 code=0x7ffc0000 [ 1205.519740][ T29] audit: type=1326 audit(1772150458.963:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21150 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c2b9c799 code=0x7ffc0000 [ 1205.524973][ T5927] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1205.660173][ T29] audit: type=1326 audit(1772150458.993:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21150 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc3c2b9c799 code=0x7ffc0000 [ 1205.749624][ T29] audit: type=1326 audit(1772150459.043:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21150 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c2b9c799 code=0x7ffc0000 [ 1205.964463][ T3016] Bluetooth: hci6: Frame reassembly failed (-84) [ 1206.005351][ T29] audit: type=1326 audit(1772150459.043:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21150 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c2b9c799 code=0x7ffc0000 [ 1206.150164][ T29] audit: type=1326 audit(1772150459.233:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21150 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc3c2b9c799 code=0x7ffc0000 [ 1206.281327][ T29] audit: type=1326 audit(1772150459.233:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21150 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c2b9c799 code=0x7ffc0000 [ 1206.481645][ T29] audit: type=1326 audit(1772150459.333:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21150 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3c2b9c799 code=0x7ffc0000 [ 1206.632627][ T29] audit: type=1326 audit(1772150459.683:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21150 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c2b9c799 code=0x7ffc0000 [ 1206.694242][ T29] audit: type=1326 audit(1772150459.683:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21150 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c2b9c799 code=0x7ffc0000 [ 1206.895503][ T5927] usb 7-1: Using ep0 maxpacket: 32 [ 1206.993123][ T5927] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1207.004829][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.102901][ T5927] usb 7-1: Product: syz [ 1207.108522][ T5927] usb 7-1: Manufacturer: syz [ 1207.117662][ T5927] usb 7-1: SerialNumber: syz [ 1207.137773][ T10] usb 2-1: USB disconnect, device number 100 [ 1207.182470][ T5927] usb 7-1: config 0 descriptor?? [ 1207.192507][T21186] FAULT_INJECTION: forcing a failure. [ 1207.192507][T21186] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.224175][T21186] CPU: 0 UID: 0 PID: 21186 Comm: syz.1.3909 Tainted: G L syzkaller #0 PREEMPT(full) [ 1207.224210][T21186] Tainted: [L]=SOFTLOCKUP [ 1207.224218][T21186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1207.224227][T21186] Call Trace: [ 1207.224232][T21186] [ 1207.224242][T21186] dump_stack_lvl+0x100/0x190 [ 1207.224276][T21186] should_fail_ex.cold+0x5/0xa [ 1207.224302][T21186] ? tomoyo_encode2+0xfb/0x3c0 [ 1207.224326][T21186] should_failslab+0xc2/0x120 [ 1207.224356][T21186] __kmalloc_noprof+0xe0/0x850 [ 1207.224381][T21186] tomoyo_encode2+0xfb/0x3c0 [ 1207.224398][T21186] tomoyo_encode+0x29/0x50 [ 1207.224410][T21186] tomoyo_realpath_from_path+0x18c/0x690 [ 1207.224427][T21186] tomoyo_path_number_perm+0x23c/0x580 [ 1207.224454][T21186] ? tomoyo_path_number_perm+0x22e/0x580 [ 1207.224481][T21186] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1207.224521][T21186] ? find_held_lock+0x2b/0x80 [ 1207.224537][T21186] ? __fget_files+0x215/0x3d0 [ 1207.224547][T21186] ? hook_file_ioctl_common+0x146/0x410 [ 1207.224566][T21186] ? __fget_files+0x21f/0x3d0 [ 1207.224583][T21186] security_file_ioctl+0xd3/0x230 [ 1207.224605][T21186] __x64_sys_ioctl+0xb7/0x210 [ 1207.224630][T21186] do_syscall_64+0x106/0xf80 [ 1207.224650][T21186] ? clear_bhb_loop+0x40/0x90 [ 1207.224665][T21186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.224678][T21186] RIP: 0033:0x7f5b0279c799 [ 1207.224689][T21186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.224700][T21186] RSP: 002b:00007f5b036f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1207.224712][T21186] RAX: ffffffffffffffda RBX: 00007f5b02a15fa0 RCX: 00007f5b0279c799 [ 1207.224723][T21186] RDX: 00002000000001c0 RSI: 00000000400442c8 RDI: 0000000000000004 [ 1207.224733][T21186] RBP: 00007f5b036f2090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.224743][T21186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1207.224753][T21186] R13: 00007f5b02a16038 R14: 00007f5b02a15fa0 R15: 00007ffcf88c0cc8 [ 1207.224776][T21186] [ 1207.645476][T21186] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1207.678158][ T5927] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 010 [ 1207.720663][T21188] FAULT_INJECTION: forcing a failure. [ 1207.720663][T21188] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.743968][T21188] CPU: 0 UID: 0 PID: 21188 Comm: syz.3.3911 Tainted: G L syzkaller #0 PREEMPT(full) [ 1207.744001][T21188] Tainted: [L]=SOFTLOCKUP [ 1207.744007][T21188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1207.744017][T21188] Call Trace: [ 1207.744024][T21188] [ 1207.744031][T21188] dump_stack_lvl+0x100/0x190 [ 1207.744068][T21188] should_fail_ex.cold+0x5/0xa [ 1207.744092][T21188] ? tomoyo_encode2+0xfb/0x3c0 [ 1207.744113][T21188] should_failslab+0xc2/0x120 [ 1207.744141][T21188] __kmalloc_noprof+0xe0/0x850 [ 1207.744167][T21188] tomoyo_encode2+0xfb/0x3c0 [ 1207.744188][T21188] tomoyo_encode+0x29/0x50 [ 1207.744206][T21188] tomoyo_realpath_from_path+0x18c/0x690 [ 1207.744233][T21188] tomoyo_path_number_perm+0x23c/0x580 [ 1207.744265][T21188] ? tomoyo_path_number_perm+0x22e/0x580 [ 1207.744292][T21188] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1207.744342][T21188] ? find_held_lock+0x2b/0x80 [ 1207.744365][T21188] ? __fget_files+0x215/0x3d0 [ 1207.744381][T21188] ? hook_file_ioctl_common+0x146/0x410 [ 1207.744411][T21188] ? __fget_files+0x21f/0x3d0 [ 1207.744432][T21188] security_file_ioctl+0xd3/0x230 [ 1207.744454][T21188] __x64_sys_ioctl+0xb7/0x210 [ 1207.744481][T21188] do_syscall_64+0x106/0xf80 [ 1207.744500][T21188] ? clear_bhb_loop+0x40/0x90 [ 1207.744523][T21188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.744543][T21188] RIP: 0033:0x7f1aa819c799 [ 1207.744559][T21188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.744574][T21188] RSP: 002b:00007f1aa9055028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1207.744591][T21188] RAX: ffffffffffffffda RBX: 00007f1aa8415fa0 RCX: 00007f1aa819c799 [ 1207.744603][T21188] RDX: 0000000000000000 RSI: 0000000040086200 RDI: 0000000000000005 [ 1207.744613][T21188] RBP: 00007f1aa9055090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.744623][T21188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1207.744634][T21188] R13: 00007f1aa8416038 R14: 00007f1aa8415fa0 R15: 00007ffdef7bcd38 [ 1207.744659][T21188] [ 1207.744693][T21188] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1207.975134][T20212] Bluetooth: hci6: command 0x1003 tx timeout [ 1207.982590][T15864] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1208.167401][T21197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3914'. [ 1208.205014][ T10] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1208.375103][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1208.479750][ T10] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 1208.617795][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.764026][ T10] usb 2-1: config 0 has no interface number 0 [ 1208.784206][ T10] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=5d.a7 [ 1208.830359][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.840639][ T10] usb 2-1: Product: syz [ 1208.846308][ T10] usb 2-1: Manufacturer: syz [ 1208.851131][ T10] usb 2-1: SerialNumber: syz [ 1208.859013][ T10] usb 2-1: config 0 descriptor?? [ 1208.945279][ T10] usb 7-1: USB disconnect, device number 10 [ 1209.285313][ T1626] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1209.476346][T21212] syzkaller0: entered promiscuous mode [ 1209.481868][T21212] syzkaller0: entered allmulticast mode [ 1209.682891][ T10] usb 2-1: USB disconnect, device number 101 [ 1209.699450][ T1626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.711901][ T1626] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1209.721902][ T1626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.758147][ T1626] usb 5-1: config 0 descriptor?? [ 1209.864992][ T5883] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1210.016780][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1210.036094][ T5883] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1210.048362][ T5883] usb 6-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 1210.113477][ T5883] usb 6-1: Manufacturer: syz [ 1210.155867][ T5883] usb 6-1: config 0 descriptor?? [ 1210.193376][ T5883] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1210.419173][T21233] netlink: 'syz.6.3922': attribute type 3 has an invalid length. [ 1210.563980][ T1626] usbhid 5-1:0.0: can't add hid device: -71 [ 1210.579284][ T1626] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1210.608620][ T5883] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1210.626914][ T1626] usb 5-1: USB disconnect, device number 124 [ 1210.899555][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 1210.917737][ T5883] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1210.935069][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.952878][ T5883] usb 2-1: config 0 descriptor?? [ 1211.190157][ T5883] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1211.223429][ T5883] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1211.246970][ T5883] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1211.848944][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1211.848971][ T29] audit: type=1326 audit(1772150465.393:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21257 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1211.882441][ T29] audit: type=1326 audit(1772150465.423:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21257 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1211.910196][ T29] audit: type=1326 audit(1772150465.423:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21257 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1212.195878][T17229] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1212.245245][ T29] audit: type=1326 audit(1772150465.423:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21257 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1212.274996][ T29] audit: type=1326 audit(1772150465.423:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21257 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1212.358834][ T29] audit: type=1326 audit(1772150465.453:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21257 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1212.836661][T17229] usb 5-1: Using ep0 maxpacket: 32 [ 1212.843086][ T29] audit: type=1326 audit(1772150465.453:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21257 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1212.868485][T17229] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1212.877730][T17229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.893924][T17229] usb 5-1: config 0 descriptor?? [ 1212.900549][ T29] audit: type=1326 audit(1772150465.453:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21257 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1213.179756][ T29] audit: type=1326 audit(1772150465.453:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21257 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1213.219045][T17229] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1213.530521][ T29] audit: type=1326 audit(1772150465.453:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21257 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0279c799 code=0x7ffc0000 [ 1213.555515][T17229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1213.567434][T17229] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1213.607288][T17229] usb 5-1: media controller created [ 1213.632748][T17229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1213.683017][T17229] az6027: usb out operation failed. (-71) [ 1213.690423][ T1626] usb 6-1: USB disconnect, device number 70 [ 1213.695976][T17229] az6027: usb out operation failed. (-71) [ 1213.747763][T17229] stb0899_attach: Driver disabled by Kconfig [ 1213.753754][T17229] az6027: no front-end attached [ 1213.753754][T17229] [ 1213.775327][T17229] az6027: usb out operation failed. (-71) [ 1213.792298][T17229] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1213.819038][T17229] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input78 [ 1214.170934][T17229] dvb-usb: schedule remote query interval to 400 msecs. [ 1214.226784][T17229] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1214.257168][T17229] usb 5-1: USB disconnect, device number 125 [ 1214.337895][T17229] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1215.018304][T17229] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1215.165091][T13960] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1215.265217][T21298] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3943'. [ 1215.685175][T13960] usb 4-1: Using ep0 maxpacket: 32 [ 1215.692254][T17229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1215.710855][T13960] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1215.720889][T17229] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1215.738046][T13960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.748570][T17229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.775566][T13960] usb 4-1: config 0 descriptor?? [ 1215.782282][T17229] usb 5-1: config 0 descriptor?? [ 1216.003483][T13960] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1216.072200][T21308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3945'. [ 1216.125162][T21308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3945'. [ 1216.197602][T21308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3945'. [ 1216.272438][T21308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3945'. [ 1216.527055][ T10] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1216.723646][T21316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3948'. [ 1216.867374][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.882103][ T10] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1216.892580][ T10] usb 6-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 1216.906928][T17229] usbhid 5-1:0.0: can't add hid device: -71 [ 1217.327054][T17229] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1217.334967][ T10] usb 6-1: Manufacturer: syz [ 1217.372768][ T10] usb 6-1: config 0 descriptor?? [ 1217.383034][T17229] usb 5-1: USB disconnect, device number 126 [ 1220.267493][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1220.312980][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1220.552660][ T10] usb 6-1: USB disconnect, device number 71 [ 1220.922204][T21347] netlink: 'syz.1.3954': attribute type 1 has an invalid length. [ 1220.930048][T21347] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3954'. [ 1221.326013][T21351] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3957'. [ 1221.375012][T21351] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3957'. [ 1221.881019][T21364] syzkaller0: entered promiscuous mode [ 1221.890785][T21364] syzkaller0: entered allmulticast mode [ 1222.168073][T21369] random: crng reseeded on system resumption [ 1222.505364][T21378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3963'. [ 1224.894367][T21415] FAULT_INJECTION: forcing a failure. [ 1224.894367][T21415] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.925060][T21415] CPU: 0 UID: 0 PID: 21415 Comm: syz.3.3974 Tainted: G L syzkaller #0 PREEMPT(full) [ 1224.925095][T21415] Tainted: [L]=SOFTLOCKUP [ 1224.925101][T21415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1224.925113][T21415] Call Trace: [ 1224.925120][T21415] [ 1224.925128][T21415] dump_stack_lvl+0x100/0x190 [ 1224.925168][T21415] should_fail_ex.cold+0x5/0xa [ 1224.925190][T21415] ? video_usercopy+0x1a3/0x1740 [ 1224.925208][T21415] should_failslab+0xc2/0x120 [ 1224.925235][T21415] __kmalloc_noprof+0xe0/0x850 [ 1224.925267][T21415] video_usercopy+0x1a3/0x1740 [ 1224.925285][T21415] ? __pfx___video_do_ioctl+0x10/0x10 [ 1224.925301][T21415] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1224.925324][T21415] ? __pfx_video_usercopy+0x10/0x10 [ 1224.925355][T21415] v4l2_ioctl+0x1bd/0x250 [ 1224.925374][T21415] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1224.925393][T21415] __x64_sys_ioctl+0x18e/0x210 [ 1224.925419][T21415] do_syscall_64+0x106/0xf80 [ 1224.925436][T21415] ? clear_bhb_loop+0x40/0x90 [ 1224.925457][T21415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.925474][T21415] RIP: 0033:0x7f1aa819c799 [ 1224.925490][T21415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1224.925506][T21415] RSP: 002b:00007f1aa9055028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1224.925523][T21415] RAX: ffffffffffffffda RBX: 00007f1aa8415fa0 RCX: 00007f1aa819c799 [ 1224.925534][T21415] RDX: 00002000000002c0 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 1224.925544][T21415] RBP: 00007f1aa9055090 R08: 0000000000000000 R09: 0000000000000000 [ 1224.925554][T21415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1224.925564][T21415] R13: 00007f1aa8416038 R14: 00007f1aa8415fa0 R15: 00007ffdef7bcd38 [ 1224.925585][T21415] [ 1225.175211][T21418] syzkaller1: entered promiscuous mode [ 1225.181165][T21418] syzkaller1: entered allmulticast mode [ 1225.295913][T21422] netlink: 'syz.3.3976': attribute type 1 has an invalid length. [ 1225.425157][ T1626] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1225.646167][ T1626] usb 7-1: Using ep0 maxpacket: 32 [ 1225.739285][ T1626] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1225.755483][ T1626] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.782294][ T1626] usb 7-1: config 0 descriptor?? [ 1225.869455][T21430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3975'. [ 1225.919528][T21430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3975'. [ 1225.979744][T21433] input: syz0 as /devices/virtual/input/input79 [ 1226.013752][ T1626] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1226.026402][ T1626] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1226.039747][T21430] fuse: Unknown parameter 'euid<00000000000000000000' [ 1226.074185][T21422] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1226.099011][T21425] vlan2: entered allmulticast mode [ 1226.115607][ T1626] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1226.131515][ T1626] usb 7-1: media controller created [ 1226.140493][T21425] veth0_to_bond: entered allmulticast mode [ 1226.148988][ T1626] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1226.214661][ T1626] az6027: usb out operation failed. (-71) [ 1226.253990][ T1626] az6027: usb out operation failed. (-71) [ 1226.262016][ T1626] stb0899_attach: Driver disabled by Kconfig [ 1226.271695][ T1626] az6027: no front-end attached [ 1226.271695][ T1626] [ 1226.280395][ T1626] az6027: usb out operation failed. (-71) [ 1226.286725][ T1626] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1226.304599][ T1626] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input80 [ 1226.342714][ T1626] dvb-usb: schedule remote query interval to 400 msecs. [ 1226.359009][ T1626] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1226.397931][ T1626] usb 7-1: USB disconnect, device number 11 [ 1226.445027][ T47] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1226.469015][ T1626] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1226.610531][ T47] usb 6-1: Using ep0 maxpacket: 32 [ 1227.149150][ T47] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1227.172318][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.227652][ T47] usb 6-1: config 0 descriptor?? [ 1227.471427][ T47] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1227.591205][ T47] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1227.667722][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1227.667755][ T29] audit: type=1400 audit(1772150481.213:1518): avc: denied { append } for pid=21451 comm="syz.4.3983" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1227.668186][ T47] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1227.684602][ T29] audit: type=1400 audit(1772150481.213:1519): avc: denied { ioctl } for pid=21451 comm="syz.4.3983" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1227.704631][ T47] usb 6-1: media controller created [ 1227.709269][T21436] netlink: 'syz.5.3978': attribute type 83 has an invalid length. [ 1227.747383][ T5879] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1227.861087][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1227.906685][ T47] az6027: usb out operation failed. (-71) [ 1227.913095][ T47] az6027: usb out operation failed. (-71) [ 1227.933677][ T47] stb0899_attach: Driver disabled by Kconfig [ 1227.944977][ T5879] usb 7-1: Using ep0 maxpacket: 32 [ 1227.948039][ T47] az6027: no front-end attached [ 1227.948039][ T47] [ 1227.954333][ T5879] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1227.968749][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.969125][ T47] az6027: usb out operation failed. (-71) [ 1227.984000][ T5879] usb 7-1: config 0 descriptor?? [ 1228.000740][ T47] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1228.010064][ T47] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input81 [ 1228.026072][ T47] dvb-usb: schedule remote query interval to 400 msecs. [ 1228.033198][ T47] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1228.047608][ T47] usb 6-1: USB disconnect, device number 72 [ 1228.190855][ T5879] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1228.730937][ T47] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1229.068972][T21473] sp0: Synchronizing with TNC [ 1229.381670][T21471] ALSA: mixer_oss: invalid OSS volume '' [ 1230.950865][T21501] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3998'. [ 1233.685039][ T5927] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1233.737143][ T29] audit: type=1400 audit(1772150487.283:1520): avc: denied { read } for pid=21534 comm="syz.4.4007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1233.831616][ T29] audit: type=1400 audit(1772150487.373:1521): avc: denied { ioctl } for pid=21536 comm="syz.6.4009" path="/65/file0/file0" dev="fuse" ino=64 ioctlcmd=0x935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1233.866675][ T5927] usb 6-1: Using ep0 maxpacket: 8 [ 1233.881162][ T5927] usb 6-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.881211][ T5927] usb 6-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.881237][ T5927] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1233.881272][ T5927] usb 6-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1233.881299][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.891001][ T5927] usb 6-1: config 0 descriptor?? [ 1233.995085][ T29] audit: type=1326 audit(1772150487.533:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21534 comm="syz.4.4007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8ef79c799 code=0x0 [ 1234.278580][T21550] 8021q: VLANs not supported on gre0 [ 1234.336821][T21528] CIFS: iocharset name too long [ 1234.361707][T21528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.409651][T21528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.443040][ T5927] smartjoyplus 0003:6666:8804.0043: unknown main item tag 0x2 [ 1234.466320][ T5927] smartjoyplus 0003:6666:8804.0043: item fetching failed at offset 4/5 [ 1234.495797][ T5927] smartjoyplus 0003:6666:8804.0043: parse failed [ 1234.508103][ T5927] smartjoyplus 0003:6666:8804.0043: probe with driver smartjoyplus failed with error -22 [ 1234.639633][ T792] usb 6-1: USB disconnect, device number 73 [ 1234.762166][T18910] block nbd0: Possible stuck request ffff888027a90000: control (read@0,1024B). Runtime 300 seconds [ 1234.773757][T18910] block nbd0: Possible stuck request ffff888027a90200: control (read@1024,1024B). Runtime 300 seconds [ 1234.826129][T18910] block nbd0: Possible stuck request ffff888027a90400: control (read@2048,1024B). Runtime 300 seconds [ 1234.851462][T18910] block nbd0: Possible stuck request ffff888027a90600: control (read@3072,1024B). Runtime 300 seconds [ 1235.919540][ T29] audit: type=1400 audit(1772150489.463:1523): avc: denied { map } for pid=21569 comm="syz.6.4017" path="socket:[83230]" dev="sockfs" ino=83230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1236.010553][T21571] ALSA: mixer_oss: invalid OSS volume '' [ 1236.016595][T21571] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 1236.026669][T21571] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr=V' [ 1236.154511][T21571] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+' [ 1236.163336][T21571] ALSA: mixer_oss: invalid OSS volume '+8iYJz' [ 1236.545109][ T47] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1236.564967][ T10] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1236.705013][ T47] usb 6-1: Using ep0 maxpacket: 32 [ 1236.711853][ T47] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1236.720568][ T47] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1236.729718][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.735135][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1236.737889][ T47] usb 6-1: Product: syz [ 1236.755198][ T47] usb 6-1: Manufacturer: syz [ 1236.757577][ T10] usb 5-1: device descriptor read/all, error -61 [ 1236.761887][ T47] usb 6-1: SerialNumber: syz [ 1236.785362][ T47] usb 6-1: config 0 descriptor?? [ 1236.793466][ T47] gs_usb 6-1:0.0: Required endpoints not found [ 1237.054098][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1237.130990][ T792] usb 6-1: USB disconnect, device number 74 [ 1237.158132][T21587] block nbd3: shutting down sockets [ 1237.191856][ T10] usb 5-1: device descriptor read/64, error -71 [ 1237.341581][ T10] usb usb5-port1: attempt power cycle [ 1237.706526][T21598] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20001 [ 1237.794953][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1237.817987][ T10] usb 5-1: device descriptor read/8, error -71 [ 1238.686957][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1238.857200][ T10] usb 5-1: device descriptor read/8, error -71 [ 1238.951053][T21614] mmap: syz.5.4031 (21614): VmData 37847040 exceed data ulimit 11. Update limits or use boot option ignore_rlimit_data. [ 1239.001467][ T10] usb usb5-port1: unable to enumerate USB device [ 1239.042701][T21620] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=21620 comm=syz.6.4030 [ 1239.375714][T21635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4034'. [ 1239.631778][T21636] syzkaller0: entered promiscuous mode [ 1239.640780][T21636] syzkaller0: entered allmulticast mode [ 1239.822521][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.832379][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.431951][T21650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4039'. [ 1241.383881][T21662] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4041'. [ 1241.425168][T21663] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4041'. [ 1241.667052][T21665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4042'. [ 1243.909236][T21662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.918823][T21662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.932311][T21663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.939632][T21663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.947185][T21663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.954304][T21663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.964449][T21663] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4041'. [ 1243.989052][T21663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.996420][T21663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.196225][T21678] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4045'. [ 1244.260654][ T29] audit: type=1400 audit(1772150497.733:1524): avc: denied { getopt } for pid=21677 comm="syz.4.4045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1244.453461][T21685] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4045'. [ 1245.015299][ T5927] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1245.283312][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.329343][ T5927] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1245.349311][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.379964][ T5927] usb 6-1: config 0 descriptor?? [ 1246.754506][T21706] kthread_run failed with err -4 [ 1246.962883][ T29] audit: type=1400 audit(1772150500.503:1525): avc: denied { read } for pid=21713 comm="syz.1.4055" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1247.015026][T15864] Bluetooth: hci4: command 0x0406 tx timeout [ 1247.041481][ T29] audit: type=1400 audit(1772150500.503:1526): avc: denied { open } for pid=21713 comm="syz.1.4055" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1247.339134][ T5927] usbhid 6-1:0.0: can't add hid device: -71 [ 1247.547138][ T5927] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1247.578952][ T5927] usb 6-1: USB disconnect, device number 75 [ 1247.965594][ T5862] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1248.426559][ T5862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.451233][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1249.265428][ T5862] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1249.274667][ T5862] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1249.334501][ T5862] usb 5-1: Manufacturer: syz [ 1249.675813][ T29] audit: type=1400 audit(1772150503.223:1527): avc: denied { accept } for pid=21738 comm="syz.6.4062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1249.751409][T21739] netlink: 'syz.6.4062': attribute type 2 has an invalid length. [ 1249.761630][ T5862] usb 5-1: config 0 descriptor?? [ 1249.802427][T21739] : entered promiscuous mode [ 1249.809258][ T5862] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1250.575229][ T29] audit: type=1326 audit(1772150503.963:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21755 comm="syz.5.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c2b9c799 code=0x7ffc0000 [ 1250.900867][ T29] audit: type=1326 audit(1772150503.973:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21755 comm="syz.5.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc3c2b9c799 code=0x7ffc0000 [ 1251.044004][ T29] audit: type=1326 audit(1772150503.973:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21755 comm="syz.5.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c2b9c799 code=0x7ffc0000 [ 1251.247767][ T29] audit: type=1326 audit(1772150503.973:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21755 comm="syz.5.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c2b9c799 code=0x7ffc0000 [ 1251.435468][ T29] audit: type=1326 audit(1772150504.373:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21755 comm="syz.5.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc3c2b9c799 code=0x7ffc0000 [ 1251.669570][ T29] audit: type=1326 audit(1772150504.373:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21755 comm="syz.5.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c2b9c799 code=0x7ffc0000 [ 1251.829101][ T29] audit: type=1326 audit(1772150504.373:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21755 comm="syz.5.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c2b9c799 code=0x7ffc0000 [ 1252.655434][ T29] audit: type=1326 audit(1772150504.493:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21755 comm="syz.5.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3c2b9c799 code=0x7ffc0000 [ 1252.682769][T21785] input: syz0 as /devices/virtual/input/input83 [ 1252.865152][ T29] audit: type=1326 audit(1772150504.493:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21755 comm="syz.5.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c2b9c799 code=0x7ffc0000 [ 1252.889335][ T47] usb 5-1: USB disconnect, device number 5 [ 1253.300222][ T30] INFO: task syz.0.3591:20012 blocked for more than 143 seconds. [ 1253.322486][ T30] Tainted: G L syzkaller #0 [ 1253.728474][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1253.752161][ T30] task:syz.0.3591 state:D stack:28792 pid:20012 tgid:20010 ppid:16937 task_flags:0x400040 flags:0x00080002 [ 1253.795409][ T30] Call Trace: [ 1253.813120][ T30] [ 1253.839635][ T30] __schedule+0xfee/0x60e0 [ 1253.856057][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1253.873138][ T30] ? __pfx___schedule+0x10/0x10 [ 1253.883209][ T30] ? find_held_lock+0x2b/0x80 [ 1253.897018][ T30] ? schedule+0x2bf/0x390 [ 1253.909095][ T30] schedule+0xdd/0x390 [ 1253.921080][ T30] schedule_preempt_disabled+0x13/0x30 [ 1253.928383][ T30] __mutex_lock+0xc9a/0x1b90 [ 1253.945003][ T30] ? bdev_open+0x41a/0xe40 [ 1253.957446][ T30] ? find_held_lock+0x2b/0x80 [ 1253.977044][ T30] ? find_inode_fast+0x5e3/0x910 [ 1254.000139][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1254.022177][ T30] ? find_inode_fast+0x1fa/0x910 [ 1254.036470][ T30] ? bdev_open+0x41a/0xe40 [ 1254.048196][ T30] bdev_open+0x41a/0xe40 [ 1254.056682][ T30] ? iput+0x3a/0x40 [ 1254.061705][ T30] blkdev_open+0x34e/0x4f0 [ 1254.068180][ T30] do_dentry_open+0x6d8/0x1660 [ 1254.073886][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1254.082596][ T30] vfs_open+0x82/0x3f0 [ 1254.087929][ T30] path_openat+0x208c/0x31a0 [ 1254.092676][ T30] ? __schedule+0x1000/0x60e0 [ 1254.097682][ T30] ? __pfx_path_openat+0x10/0x10 [ 1254.103826][ T30] do_file_open+0x20e/0x430 [ 1254.109449][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1254.115218][ T30] ? preempt_schedule_irq+0x7b/0x90 [ 1254.120486][ T30] ? alloc_fd+0x476/0x790 [ 1254.125079][ T30] ? do_getname+0x191/0x390 [ 1254.130031][ T30] do_sys_openat2+0x10d/0x1e0 [ 1254.136603][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1254.143326][ T30] __x64_sys_openat+0x12d/0x210 [ 1254.149378][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1254.155293][ T30] ? do_user_addr_fault+0x8d6/0x12f0 [ 1254.160964][ T30] do_syscall_64+0x106/0xf80 [ 1254.167724][ T30] ? clear_bhb_loop+0x40/0x90 [ 1254.174331][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.181145][ T30] RIP: 0033:0x7f397995cfce [ 1254.188552][ T30] RSP: 002b:00007f397a8f2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1254.199406][ T30] RAX: ffffffffffffffda RBX: 00007f397a8f36c0 RCX: 00007f397995cfce [ 1254.208372][ T30] RDX: 0000000000040000 RSI: 00007f397a8f2c00 RDI: ffffffffffffff9c [ 1254.216593][ T30] RBP: 00007f397a8f2c00 R08: 0000000000000000 R09: 0000000000000000 [ 1254.224820][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1254.234948][ T30] R13: 00007f3979c16038 R14: 00007f3979c15fa0 R15: 00007ffed67b5d28 [ 1254.242961][ T30] [ 1254.249739][ T30] [ 1254.249739][ T30] Showing all locks held in the system: [ 1254.267376][ T30] 1 lock held by khungtaskd/30: [ 1254.289326][ T30] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1254.313651][ T30] 2 locks held by getty/5563: [ 1254.320262][ T30] #0: ffff888037d0b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1254.330112][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1254.340414][ T30] 1 lock held by udevd/5824: [ 1254.345731][ T30] #0: ffff8880279bc358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1254.356254][ T30] 5 locks held by kworker/0:4/5879: [ 1254.361451][ T30] #0: ffff888020684948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1254.373848][ T30] #1: ffffc90004807d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1254.386073][ T30] #2: ffff88802af97198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 1254.395146][ T30] #3: ffff888058ba8198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1254.404374][ T30] #4: ffff88805f2be160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1254.413693][ T30] 6 locks held by kworker/0:5/5883: [ 1254.418988][ T30] #0: ffff888020684948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1254.430026][ T30] #1: ffffc90004847d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1254.441406][ T30] #2: ffff88802ae25198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 1254.450457][ T30] #3: ffff88804d0ae198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1254.460186][ T30] #4: ffff888063480160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1254.469544][ T30] #5: ffffffff8e693cf0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xab/0x250 [ 1254.481405][ T30] 5 locks held by kworker/0:6/13960: [ 1254.486769][ T30] #0: ffff888020684948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1254.498342][ T30] #1: ffffc9000d91fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1254.509679][ T30] #2: ffff88802aed0198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 1254.518799][ T30] #3: ffff888056e19198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1254.528103][ T30] #4: ffff888056e1e160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1254.537938][ T30] 1 lock held by syz.0.3591/20012: [ 1254.543056][ T30] #0: ffff8880279bc358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1254.552435][ T30] [ 1254.556120][ T30] ============================================= [ 1254.556120][ T30] [ 1254.564610][ T30] NMI backtrace for cpu 1 [ 1254.564630][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1254.564648][ T30] Tainted: [L]=SOFTLOCKUP [ 1254.564651][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1254.564660][ T30] Call Trace: [ 1254.564666][ T30] [ 1254.564673][ T30] dump_stack_lvl+0x100/0x190 [ 1254.564699][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1254.564713][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1254.564733][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1254.564754][ T30] sys_info+0x141/0x190 [ 1254.564767][ T30] watchdog+0xd25/0x1050 [ 1254.564789][ T30] ? __pfx_watchdog+0x10/0x10 [ 1254.564804][ T30] ? __kthread_parkme+0x18c/0x230 [ 1254.564821][ T30] ? kthread+0x13a/0x450 [ 1254.564836][ T30] ? __pfx_watchdog+0x10/0x10 [ 1254.564855][ T30] kthread+0x370/0x450 [ 1254.564868][ T30] ? __pfx_kthread+0x10/0x10 [ 1254.564883][ T30] ret_from_fork+0x754/0xd80 [ 1254.564901][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1254.564919][ T30] ? __switch_to+0x7b4/0x1120 [ 1254.564938][ T30] ? __pfx_kthread+0x10/0x10 [ 1254.564954][ T30] ret_from_fork_asm+0x1a/0x30 [ 1254.564981][ T30] [ 1254.685352][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1254.690606][ C0] NMI backtrace for cpu 0 [ 1254.690626][ C0] CPU: 0 UID: 0 PID: 792 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1254.690647][ C0] Tainted: [L]=SOFTLOCKUP [ 1254.690653][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1254.690668][ C0] Workqueue: events free_obj_work [ 1254.690694][ C0] RIP: 0010:unwind_next_frame+0xb85/0x1ea0 [ 1254.690717][ C0] Code: 00 0f 85 fa 0e 00 00 4c 89 e2 4d 89 75 38 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 ba 0e 00 00 49 8d 7d 58 <49> c7 45 50 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 [ 1254.690731][ C0] RSP: 0018:ffffc900044876f8 EFLAGS: 00000246 [ 1254.690743][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff91b44328 [ 1254.690753][ C0] RDX: 1ffff92000890ef7 RSI: 1ffff92000890ef6 RDI: ffffc900044877c0 [ 1254.690763][ C0] RBP: ffffc900044877b0 R08: ffffffff91b4432c R09: 0000000000000007 [ 1254.690772][ C0] R10: 0000000000000200 R11: 000000000003fda1 R12: ffffc900044877b8 [ 1254.690781][ C0] R13: ffffc90004487768 R14: ffffc90004487ba0 R15: ffffc9000448779c [ 1254.690791][ C0] FS: 0000000000000000(0000) GS:ffff888124348000(0000) knlGS:0000000000000000 [ 1254.690806][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1254.690815][ C0] CR2: 00007f1aa83e82f8 CR3: 0000000076bb7000 CR4: 00000000003526f0 [ 1254.690825][ C0] Call Trace: [ 1254.690830][ C0] [ 1254.690837][ C0] ? free_object_list.isra.0+0xf8/0x2a0 [ 1254.690857][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1254.690878][ C0] arch_stack_walk+0x94/0xf0 [ 1254.690896][ C0] ? free_obj_work+0x19d/0x3d0 [ 1254.690911][ C0] ? free_object_list.isra.0+0xf8/0x2a0 [ 1254.690930][ C0] stack_trace_save+0x8e/0xc0 [ 1254.690946][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1254.690964][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1254.690981][ C0] kasan_save_stack+0x30/0x50 [ 1254.691001][ C0] ? kasan_save_stack+0x30/0x50 [ 1254.691018][ C0] ? kasan_save_track+0x14/0x30 [ 1254.691034][ C0] ? kasan_save_free_info+0x3b/0x70 [ 1254.691050][ C0] ? __kasan_slab_free+0x5f/0x80 [ 1254.691067][ C0] ? kmem_cache_free+0x124/0x6a0 [ 1254.691085][ C0] ? free_object_list.isra.0+0xf8/0x2a0 [ 1254.691112][ C0] kasan_save_track+0x14/0x30 [ 1254.691130][ C0] kasan_save_free_info+0x3b/0x70 [ 1254.691144][ C0] __kasan_slab_free+0x5f/0x80 [ 1254.691163][ C0] kmem_cache_free+0x124/0x6a0 [ 1254.691180][ C0] free_object_list.isra.0+0xf8/0x2a0 [ 1254.691194][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1254.691220][ C0] free_obj_work+0x19d/0x3d0 [ 1254.691234][ C0] ? __pfx_free_obj_work+0x10/0x10 [ 1254.691249][ C0] ? rcu_is_watching+0x12/0xc0 [ 1254.691268][ C0] process_one_work+0x9d7/0x1920 [ 1254.691288][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1254.691305][ C0] ? __pfx_free_obj_work+0x10/0x10 [ 1254.691320][ C0] worker_thread+0x5da/0xe40 [ 1254.691338][ C0] ? kthread+0x13a/0x450 [ 1254.691350][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1254.691363][ C0] kthread+0x370/0x450 [ 1254.691375][ C0] ? __pfx_kthread+0x10/0x10 [ 1254.691388][ C0] ret_from_fork+0x754/0xd80 [ 1254.691402][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1254.691416][ C0] ? __switch_to+0x7b4/0x1120 [ 1254.691432][ C0] ? __pfx_kthread+0x10/0x10 [ 1254.691445][ C0] ret_from_fork_asm+0x1a/0x30 [ 1254.691467][ C0] [ 1255.020506][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1255.027387][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1255.038073][ T30] Tainted: [L]=SOFTLOCKUP [ 1255.042380][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1255.052409][ T30] Call Trace: [ 1255.055672][ T30] [ 1255.058590][ T30] dump_stack_lvl+0x100/0x190 [ 1255.063280][ T30] vpanic+0x552/0x970 [ 1255.067245][ T30] ? __pfx_vpanic+0x10/0x10 [ 1255.071722][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1255.077870][ T30] panic+0xd1/0xe0 [ 1255.081568][ T30] ? __pfx_panic+0x10/0x10 [ 1255.085961][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1255.092105][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1255.098255][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1255.104417][ T30] ? watchdog.cold+0x198/0x1ca [ 1255.109166][ T30] ? watchdog+0xd35/0x1050 [ 1255.113571][ T30] watchdog.cold+0x1a9/0x1ca [ 1255.118151][ T30] ? __pfx_watchdog+0x10/0x10 [ 1255.122812][ T30] ? __kthread_parkme+0x18c/0x230 [ 1255.127835][ T30] ? kthread+0x13a/0x450 [ 1255.132062][ T30] ? __pfx_watchdog+0x10/0x10 [ 1255.136744][ T30] kthread+0x370/0x450 [ 1255.140794][ T30] ? __pfx_kthread+0x10/0x10 [ 1255.145365][ T30] ret_from_fork+0x754/0xd80 [ 1255.149939][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1255.155029][ T30] ? __switch_to+0x7b4/0x1120 [ 1255.159688][ T30] ? __pfx_kthread+0x10/0x10 [ 1255.164268][ T30] ret_from_fork_asm+0x1a/0x30 [ 1255.169025][ T30] [ 1255.172501][ T30] Kernel Offset: disabled [ 1255.176805][ T30] Rebooting in 86400 seconds..