last executing test programs: 13m23.133855324s ago: executing program 2 (id=25): r0 = syz_socket_connect_nvme_tcp() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) memfd_secret(0x0) close(r0) 13m22.810988474s ago: executing program 2 (id=27): openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980), 0x0, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x42000) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x85, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f00000002c0)=0x100) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x85, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f00000002c0)=0x100) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@rand_addr=0x64010102, @in6=@local, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in=@dev={0xac, 0x14, 0x14, 0x35}, 0x4d4, 0x33}, @in6=@mcast1, {0xfe, 0x1000000000000192, 0xf, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xff7ffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x81}, 0x844) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1800}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000100)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000100)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) 13m22.049923105s ago: executing program 2 (id=28): r0 = fanotify_init(0x1a, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r0, 0x641, 0x1028, r1, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='.\x00', 0x5db) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) 13m21.694891243s ago: executing program 2 (id=30): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r6, r7, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r8, 0x80044d07, &(0x7f0000000180)={0x1, 0x300, 0x0, 0x0}) ptrace$ARCH_MAP_VDSO_32(0x1e, r3, 0x5, 0x2002) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(r8, 0x4b48, &(0x7f0000000580)={0x6, "1b2cc5aae02d9904358e999b67a47520b225806614078f380c60d31b4bd78d3a85f1b2c07718a5405ef93c0508cb3973faa31a648d70d86e1802cdacfad37e0478469eb32a537b7648777dbc883eadc9021631e2f229d0237bb970601c0c8be72673bca2e438f96ab3a4a7a45d94db539cac4b893bbbca7cdfc1916860ab211ff7f311c2533fa250d831ee644e04cbc49f4f1371708471e6ee9e1d55d8db1356210cdddd61b7f5526f00233cf2906e63d3a6289a35fd2c4fedd8d3b03c529ebab16ae99cee78aaa0d0f38a723d0e2fadc5b97c1ab7124d27e9db6791492816a57cf68e044f7975cf10418c10b5beeaf83a032cf51900e25d012ffedcd6729622cb64e0115ef2bf418180aa87d825bdec3950fdb4d29308261a475a12406f1788b2717418533e020842833843e9df398921556001d4bc008ced12cb87203a7edaf3cdef3d57c1c47b4ac353abd441f2284d4320bb9b1d2a005b70992bae8a80aac54a8cbdf57a63d5933e580ed41fad8f09dd4a96dbb66d4b42b52bb007a0b762ecb851d818b74f2d1292d80f7559d2c42ed8ad2b68a783ea32724f367eb23cea40b24a99645c28ef188e65855dc9f9f8e2352d3ea41717f57cbef083bc08e257e70256d5dbb6e29e845fd005c25b0eb1864924129d2c05338978bc4b47459978e36e86975d78f39a438cb75f4b65a563dba2bd5cd0ecace4bcc03fa4ae728260"}) r9 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r9, 0x1, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(0x0, 0xffffffffffffff9c, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 13m19.373328234s ago: executing program 2 (id=35): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a00", 0x12) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 13m18.570598642s ago: executing program 2 (id=40): removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x8, 0x20, 0x2da, 0x6, {{0xc, 0x4, 0x1, 0x3, 0x30, 0x64, 0x0, 0x6, 0x6, 0x0, @loopback, @rand_addr=0x64010102, {[@rr={0x7, 0x1b, 0x43, [@dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010102, @multicast2, @private=0xa010100, @empty, @loopback]}, @end]}}}}}) setxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "4547af3afdf8bb9d2d1c3d09901a4d1a08a902f7"}, 0x15, 0x1) syz_open_dev$midi(&(0x7f0000000240), 0x400, 0x82800) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000400)={{r0, &(0x7f0000000280)='*}:,\x00', 0x20000, &(0x7f00000002c0)={@_ha_fsid={[0x7a, 0x80000000]}, {0x29, 0x181, 0x1ff, 0x3}}, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x4}, {[0x66, 0x5, 0x395a, 0x8]}, 0x100, 0x70, &(0x7f0000000380)=""/112}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000480)={r2, 0x1, 0x6, @multicast}, 0x10) r4 = geteuid() sendmsg$nl_xfrm(r3, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=@getsa={0x270, 0x12, 0x400, 0x70bd25, 0x25dfdbfb, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x2, 0x6c}, [@policy_type={0xa}, @sa={0xe4, 0x6, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@empty, 0x4e24, 0x8, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x87, r2, r4}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, {0xd, 0xf0, 0x5, 0x1000, 0x9, 0x7, 0x80, 0x576}, {0x6, 0x1, 0x3, 0x8}, {0x8, 0x3, 0x8001}, 0x70bd28, 0x3504, 0xa, 0x0, 0x9, 0x8}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x400}, @lastused={0xc, 0xf, 0x689}, @tfcpad={0x8, 0x16, 0x6}, @lifetime_val={0x24, 0x9, {0x5, 0x8, 0x6, 0x1}}, @srcaddr={0x14, 0xd, @in6=@mcast2}, @algo_auth_trunc={0x104, 0x14, {{'sha256-ce\x00'}, 0x5c0, 0xa0, "8ad998416f9b1b3f6f21aef7bb3a09c4034667978da04668233c0c636615a0c85a737eba8b8d79fb533143eeee3dc9116dda0a2455c29a7f132602908ee3e530789eadb4c4f8b587ab5782f5fdbf971fa9807f8f5d804b3b647ca37618a4ffde24ead87392fcb38d930eaa3654d23f53ddf31402fea0df380fda484a835809e5cb6edf26ecb816c1b323ef4d2fecb4fdde3c52ec40442d32285bb9e18b40735b2fad18d6dc8eaf16eff6cf47e3d698e81560e67ce5691f07"}}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000}, 0x90315873eb87e0b) syz_open_dev$dri(&(0x7f0000000800), 0x4, 0x28000) setxattr$incfs_metadata(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f00000008c0)="e0c2a403d56a76839cab1837987e18d1d665f18f88dbc5fe55aa900112039f3322566c424aae380a4f334373f8c5b029f1b74b82416bf39df64ec2ffba450b1705b858281841e4acd234091e954acdb619e105894ba23f4028076e1a0879d7b2afda14e6f3c760eff8cee9a2908f96bcf91a16fd018502e79010692aaa796532dc800bcc79f3d5f2ed56d12089ab6ed2", 0x90, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000980)={0x2, 0x4e22, @loopback}, 0x10) mknodat(r3, &(0x7f00000009c0)='./file0/file0\x00', 0x1000, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000a00)) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000a40)=0x7) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000c00)=0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000c40)={'\x00', 0x9, 0x1ff, 0x5, 0x2, 0xb700, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000cc0)={0x0}, &(0x7f0000000d00)=0xc) getgroups(0x4, &(0x7f0000000d40)=[0xee00, 0xee00, 0xee01, 0xee00]) r12 = getpgrp(0xffffffffffffffff) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000000fc0)={&(0x7f0000000a80)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)={0xcc, 0x2d, 0x400, 0x70bd28, 0x25dfdbfb, "", [@generic="6164f95acb326adbd98da304d2d3d4270d4bf005a2cbde522ec205f7960439ff519a12d7648e41b48cb48260629758780bc69f6563fbeb6ad3dedacee4d9af3d4510bfaf7099211aac25d6084e1693cf54523e6dac9225e4ec25d5aec5ed343103bcfa32c0edb45deae8581afae15a1a692ffd69b6323c70a7b0df4b4a73efaec0cdc9692152349c30e156546c71e8e31eed8c0e775033248b", @generic="612a736f1a52080ac504aa277e2ad6cbf884e00cedfaec", @nested={0xc, 0x68, 0x0, 0x1, [@nested={0x4, 0xa9}, @nested={0x4, 0x69}]}]}, 0xcc}], 0x1, &(0x7f0000000f00)=[@cred={{0x1c, 0x1, 0x2, {r6, r4, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r7, r4, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r8, r4, r10}}}, @cred={{0x1c, 0x1, 0x2, {r12, r4, r13}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r14}}}, @rights={{0x1c, 0x1, 0x1, [r3, r3, r5]}}], 0xc0, 0x4044844}, 0x800) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r15, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) lstat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x9, &(0x7f00000011c0)=[r10, r16, 0x0, r13, r14, r9, r14, r14, r11]) read$msr(r3, &(0x7f0000001200)=""/218, 0xda) 13m18.297374406s ago: executing program 32 (id=40): removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x8, 0x20, 0x2da, 0x6, {{0xc, 0x4, 0x1, 0x3, 0x30, 0x64, 0x0, 0x6, 0x6, 0x0, @loopback, @rand_addr=0x64010102, {[@rr={0x7, 0x1b, 0x43, [@dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010102, @multicast2, @private=0xa010100, @empty, @loopback]}, @end]}}}}}) setxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "4547af3afdf8bb9d2d1c3d09901a4d1a08a902f7"}, 0x15, 0x1) syz_open_dev$midi(&(0x7f0000000240), 0x400, 0x82800) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000400)={{r0, &(0x7f0000000280)='*}:,\x00', 0x20000, &(0x7f00000002c0)={@_ha_fsid={[0x7a, 0x80000000]}, {0x29, 0x181, 0x1ff, 0x3}}, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x4}, {[0x66, 0x5, 0x395a, 0x8]}, 0x100, 0x70, &(0x7f0000000380)=""/112}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000480)={r2, 0x1, 0x6, @multicast}, 0x10) r4 = geteuid() sendmsg$nl_xfrm(r3, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=@getsa={0x270, 0x12, 0x400, 0x70bd25, 0x25dfdbfb, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x2, 0x6c}, [@policy_type={0xa}, @sa={0xe4, 0x6, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@empty, 0x4e24, 0x8, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x87, r2, r4}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, {0xd, 0xf0, 0x5, 0x1000, 0x9, 0x7, 0x80, 0x576}, {0x6, 0x1, 0x3, 0x8}, {0x8, 0x3, 0x8001}, 0x70bd28, 0x3504, 0xa, 0x0, 0x9, 0x8}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x400}, @lastused={0xc, 0xf, 0x689}, @tfcpad={0x8, 0x16, 0x6}, @lifetime_val={0x24, 0x9, {0x5, 0x8, 0x6, 0x1}}, @srcaddr={0x14, 0xd, @in6=@mcast2}, @algo_auth_trunc={0x104, 0x14, {{'sha256-ce\x00'}, 0x5c0, 0xa0, "8ad998416f9b1b3f6f21aef7bb3a09c4034667978da04668233c0c636615a0c85a737eba8b8d79fb533143eeee3dc9116dda0a2455c29a7f132602908ee3e530789eadb4c4f8b587ab5782f5fdbf971fa9807f8f5d804b3b647ca37618a4ffde24ead87392fcb38d930eaa3654d23f53ddf31402fea0df380fda484a835809e5cb6edf26ecb816c1b323ef4d2fecb4fdde3c52ec40442d32285bb9e18b40735b2fad18d6dc8eaf16eff6cf47e3d698e81560e67ce5691f07"}}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000}, 0x90315873eb87e0b) syz_open_dev$dri(&(0x7f0000000800), 0x4, 0x28000) setxattr$incfs_metadata(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f00000008c0)="e0c2a403d56a76839cab1837987e18d1d665f18f88dbc5fe55aa900112039f3322566c424aae380a4f334373f8c5b029f1b74b82416bf39df64ec2ffba450b1705b858281841e4acd234091e954acdb619e105894ba23f4028076e1a0879d7b2afda14e6f3c760eff8cee9a2908f96bcf91a16fd018502e79010692aaa796532dc800bcc79f3d5f2ed56d12089ab6ed2", 0x90, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000980)={0x2, 0x4e22, @loopback}, 0x10) mknodat(r3, &(0x7f00000009c0)='./file0/file0\x00', 0x1000, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000a00)) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000a40)=0x7) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000c00)=0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000c40)={'\x00', 0x9, 0x1ff, 0x5, 0x2, 0xb700, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000cc0)={0x0}, &(0x7f0000000d00)=0xc) getgroups(0x4, &(0x7f0000000d40)=[0xee00, 0xee00, 0xee01, 0xee00]) r12 = getpgrp(0xffffffffffffffff) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000000fc0)={&(0x7f0000000a80)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)={0xcc, 0x2d, 0x400, 0x70bd28, 0x25dfdbfb, "", [@generic="6164f95acb326adbd98da304d2d3d4270d4bf005a2cbde522ec205f7960439ff519a12d7648e41b48cb48260629758780bc69f6563fbeb6ad3dedacee4d9af3d4510bfaf7099211aac25d6084e1693cf54523e6dac9225e4ec25d5aec5ed343103bcfa32c0edb45deae8581afae15a1a692ffd69b6323c70a7b0df4b4a73efaec0cdc9692152349c30e156546c71e8e31eed8c0e775033248b", @generic="612a736f1a52080ac504aa277e2ad6cbf884e00cedfaec", @nested={0xc, 0x68, 0x0, 0x1, [@nested={0x4, 0xa9}, @nested={0x4, 0x69}]}]}, 0xcc}], 0x1, &(0x7f0000000f00)=[@cred={{0x1c, 0x1, 0x2, {r6, r4, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r7, r4, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r8, r4, r10}}}, @cred={{0x1c, 0x1, 0x2, {r12, r4, r13}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r14}}}, @rights={{0x1c, 0x1, 0x1, [r3, r3, r5]}}], 0xc0, 0x4044844}, 0x800) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r15, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) lstat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x9, &(0x7f00000011c0)=[r10, r16, 0x0, r13, r14, r9, r14, r14, r11]) read$msr(r3, &(0x7f0000001200)=""/218, 0xda) 10m53.662776602s ago: executing program 1 (id=464): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1"], 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0x7, 0x63, 0xd4, 0x40, 0x4fc, 0x504b, 0x52c4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x7, 0x20, 0x2e, "", [{{0x9, 0x4, 0x4b, 0xf, 0x0, 0x5d, 0xf9, 0xd5, 0x38}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x10000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xaa001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000026000900030008008000000002"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) syz_usb_connect$cdc_ecm(0x1, 0x8c, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f00000006c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x10, 0xf, 0x2, 0x40, 0xfc}, 0x0, 0x0, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c30}}, {0xaa, &(0x7f00000002c0)=@string={0xaa, 0x3, "5aad5e09b76cbc84a0fc3a01c62995ec636115e780f4065721484a00fafb96276580d34473764878f970019cbc2de1eca812c15c77f34e64ae48b78fc244b43e89828fb26381ae3eb8de1177d0ea96d3fae31254d2e99722a53ce0291bbc2276f1f93a1337602a5dcfda969a32a61f44c3c889ac3a431fc948cfc8859471d1a28790ab6fb73061ce23c328de122906dbf090627a5cccc2de70229662275fc7d75837301bdebcf27b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc0a}}, {0x45, &(0x7f00000003c0)=@string={0x45, 0x3, "d0b4d9a31e9867a1f3de37334d914c00ac64c68899e87927bba60c20bdaf5b689b1d03aee29cbe24c4b779f5512ba75eefc05808e1f79fbd79e2257f9fe5ebc16d5e62"}}, {0xe7, &(0x7f0000000480)=@string={0xe7, 0x3, "580c4b627d67095f2c745d62ba8075a2f1cc94aa4085ba0526777b48ea702a031734d007bcf5b36245e7b3023c00f89ac94ed1fe4d571f68f824b6810e321061250e66f808af7aa98949119790e22986ca66ff8a212390152672043b9071b0293bc15b7793dfcb02e63052c3a34cf2ae249273dce9306d75a4146fc73dc112596b4bddd37d13098e497867e9e33a21b890907ae19718789592afb5ae2ff9ade21aae06039ecec09d1fd06abb964c01cf32b033a85839081f7f9d1a9f038b45f179cf168c0b599529252b5e0446439994f57223fdfab1e0627f2f411d8e30aab9931ee6d501"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x440a}}, {0xcf, &(0x7f00000005c0)=@string={0xcf, 0x3, "b573246625a180e56443bf3f30de8c77bd1c8ba8da01abc7d0650909e295bf1fde02568dd429d4afee991a99a020df11fd9f2a9d61ad413ea522b27c0e14051666794ab787b0fb0a838e31b3fc379620ff49221672c49f98616925523d3b13fc0a37d0c36ffbfedf58d201a159d496670f4df6b2eda3d2cecd04837b0c7b0784241ed3af4a7c77eea723107bde606e68a01dcd87134a5bca457eaa09f9e3e0571c34d48a0dc032d2d61940ec7e540bc440203be998c87a46b855d893c158ff88d2ab10815f6b919f0d4166cde3"}}]}) timer_create(0x8, &(0x7f0000000340)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000000)={0x4, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980912, 0x0, '\x00', @p_u32=&(0x7f0000000080)=0x1}}) 10m50.531803509s ago: executing program 1 (id=476): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00'}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x9, 0x0, 0xd3, 0x0, 0x0, 0x2000000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x62, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) prlimit64(0x0, 0xe, 0x0, 0x0) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_clone(0x180000, &(0x7f00000000c0)="c5729af40916827ee4abee556356da4dbc30aa85ec05292bc5d7f7ca7014e832fbd832547cd5e452d96dc6", 0x2b, &(0x7f0000000440), &(0x7f0000000280), &(0x7f00000002c0)="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") 10m47.480387019s ago: executing program 1 (id=482): syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x197, 0x0) syz_io_uring_setup(0x22f, 0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) io_setup(0x3142, &(0x7f0000000040)) 10m46.71482649s ago: executing program 1 (id=487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) close(0xffffffffffffffff) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44891}, 0x44) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000e00)={{r1}, r4, 0x2, @inherit={0x60, &(0x7f0000000300)={0x0, 0x3, 0x1, 0x7485, {0x20, 0x0, 0x9, 0x1, 0xddbc}, [0x7, 0x8c76, 0xb]}}, @devid=r5}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{r0}, r4, 0x0, @inherit={0x68, &(0x7f0000000440)={0x0, 0x4, 0x2, 0x4000, {0x2b, 0x4, 0x61, 0x100000001, 0x6}, [0x8, 0x1, 0xffffffffffffffd6, 0x6]}}, @subvolid=0xfffffffffffffff5}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r7, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x32}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(r8, 0x890b, &(0x7f0000000340)={@null, 0x1, 'nicvf0\x00'}) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)=0x10) 10m43.304387917s ago: executing program 1 (id=493): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x53, 0x7, 0x7fffffff}]}) syz_io_uring_setup(0x1b33, &(0x7f0000000140)={0x0, 0xa374, 0x380, 0x2, 0xc4}, &(0x7f00000001c0), 0x0, &(0x7f00000012c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x53) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x21800, 0x0) setrlimit(0xa, &(0x7f00000001c0)={0x78}) ioctl$TIOCMIWAIT(r1, 0x5453, 0x300fff2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0300080001000859cd096319b1c44519001c00680000ff029078ac1e0101b614141114019078ac1414aadc24aa3d98ed8c2cd499fe1b53b00e4eb7f2f4668908e86283c7690fb1726bdf9b62780a"], 0x2a) socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x17, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x8}, @jmp={0x5, 0x0, 0x8, 0x2, 0x8, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x0, 0x0, 0x4, 0x7, 0x5, 0x30, 0x8}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xfe19) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_netfilter(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4c8c0) accept$phonet_pipe(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) 10m42.973417086s ago: executing program 1 (id=497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000000c0)="618e312dc8a37b3690df5dc15933db88527a96b249c6625745a78a2baf0617cc2b81aaf8dae4", 0x26}, {&(0x7f0000000280)="4992426ebed4e8e9c477b8f9dd6673687ae519393d64b635c4c641a68045e410eeb226c9a533bec2ef0f45142d1409ee098d0c3ae87fe0bc22fbf4beb72209c493b39857d7e7f7f78f231bcc3ed938275cb9b15a809c5424ac6c320ee633913b1f2a62bca590504c723efb657637672d1ad219a1a371da34c956050cb65130bbd70d6ff9e08c9649de6553aece63d158e81a04306c5f496155c56f71cf17ccffb3f343ae9ac1910005031eea8a58e46700c0cf8954e6fe536eb997535f5afff1c2bc248492600609d90dae4646baf2aa94d4f6a8c910c97c5b1ef25905da582e3f3a1b", 0xe3}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="264e7b6baa10b441c27a93cb118b11fda1cc811ffbf5e996bb8f4ec3fbd1520a9486be04b48c4fc30f4d6efdf596cc9a7ac89c1d52e4bae0efac5537457c868b48028f4691c8298380d32daaebca05c837465353fb5e2bb61e5c70ab706d4e50d8ef75b65b03798ea88bb36790681990524ba24465eae4b9611391957c3c6d19bbac936b5afae61bf2ec5ff520dce73dc026037985b23799e34421eacf23aef5200c30d6c7a3b4be597265e618bc45a4755e7a3aefb56f82dd0da83cc59b50400ec3e7831ed91ba1f338a0f6413cc74635fa", 0xd2}, {&(0x7f0000002c80)="22031405e2404b18075c2f0ad4e62b2aba959434d901063b4622bd1ce5c0195ba5396f54cfd1ab8eabd097abdfab73fe49a83c6a7eb80c6e527ebe7e471cc221f907c653ad8093", 0x47}, {&(0x7f0000000380)}], 0x6}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000440)="1fa360de65df56ed0037c3f0d207", 0xe}], 0x1}}], 0x2, 0x44) 10m42.565300445s ago: executing program 33 (id=497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000000c0)="618e312dc8a37b3690df5dc15933db88527a96b249c6625745a78a2baf0617cc2b81aaf8dae4", 0x26}, {&(0x7f0000000280)="4992426ebed4e8e9c477b8f9dd6673687ae519393d64b635c4c641a68045e410eeb226c9a533bec2ef0f45142d1409ee098d0c3ae87fe0bc22fbf4beb72209c493b39857d7e7f7f78f231bcc3ed938275cb9b15a809c5424ac6c320ee633913b1f2a62bca590504c723efb657637672d1ad219a1a371da34c956050cb65130bbd70d6ff9e08c9649de6553aece63d158e81a04306c5f496155c56f71cf17ccffb3f343ae9ac1910005031eea8a58e46700c0cf8954e6fe536eb997535f5afff1c2bc248492600609d90dae4646baf2aa94d4f6a8c910c97c5b1ef25905da582e3f3a1b", 0xe3}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="264e7b6baa10b441c27a93cb118b11fda1cc811ffbf5e996bb8f4ec3fbd1520a9486be04b48c4fc30f4d6efdf596cc9a7ac89c1d52e4bae0efac5537457c868b48028f4691c8298380d32daaebca05c837465353fb5e2bb61e5c70ab706d4e50d8ef75b65b03798ea88bb36790681990524ba24465eae4b9611391957c3c6d19bbac936b5afae61bf2ec5ff520dce73dc026037985b23799e34421eacf23aef5200c30d6c7a3b4be597265e618bc45a4755e7a3aefb56f82dd0da83cc59b50400ec3e7831ed91ba1f338a0f6413cc74635fa", 0xd2}, {&(0x7f0000002c80)="22031405e2404b18075c2f0ad4e62b2aba959434d901063b4622bd1ce5c0195ba5396f54cfd1ab8eabd097abdfab73fe49a83c6a7eb80c6e527ebe7e471cc221f907c653ad8093", 0x47}, {&(0x7f0000000380)}], 0x6}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000440)="1fa360de65df56ed0037c3f0d207", 0xe}], 0x1}}], 0x2, 0x44) 17.981519427s ago: executing program 3 (id=2226): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x2, &(0x7f0000000200)=@raw=[@ldst={0x3, 0x2, 0x6, 0x6, 0xb, 0x2, 0x41}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsmount(r3, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'pim6reg1\x00'}) 12.555238188s ago: executing program 5 (id=2239): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_vif\x00') sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="23f677041e"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_newnexthop={0x64, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x2}, [@NHA_RES_GROUP={0x4c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x101}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xcd2b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xed5d}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xfffe}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x5}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x10001}]}]}, 0x64}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_MCE_KILL(0x43, 0x0, 0x1) sched_setattr(r1, &(0x7f0000000140)={0x38, 0x6, 0x1000000c, 0x1, 0x1, 0x8, 0x954, 0x8000000000000001, 0xfffffffb, 0xe624}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0xc) 9.870930013s ago: executing program 0 (id=2244): add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f0000000280)=""/23, 0xfffffffffffffe07, 0x0, 0x1, 0x2}}, 0x48) 8.520838351s ago: executing program 5 (id=2245): socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x100010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20080004}, 0x0) r4 = socket$kcm(0xf, 0x0, 0x2) r5 = getpid() sched_rr_get_interval(r5, &(0x7f0000000000)) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae00090400"], 0x0) sendmsg$inet(r4, &(0x7f00000000c0), 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) rseq(&(0x7f0000001040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x7, 0x2}, 0x5}, 0x20, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) setuid(0xee01) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) open_by_handle_at(r1, &(0x7f00000000c0)=ANY=[], 0x0) 8.425183749s ago: executing program 3 (id=2247): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c3142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x80ffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r7, &(0x7f0000009b80)=""/102392, 0x18ff8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffb}, {0x400000b1, 0x0, 0x8000000000000001}]}) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000000c0)=0xe7c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) io_uring_enter(r3, 0x6bd4, 0x9404, 0x8, &(0x7f0000000200)={[0x4000008]}, 0x8) 8.066707877s ago: executing program 4 (id=2248): io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040840) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0xa0200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat$comedi(0xffffffffffffff9c, 0x0, 0x212701, 0x0) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000240), 0x0, 0x1) timerfd_create(0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x3554000) fadvise64(r2, 0x6, 0x0, 0x4) 6.366664702s ago: executing program 0 (id=2249): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x2, &(0x7f0000000200)=@raw=[@ldst={0x3, 0x2, 0x6, 0x6, 0xb, 0x2, 0x41}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsmount(r3, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'pim6reg1\x00'}) 6.303582878s ago: executing program 6 (id=2250): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c3142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x80ffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r7, &(0x7f0000009b80)=""/102392, 0x18ff8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffb}, {0x400000b1, 0x0, 0x8000000000000001}]}) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) io_uring_enter(r3, 0x6bd4, 0x9404, 0x8, &(0x7f0000000200)={[0x4000008]}, 0x8) 6.277096904s ago: executing program 4 (id=2251): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc40102030109021200010000000009047af03028d73088e9bbc226bedda00539a659eb"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)={0x0, 0x22, 0x2, {0x2, 0x22}}, &(0x7f0000000380)=ANY=[@ANYBLOB="00031e0000001e03"]}, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.849045307s ago: executing program 3 (id=2252): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000240)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) 5.689117656s ago: executing program 3 (id=2253): syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)="924dd543d2d1711cfe999da332a3b00c662686fb2175e45dfada7697e942e31ed130bbe1a321c449540cfbf167c559530ea65622505eadf793a9886d72e5fbf32b1dc7705218f5a18ced34b0348c3c4ef6e7a08df9784f6b203c606247357b56cccc1a4f17d27d5534aeb437b7801ce0a3f17c53dbf05df61288031d1409052e4fe53d1fc1f75107612c2cc5d629024e415dcde5b5bd87c9cf23e2", 0x9b}, {&(0x7f0000000300)="f31022147486a517e1f333272693156c1131810d553fcffaa57198f9e54fe768e7bebf9d75d086e53d78c90a284459a402748f14521e494d18aab3aa490ad148067151b3346c1b2bb34b95befd0c546986ec123d082d433f1b59eb005b3a36b6ceee2ab52c193d253c1e", 0x6a}, {&(0x7f0000000380)="0d3140f6763ee9b40efd967b512da88f0eda897b667b58456839995a98f7d93c262f6fac309f3a550bb2545270ecf61b4c89f9183834f4acdfd7382d7a8b1831a31c731e8eb12c504b66ee9e427e023bd09fbfb48d4662c1e5304f66ab71aadde7f417db7030d2da574fbf8b40ad5f378f62bd7c259fd3f4074a0e02a0ab43d16877618a670e2828018f06d56744b8add01fa0931971122cd1068ad67deda0b105e2beaec31bf872a37970ae11d5bcb14fe2efc339a488b89a2f3c379c2b328810cb52347186d42f0edba837e7b25b38a683a222c34c4ccdb161bca35f07d2a864e73a13bf882b31e2eca7bc13dd87d8a3", 0xf1}], 0x3, &(0x7f0000000980)=[@rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, r0, r0, r3, r3]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, r3, r0, r0, r2, r0]}}, @rights={{0x0, 0x1, 0x1, [r2, r2, r0, r0]}}, @rights={{0x20}}, @rights={{0x0, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x10}}], 0xf0, 0x24008015}}], 0x1, 0x4004044) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setrlimit(0x0, &(0x7f0000000000)={0x7, 0x400}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r5, 0x0, 0x0, 0x40000140, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r4, 0x7ac, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x7c) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000301012abd09000000df2507000002d3000000"], 0x18}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000080) 5.279544326s ago: executing program 5 (id=2254): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(0x0, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.827806957s ago: executing program 5 (id=2255): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_vif\x00') sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="23f677041e"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_newnexthop={0x64, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x2}, [@NHA_RES_GROUP={0x4c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x101}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xcd2b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xed5d}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xfffe}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x5}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x10001}]}]}, 0x64}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_MCE_KILL(0x43, 0x0, 0x1) sched_setattr(r1, &(0x7f0000000140)={0x38, 0x6, 0x1000000c, 0x1, 0x1, 0x8, 0x954, 0x8000000000000001, 0xfffffffb, 0xe624}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0xc) 4.747132542s ago: executing program 6 (id=2256): r0 = getpgrp(0xffffffffffffffff) timer_create(0x5, &(0x7f00000002c0)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) setfsgid(0x0) socket$alg(0x26, 0x5, 0x0) 4.539332644s ago: executing program 5 (id=2257): socket$kcm(0xa, 0x5, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x402, 0x3, 0x3}, 0x18, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1e3900, 0x0) sendfile(r1, r3, 0x0, 0x100000001) (fail_nth: 2) sendfile(r1, r3, 0x0, 0x2) landlock_restrict_self(r0, 0x9) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x20000010) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, &(0x7f0000000100)}) 4.193521597s ago: executing program 6 (id=2258): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(0x0, 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.135421465s ago: executing program 6 (id=2259): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x440, 0x123, 0x4}, 0x18) statx(r0, 0x0, 0x400, 0x2, &(0x7f0000000500)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=@newlink={0x1b8, 0x10, 0x401, 0xfffffffc, 0x81, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_VF_PORTS={0x17c, 0x18, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "2a93d486e018f0a41c5ac49081339b15"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bf1579fb2713939e3a99bc4433174508"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5c63ea521622974057025c5200"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8c94339ecfd4c95cb35c8479de590e4f"}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x91d}, @IFLA_PORT_PROFILE={0x6, 0x2, '[\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x19, 0x2, 'M\xbd\x85}\x9b7\xa4c\xb1\xa3\x82J\xe1\xe4M/\xe7A\xb8/q'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8ef90ebe113f35d4146c3800221bb693"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x44}, @IFLA_PORT_PROFILE={0x18, 0x2, '{/.@{./[^\\($)[]\\(,!\x00'}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f3aa61b5988ab61db2e0fcfc69859f23"}, @IFLA_PORT_PROFILE={0x9, 0x2, 'c:::\x00'}, @IFLA_PORT_PROFILE={0x6, 0x2, '(\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7d66c1645d80614107f062c9c7f7419c"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x80}, @IFLA_PORT_PROFILE={0xa, 0x2, '!#\xb1\x83#\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "33fd455f5efea620b975d4992ebf3a21"}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xe0}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c495878407d88a18e25904fe5c8030c5"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "442773f96804007de7fbc400ff0ea73d"}]}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = fsopen(&(0x7f0000000280)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file1\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 4.012092307s ago: executing program 4 (id=2260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x20000000000000c9, &(0x7f0000019200)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) io_uring_setup(0x2f00, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x5, 0x4) socket$kcm(0x2, 0x200000000000001, 0x106) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) r7 = socket$inet(0x2, 0x0, 0x0) sendmmsg$sock(r7, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000191c0)={&(0x7f0000019080), 0xc, &(0x7f0000019180)={&(0x7f0000019200)=ANY=[@ANYRES8, @ANYRESOCT=r3, @ANYRESOCT=r3, @ANYRESHEX, @ANYRES64=r4, @ANYRESHEX=r0, @ANYRESHEX], 0x60}, 0x1, 0x0, 0x0, 0x801}, 0x20004085) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "653c1b4e82844461df245d602e571157637b2b264d65f76409a869d62cec2666", "2e2bb08b16c51ac62f5a95c880e2467137a74f00e71e64160700", "aed417062feee7c199b98743ad7e98588e00", "9fcc63648d5ca6f91b8d245971ee8a08460e7400", "21acd16f247aae4d9e6d207292339e96294b6d8b1491fae6922d6d21831cdac0", "81f44df52305410a0af0460a", 0x4, 0x5, 0x6, 0x7, 0x7ffffffd}}) 3.862847074s ago: executing program 5 (id=2261): fsopen(&(0x7f00000001c0)='nsfs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x8, 0x70bd26, 0x25dfdbff, {0x2, 0x20, 0x0, 0x8, 0xf6, 0x0, 0x0, 0x3, 0x2}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r3 = getpgrp(0xffffffffffffffff) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x6, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$dsp(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="03000000040000000400", @ANYRESHEX, @ANYBLOB="18"], 0x50) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@get={0x1, 0x0, 0x401}) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0x467, 0x6000000000000000, 0x0, 0x0) unshare(0x62040200) 3.114984383s ago: executing program 6 (id=2262): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, r0, 0xea24d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_create(0x7) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000380)=@multiplanar_fd={0x5e76b39c, 0xd, 0x4, 0x80, 0x81, {}, {0x1, 0xc, 0x6, 0x4, 0x6, 0x5}, 0x1, 0x4, {0x0}, 0xfffffffe}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010828bd7000fcdbdf2501000000000000000b000000001400143954ee6272"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0) ptrace(0x4208, r1) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}], 0x0) 3.097911405s ago: executing program 0 (id=2263): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000240)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) 2.969837866s ago: executing program 4 (id=2264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setown(r1, 0x8, r0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="24000000fe00020029000000321a0000ff010000000000000000080000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0xc000) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r3, 0x0, 0xf, 0x0, &(0x7f0000000740)) getpgrp(r0) syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') r4 = gettid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000006000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1ce7, &(0x7f0000000040)={0x0, 0xe9f9, 0x4480, 0x1, 0x18d}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') readv(r5, &(0x7f0000000380)=[{&(0x7f0000000100)=""/15, 0xf}], 0x1) getpriority(0x1, r4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.779797965s ago: executing program 0 (id=2265): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(0x0, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.768748672s ago: executing program 6 (id=2266): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x1000, 0x4, 0x11fe9235, 0xfffffff8, 0x9}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="3c433499e1f41d34be263939f321fb9396286bd58e9f3a5b4f23d4b2a2d4064121cce64723fb513d30ce3b24b3da46f373ec9a92b84b0548e06d9a4c6888451ca1e955", 0x43, r2) (async) r3 = dup(r1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0xffe) 1.559322879s ago: executing program 4 (id=2267): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_vif\x00') sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="23f677041e"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_newnexthop={0x64, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x2}, [@NHA_RES_GROUP={0x4c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x101}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xcd2b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xed5d}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xfffe}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x5}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x10001}]}]}, 0x64}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_MCE_KILL(0x43, 0x0, 0x1) sched_setattr(r1, &(0x7f0000000140)={0x38, 0x6, 0x1000000c, 0x1, 0x1, 0x8, 0x954, 0x8000000000000001, 0xfffffffb, 0xe624}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0xc) 1.378342205s ago: executing program 4 (id=2268): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c3142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x80ffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r7, &(0x7f0000009b80)=""/102392, 0x18ff8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffb}, {0x400000b1, 0x0, 0x8000000000000001}]}) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) io_uring_enter(r3, 0x6bd4, 0x9404, 0x8, &(0x7f0000000200)={[0x4000008]}, 0x8) 1.145540783s ago: executing program 3 (id=2269): fcntl$lock(0xffffffffffffffff, 0x410, 0x0) 1.056244785s ago: executing program 0 (id=2270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x20000000, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x2d, &(0x7f0000000580)={0x0, {{0x2, 0x4e23, @remote}}}, 0x88) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, 0x0) 558.533567ms ago: executing program 3 (id=2271): chown(&(0x7f0000001140)='./cgroup.cpu/cgroup.procs\x00', 0xee00, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000003a40)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000003a80)={0x1a9aaa50, 0x6, {}, {0xffffffffffffffff}, 0x1, 0x3}) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setresuid(r12, 0x0, 0xee01) r13 = getuid() sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000200081de0000000003000000028c0400000000031f0000000c001400", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r14 = getegid() sendmmsg$unix(r4, &(0x7f0000000740)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000680)=[@rights={{0x20, 0x1, 0x1, [r5, r4, r7, r7]}}, @rights={{0x18, 0x1, 0x1, [r6, r5]}}, @rights={{0x18, 0x1, 0x1, [r4, r4]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r3, r12, r14}}}], 0xb0, 0x80}}], 0x1, 0x20000080) r15 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000003ac0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003c00)=[{{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000180)="9c84b787bb2317906512327bd6beb0b9be2d92444a678dcafa89472a62576125ad9fe3d64fcd43c2224c17a51e55d8994945a98d05d34111a93f353ccf573072be4c386bf922efd9aaab081abbc1024c6640789238c3ba75", 0x58}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60, 0x800}}, {{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000003c0)="53c6fcbf1f7fe4d64ed221d82040ad5a0e5e8701a05bc086e69db7e44bad52796222d40d8a6fcec7f643cd6c2ab87c558d361c33e2b56677428203af13582bc1eafdf2386dfae8d347fc094c9efcb075dabc4ace388a6571475c386a965b8ab9ef8c0dddc9d1e4f548fcb17c2f770991b87e8542d9ccb5ad8581e6f7", 0x7c}, {&(0x7f0000000440)="f610bc6f15b1a16d71b739df960268861b0406c35257915d08fa1baabbdbeb2ab82ccf695db34963cc652dab7ea398c8aafd723e8831b3e4e57c22d4898377e93dd921396744a1db52235a190912e3a4526b78ceb8f5b5fa0cdbb6e99fa003f3cd7bfa3542a33430303ea1c3fcef558c793fdf10114c5b07c04ab17433e80567eee2712a424950f009c7d8859a4c0ed8d682f0b39498fa7f2bd4acea3887277cc4b386151e39c410ecb7e8616566bd8460417576d10db16394faa52db80c87c023ee8f0e1163", 0xc6}, {&(0x7f0000000540)="b52e3347428da3c01c5c659ee58215c268de1d64186dd65d8c934920c82b05414460f8e84d419ccc7ccdce76ea251bddce0de6cab4075b539a49b9266277c55aa5872d769c7e086a477d651b8a6d228b02ce42b4fe43d86d730df5704e3aaadc723be0995143fc0c6dd065392dd4e83f2ac419d84b1b", 0x76}], 0x3, &(0x7f00000031c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}], 0xb0, 0x90}}, {{&(0x7f0000003280)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003400)=[{&(0x7f0000003300)="ef0b28bfeb500875c6e39b9a0f399fc5503663993bea70961595d24b26545592", 0x20}, {&(0x7f0000003340)="b731b89ecbd04f6773fe9b6260b3a3269bd0175021388c8d56a07158af338271a9b71edc7eb77ba2252d8a55235df8963ff7144c2f7569c965c0835c78113a2d0fc3cb403359b586954aa899389b72542164f885c2ef63b28803f07d12e8d68675c981e0bef17bd39d1f56d3cdcb387c17a88af44025a9d8c4f8c95f26c8fae262c31d09dd2f26ee4c4c0f4557161b3ba8b90fed1d", 0x95}], 0x2, &(0x7f0000000780)=[@rights={{0x2c, 0x1, 0x1, [r11, 0xffffffffffffffff, r10, r10, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r9}}}, @rights={{0x18, 0x1, 0x1, [r15, 0xffffffffffffffff]}}], 0xf8, 0x8000}}], 0x3, 0x20000000) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) r16 = socket$inet6_udplite(0xa, 0x2, 0x88) r17 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40880, 0x0) ioctl$TIOCNOTTY(r17, 0x5422) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'team0\x00'}) 0s ago: executing program 0 (id=2272): socket$packet(0x11, 0x3, 0x300) syz_open_dev$sndctrl(&(0x7f0000000000), 0x10000000007, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x8a, &(0x7f00000002c0)=@req3={0x0, 0x0, 0x3, 0x89, 0xfffff6bd, 0xf, 0xed}, 0x1c) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc8003, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast, @remote, @void, {@ipv4={0x800, @tipc={{0xb, 0x4, 0x2, 0x22, 0x58, 0x66, 0x0, 0xff, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0xf, 0x67, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1]}, @generic={0x44, 0x6, "d49454f5"}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x1, 0xb, 0x1, 0x2, 0x7, 0x0, 0x3, 0x9, 0x2, 0x1, 0x0, 0xc, 0x3, 0x4e24, 0x4e22}, 0x0, 0x1}, 0x3, 0x2}}}}}}}}, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0x25dfdbf8, {0x0, 0x0, 0x0, r6, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): :0kB [ 631.923753][T12594] lowmem_reserve[]: 0 0 0 0 0 [ 631.930375][T12594] Node 1 Normal free:3936704kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 632.098917][T12594] lowmem_reserve[]: 0 0 0 0 0 [ 632.104069][T12594] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 632.281452][T12594] Node 0 DMA32: 794*4kB (ME) 388*8kB (UME) 942*16kB (UME) 294*32kB (UME) 515*64kB (UM) 443*128kB (UME) 353*256kB (UM) 195*512kB (UM) 95*1024kB (UM) 9*2048kB (ME) 119*4096kB (UM) = 913768kB [ 632.309837][T12594] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 632.542731][T12594] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 15*16kB (UM) 11*32kB (UM) 9*64kB (UM) 6*128kB (UM) 4*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 958*4096kB (M) = 3936704kB [ 632.666091][T12594] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 632.681379][T12594] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 632.701094][T12594] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 632.803845][T11525] usb 6-1: Failed to submit usb control message: -110 [ 632.828627][T11525] usb 6-1: unable to send the bmi data to the device: -110 [ 632.849739][ T5814] usb 6-1: USB disconnect, device number 37 [ 632.874510][T11525] usb 6-1: unable to get target info from device [ 632.891105][T11525] usb 6-1: could not get target info (-110) [ 632.931008][T12594] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 632.948553][T12594] 130000 total pagecache pages [ 632.962898][T12594] 0 pages in swap cache [ 632.967197][T12594] Free swap = 124996kB [ 632.972602][T12594] Total swap = 124996kB [ 632.976908][T12594] 2097051 pages RAM [ 632.984987][T12594] 0 pages HighMem/MovableOnly [ 632.989795][T12594] 430917 pages reserved [ 633.320338][T11525] usb 6-1: could not probe fw (-110) [ 633.364604][T12594] 0 pages cma reserved [ 633.549083][T12626] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 633.580285][T12626] tipc: Enabling of bearer rejected, failed to enable media [ 633.888272][T12631] netlink: 'syz.0.1668': attribute type 39 has an invalid length. [ 635.582043][ T6258] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 635.606757][T12647] netlink: 'syz.3.1670': attribute type 21 has an invalid length. [ 635.661129][ T30] audit: type=1400 audit(1776071306.260:652): avc: denied { ioctl } for pid=12630 comm="syz.0.1668" path="socket:[43424]" dev="sockfs" ino=43424 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 635.783896][T12636] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1668'. [ 635.951056][ T6258] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 635.971919][ T6258] usb 7-1: config 0 has no interface number 0 [ 635.978046][ T6258] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.407044][ T5814] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 636.445286][T12647] netlink: 'syz.3.1670': attribute type 6 has an invalid length. [ 636.477683][T12647] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1670'. [ 636.478679][ T6258] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.540603][ T6258] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 636.570157][ T6258] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.581043][ T5814] usb 4-1: Using ep0 maxpacket: 8 [ 636.597962][ T5814] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 636.600866][ T6258] usb 7-1: config 0 descriptor?? [ 636.617466][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.632933][ T30] audit: type=1400 audit(1776071307.220:653): avc: denied { ioctl } for pid=12653 comm="syz.4.1673" path="socket:[43498]" dev="sockfs" ino=43498 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 636.678414][ T5814] usb 4-1: config 0 descriptor?? [ 636.697811][ T5814] gm12u320 4-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 636.709351][ T5814] gm12u320 4-1:0.0: probe with driver gm12u320 failed with error -5 [ 637.667479][ T30] audit: type=1400 audit(1776071308.200:654): avc: denied { append } for pid=12642 comm="syz.6.1669" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 637.676152][ T6258] input: HID 04d9:a055 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:04D9:A055.0011/input/input80 [ 637.699559][ T5814] usb-storage 4-1:0.0: USB Mass Storage device detected [ 638.711745][ T5814] usb-storage 4-1:0.0: device ignored [ 639.033452][ T6258] holtek_kbd 0003:04D9:A055.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.6-1/input1 [ 639.139889][ T6258] usb 7-1: USB disconnect, device number 38 [ 639.173525][ T5814] usb 4-1: USB disconnect, device number 38 [ 639.277368][T12672] fido_id[12672]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 640.831263][T12688] SET target dimension over the limit! [ 640.966238][ T30] audit: type=1804 audit(1776071311.520:655): pid=12693 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1681" name="bus" dev="ramfs" ino=44699 res=1 errno=0 [ 641.177198][ T30] audit: type=1804 audit(1776071311.530:656): pid=12693 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1681" name="bus" dev="ramfs" ino=44699 res=1 errno=0 [ 641.185631][T12699] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 641.351468][ T30] audit: type=1804 audit(1776071311.880:657): pid=12704 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1684" name="bus" dev="ramfs" ino=43702 res=1 errno=0 [ 641.430895][ T30] audit: type=1804 audit(1776071311.880:658): pid=12704 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.1684" name="bus" dev="ramfs" ino=43702 res=1 errno=0 [ 641.861377][T12699] tipc: Enabling of bearer rejected, failed to enable media [ 642.549592][T12710] netlink: 'syz.0.1685': attribute type 21 has an invalid length. [ 642.585908][T12710] netlink: 'syz.0.1685': attribute type 6 has an invalid length. [ 642.627222][T12710] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1685'. [ 642.715848][ T30] audit: type=1400 audit(1776071313.310:659): avc: denied { bind } for pid=12712 comm="syz.4.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 642.950824][ T6258] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 643.103424][ T6258] usb 1-1: Using ep0 maxpacket: 8 [ 643.155622][ T6258] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 643.170849][ T6258] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.236894][ T6258] usb 1-1: config 0 descriptor?? [ 643.279813][ T6258] gm12u320 1-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 643.298522][ T6258] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5 [ 643.340154][ T6258] usb-storage 1-1:0.0: USB Mass Storage device detected [ 643.416101][ T6258] usb-storage 1-1:0.0: device ignored [ 643.461512][T12719] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1688'. [ 643.521061][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. [ 643.654387][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1687'. [ 643.823942][T12724] nbd: socks must be embedded in a SOCK_ITEM attr [ 644.480944][ T5814] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 644.534507][ T6763] udevd[6763]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 645.042667][ T5799] udevd[5799]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 645.107068][ T5814] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.138996][ T5814] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 645.189972][ T5814] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 645.234521][ T5814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 645.346885][ T5814] usb 7-1: SerialNumber: syz [ 645.563799][ T5814] usb 7-1: 0:2 : does not exist [ 645.872265][ T6258] usb 1-1: USB disconnect, device number 38 [ 646.126029][T12742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.171369][T12742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.380829][ T5814] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 649.153374][T12771] .`: (slave batadv0): Releasing backup interface [ 649.197839][ T5814] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 649.211922][T12771] .`: (slave bond_slave_0): Releasing backup interface [ 649.219659][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.232778][ T5814] usb 5-1: Product: syz [ 649.237048][ T5814] usb 5-1: Manufacturer: syz [ 649.245165][ T5814] usb 5-1: SerialNumber: syz [ 649.256877][T12771] .`: (slave bond_slave_1): Releasing backup interface [ 649.275050][ T5814] usb 5-1: config 0 descriptor?? [ 649.294060][T12771] team0: Port device team_slave_0 removed [ 649.309499][T12771] team0: Port device team_slave_1 removed [ 649.317444][T12771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.345641][T12771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.358600][T12771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.408612][ T6258] usb 7-1: USB disconnect, device number 39 [ 649.409490][T12771] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 649.486602][ T5814] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 650.474371][ T6258] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 650.690820][ T6258] usb 7-1: Using ep0 maxpacket: 8 [ 651.057904][ T6258] usb 7-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 651.113043][ T6258] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.160618][ T6258] usb 7-1: config 0 descriptor?? [ 651.363732][ T5814] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 651.385632][ T6258] gm12u320 7-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 651.390240][ T5814] usb 5-1: USB disconnect, device number 43 [ 651.398531][ T6258] gm12u320 7-1:0.0: probe with driver gm12u320 failed with error -5 [ 652.478626][ T6258] usb-storage 7-1:0.0: USB Mass Storage device detected [ 652.495515][ T6258] usb-storage 7-1:0.0: device ignored [ 652.615668][ T5814] usb 7-1: USB disconnect, device number 40 [ 655.818472][T12840] overlayfs: failed lookup in lower (newroot/360, name='file0', err=-40): overlapping layers [ 655.832440][T12840] overlayfs: failed lookup in lower (newroot/360, name='file0', err=-40): overlapping layers [ 655.843964][T12840] overlayfs: failed lookup in lower (newroot/360, name='file0', err=-40): overlapping layers [ 655.857000][T12840] overlayfs: failed lookup in lower (newroot/360, name='file0', err=-40): overlapping layers [ 655.935219][T12844] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.1719'. [ 655.991122][ T6258] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 656.204405][ T6258] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 656.219116][ T6258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.234044][ T6258] usb 6-1: Product: syz [ 656.243728][ T6258] usb 6-1: Manufacturer: syz [ 656.253831][ T6258] usb 6-1: SerialNumber: syz [ 656.271316][ T6258] usb 6-1: config 0 descriptor?? [ 656.357994][T12855] FAULT_INJECTION: forcing a failure. [ 656.357994][T12855] name failslab, interval 1, probability 0, space 0, times 0 [ 656.371449][T12855] CPU: 1 UID: 0 PID: 12855 Comm: syz.4.1722 Tainted: G L syzkaller #0 PREEMPT(full) [ 656.371478][T12855] Tainted: [L]=SOFTLOCKUP [ 656.371484][T12855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 656.371493][T12855] Call Trace: [ 656.371498][T12855] [ 656.371505][T12855] dump_stack_lvl+0x100/0x190 [ 656.371547][T12855] should_fail_ex.cold+0x5/0xa [ 656.371571][T12855] should_failslab+0xc2/0x120 [ 656.371590][T12855] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 656.371617][T12855] ? __d_alloc+0x34/0xa80 [ 656.371638][T12855] ? security_transition_sid+0x68/0x80 [ 656.371666][T12855] ? selinux_netlbl_socket_post_create+0x34/0x1c0 [ 656.371695][T12855] __d_alloc+0x34/0xa80 [ 656.371718][T12855] d_alloc_pseudo+0x1c/0xc0 [ 656.371744][T12855] alloc_file_pseudo+0xcf/0x230 [ 656.371768][T12855] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 656.371791][T12855] ? alloc_fd+0x476/0x790 [ 656.371814][T12855] sock_alloc_file+0x50/0x210 [ 656.371841][T12855] __sys_socket+0x1c0/0x260 [ 656.371859][T12855] ? fput+0x79/0x100 [ 656.371878][T12855] ? __pfx___sys_socket+0x10/0x10 [ 656.371896][T12855] ? ksys_write+0x1ac/0x250 [ 656.371911][T12855] ? __pfx_ksys_write+0x10/0x10 [ 656.371932][T12855] __x64_sys_socket+0x72/0xb0 [ 656.371950][T12855] ? lockdep_hardirqs_on+0x78/0x100 [ 656.371977][T12855] do_syscall_64+0x106/0xf80 [ 656.371993][T12855] ? clear_bhb_loop+0x40/0x90 [ 656.372015][T12855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.372033][T12855] RIP: 0033:0x7f621f79c819 [ 656.372048][T12855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.372064][T12855] RSP: 002b:00007f621d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 656.372080][T12855] RAX: ffffffffffffffda RBX: 00007f621fa15fa0 RCX: 00007f621f79c819 [ 656.372091][T12855] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 656.372100][T12855] RBP: 00007f621d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 656.372111][T12855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.372121][T12855] R13: 00007f621fa16038 R14: 00007f621fa15fa0 R15: 00007ffd814f6288 [ 656.372145][T12855] [ 656.608611][T11029] Bluetooth: hci5: command 0x1003 tx timeout [ 656.618228][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 656.746047][ T6258] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 657.831321][ T5866] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 658.322119][ T6258] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 658.331129][ T5866] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 658.359660][ T6258] usb 6-1: USB disconnect, device number 38 [ 658.360660][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.752844][ T5866] usb 5-1: config 0 descriptor?? [ 659.094942][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 659.503489][T12884] syz.3.1729 (12884) used greatest stack depth: 19184 bytes left [ 659.654829][ T5866] ath6kl: Failed to submit usb control message: -71 [ 659.661638][ T5866] ath6kl: unable to send the bmi data to the device: -71 [ 659.669186][ T5866] ath6kl: Unable to send get target info: -71 [ 659.698098][ T5866] ath6kl: Failed to init ath6kl core: -71 [ 659.748912][T12890] FAULT_INJECTION: forcing a failure. [ 659.748912][T12890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.760413][ T5866] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 659.783635][T12890] CPU: 1 UID: 0 PID: 12890 Comm: syz.3.1733 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.783665][T12890] Tainted: [L]=SOFTLOCKUP [ 659.783671][T12890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 659.783680][T12890] Call Trace: [ 659.783686][T12890] [ 659.783693][T12890] dump_stack_lvl+0x100/0x190 [ 659.783726][T12890] should_fail_ex.cold+0x5/0xa [ 659.783750][T12890] _copy_from_user+0x2e/0xd0 [ 659.783771][T12890] video_usercopy+0xe71/0x1740 [ 659.783799][T12890] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 659.783824][T12890] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 659.783850][T12890] ? __pfx_video_usercopy+0x10/0x10 [ 659.783889][T12890] v4l2_ioctl+0x1bd/0x250 [ 659.783912][T12890] ? __pfx_v4l2_ioctl+0x10/0x10 [ 659.783938][T12890] __x64_sys_ioctl+0x18e/0x210 [ 659.783963][T12890] do_syscall_64+0x106/0xf80 [ 659.783978][T12890] ? clear_bhb_loop+0x40/0x90 [ 659.783999][T12890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.784016][T12890] RIP: 0033:0x7f47aad9c819 [ 659.784029][T12890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.784043][T12890] RSP: 002b:00007f47abcc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 659.784059][T12890] RAX: ffffffffffffffda RBX: 00007f47ab015fa0 RCX: 00007f47aad9c819 [ 659.784069][T12890] RDX: 0000200000000080 RSI: 00000000c0305602 RDI: 0000000000000003 [ 659.784078][T12890] RBP: 00007f47abcc1090 R08: 0000000000000000 R09: 0000000000000000 [ 659.784088][T12890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.784097][T12890] R13: 00007f47ab016038 R14: 00007f47ab015fa0 R15: 00007ffd5b352658 [ 659.784119][T12890] [ 659.802669][ T5866] usb 5-1: USB disconnect, device number 44 [ 659.921236][ T24] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 660.019744][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1734'. [ 660.073705][ T6258] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 660.101069][T12899] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 660.152125][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'. [ 660.165182][ T6258] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 660.189560][T12907] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 660.256851][T12907] bond1 (unregistering): Released all slaves [ 660.369763][ T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 660.380200][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.557885][ T24] usb 7-1: Product: syz [ 660.603417][T12917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.801759][ T24] usb 7-1: Manufacturer: syz [ 660.808611][ T24] usb 7-1: SerialNumber: syz [ 660.857614][ T24] usb 7-1: config 0 descriptor?? [ 661.241186][ T24] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 661.690846][ T5905] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 661.834141][ T30] audit: type=1326 audit(1776071332.430:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12925 comm="syz.0.1741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c43f9c819 code=0x0 [ 661.864652][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 661.873209][ T5905] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 661.882131][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.892627][ T5905] usb 5-1: config 0 has no interface number 0 [ 661.898790][ T5905] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 661.937329][ T5905] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 661.951226][ T5905] usb 5-1: config 0 interface 196 has no altsetting 0 [ 661.965484][ T5905] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 661.976588][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.984693][ T5905] usb 5-1: Product: syz [ 661.988849][ T5905] usb 5-1: Manufacturer: syz [ 661.993558][ T5905] usb 5-1: SerialNumber: syz [ 661.999982][ T5905] usb 5-1: config 0 descriptor?? [ 662.090841][ T6258] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 662.113863][T12886] kvm: kvm [12885]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0xc1) = 0xd105af [ 662.123323][T12886] kvm: kvm [12885]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0xc2) = 0xd105af [ 662.135329][T12886] kvm: kvm [12885]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x11e) = 0xd105af [ 662.147004][T12886] kvm: kvm [12885]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x186) = 0xd105af [ 662.156098][ T5866] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 662.163776][T12886] kvm: kvm [12885]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x187) = 0xd105af [ 662.166872][T12886] kvm_intel: kvm [12885]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x1d9) = 0xd105af [ 662.183146][ T24] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 662.190862][ T5814] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 662.198081][ T24] usb 7-1: USB disconnect, device number 41 [ 662.219233][ T5905] ipheth 5-1:0.196: Unable to find endpoints [ 662.236610][ T5905] usb 5-1: USB disconnect, device number 45 [ 662.275574][ T6258] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.285919][ T6258] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 662.296830][ T6258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.311502][ T6258] usb 6-1: config 0 descriptor?? [ 662.332680][ T6258] pwc: Askey VC010 type 2 USB webcam detected. [ 662.351443][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 662.380134][ T5814] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 662.391856][ T5866] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 662.403454][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.411770][ T5866] usb 1-1: config 2 has no interface number 0 [ 662.417880][ T5866] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 662.428246][ T5814] usb 4-1: Product: syz [ 662.432620][ T5814] usb 4-1: Manufacturer: syz [ 662.437224][ T5814] usb 4-1: SerialNumber: syz [ 662.442179][ T5866] usb 1-1: config 2 interface 88 has no altsetting 0 [ 662.452692][ T5814] usb 4-1: config 0 descriptor?? [ 662.462085][ T5866] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 662.471885][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.479909][ T5866] usb 1-1: Product: syz [ 662.485405][ T5866] usb 1-1: Manufacturer: syz [ 662.490046][ T5866] usb 1-1: SerialNumber: syz [ 662.502232][T12928] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 662.666513][ T5814] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 662.713697][T12929] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 662.721903][ T6258] pwc: recv_control_msg error -32 req 02 val 2b00 [ 662.759050][ T6258] pwc: recv_control_msg error -32 req 02 val 2700 [ 662.766311][ T6258] pwc: recv_control_msg error -32 req 02 val 2c00 [ 662.773552][ T6258] pwc: recv_control_msg error -32 req 04 val 1000 [ 662.782185][ T6258] pwc: recv_control_msg error -32 req 04 val 1300 [ 662.789561][ T6258] pwc: recv_control_msg error -32 req 04 val 1400 [ 662.797332][ T6258] pwc: recv_control_msg error -32 req 02 val 2000 [ 662.813201][ T6258] pwc: recv_control_msg error -32 req 02 val 2100 [ 662.824946][ T6258] pwc: recv_control_msg error -32 req 04 val 1500 [ 662.832412][ T6258] pwc: recv_control_msg error -71 req 02 val 2500 [ 662.843969][ T6258] pwc: recv_control_msg error -71 req 02 val 2400 [ 662.854503][ T6258] pwc: recv_control_msg error -71 req 02 val 2600 [ 662.861576][ T6258] pwc: recv_control_msg error -71 req 02 val 2900 [ 662.871495][ T6258] pwc: recv_control_msg error -71 req 02 val 2800 [ 662.881428][ T6258] pwc: recv_control_msg error -71 req 04 val 1100 [ 662.888337][ T6258] pwc: recv_control_msg error -71 req 04 val 1200 [ 662.902263][ T6258] pwc: Registered as video103. [ 662.910576][ T6258] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input83 [ 662.959305][ T6258] usb 6-1: USB disconnect, device number 39 [ 663.483968][T12943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12943 comm=syz.4.1745 [ 663.532566][ T5866] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 663.552381][ T5866] asix 1-1:2.88: probe with driver asix failed with error -32 [ 663.905147][ C0] raw-gadget.4 gadget.3: ignoring, device is not running [ 663.912918][ C0] raw-gadget.4 gadget.3: ignoring, device is not running [ 663.920275][ C0] raw-gadget.4 gadget.3: ignoring, device is not running [ 663.927940][ C0] raw-gadget.4 gadget.3: ignoring, device is not running [ 663.935701][ C0] raw-gadget.4 gadget.3: ignoring, device is not running [ 663.943090][ C0] raw-gadget.4 gadget.3: ignoring, device is not running [ 663.950476][ C0] raw-gadget.4 gadget.3: ignoring, device is not running [ 663.958108][ C0] raw-gadget.4 gadget.3: ignoring, device is not running [ 663.965698][ C0] raw-gadget.4 gadget.3: ignoring, device is not running [ 663.973281][ C0] raw-gadget.4 gadget.3: ignoring, device is not running [ 663.980840][ C0] raw-gadget.4 gadget.3: ignoring, device is not running [ 663.988121][ T5814] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 664.030625][ T5814] usb 4-1: USB disconnect, device number 39 [ 664.474256][T12956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12956 comm=syz.6.1746 [ 664.834639][ T5814] usb 1-1: USB disconnect, device number 39 [ 664.987459][ T30] audit: type=1400 audit(1776071335.570:661): avc: denied { map } for pid=12971 comm="syz.0.1753" path="socket:[46475]" dev="sockfs" ino=46475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 665.561040][ T30] audit: type=1400 audit(1776071335.570:662): avc: denied { accept } for pid=12971 comm="syz.0.1753" path="socket:[46475]" dev="sockfs" ino=46475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 665.722580][T12979] fuse: Unknown parameter 'grou00000000000000000000' [ 666.739102][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 666.745221][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 666.797923][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 666.838266][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 667.015638][T12992] ceph: No mds server is up or the cluster is laggy [ 667.437477][ T6258] kernel write not supported for file [eventfd] (pid: 6258 comm: kworker/1:5) [ 669.037811][ T30] audit: type=1400 audit(1776071339.630:663): avc: denied { getopt } for pid=13014 comm="syz.0.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 669.184637][T13020] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 669.191472][T13020] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 669.332966][T13020] vhci_hcd vhci_hcd.0: Device attached [ 669.487564][T13020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 669.721579][T13028] SET target dimension over the limit! [ 669.806818][ T5814] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 670.989205][T13040] fuse: Unknown parameter 'grou00000000000000000000' [ 671.654563][T13022] vhci_hcd: connection reset by peer [ 671.663551][ T1017] vhci_hcd vhci_hcd.4: stop threads [ 671.707168][ T1017] vhci_hcd vhci_hcd.4: release socket [ 671.774780][ T1017] vhci_hcd vhci_hcd.4: disconnect device [ 672.549959][ T30] audit: type=1400 audit(1776071343.140:664): avc: denied { append } for pid=13046 comm="syz.3.1771" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 672.860993][ T5866] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 674.010798][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 674.060850][ T5866] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.863233][ T5866] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 674.891458][ T5866] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 674.931409][ T5814] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 675.240146][ T5866] usb 4-1: string descriptor 0 read error: -71 [ 675.280912][ T5866] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 675.289986][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.367745][T13070] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 675.380868][T13070] tipc: Enabling of bearer rejected, failed to enable media [ 675.505647][ T5866] usb 4-1: can't set config #1, error -71 [ 675.527380][ T5866] usb 4-1: USB disconnect, device number 40 [ 676.035653][T13081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1774'. [ 676.203299][ T5866] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 676.431663][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 676.471970][ T5866] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 676.483007][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.494005][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.513781][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 676.646337][ T5866] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 676.671406][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.689012][ T5866] usb 4-1: config 0 descriptor?? [ 677.694050][ T5866] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0013/input/input84 [ 677.843739][ T5866] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0013/input/input85 [ 677.969639][ T5866] kye 0003:0458:5013.0013: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 679.000931][ T5866] usb 4-1: reset high-speed USB device number 41 using dummy_hcd [ 679.151225][ T5866] usb 4-1: device descriptor read/64, error -32 [ 679.390818][ T5866] usb 4-1: reset high-speed USB device number 41 using dummy_hcd [ 679.582716][ T5866] usb 4-1: device descriptor read/64, error -32 [ 680.137247][T13113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.214194][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.495283][ T5866] usb 4-1: reset high-speed USB device number 41 using dummy_hcd [ 680.729416][T13125] FAULT_INJECTION: forcing a failure. [ 680.729416][T13125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.758470][ T5866] usb 4-1: device reset changed ep0 maxpacket size! [ 680.780228][T13125] CPU: 1 UID: 0 PID: 13125 Comm: syz.0.1788 Tainted: G L syzkaller #0 PREEMPT(full) [ 680.780258][T13125] Tainted: [L]=SOFTLOCKUP [ 680.780265][T13125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 680.780276][T13125] Call Trace: [ 680.780282][T13125] [ 680.780289][T13125] dump_stack_lvl+0x100/0x190 [ 680.780320][T13125] should_fail_ex.cold+0x5/0xa [ 680.780343][T13125] _copy_to_user+0x32/0xd0 [ 680.780369][T13125] simple_read_from_buffer+0xcb/0x170 [ 680.780387][T13125] proc_fail_nth_read+0x1af/0x230 [ 680.780410][T13125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 680.780434][T13125] ? rw_verify_area+0xce/0x6d0 [ 680.780457][T13125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 680.780480][T13125] vfs_read+0x1e4/0xb30 [ 680.780498][T13125] ? __pfx_vfs_read+0x10/0x10 [ 680.780513][T13125] ? __fget_files+0x215/0x3d0 [ 680.780535][T13125] ? __fget_files+0x21f/0x3d0 [ 680.780559][T13125] ksys_read+0x12a/0x250 [ 680.780574][T13125] ? __pfx_ksys_read+0x10/0x10 [ 680.780595][T13125] do_syscall_64+0x106/0xf80 [ 680.780610][T13125] ? clear_bhb_loop+0x40/0x90 [ 680.780631][T13125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.780647][T13125] RIP: 0033:0x7f0c43f5d04e [ 680.780662][T13125] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 680.780677][T13125] RSP: 002b:00007f0c44f3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 680.780695][T13125] RAX: ffffffffffffffda RBX: 00007f0c44f3f6c0 RCX: 00007f0c43f5d04e [ 680.780706][T13125] RDX: 000000000000000f RSI: 00007f0c44f3f0a0 RDI: 0000000000000005 [ 680.780720][T13125] RBP: 00007f0c44f3f090 R08: 0000000000000000 R09: 0000000000000000 [ 680.780729][T13125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.780738][T13125] R13: 00007f0c44216038 R14: 00007f0c44215fa0 R15: 00007ffea6ef2248 [ 680.780760][T13125] [ 680.781855][ T5814] usb 4-1: USB disconnect, device number 41 [ 682.013163][T13136] lo: entered promiscuous mode [ 682.262611][T13129] lo: left promiscuous mode [ 682.531135][ T5814] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 682.870996][ T5814] usb 4-1: Using ep0 maxpacket: 8 [ 682.880765][ T5814] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 682.916011][ T5814] usb 4-1: config 0 has no interface number 0 [ 682.943076][ T5814] usb 4-1: too many endpoints for config 0 interface 122 altsetting 240: 48, using maximum allowed: 30 [ 683.480928][ T5814] usb 4-1: config 0 interface 122 altsetting 240 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 683.494383][ T5814] usb 4-1: config 0 interface 122 has no altsetting 0 [ 683.566524][T13153] FAULT_INJECTION: forcing a failure. [ 683.566524][T13153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.595444][ T5814] usb 4-1: string descriptor 0 read error: -71 [ 683.619798][ T5814] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 683.641863][T13153] CPU: 1 UID: 0 PID: 13153 Comm: syz.5.1794 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.641892][T13153] Tainted: [L]=SOFTLOCKUP [ 683.641899][T13153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 683.641909][T13153] Call Trace: [ 683.641915][T13153] [ 683.641922][T13153] dump_stack_lvl+0x100/0x190 [ 683.641956][T13153] should_fail_ex.cold+0x5/0xa [ 683.641980][T13153] _copy_from_iter+0x1f4/0x1690 [ 683.642004][T13153] ? __asan_memset+0x23/0x50 [ 683.642030][T13153] ? __pfx__copy_from_iter+0x10/0x10 [ 683.642050][T13153] ? __pfx___alloc_skb+0x10/0x10 [ 683.642085][T13153] netlink_sendmsg+0x808/0xda0 [ 683.642108][T13153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.642124][T13153] ? __might_fault+0x10/0x140 [ 683.642158][T13153] ____sys_sendmsg+0x9e1/0xb70 [ 683.642176][T13153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.642195][T13153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 683.642227][T13153] ___sys_sendmsg+0x190/0x1e0 [ 683.642249][T13153] ? __pfx____sys_sendmsg+0x10/0x10 [ 683.642300][T13153] __sys_sendmsg+0x170/0x220 [ 683.642326][T13153] ? __pfx___sys_sendmsg+0x10/0x10 [ 683.642373][T13153] do_syscall_64+0x106/0xf80 [ 683.642390][T13153] ? clear_bhb_loop+0x40/0x90 [ 683.642412][T13153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.642431][T13153] RIP: 0033:0x7f9174d9c819 [ 683.642446][T13153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.642463][T13153] RSP: 002b:00007f9175bc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 683.642480][T13153] RAX: ffffffffffffffda RBX: 00007f9175015fa0 RCX: 00007f9174d9c819 [ 683.642492][T13153] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 683.642502][T13153] RBP: 00007f9175bc4090 R08: 0000000000000000 R09: 0000000000000000 [ 683.642512][T13153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.642521][T13153] R13: 00007f9175016038 R14: 00007f9175015fa0 R15: 00007fffe321a458 [ 683.642546][T13153] [ 684.141007][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.152212][ T5814] usb 4-1: config 0 descriptor?? [ 684.161004][ T5814] usb 4-1: can't set config #0, error -71 [ 684.174849][ T5814] usb 4-1: USB disconnect, device number 42 [ 685.191275][T13168] FAULT_INJECTION: forcing a failure. [ 685.191275][T13168] name failslab, interval 1, probability 0, space 0, times 0 [ 685.204295][T13168] CPU: 1 UID: 0 PID: 13168 Comm: syz.3.1800 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.204318][T13168] Tainted: [L]=SOFTLOCKUP [ 685.204322][T13168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 685.204329][T13168] Call Trace: [ 685.204334][T13168] [ 685.204338][T13168] dump_stack_lvl+0x100/0x190 [ 685.204361][T13168] should_fail_ex.cold+0x5/0xa [ 685.204377][T13168] should_failslab+0xc2/0x120 [ 685.204389][T13168] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 685.204406][T13168] ? __inet_hash_connect+0x686/0x1e40 [ 685.204422][T13168] ? __inet_hash_connect+0x5ae/0x1e40 [ 685.204440][T13168] __inet_hash_connect+0x686/0x1e40 [ 685.204460][T13168] ? __pfx___inet6_check_established+0x10/0x10 [ 685.204480][T13168] ? __pfx___inet_hash_connect+0x10/0x10 [ 685.204498][T13168] ? inet6_hash_connect+0xe2/0x180 [ 685.204517][T13168] tcp_v6_connect+0x1562/0x23d0 [ 685.204528][T13168] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 685.204541][T13168] ? tcp_sendmsg_locked+0x2791/0x45e0 [ 685.204557][T13168] ? __pfx_tcp_v6_connect+0x10/0x10 [ 685.204574][T13168] __inet_stream_connect+0x208/0xfa0 [ 685.204591][T13168] ? __pfx___inet_stream_connect+0x10/0x10 [ 685.204610][T13168] tcp_sendmsg_fastopen+0x3ed/0x750 [ 685.204627][T13168] tcp_sendmsg_locked+0x2791/0x45e0 [ 685.204643][T13168] ? __lock_acquire+0x4a5/0x2630 [ 685.204655][T13168] ? __lock_acquire+0x4a5/0x2630 [ 685.204669][T13168] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 685.204683][T13168] ? do_raw_spin_lock+0x128/0x260 [ 685.204697][T13168] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 685.204714][T13168] ? __local_bh_enable_ip+0x9e/0x120 [ 685.204731][T13168] tcp_sendmsg+0x2e/0x50 [ 685.204743][T13168] ? __pfx_tcp_sendmsg+0x10/0x10 [ 685.204755][T13168] inet6_sendmsg+0xb9/0x140 [ 685.204773][T13168] __sys_sendto+0x383/0x4b0 [ 685.204790][T13168] ? __pfx___sys_sendto+0x10/0x10 [ 685.204816][T13168] ? ksys_write+0x1ac/0x250 [ 685.204826][T13168] ? __pfx_ksys_write+0x10/0x10 [ 685.204839][T13168] __x64_sys_sendto+0xe0/0x1c0 [ 685.204854][T13168] ? do_syscall_64+0x95/0xf80 [ 685.204865][T13168] ? lockdep_hardirqs_on+0x78/0x100 [ 685.204883][T13168] do_syscall_64+0x106/0xf80 [ 685.204893][T13168] ? clear_bhb_loop+0x40/0x90 [ 685.204907][T13168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.204919][T13168] RIP: 0033:0x7f47aad9c819 [ 685.204929][T13168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.204940][T13168] RSP: 002b:00007f47abcc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 685.204951][T13168] RAX: ffffffffffffffda RBX: 00007f47ab015fa0 RCX: 00007f47aad9c819 [ 685.204959][T13168] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 685.204965][T13168] RBP: 00007f47abcc1090 R08: 00002000000001c0 R09: 000000000000001c [ 685.204972][T13168] R10: 00000000200080c0 R11: 0000000000000246 R12: 0000000000000001 [ 685.204979][T13168] R13: 00007f47ab016038 R14: 00007f47ab015fa0 R15: 00007ffd5b352658 [ 685.204993][T13168] [ 685.881041][T13175] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 685.984765][T13178] libceph: resolve '0' (ret=-3): failed [ 687.388789][T13192] binder: 13191:13192 ioctl c018620c 200000000180 returned -22 [ 688.092573][T13201] ipvlan2: entered allmulticast mode [ 688.097915][T13201] batadv_slave_1: entered allmulticast mode [ 688.108014][T13201] batman_adv: batadv0: Adding interface: ipvlan2 [ 688.138657][T13201] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.172494][T13201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.182995][T13201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.192940][T13201] batman_adv: batadv0: Interface activated: ipvlan2 [ 690.391701][T13229] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 691.127315][T13246] SET target dimension over the limit! [ 692.121180][ T5814] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 692.257514][T13262] FAULT_INJECTION: forcing a failure. [ 692.257514][T13262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.289953][T13262] CPU: 0 UID: 0 PID: 13262 Comm: syz.5.1823 Tainted: G L syzkaller #0 PREEMPT(full) [ 692.289974][T13262] Tainted: [L]=SOFTLOCKUP [ 692.289978][T13262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 692.289985][T13262] Call Trace: [ 692.289989][T13262] [ 692.289993][T13262] dump_stack_lvl+0x100/0x190 [ 692.290017][T13262] should_fail_ex.cold+0x5/0xa [ 692.290034][T13262] _copy_from_iter+0x1f4/0x1690 [ 692.290049][T13262] ? __asan_memset+0x23/0x50 [ 692.290066][T13262] ? __pfx__copy_from_iter+0x10/0x10 [ 692.290079][T13262] ? __pfx___alloc_skb+0x10/0x10 [ 692.290101][T13262] netlink_sendmsg+0x808/0xda0 [ 692.290115][T13262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.290126][T13262] ? __might_fault+0x10/0x140 [ 692.290147][T13262] ____sys_sendmsg+0x9e1/0xb70 [ 692.290159][T13262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.290171][T13262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 692.290189][T13262] ___sys_sendmsg+0x190/0x1e0 [ 692.290204][T13262] ? __pfx____sys_sendmsg+0x10/0x10 [ 692.290233][T13262] __sys_sendmsg+0x170/0x220 [ 692.290250][T13262] ? __pfx___sys_sendmsg+0x10/0x10 [ 692.290279][T13262] do_syscall_64+0x106/0xf80 [ 692.290290][T13262] ? clear_bhb_loop+0x40/0x90 [ 692.290304][T13262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.290316][T13262] RIP: 0033:0x7f9174d9c819 [ 692.290326][T13262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.290337][T13262] RSP: 002b:00007f9175bc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 692.290348][T13262] RAX: ffffffffffffffda RBX: 00007f9175015fa0 RCX: 00007f9174d9c819 [ 692.290356][T13262] RDX: 0000000000008054 RSI: 0000200000000580 RDI: 0000000000000005 [ 692.290362][T13262] RBP: 00007f9175bc4090 R08: 0000000000000000 R09: 0000000000000000 [ 692.290369][T13262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.290375][T13262] R13: 00007f9175016038 R14: 00007f9175015fa0 R15: 00007fffe321a458 [ 692.290389][T13262] [ 692.555290][ T5814] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 692.566490][ T5814] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 692.577879][ T5814] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 692.586993][ T5814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.605252][T13254] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 692.650874][T13254] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 692.694828][ T5814] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 693.485979][ T5866] usb 7-1: USB disconnect, device number 42 [ 695.743108][T13289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1831'. [ 695.768794][T13289] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1831'. [ 695.785431][T13289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1831'. [ 696.600118][ T30] audit: type=1804 audit(1776071367.190:665): pid=13309 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1836" name="bus" dev="ramfs" ino=48359 res=1 errno=0 [ 696.641707][ T30] audit: type=1804 audit(1776071367.190:666): pid=13309 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1836" name="bus" dev="ramfs" ino=48359 res=1 errno=0 [ 700.761046][T13354] netlink: 'syz.3.1845': attribute type 1 has an invalid length. [ 700.806545][T13354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.330542][T13356] bond0: (slave geneve2): making interface the new active one [ 701.568860][T13356] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 702.490894][ T5814] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 702.711031][ T5866] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 703.874702][ T5866] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.885073][ T5866] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 703.896761][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 703.908005][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 704.097032][ T5866] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 704.123712][ T5866] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 704.138417][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 704.158810][ T5866] usb 7-1: Product: syz [ 704.173033][ T5866] usb 7-1: Manufacturer: syz [ 704.186668][ T5866] usb 7-1: SerialNumber: syz [ 704.224482][ T5866] usb 7-1: config 0 descriptor?? [ 704.714911][ T5814] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 704.763051][ T5866] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 704.910567][ T5866] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 705.065104][ T5814] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 705.153979][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.195593][ T5814] usb 4-1: Product: syz [ 705.215676][ T5814] usb 4-1: Manufacturer: syz [ 705.233831][ T5814] usb 4-1: SerialNumber: syz [ 705.275346][ T5814] usb 4-1: config 0 descriptor?? [ 705.490696][ T5814] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 705.787994][T13404] SELinux: Context system_u:object_r:ldconfig_exec_t:s0 is not valid (left unmapped). [ 705.812877][ T30] audit: type=1400 audit(1776071376.380:667): avc: denied { relabelfrom } for pid=13399 comm="syz.0.1857" name="UNIX" dev="sockfs" ino=48701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 706.521318][ T30] audit: type=1400 audit(1776071376.390:668): avc: denied { relabelto } for pid=13399 comm="syz.0.1857" name="UNIX" dev="sockfs" ino=48701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="system_u:object_r:ldconfig_exec_t:s0" [ 706.877288][ T5866] usb 7-1: USB disconnect, device number 43 [ 707.640866][ T6258] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 707.769645][T13419] random: crng reseeded on system resumption [ 707.850909][ T6258] usb 7-1: Using ep0 maxpacket: 16 [ 708.008989][ T5814] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 708.028221][ T5814] usb 4-1: USB disconnect, device number 44 [ 708.029946][ T6258] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 708.089666][ T6258] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.120240][ T6258] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.148017][ T6258] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 708.168593][ T6258] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 708.190562][ T6258] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.327206][ T6258] usb 7-1: config 0 descriptor?? [ 709.734301][ T6258] input: HID 0458:5013 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5013.0014/input/input88 [ 710.049616][ T6258] input: HID 0458:5013 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5013.0014/input/input89 [ 711.013712][ T6258] kye 0003:0458:5013.0014: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.6-1/input0 [ 712.311710][ T6258] usb 7-1: USB disconnect, device number 44 [ 712.601744][ T30] audit: type=1400 audit(1776071383.190:669): avc: denied { mount } for pid=13473 comm="syz.6.1877" name="/" dev="hugetlbfs" ino=48923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 712.786896][T13474] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1877'. [ 712.826946][ T30] audit: type=1400 audit(1776071383.400:670): avc: denied { read write } for pid=5817 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 713.199584][ T30] audit: type=1400 audit(1776071383.400:671): avc: denied { open } for pid=5817 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 713.319412][ T30] audit: type=1400 audit(1776071383.410:672): avc: denied { ioctl } for pid=5817 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 713.570892][ T30] audit: type=1400 audit(1776071383.830:673): avc: denied { unmount } for pid=7874 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 713.700787][ T30] audit: type=1400 audit(1776071384.270:674): avc: denied { ioctl } for pid=13486 comm="syz.0.1881" path="socket:[48995]" dev="sockfs" ino=48995 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 715.497505][T13512] netlink: 'syz.0.1885': attribute type 1 has an invalid length. [ 715.505686][T13512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.601036][ T6258] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 715.856285][ T6258] usb 7-1: Using ep0 maxpacket: 32 [ 715.893540][ T6258] usb 7-1: unable to get BOS descriptor or descriptor too short [ 715.961578][ T6258] usb 7-1: config 0 has no interfaces? [ 715.982617][ T6258] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 716.005149][ T6258] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.053793][ T6258] usb 7-1: Product: syz [ 716.069049][ T6258] usb 7-1: Manufacturer: syz [ 716.079456][ T6258] usb 7-1: SerialNumber: syz [ 716.092110][ T6258] usb 7-1: config 0 descriptor?? [ 716.477181][ T5814] usb 7-1: USB disconnect, device number 45 [ 717.161219][ T6258] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 717.360760][ T6258] usb 7-1: too many configurations: 70, using maximum allowed: 8 [ 717.405042][ T6258] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 717.541902][ T6258] usb 7-1: can't read configurations, error -61 [ 717.681009][ T6258] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 717.871551][ T6258] usb 7-1: too many configurations: 70, using maximum allowed: 8 [ 718.173313][ T6258] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 718.295362][ T6258] usb 7-1: can't read configurations, error -61 [ 718.393957][ T6258] usb usb7-port1: attempt power cycle [ 719.010939][ T6258] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 719.297211][ T6258] usb 7-1: device descriptor read/8, error -71 [ 719.628518][ T5873] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 719.819634][ T30] audit: type=1804 audit(1776071390.410:675): pid=13550 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1897" name="bus" dev="ramfs" ino=48003 res=1 errno=0 [ 719.931231][T13551] macsec1: entered promiscuous mode [ 719.936495][T13551] bridge0: entered promiscuous mode [ 720.260785][ T5873] usb 6-1: Using ep0 maxpacket: 8 [ 720.267337][ T5873] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 720.276544][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.333220][ T30] audit: type=1804 audit(1776071390.930:676): pid=13552 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1897" name="bus" dev="ramfs" ino=48003 res=1 errno=0 [ 720.371787][ T5873] usb 6-1: config 0 descriptor?? [ 720.409722][ T5873] gm12u320 6-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 720.452048][ T5873] gm12u320 6-1:0.0: probe with driver gm12u320 failed with error -5 [ 721.040563][ T5873] usb-storage 6-1:0.0: USB Mass Storage device detected [ 721.134840][ T5873] usb-storage 6-1:0.0: device ignored [ 721.380076][ T30] audit: type=1400 audit(1776071391.880:677): avc: denied { append } for pid=13565 comm="syz.4.1899" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 721.752835][ T5873] usb 6-1: USB disconnect, device number 40 [ 723.839874][T13598] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1907'. [ 723.867677][T13601] SET target dimension over the limit! [ 724.041598][T13595] XFS (nullb0): Invalid superblock magic number [ 724.152253][ T5873] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 724.380987][ T5814] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 724.600954][ T5814] usb 7-1: device descriptor read/64, error -71 [ 724.651195][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 724.702597][ T5873] usb 5-1: config 0 has an invalid descriptor of length 74, skipping remainder of the config [ 724.791167][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 724.831690][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 724.872119][ T5873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 724.904928][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 724.931792][ T5814] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 725.006650][ T5873] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 725.026169][ T5873] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 725.284637][ T5814] usb 7-1: device descriptor read/64, error -71 [ 725.311005][ T5873] usb 5-1: Manufacturer: syz [ 726.532115][ T5814] usb usb7-port1: attempt power cycle [ 726.857569][ T5873] usb 5-1: config 0 descriptor?? [ 726.951449][ T5873] usb 5-1: can't set config #0, error -71 [ 726.961911][ T5873] usb 5-1: USB disconnect, device number 46 [ 727.462285][ T5873] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 727.642365][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 727.650302][ T5873] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 727.679171][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.720100][ T5873] usb 5-1: config 0 descriptor?? [ 727.745308][ T5873] gm12u320 5-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 727.768233][ T5873] gm12u320 5-1:0.0: probe with driver gm12u320 failed with error -5 [ 727.788956][ T5873] usb-storage 5-1:0.0: USB Mass Storage device detected [ 727.813565][ T5873] usb-storage 5-1:0.0: device ignored [ 728.219437][T13650] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1917'. [ 728.684090][T13658] SET target dimension over the limit! [ 728.831199][T13660] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1920'. [ 729.474490][T13670] netlink: 1052 bytes leftover after parsing attributes in process `syz.0.1922'. [ 729.783087][T13675] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1923'. [ 729.841753][ T30] audit: type=1400 audit(1776071400.400:678): avc: denied { create } for pid=13672 comm="syz.0.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 730.118701][ T30] audit: type=1400 audit(1776071400.410:679): avc: denied { bind } for pid=13672 comm="syz.0.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 730.473834][ T6258] usb 5-1: USB disconnect, device number 47 [ 730.790996][ T5873] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 730.850235][ T30] audit: type=1400 audit(1776071401.440:680): avc: denied { getopt } for pid=13691 comm="syz.3.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 730.972467][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 731.511702][ T5873] usb 1-1: config 0 has no interfaces? [ 731.765679][ T5873] usb 1-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice=ab.c3 [ 731.993023][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.096580][ T5873] usb 1-1: Product: syz [ 732.164187][ T5873] usb 1-1: Manufacturer: syz [ 732.221259][ T5873] usb 1-1: SerialNumber: syz [ 732.737116][ T5873] usb 1-1: config 0 descriptor?? [ 732.761954][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1929'. [ 732.815144][T13702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'. [ 732.860792][T13702] netlink: 'syz.4.1929': attribute type 15 has an invalid length. [ 732.987934][ T6258] usb 1-1: USB disconnect, device number 40 [ 733.374980][ T5814] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 733.552586][ T5814] usb 6-1: Using ep0 maxpacket: 8 [ 733.571492][ T5814] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.589930][ T5814] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 733.634260][ T5814] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 733.925047][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 733.950672][ T5814] usb 6-1: SerialNumber: syz [ 733.979158][ T5814] usb 6-1: config 0 descriptor?? [ 734.007043][ T5814] hso 6-1:0.0: Can't find BULK IN endpoint [ 734.200386][T13738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 734.207627][T13738] IPv6: NLM_F_CREATE should be set when creating new route [ 734.214943][T13738] IPv6: NLM_F_CREATE should be set when creating new route [ 734.222186][T13738] IPv6: NLM_F_CREATE should be set when creating new route [ 734.256023][T13712] comedi comedi3: comedi_config --init_data is deprecated [ 734.314709][ T6258] usb 6-1: USB disconnect, device number 41 [ 734.821122][ T5814] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 735.017404][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.075314][ T5814] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 735.165171][ T5814] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 736.237008][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.248897][ T5814] usb 4-1: config 0 descriptor?? [ 736.750894][ T5814] kye 0003:0458:0138.0015: unknown main item tag 0x0 [ 736.800564][ T5814] kye 0003:0458:0138.0015: unknown main item tag 0x0 [ 736.850572][ T5814] kye 0003:0458:0138.0015: unknown main item tag 0x0 [ 736.862101][ T5814] kye 0003:0458:0138.0015: unknown main item tag 0x0 [ 736.862161][ T5814] kye 0003:0458:0138.0015: unknown main item tag 0x0 [ 736.862251][ T5814] kye 0003:0458:0138.0015: unknown main item tag 0x0 [ 736.862341][ T5814] kye 0003:0458:0138.0015: unknown main item tag 0x0 [ 736.862431][ T5814] kye 0003:0458:0138.0015: unknown main item tag 0x0 [ 736.862520][ T5814] kye 0003:0458:0138.0015: unknown main item tag 0x0 [ 736.862609][ T5814] kye 0003:0458:0138.0015: unknown main item tag 0x0 [ 736.990348][ T5814] kye 0003:0458:0138.0015: hidraw0: USB HID v7f.fd Device [HID 0458:0138] on usb-dummy_hcd.3-1/input0 [ 737.079888][ T5814] usb 4-1: USB disconnect, device number 45 [ 737.824477][T13765] fido_id[13765]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 738.279908][ T30] audit: type=1400 audit(1776071408.790:681): avc: denied { create } for pid=13769 comm="syz.3.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 738.455122][ T30] audit: type=1400 audit(1776071409.050:682): avc: denied { create } for pid=13772 comm="syz.5.1942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 738.544428][T13776] random: crng reseeded on system resumption [ 739.504062][ T30] audit: type=1400 audit(1776071410.100:683): avc: denied { read } for pid=13769 comm="syz.3.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 739.642821][T13789] FAULT_INJECTION: forcing a failure. [ 739.642821][T13789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.664078][T13789] CPU: 1 UID: 0 PID: 13789 Comm: syz.0.1949 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.664103][T13789] Tainted: [L]=SOFTLOCKUP [ 739.664107][T13789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 739.664115][T13789] Call Trace: [ 739.664119][T13789] [ 739.664125][T13789] dump_stack_lvl+0x100/0x190 [ 739.664153][T13789] should_fail_ex.cold+0x5/0xa [ 739.664172][T13789] _copy_to_user+0x32/0xd0 [ 739.664189][T13789] simple_read_from_buffer+0xcb/0x170 [ 739.664204][T13789] proc_fail_nth_read+0x1af/0x230 [ 739.664226][T13789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 739.664244][T13789] ? rw_verify_area+0xce/0x6d0 [ 739.664262][T13789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 739.664279][T13789] vfs_read+0x1e4/0xb30 [ 739.664292][T13789] ? __pfx_vfs_read+0x10/0x10 [ 739.664302][T13789] ? __fget_files+0x215/0x3d0 [ 739.664319][T13789] ? __fget_files+0x21f/0x3d0 [ 739.664335][T13789] ksys_read+0x12a/0x250 [ 739.664346][T13789] ? __pfx_ksys_read+0x10/0x10 [ 739.664360][T13789] do_syscall_64+0x106/0xf80 [ 739.664373][T13789] ? clear_bhb_loop+0x40/0x90 [ 739.664389][T13789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.664401][T13789] RIP: 0033:0x7f0c43f5d04e [ 739.664412][T13789] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 739.664424][T13789] RSP: 002b:00007f0c44f3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 739.664437][T13789] RAX: ffffffffffffffda RBX: 00007f0c44f3f6c0 RCX: 00007f0c43f5d04e [ 739.664444][T13789] RDX: 000000000000000f RSI: 00007f0c44f3f0a0 RDI: 0000000000000004 [ 739.664451][T13789] RBP: 00007f0c44f3f090 R08: 0000000000000000 R09: 0000000000000000 [ 739.664458][T13789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.664464][T13789] R13: 00007f0c44216038 R14: 00007f0c44215fa0 R15: 00007ffea6ef2248 [ 739.664479][T13789] [ 740.052818][ T24] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 741.631735][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 741.654548][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.665381][ T24] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 741.678922][ T24] usb 6-1: config 0 has no interface number 0 [ 741.685605][ T24] usb 6-1: too many endpoints for config 0 interface 122 altsetting 240: 48, using maximum allowed: 30 [ 741.696886][ T24] usb 6-1: config 0 interface 122 altsetting 240 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 741.710314][ T24] usb 6-1: config 0 interface 122 has no altsetting 0 [ 741.799982][ T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 741.809543][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.817612][ T24] usb 6-1: Product: syz [ 741.840799][ T24] usb 6-1: Manufacturer: syz [ 741.851019][ T24] usb 6-1: SerialNumber: syz [ 741.858712][ T24] usb 6-1: config 0 descriptor?? [ 742.374679][T13813] syzkaller1: entered promiscuous mode [ 742.380323][T13813] syzkaller1: entered allmulticast mode [ 742.801324][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 742.811431][ T24] gspca_sonixj: reg_w1 err -71 [ 742.816272][ T24] sonixj 6-1:0.122: probe with driver sonixj failed with error -71 [ 742.832499][ T24] usb 6-1: USB disconnect, device number 42 [ 743.385530][T13823] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1958'. [ 746.027330][ T30] audit: type=1400 audit(1776071416.260:684): avc: denied { getopt } for pid=13848 comm="syz.0.1965" lport=32971 faddr=255.255.255.254 fport=65533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 749.133225][ T30] audit: type=1400 audit(1776071419.730:685): avc: denied { mounton } for pid=13892 comm="syz.6.1972" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 749.166806][T13895] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 749.306013][T13895] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 749.435988][T13898] futex_wake_op: syz.6.1973 tries to shift op by 144; fix this program [ 752.749750][T13930] FAULT_INJECTION: forcing a failure. [ 752.749750][T13930] name failslab, interval 1, probability 0, space 0, times 0 [ 752.762861][T13930] CPU: 0 UID: 0 PID: 13930 Comm: syz.5.1981 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.762880][T13930] Tainted: [L]=SOFTLOCKUP [ 752.762884][T13930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 752.762891][T13930] Call Trace: [ 752.762896][T13930] [ 752.762901][T13930] dump_stack_lvl+0x100/0x190 [ 752.762925][T13930] should_fail_ex.cold+0x5/0xa [ 752.762941][T13930] should_failslab+0xc2/0x120 [ 752.762953][T13930] __kmalloc_cache_noprof+0x7a/0x6f0 [ 752.762969][T13930] ? llc_sap_open+0x120/0x3b0 [ 752.762986][T13930] ? rcu_is_watching+0x12/0xc0 [ 752.763004][T13930] llc_sap_open+0x120/0x3b0 [ 752.763020][T13930] ? llc_ui_autoport+0xf6/0x180 [ 752.763042][T13930] llc_ui_autobind.isra.0+0x2ae/0x510 [ 752.763062][T13930] llc_ui_sendmsg+0xad8/0x1540 [ 752.763079][T13930] ? __pfx_sock_has_perm+0x10/0x10 [ 752.763096][T13930] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 752.763117][T13930] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 752.763138][T13930] ? ____sys_sendmsg+0x385/0xb70 [ 752.763154][T13930] ____sys_sendmsg+0x9e1/0xb70 [ 752.763166][T13930] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 752.763183][T13930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 752.763198][T13930] ? __schedule+0x1000/0x6120 [ 752.763215][T13930] ? rcu_is_watching+0x12/0xc0 [ 752.763231][T13930] ___sys_sendmsg+0x190/0x1e0 [ 752.763246][T13930] ? __pfx____sys_sendmsg+0x10/0x10 [ 752.763264][T13930] ? irqentry_exit+0x180/0x670 [ 752.763274][T13930] ? lockdep_hardirqs_on+0x78/0x100 [ 752.763298][T13930] ? __sys_sendmmsg+0x107/0x430 [ 752.763315][T13930] ? __sys_sendmmsg+0x115/0x430 [ 752.763332][T13930] __sys_sendmmsg+0x205/0x430 [ 752.763351][T13930] ? __pfx___sys_sendmmsg+0x10/0x10 [ 752.763383][T13930] __x64_sys_sendmmsg+0x9c/0x100 [ 752.763401][T13930] do_syscall_64+0x106/0xf80 [ 752.763411][T13930] ? clear_bhb_loop+0x40/0x90 [ 752.763425][T13930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.763437][T13930] RIP: 0033:0x7f9174d9c819 [ 752.763447][T13930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.763458][T13930] RSP: 002b:00007f9175ba3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 752.763469][T13930] RAX: ffffffffffffffda RBX: 00007f9175016090 RCX: 00007f9174d9c819 [ 752.763476][T13930] RDX: 1e1730a30afb6559 RSI: 0000200000000c40 RDI: 0000000000000007 [ 752.763483][T13930] RBP: 00007f9175ba3090 R08: 0000000000000000 R09: 0000000000000000 [ 752.763489][T13930] R10: 0000000000008014 R11: 0000000000000246 R12: 0000000000000001 [ 752.763496][T13930] R13: 00007f9175016128 R14: 00007f9175016090 R15: 00007fffe321a458 [ 752.763510][T13930] [ 753.392648][T13933] FAULT_INJECTION: forcing a failure. [ 753.392648][T13933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.434079][T13933] CPU: 1 UID: 0 PID: 13933 Comm: syz.0.1985 Tainted: G L syzkaller #0 PREEMPT(full) [ 753.434109][T13933] Tainted: [L]=SOFTLOCKUP [ 753.434116][T13933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 753.434126][T13933] Call Trace: [ 753.434132][T13933] [ 753.434140][T13933] dump_stack_lvl+0x100/0x190 [ 753.434173][T13933] should_fail_ex.cold+0x5/0xa [ 753.434197][T13933] _copy_from_iter+0x1f4/0x1690 [ 753.434219][T13933] ? __lock_acquire+0x4a5/0x2630 [ 753.434240][T13933] ? __pfx__copy_from_iter+0x10/0x10 [ 753.434258][T13933] ? __lock_acquire+0x4a5/0x2630 [ 753.434286][T13933] copy_page_from_iter+0xde/0x180 [ 753.434310][T13933] tun_build_skb.constprop.0+0x2ea/0x15d0 [ 753.434338][T13933] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 753.434356][T13933] ? unwind_get_return_address+0x59/0xa0 [ 753.434379][T13933] ? arch_stack_walk+0xa6/0xf0 [ 753.434415][T13933] ? _kstrtoull+0x13c/0x1f0 [ 753.434438][T13933] ? __pfx__kstrtoull+0x10/0x10 [ 753.434465][T13933] tun_get_user+0x16d0/0x3e10 [ 753.434495][T13933] ? __pfx_tun_get_user+0x10/0x10 [ 753.434515][T13933] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 753.434545][T13933] ? find_held_lock+0x2b/0x80 [ 753.434567][T13933] ? tun_get+0x191/0x370 [ 753.434582][T13933] ? tun_get+0x191/0x370 [ 753.434605][T13933] tun_chr_write_iter+0xdc/0x200 [ 753.434626][T13933] vfs_write+0x6ac/0x1070 [ 753.434645][T13933] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 753.434666][T13933] ? __pfx_vfs_write+0x10/0x10 [ 753.434681][T13933] ? find_held_lock+0x2b/0x80 [ 753.434720][T13933] ksys_write+0x12a/0x250 [ 753.434737][T13933] ? __pfx_ksys_write+0x10/0x10 [ 753.434761][T13933] do_syscall_64+0x106/0xf80 [ 753.434786][T13933] ? clear_bhb_loop+0x40/0x90 [ 753.434809][T13933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.434828][T13933] RIP: 0033:0x7f0c43f5d04e [ 753.434843][T13933] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 753.434859][T13933] RSP: 002b:00007f0c44f3efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 753.434876][T13933] RAX: ffffffffffffffda RBX: 00007f0c44f3f6c0 RCX: 00007f0c43f5d04e [ 753.434888][T13933] RDX: 000000000000009e RSI: 00002000000004c0 RDI: 00000000000000c8 [ 753.434898][T13933] RBP: 00007f0c44f3f090 R08: 0000000000000000 R09: 0000000000000000 [ 753.434908][T13933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.434918][T13933] R13: 00007f0c44216038 R14: 00007f0c44215fa0 R15: 00007ffea6ef2248 [ 753.434943][T13933] [ 754.713893][ T6258] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 754.893756][ T6258] usb 5-1: Using ep0 maxpacket: 16 [ 754.931548][ T6258] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 755.006422][ T6258] usb 5-1: config 0 interface 0 has no altsetting 0 [ 755.054078][ T6258] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 755.067395][ T6258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.080857][ T6258] usb 5-1: Product: syz [ 755.085090][ T6258] usb 5-1: Manufacturer: syz [ 755.136533][ T6258] usb 5-1: SerialNumber: syz [ 755.138814][ T6258] usb 5-1: config 0 descriptor?? [ 755.255279][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 755.394658][T13947] macsec1: entered promiscuous mode [ 755.399885][T13947] bridge0: entered promiscuous mode [ 755.415956][ T6258] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input90 [ 755.433774][ T6258] imon:send_packet: packet tx failed (-71) [ 755.609035][ T6258] imon 5-1:0.0: panel buttons/knobs setup failed [ 756.241973][ T6258] rc_core: IR keymap rc-imon-pad not found [ 756.262797][ T6258] Registered IR keymap rc-empty [ 756.280213][ T6258] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 756.420905][ T6258] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 756.441655][T13960] syzkaller0: entered promiscuous mode [ 756.460779][ T6258] imon:send_packet: packet tx failed (-71) [ 756.460941][T13960] syzkaller0: entered allmulticast mode [ 756.481032][ T6258] imon 5-1:0.0: remote input dev register failed [ 756.497779][ T6258] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 756.708417][ T6258] imon 5-1:0.0: unable to initialize intf0, err 0 [ 756.717190][ T6258] imon:imon_probe: failed to initialize context! [ 756.860057][ T6258] imon 5-1:0.0: unable to register, err -19 [ 757.332267][ T6258] usb 5-1: USB disconnect, device number 48 [ 758.040963][ T10] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 759.610991][ T10] usb 1-1: device descriptor read/all, error -71 [ 759.779929][ T5814] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 759.985184][ T5814] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 759.994527][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.272233][ T5814] usb 5-1: Product: syz [ 760.413230][ T5814] usb 5-1: Manufacturer: syz [ 760.572562][ T5814] usb 5-1: SerialNumber: syz [ 760.601878][ T5814] usb 5-1: config 0 descriptor?? [ 760.816014][ T5814] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 760.925478][T14008] fuse: Unknown parameter '00000000000000000000' [ 762.861360][ T5814] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 763.848290][ T24] usb 5-1: USB disconnect, device number 49 [ 764.040298][T14023] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2008'. [ 764.061009][ T30] audit: type=1400 audit(1776071434.630:686): avc: denied { ioctl } for pid=14022 comm="syz.4.2008" path="socket:[51384]" dev="sockfs" ino=51384 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 764.066824][T14023] nbd: must specify at least one socket [ 766.000880][ T5873] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 766.181333][ T5873] usb 5-1: too many configurations: 115, using maximum allowed: 8 [ 766.210234][ T5873] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 766.228107][ T5873] usb 5-1: can't read configurations, error -61 [ 766.596704][ T5873] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 766.773954][ T5873] usb 5-1: too many configurations: 115, using maximum allowed: 8 [ 766.808219][ T5873] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 766.826455][ T5873] usb 5-1: can't read configurations, error -61 [ 767.458465][ T5873] usb usb5-port1: attempt power cycle [ 767.482272][T14069] fuse: Unknown parameter '00000000000000000000' [ 767.500846][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 767.651141][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 767.669315][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.787310][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 767.821099][ T5873] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 767.859424][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 767.872052][ T5873] usb 5-1: too many configurations: 115, using maximum allowed: 8 [ 767.908602][ T5873] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 767.924021][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.941639][ T5873] usb 5-1: can't read configurations, error -61 [ 767.987971][ T24] usb 4-1: config 0 descriptor?? [ 768.033284][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 768.100891][ T5873] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 768.145540][ T5873] usb 5-1: too many configurations: 115, using maximum allowed: 8 [ 768.161318][ T5873] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 768.172027][ T5873] usb 5-1: can't read configurations, error -61 [ 768.185293][ T5873] usb usb5-port1: unable to enumerate USB device [ 768.572931][ T24] usb 4-1: USB disconnect, device number 46 [ 769.264536][ T30] audit: type=1804 audit(1776071439.790:687): pid=14093 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2020" name="bus" dev="ramfs" ino=51475 res=1 errno=0 [ 769.505089][ T30] audit: type=1804 audit(1776071439.790:688): pid=14093 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.2020" name="bus" dev="ramfs" ino=51475 res=1 errno=0 [ 770.323124][T14106] SET target dimension over the limit! [ 771.750833][ T5873] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 771.904414][ T5873] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 771.923730][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.984384][ T5873] usb 1-1: Product: syz [ 771.988604][ T5873] usb 1-1: Manufacturer: syz [ 772.002066][ T5873] usb 1-1: SerialNumber: syz [ 772.023268][ T5873] usb 1-1: config 0 descriptor?? [ 772.155770][T14121] random: crng reseeded on system resumption [ 772.757332][T14128] FAULT_INJECTION: forcing a failure. [ 772.757332][T14128] name failslab, interval 1, probability 0, space 0, times 0 [ 772.781068][ T5873] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 772.832556][T14128] CPU: 0 UID: 0 PID: 14128 Comm: syz.3.2025 Tainted: G L syzkaller #0 PREEMPT(full) [ 772.832588][T14128] Tainted: [L]=SOFTLOCKUP [ 772.832595][T14128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 772.832606][T14128] Call Trace: [ 772.832613][T14128] [ 772.832621][T14128] dump_stack_lvl+0x100/0x190 [ 772.832658][T14128] should_fail_ex.cold+0x5/0xa [ 772.832687][T14128] ? tomoyo_realpath_from_path+0xb6/0x690 [ 772.832715][T14128] should_failslab+0xc2/0x120 [ 772.832734][T14128] __kmalloc_noprof+0xe0/0x850 [ 772.832766][T14128] tomoyo_realpath_from_path+0xb6/0x690 [ 772.832801][T14128] tomoyo_check_open_permission+0x2af/0x3c0 [ 772.832827][T14128] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 772.832853][T14128] ? register_lock_class+0x40/0x560 [ 772.832894][T14128] ? lock_acquire+0x1cf/0x380 [ 772.832913][T14128] ? find_held_lock+0x2b/0x80 [ 772.832942][T14128] tomoyo_file_open+0x6b/0x90 [ 772.832963][T14128] security_file_open+0xb5/0x1e0 [ 772.832979][T14128] do_dentry_open+0x5aa/0x1660 [ 772.833004][T14128] vfs_open+0x82/0x3f0 [ 772.833028][T14128] path_openat+0x208c/0x31a0 [ 772.833052][T14128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.833072][T14128] ? __pfx_path_openat+0x10/0x10 [ 772.833100][T14128] do_file_open+0x20e/0x430 [ 772.833122][T14128] ? __pfx_do_file_open+0x10/0x10 [ 772.833162][T14128] ? _raw_spin_unlock+0x28/0x50 [ 772.833188][T14128] ? alloc_fd+0x476/0x790 [ 772.833216][T14128] do_sys_openat2+0x10d/0x1e0 [ 772.833240][T14128] ? __pfx_do_sys_openat2+0x10/0x10 [ 772.833266][T14128] ? __fget_files+0x21f/0x3d0 [ 772.833291][T14128] __x64_sys_open+0xfe/0x1d0 [ 772.833315][T14128] ? __pfx___x64_sys_open+0x10/0x10 [ 772.833337][T14128] ? ksys_write+0x1ac/0x250 [ 772.833363][T14128] do_syscall_64+0x106/0xf80 [ 772.833381][T14128] ? clear_bhb_loop+0x40/0x90 [ 772.833403][T14128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.833422][T14128] RIP: 0033:0x7f47aad9c819 [ 772.833437][T14128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.833455][T14128] RSP: 002b:00007f47abca0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 772.833473][T14128] RAX: ffffffffffffffda RBX: 00007f47ab016090 RCX: 00007f47aad9c819 [ 772.833485][T14128] RDX: 0000000000000000 RSI: 0000000000109281 RDI: 00002000000000c0 [ 772.833496][T14128] RBP: 00007f47abca0090 R08: 0000000000000000 R09: 0000000000000000 [ 772.833507][T14128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.833518][T14128] R13: 00007f47ab016128 R14: 00007f47ab016090 R15: 00007ffd5b352658 [ 772.833544][T14128] [ 772.833571][T14128] ERROR: Out of memory at tomoyo_realpath_from_path. [ 773.465947][T14134] fuse: Unknown parameter '00000000000000000000' [ 773.629550][T14140] SET target dimension over the limit! [ 774.428711][ T5873] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 774.453333][ T5873] usb 1-1: USB disconnect, device number 43 [ 776.781296][T14169] SET target dimension over the limit! [ 778.367717][T14176] syzkaller0: entered promiscuous mode [ 778.373873][T14176] syzkaller0: entered allmulticast mode [ 778.779695][T14181] fuse: Unknown parameter 'user00000000000000000000' [ 782.360773][ T6258] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 782.575127][ T6258] usb 4-1: Using ep0 maxpacket: 16 [ 782.601347][ T6258] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 782.744177][ T6258] usb 4-1: config 0 interface 0 has no altsetting 0 [ 782.753118][ T6258] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 782.784973][ T6258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.799442][ T6258] usb 4-1: Product: syz [ 782.806577][ T6258] usb 4-1: Manufacturer: syz [ 782.812833][ T6258] usb 4-1: SerialNumber: syz [ 782.839430][ T6258] usb 4-1: config 0 descriptor?? [ 783.537634][ T30] audit: type=1804 audit(1776071454.130:689): pid=14233 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2055" name="bus" dev="ramfs" ino=51937 res=1 errno=0 [ 783.642976][ T30] audit: type=1804 audit(1776071454.150:690): pid=14233 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.2055" name="bus" dev="ramfs" ino=51937 res=1 errno=0 [ 783.665927][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 783.675358][ T6258] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input92 [ 783.731017][ T6258] imon:send_packet: packet tx failed (-71) [ 783.751515][ T6258] imon 4-1:0.0: panel buttons/knobs setup failed [ 783.845112][ T6258] rc_core: IR keymap rc-imon-pad not found [ 783.865556][ T6258] Registered IR keymap rc-empty [ 783.891962][ T6258] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 784.144195][ T6258] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 784.260892][ T6258] imon:send_packet: packet tx failed (-71) [ 784.413285][ T6258] imon 4-1:0.0: remote input dev register failed [ 784.419843][ T6258] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 784.652323][ T6258] imon 4-1:0.0: unable to initialize intf0, err 0 [ 784.700258][ T6258] imon:imon_probe: failed to initialize context! [ 784.701116][T14252] fuse: Unknown parameter 'user00000000000000000000' [ 784.726391][ T6258] imon 4-1:0.0: unable to register, err -19 [ 785.942855][ T6258] usb 4-1: USB disconnect, device number 47 [ 787.100868][T14267] macsec1: entered promiscuous mode [ 787.160862][T14267] bridge0: entered promiscuous mode [ 787.739086][T14273] SET target dimension over the limit! [ 789.261205][T14292] IPVS: sh: FWM 3 0x00000003 - no destination available [ 789.269184][ T5873] IPVS: starting estimator thread 0... [ 789.580810][T14293] IPVS: using max 75 ests per chain, 180000 per kthread [ 790.482126][ T5873] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 790.517386][T14307] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2070'. [ 791.216899][T14312] bridge0: port 4(team0) entered blocking state [ 791.230810][T14312] bridge0: port 4(team0) entered disabled state [ 791.237850][T14312] team0: entered allmulticast mode [ 791.243105][T14312] team_slave_0: entered allmulticast mode [ 791.249007][T14312] team_slave_1: entered allmulticast mode [ 791.256781][T14312] team0: entered promiscuous mode [ 791.261967][T14312] team_slave_0: entered promiscuous mode [ 791.267849][T14312] team_slave_1: entered promiscuous mode [ 791.281349][T14312] bridge0: port 4(team0) entered blocking state [ 791.287743][T14312] bridge0: port 4(team0) entered forwarding state [ 791.296055][ T5873] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 791.306619][ T5873] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 791.318048][ T5873] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 791.346302][ T5873] usb 7-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 791.356674][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.374241][T14307] bridge1: entered promiscuous mode [ 791.379543][ T5873] usb 7-1: Product: syz [ 791.385099][ T5873] usb 7-1: Manufacturer: syz [ 791.399747][ T5873] usb 7-1: SerialNumber: syz [ 791.404726][T14307] bridge1: entered allmulticast mode [ 791.426283][T14307] team0: Port device bridge1 added [ 791.711410][T14314] fuse: Unknown parameter 'user00000000000000000000' [ 791.981367][ T5873] usb 7-1: USB disconnect, device number 53 [ 792.704511][T14320] netlink: 'syz.5.2074': attribute type 7 has an invalid length. [ 792.990796][ T24] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 793.110854][ T6258] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 793.154194][ T24] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 793.169749][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.280158][T14331] bridge2: entered promiscuous mode [ 793.332755][ T6258] usb 5-1: Using ep0 maxpacket: 16 [ 793.345401][ T6258] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 793.571722][ T24] usb 6-1: Product: syz [ 793.582446][ T6258] usb 5-1: config 0 interface 0 has no altsetting 0 [ 793.590210][ T24] usb 6-1: Manufacturer: syz [ 793.602413][ T24] usb 6-1: SerialNumber: syz [ 793.610260][ T6258] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 793.629985][ T24] usb 6-1: config 0 descriptor?? [ 793.639354][ T6258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.648942][ T6258] usb 5-1: Product: syz [ 793.667189][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 793.766574][ T6258] usb 5-1: Manufacturer: syz [ 793.772364][ T6258] usb 5-1: SerialNumber: syz [ 793.786327][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 793.797336][ T6258] usb 5-1: config 0 descriptor?? [ 793.802645][ T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 793.812074][ T24] usb 6-1: media controller created [ 793.844773][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 794.288312][T14320] dvb-usb: bulk message failed: -22 (7/0) [ 794.306164][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 794.482298][ T6258] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input94 [ 794.584735][ T6258] imon:send_packet: packet tx failed (-71) [ 794.601205][ T6258] imon 5-1:0.0: panel buttons/knobs setup failed [ 795.030856][ T6258] rc_core: IR keymap rc-imon-pad not found [ 795.049629][ T6258] Registered IR keymap rc-empty [ 795.059468][ T24] DVB: Unable to find symbol mt352_attach() [ 795.066300][ T6258] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 795.091639][T14353] SET target dimension over the limit! [ 795.098147][ T6258] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 795.128117][ T6258] imon:send_packet: packet tx failed (-71) [ 795.173669][ T6258] imon 5-1:0.0: remote input dev register failed [ 795.192173][ T24] DVB: Unable to find symbol nxt6000_attach() [ 795.198637][ T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 795.210273][ T6258] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 795.244751][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input96 [ 795.840241][ T6258] imon 5-1:0.0: unable to initialize intf0, err 0 [ 795.848917][ T24] dvb-usb: schedule remote query interval to 1000 msecs. [ 795.952918][ T6258] imon:imon_probe: failed to initialize context! [ 795.974355][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 795.984513][ T6258] imon 5-1:0.0: unable to register, err -19 [ 796.005180][ T6258] usb 5-1: USB disconnect, device number 54 [ 796.011295][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 796.017108][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 796.493354][ T24] usb 6-1: USB disconnect, device number 43 [ 797.063625][T14366] ceph: No mds server is up or the cluster is laggy [ 797.221690][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 797.261589][T14377] fuse: Unknown parameter 'user_i00000000000000000000' [ 797.900764][ T10] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 797.971770][T14392] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2088'. [ 798.020030][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2088'. [ 798.070794][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 798.095398][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.135016][ T10] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 798.161995][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.184167][ T10] usb 7-1: Product: syz [ 798.206259][ T10] usb 7-1: Manufacturer: syz [ 798.218955][ T10] usb 7-1: SerialNumber: syz [ 798.247351][ T10] usb 7-1: config 0 descriptor?? [ 798.488318][ T10] usb 7-1: USB disconnect, device number 54 [ 799.099166][T14400] sctp: [Deprecated]: syz.5.2090 (pid 14400) Use of struct sctp_assoc_value in delayed_ack socket option. [ 799.099166][T14400] Use struct sctp_sack_info instead [ 800.404440][ T24] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 801.171236][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 801.191178][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 801.221949][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 801.265790][ T24] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 801.308938][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.330479][ T24] usb 7-1: Product: syz [ 801.337871][ T24] usb 7-1: Manufacturer: syz [ 801.342800][ T24] usb 7-1: SerialNumber: syz [ 801.361657][ T24] usb 7-1: config 0 descriptor?? [ 801.462104][ T30] audit: type=1804 audit(1776071472.050:691): pid=14421 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2097" name="bus" dev="ramfs" ino=53529 res=1 errno=0 [ 801.538312][ T30] audit: type=1804 audit(1776071472.080:692): pid=14421 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.2097" name="bus" dev="ramfs" ino=53529 res=1 errno=0 [ 801.588536][T14423] SET target dimension over the limit! [ 801.639542][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 801.648328][ T24] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input97 [ 801.783825][ T24] imon:send_packet: packet tx failed (-71) [ 801.801841][ T24] imon 7-1:0.0: panel buttons/knobs setup failed [ 802.100744][ T24] rc_core: IR keymap rc-imon-pad not found [ 802.120253][ T24] Registered IR keymap rc-empty [ 802.155746][ T24] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 802.196806][ T24] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 802.243062][ T24] imon:send_packet: packet tx failed (-71) [ 802.323212][ T24] imon 7-1:0.0: remote input dev register failed [ 802.341461][ T24] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 802.367120][ T24] imon 7-1:0.0: unable to initialize intf0, err 0 [ 802.380945][ T24] imon:imon_probe: failed to initialize context! [ 802.395859][ T24] imon 7-1:0.0: unable to register, err -19 [ 803.007907][T14440] binder: 14437:14440 ioctl c0306201 2000000002c0 returned -14 [ 803.094968][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.095284][T14443] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2099'. [ 803.124215][T14443] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2099'. [ 803.137261][ T24] usb 7-1: USB disconnect, device number 55 [ 804.880828][ T24] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 805.051139][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 805.151104][ T24] usb 7-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 805.160148][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.189445][ T24] usb 7-1: config 0 descriptor?? [ 805.201614][ T24] gm12u320 7-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 805.218781][ T24] gm12u320 7-1:0.0: probe with driver gm12u320 failed with error -5 [ 805.232423][ T24] usb-storage 7-1:0.0: USB Mass Storage device detected [ 805.251579][ T24] usb-storage 7-1:0.0: device ignored [ 805.270764][ T6258] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 805.507320][ T24] usb 7-1: USB disconnect, device number 56 [ 805.687619][ T6258] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 805.763934][ T6258] usb 1-1: config 0 has no interface number 0 [ 805.786535][ T6258] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.802552][ T6258] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.820118][ T6258] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 805.835959][ T6258] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.875728][ T6258] usb 1-1: config 0 descriptor?? [ 806.309585][ T30] audit: type=1400 audit(1776071476.900:693): avc: denied { read } for pid=14470 comm="syz.0.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 806.436414][T14490] random: crng reseeded on system resumption [ 806.611309][T14492] overlayfs: failed to resolve './file0': -2 [ 806.680131][ T6258] hid_parser_main: 222 callbacks suppressed [ 806.680149][ T6258] prodikeys 0003:041E:2801.0016: unknown main item tag 0x0 [ 806.703670][T14486] SET target dimension over the limit! [ 806.709369][ T6258] prodikeys 0003:041E:2801.0016: unknown main item tag 0x0 [ 806.826126][ T6258] prodikeys 0003:041E:2801.0016: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 806.875415][ T6258] hid_prodikeys: hid-prodikeys: failed to find output report [ 806.875415][ T6258] [ 808.292716][ T10] usb 1-1: USB disconnect, device number 44 [ 808.510950][ T6258] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 808.686213][T14513] macsec2: entered promiscuous mode [ 808.714112][T14513] dummy0: entered promiscuous mode [ 808.732033][T14513] dummy0: left promiscuous mode [ 808.878704][ T6258] usb 7-1: unable to get BOS descriptor or descriptor too short [ 808.897393][ T6258] usb 7-1: not running at top speed; connect to a high speed hub [ 808.920128][ T30] audit: type=1401 audit(1776071479.510:694): op=fscreate invalid_context="?" [ 808.920454][ T6258] usb 7-1: config index 0 descriptor too short (expected 46, got 18) [ 809.459801][ T6258] usb 7-1: config 0 has an invalid interface number: 175 but max is 0 [ 809.468327][ T6258] usb 7-1: config 0 has no interface number 0 [ 809.518470][ T6258] usb 7-1: config 0 interface 175 has no altsetting 0 [ 809.549068][T14530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14530 comm=syz.0.2121 [ 810.146313][ T6258] usb 7-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.02 [ 810.155833][ T6258] usb 7-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 810.174305][ T6258] usb 7-1: Product: syz [ 810.186239][ T6258] usb 7-1: config 0 descriptor?? [ 810.763659][T14545] Device name cannot be null; rc = [-22] [ 811.577887][ T6258] usb-storage 7-1:0.175: USB Mass Storage device detected [ 811.590764][ T5874] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 811.759439][ T6258] usb 7-1: USB disconnect, device number 57 [ 811.770755][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 811.834713][ T5874] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.890223][ T5874] usb 6-1: config 0 interface 0 has no altsetting 0 [ 811.907606][ T5874] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 811.918956][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.939760][ T5874] usb 6-1: config 0 descriptor?? [ 813.140039][ T5874] nzxt-smart2 0003:1E71:2009.0017: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 813.600913][ T5866] usb 6-1: USB disconnect, device number 44 [ 818.391552][ T30] audit: type=1400 audit(1776071488.990:695): avc: denied { ioctl } for pid=14617 comm="syz.5.2142" path="socket:[54938]" dev="sockfs" ino=54938 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 818.801076][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 819.080729][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 819.546518][ T10] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 820.168073][ T10] usb 4-1: config 0 has no interface number 0 [ 820.174732][ T10] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 820.184990][ T10] usb 4-1: config 0 interface 196 has no altsetting 0 [ 820.194099][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 820.202736][T14632] dlm: no local IP address has been set [ 820.203481][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.209013][T14632] dlm: cannot start dlm midcomms -107 [ 820.217310][ T10] usb 4-1: Product: syz [ 820.227085][ T10] usb 4-1: Manufacturer: syz [ 820.231882][ T10] usb 4-1: SerialNumber: syz [ 820.243628][ T10] usb 4-1: config 0 descriptor?? [ 820.249261][T14621] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 820.394464][ T30] audit: type=1400 audit(1776071490.990:696): avc: denied { bind } for pid=14641 comm="syz.5.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 820.415413][T14642] tipc: Failed to remove unknown binding: 66,0,0/0:1252838867/1252838868 [ 820.425554][T14642] tipc: Failed to remove unknown binding: 66,0,0/0:1252838867/1252838868 [ 820.473303][T14621] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2143'. [ 820.484453][T14621] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 820.541937][T14643] FAT-fs (nullb0): bogus number of reserved sectors [ 820.548838][T14643] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 820.590960][T14646] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 820.606008][T14646] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 820.625717][T14648] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 820.867899][T14653] SET target dimension over the limit! [ 821.295373][ T10] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 821.779328][ T10] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 821.861832][ T24] usb 4-1: USB disconnect, device number 48 [ 821.985640][ T24] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 822.525388][T14677] input: syz0 as /devices/virtual/input/input101 [ 822.686681][T14677] netlink: 'syz.3.2156': attribute type 1 has an invalid length. [ 824.603630][T14691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 824.626673][T14698] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20000 [ 825.898155][ T30] audit: type=1400 audit(1776071495.970:697): avc: denied { ioctl } for pid=14697 comm="syz.0.2162" path="socket:[55365]" dev="sockfs" ino=55365 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 827.702600][T14716] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20000 [ 827.854663][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2166'. [ 829.012563][T14745] SET target dimension over the limit! [ 831.223902][T14754] random: crng reseeded on system resumption [ 831.455889][ T30] audit: type=1400 audit(1776071502.050:698): avc: denied { create } for pid=14746 comm="syz.0.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 831.501639][T14752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2171'. [ 831.589978][T14757] 8021q: adding VLAN 0 to HW filter on device bond2 [ 831.599457][T14757] bond1: (slave bond2): Enslaving as an active interface with an up link [ 831.641349][ T30] audit: type=1400 audit(1776071502.100:699): avc: denied { write } for pid=14746 comm="syz.0.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 831.695763][ T5866] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 831.902314][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 831.928367][ T5866] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 832.008579][ T5866] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 832.080237][ T5866] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 832.192883][ T5866] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 832.310579][ T5866] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 832.920991][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.951691][ T5866] usbtmc 5-1:16.0: bulk endpoints not found [ 833.358697][ T5873] usb 5-1: USB disconnect, device number 55 [ 833.624797][ T5866] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 833.684202][ T30] audit: type=1400 audit(1776071504.280:700): avc: denied { create } for pid=14787 comm="syz.6.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 833.802374][ T30] audit: type=1400 audit(1776071504.280:701): avc: denied { write } for pid=14787 comm="syz.6.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 833.829799][ T30] audit: type=1400 audit(1776071504.310:702): avc: denied { setopt } for pid=14787 comm="syz.6.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 833.831018][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 833.915078][ T5866] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.926351][ T5866] usb 4-1: config 0 has no interfaces? [ 833.954441][ T5866] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 833.974004][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.984511][ T5866] usb 4-1: Product: syz [ 833.988746][ T5866] usb 4-1: Manufacturer: syz [ 833.996878][ T5866] usb 4-1: SerialNumber: syz [ 834.013063][ T5866] usb 4-1: config 0 descriptor?? [ 834.067661][T14792] fuse: Bad value for 'fd' [ 834.391002][ T5866] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 834.400457][ T30] audit: type=1400 audit(1776071504.990:703): avc: denied { map } for pid=14779 comm="syz.3.2178" path="socket:[55578]" dev="sockfs" ino=55578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 834.424919][ T30] audit: type=1400 audit(1776071504.990:704): avc: denied { read } for pid=14779 comm="syz.3.2178" path="socket:[55578]" dev="sockfs" ino=55578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 834.430997][ T5873] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 834.540762][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 834.560482][ T5866] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 834.580814][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.598405][ T5866] usb 5-1: config 0 descriptor?? [ 834.615693][ T5866] gm12u320 5-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 834.626439][ T5866] gm12u320 5-1:0.0: probe with driver gm12u320 failed with error -5 [ 834.642264][ T5866] usb-storage 5-1:0.0: USB Mass Storage device detected [ 834.651307][ T5873] usb 6-1: Using ep0 maxpacket: 16 [ 834.666939][ T5873] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.678954][ T5866] usb-storage 5-1:0.0: device ignored [ 834.686190][ T5873] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.696962][ T5873] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 834.710884][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.974616][T14810] SELinux: failed to load policy [ 835.000779][ T30] audit: type=1400 audit(1776071505.570:705): avc: denied { load_policy } for pid=14807 comm="syz.6.2187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 835.048806][ T5866] usb 5-1: USB disconnect, device number 56 [ 835.157746][ T5873] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 835.237658][T14816] SET target dimension over the limit! [ 836.352529][ T24] usb 4-1: USB disconnect, device number 49 [ 836.477801][T14827] random: crng reseeded on system resumption [ 836.840969][ T5866] usb 6-1: reset high-speed USB device number 45 using dummy_hcd [ 837.287087][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2197'. [ 837.323368][T14838] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 837.338586][T14838] tipc: Enabling of bearer rejected, failed to enable media [ 838.044336][ T5873] usb 6-1: USB disconnect, device number 45 [ 838.697510][T14872] fuse: Bad value for 'fd' [ 838.942349][ T5874] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 839.120864][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 839.134071][ T5874] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 840.220013][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.326023][ T5874] usb 1-1: config 0 descriptor?? [ 840.365225][ T5874] gm12u320 1-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 840.376498][ T5874] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5 [ 841.091918][ T5874] usb-storage 1-1:0.0: USB Mass Storage device detected [ 841.154853][ T5874] usb-storage 1-1:0.0: device ignored [ 842.218595][ T6258] usb 1-1: USB disconnect, device number 45 [ 842.351371][ T10] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 842.549199][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 842.561289][ T10] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 842.599484][ T10] usb 7-1: config 2 has no interface number 0 [ 842.633487][ T10] usb 7-1: config 2 interface 31 has no altsetting 0 [ 842.703341][ T10] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 843.209386][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.219169][T14933] random: crng reseeded on system resumption [ 843.240699][ T10] usb 7-1: Product: syz [ 843.332781][ T10] usb 7-1: Manufacturer: syz [ 843.340730][ T10] usb 7-1: SerialNumber: syz [ 846.024300][ T10] ch9200 7-1:2.31: probe with driver ch9200 failed with error -22 [ 846.138857][ T10] usb 7-1: USB disconnect, device number 58 [ 847.715720][T14995] netlink: 'syz.4.2220': attribute type 3 has an invalid length. [ 847.879132][T11029] Bluetooth: hci1: unexpected event for opcode 0x0411 [ 848.000966][ T6258] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 848.160809][ T6258] usb 7-1: Using ep0 maxpacket: 8 [ 848.273081][ T6258] usb 7-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 848.283055][ T30] audit: type=1400 audit(1776071518.590:706): avc: denied { connect } for pid=14996 comm="syz.0.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 848.310836][ T6258] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.329645][ T6258] usb 7-1: config 0 descriptor?? [ 848.480578][ T6258] gm12u320 7-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 848.634302][T15009] random: crng reseeded on system resumption [ 848.878559][ T6258] gm12u320 7-1:0.0: probe with driver gm12u320 failed with error -5 [ 848.919618][ T6258] usb-storage 7-1:0.0: USB Mass Storage device detected [ 849.901666][ T6258] usb-storage 7-1:0.0: device ignored [ 850.114249][T15023] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 850.476309][T15027] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2228'. [ 851.002113][ T6258] usb 7-1: USB disconnect, device number 59 [ 851.111208][ T5866] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 851.324757][ T5866] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 851.342208][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.378143][ T5866] usb 6-1: Product: syz [ 851.393072][ T5866] usb 6-1: Manufacturer: syz [ 851.409505][ T5866] usb 6-1: SerialNumber: syz [ 851.423301][T15033] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2229'. [ 851.482524][ T5866] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 851.618443][ T5873] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 852.355297][ T6258] usb 6-1: USB disconnect, device number 46 [ 852.691276][ T5873] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 852.703462][ T5873] ath9k_htc: Failed to initialize the device [ 852.713338][ T6258] usb 6-1: ath9k_htc: USB layer deinitialized [ 853.036834][T15065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 853.316530][T15071] random: crng reseeded on system resumption [ 853.408629][T15071] overlayfs: failed to resolve './file0': -2 [ 853.550488][T14597] Bluetooth: hci5: command 0x1003 tx timeout [ 853.558151][T11029] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 854.350697][T15077] sg_write: process 1527 (syz.5.2235) changed security contexts after opening file descriptor, this is not allowed. [ 856.136332][T15103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.238764][T15103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.333023][T15103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.516918][T15103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.525097][ T5873] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 856.666108][T15103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.749655][T15103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.010880][T15106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.036759][T15106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.115112][ T5873] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 857.124331][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.144439][ T5873] usb 7-1: Product: syz [ 857.168418][ T5873] usb 7-1: Manufacturer: syz [ 857.211277][ T5873] usb 7-1: SerialNumber: syz [ 857.265814][ T5873] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 857.284657][ T5866] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 857.433515][T15115] FAULT_INJECTION: forcing a failure. [ 857.433515][T15115] name failslab, interval 1, probability 0, space 0, times 0 [ 857.616794][T15115] CPU: 0 UID: 0 PID: 15115 Comm: syz.0.2243 Tainted: G L syzkaller #0 PREEMPT(full) [ 857.616825][T15115] Tainted: [L]=SOFTLOCKUP [ 857.616832][T15115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 857.616846][T15115] Call Trace: [ 857.616852][T15115] [ 857.616860][T15115] dump_stack_lvl+0x100/0x190 [ 857.616897][T15115] should_fail_ex.cold+0x5/0xa [ 857.616922][T15115] ? tomoyo_realpath_from_path+0xb6/0x690 [ 857.616951][T15115] should_failslab+0xc2/0x120 [ 857.616972][T15115] __kmalloc_noprof+0xe0/0x850 [ 857.617004][T15115] tomoyo_realpath_from_path+0xb6/0x690 [ 857.617039][T15115] tomoyo_path_number_perm+0x23c/0x580 [ 857.617063][T15115] ? tomoyo_path_number_perm+0x22e/0x580 [ 857.617090][T15115] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 857.617141][T15115] ? find_held_lock+0x2b/0x80 [ 857.617165][T15115] ? __fget_files+0x215/0x3d0 [ 857.617189][T15115] ? hook_file_ioctl_common+0x146/0x410 [ 857.617215][T15115] ? __fget_files+0x21f/0x3d0 [ 857.617240][T15115] security_file_ioctl+0xd3/0x230 [ 857.617269][T15115] __x64_sys_ioctl+0xb7/0x210 [ 857.617299][T15115] do_syscall_64+0x106/0xf80 [ 857.617317][T15115] ? clear_bhb_loop+0x40/0x90 [ 857.617340][T15115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.617359][T15115] RIP: 0033:0x7f0c43f9c819 [ 857.617376][T15115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.617394][T15115] RSP: 002b:00007f0c44f3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 857.617412][T15115] RAX: ffffffffffffffda RBX: 00007f0c44215fa0 RCX: 00007f0c43f9c819 [ 857.617423][T15115] RDX: 0000200000000380 RSI: 00000000c058560f RDI: 0000000000000003 [ 857.617434][T15115] RBP: 00007f0c44f3f090 R08: 0000000000000000 R09: 0000000000000000 [ 857.617445][T15115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.617456][T15115] R13: 00007f0c44216038 R14: 00007f0c44215fa0 R15: 00007ffea6ef2248 [ 857.617481][T15115] [ 857.908316][T15115] ERROR: Out of memory at tomoyo_realpath_from_path. [ 858.447002][ T5866] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 858.708587][ T5866] ath9k_htc: Failed to initialize the device [ 859.382208][ T5873] usb 7-1: USB disconnect, device number 60 [ 859.401342][ T5873] usb 7-1: ath9k_htc: USB layer deinitialized [ 859.740492][ T30] audit: type=1804 audit(1776071786.325:707): pid=15129 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2247" name="bus" dev="ramfs" ino=57318 res=1 errno=0 [ 859.928764][ T30] audit: type=1804 audit(1776071786.475:708): pid=15129 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.2247" name="bus" dev="ramfs" ino=57318 res=1 errno=0 [ 860.261087][ T6258] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 860.442942][ T6258] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.613994][ T6258] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 860.652173][ T6258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.735103][ T6258] usb 6-1: Product: syz [ 860.739300][ T6258] usb 6-1: Manufacturer: syz [ 860.780894][ T6258] usb 6-1: SerialNumber: syz [ 860.858883][ T6258] usb 6-1: config 0 descriptor?? [ 860.892826][ T6258] port100 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 861.783024][ T30] audit: type=1804 audit(1776071788.375:709): pid=15146 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.2250" name="bus" dev="ramfs" ino=58488 res=1 errno=0 [ 861.851886][ T30] audit: type=1804 audit(1776071788.375:710): pid=15146 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.2250" name="bus" dev="ramfs" ino=58488 res=1 errno=0 [ 862.031450][ T6258] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 862.231980][ T6258] usb 5-1: Using ep0 maxpacket: 8 [ 862.252231][ T6258] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 862.261732][ T6258] usb 5-1: config 0 has no interface number 0 [ 862.274889][ T6258] usb 5-1: too many endpoints for config 0 interface 122 altsetting 240: 48, using maximum allowed: 30 [ 862.299774][ T6258] usb 5-1: config 0 interface 122 altsetting 240 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 862.354371][ T6258] usb 5-1: config 0 interface 122 has no altsetting 0 [ 862.397387][ T6258] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 862.407057][ T6258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.420969][ T6258] usb 5-1: Product: syz [ 862.437621][ T6258] usb 5-1: Manufacturer: syz [ 862.454040][ T6258] usb 5-1: SerialNumber: syz [ 862.619401][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 862.662300][ T5874] usb 6-1: USB disconnect, device number 47 [ 862.969861][ T6258] usb 5-1: config 0 descriptor?? [ 862.991681][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 863.006141][ T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 863.015665][ T24] usb 4-1: config 0 has no interface number 0 [ 863.030035][ T24] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 863.078067][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 863.107827][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.146377][ T24] usb 4-1: Product: syz [ 863.180968][ T24] usb 4-1: Manufacturer: syz [ 863.185625][ T24] usb 4-1: SerialNumber: syz [ 863.422741][ T24] usb 4-1: config 0 descriptor?? [ 863.453635][ T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 863.463516][ T6258] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 863.469845][ T24] em28xx 4-1:0.132: Video interface 132 found: [ 863.476280][ T6258] gspca_sonixj: reg_w1 err -71 [ 863.481681][ T6258] sonixj 5-1:0.122: probe with driver sonixj failed with error -71 [ 863.506002][ T6258] usb 5-1: USB disconnect, device number 57 [ 863.527981][T15164] FAULT_INJECTION: forcing a failure. [ 863.527981][T15164] name failslab, interval 1, probability 0, space 0, times 0 [ 863.540805][T15164] CPU: 0 UID: 0 PID: 15164 Comm: syz.5.2257 Tainted: G L syzkaller #0 PREEMPT(full) [ 863.540833][T15164] Tainted: [L]=SOFTLOCKUP [ 863.540838][T15164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 863.540847][T15164] Call Trace: [ 863.540853][T15164] [ 863.540860][T15164] dump_stack_lvl+0x100/0x190 [ 863.540891][T15164] should_fail_ex.cold+0x5/0xa [ 863.540915][T15164] ? alloc_pipe_info+0x1ec/0x590 [ 863.540933][T15164] should_failslab+0xc2/0x120 [ 863.540951][T15164] __kmalloc_noprof+0xe0/0x850 [ 863.540980][T15164] alloc_pipe_info+0x1ec/0x590 [ 863.541001][T15164] splice_direct_to_actor+0x78f/0xa30 [ 863.541022][T15164] ? __lock_acquire+0x4a5/0x2630 [ 863.541039][T15164] ? __pfx_direct_splice_actor+0x10/0x10 [ 863.541069][T15164] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 863.541096][T15164] do_splice_direct+0x174/0x240 [ 863.541115][T15164] ? __pfx_do_splice_direct+0x10/0x10 [ 863.541133][T15164] ? avc_policy_seqno+0x9/0x20 [ 863.541152][T15164] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 863.541171][T15164] ? bpf_lsm_file_permission+0x9/0x10 [ 863.541197][T15164] ? security_file_permission+0x76/0x210 [ 863.541224][T15164] ? rw_verify_area+0xce/0x6d0 [ 863.541251][T15164] do_sendfile+0xadc/0xe20 [ 863.541280][T15164] ? __pfx_do_sendfile+0x10/0x10 [ 863.541306][T15164] ? __fget_files+0x21f/0x3d0 [ 863.541331][T15164] __x64_sys_sendfile64+0x1d8/0x220 [ 863.541350][T15164] ? ksys_write+0x1ac/0x250 [ 863.541364][T15164] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 863.541392][T15164] do_syscall_64+0x106/0xf80 [ 863.541407][T15164] ? clear_bhb_loop+0x40/0x90 [ 863.541428][T15164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.541444][T15164] RIP: 0033:0x7f9174d9c819 [ 863.541460][T15164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.541475][T15164] RSP: 002b:00007f9175bc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 863.541492][T15164] RAX: ffffffffffffffda RBX: 00007f9175015fa0 RCX: 00007f9174d9c819 [ 863.541503][T15164] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 863.541512][T15164] RBP: 00007f9175bc4090 R08: 0000000000000000 R09: 0000000000000000 [ 863.541522][T15164] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 863.541532][T15164] R13: 00007f9175016038 R14: 00007f9175015fa0 R15: 00007fffe321a458 [ 863.541554][T15164] [ 864.801466][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.851187][ T24] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 864.995922][ T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 865.035315][ T24] em28xx 4-1:0.132: board has no eeprom [ 865.180559][ T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 865.205001][ T24] em28xx 4-1:0.132: analog set to bulk mode. [ 865.218312][ T6258] em28xx 4-1:0.132: Registering V4L2 extension [ 866.392280][ T6258] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 866.417997][ T6258] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 866.443317][ T5873] usb 4-1: USB disconnect, device number 50 [ 866.450287][ T5873] em28xx 4-1:0.132: Disconnecting em28xx [ 866.681897][ T30] audit: type=1804 audit(1776071793.275:711): pid=15205 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2268" name="bus" dev="ramfs" ino=57669 res=1 errno=0 [ 866.773692][ T30] audit: type=1804 audit(1776071793.295:712): pid=15205 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.2268" name="bus" dev="ramfs" ino=57669 res=1 errno=0 [ 866.959965][ T6258] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 866.972687][ T6258] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 866.979851][ T6258] em28xx 4-1:0.132: No AC97 audio processor [ 867.060614][ T6258] usb 4-1: Decoder not found [ 867.080333][ T6258] em28xx 4-1:0.132: failed to create media graph [ 867.895115][ T6258] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 868.026232][ T6258] em28xx 4-1:0.132: Remote control support is not available for this card. [ 868.042189][T15213] ================================================================== [ 868.050288][T15213] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 868.057758][T15213] Read of size 8 at addr ffff888078f88790 by task v4l_id/15213 [ 868.065305][T15213] [ 868.067647][T15213] CPU: 1 UID: 0 PID: 15213 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 868.067671][T15213] Tainted: [L]=SOFTLOCKUP [ 868.067677][T15213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 868.067687][T15213] Call Trace: [ 868.067695][T15213] [ 868.067703][T15213] dump_stack_lvl+0x100/0x190 [ 868.067734][T15213] print_report+0x156/0x4c9 [ 868.067755][T15213] ? __virt_addr_valid+0x239/0x430 [ 868.067780][T15213] ? v4l2_fh_init+0x27d/0x2c0 [ 868.067803][T15213] kasan_report+0xdf/0x1e0 [ 868.067818][T15213] ? v4l2_fh_init+0x27d/0x2c0 [ 868.067841][T15213] v4l2_fh_init+0x27d/0x2c0 [ 868.067863][T15213] v4l2_fh_open+0x64/0xa0 [ 868.067885][T15213] em28xx_v4l2_open+0x11e/0x570 [ 868.067908][T15213] v4l2_open+0x1d2/0x490 [ 868.067930][T15213] ? __pfx_v4l2_open+0x10/0x10 [ 868.067952][T15213] chrdev_open+0x234/0x6a0 [ 868.067969][T15213] ? __pfx_chrdev_open+0x10/0x10 [ 868.067985][T15213] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 868.068006][T15213] do_dentry_open+0x6d8/0x1660 [ 868.068035][T15213] ? __pfx_chrdev_open+0x10/0x10 [ 868.068052][T15213] vfs_open+0x82/0x3f0 [ 868.068071][T15213] path_openat+0x208c/0x31a0 [ 868.068090][T15213] ? __pfx_path_openat+0x10/0x10 [ 868.068109][T15213] do_file_open+0x20e/0x430 [ 868.068125][T15213] ? __pfx_do_file_open+0x10/0x10 [ 868.068148][T15213] ? alloc_fd+0x476/0x790 [ 868.068165][T15213] ? do_getname+0x191/0x390 [ 868.068185][T15213] do_sys_openat2+0x10d/0x1e0 [ 868.068204][T15213] ? __pfx_do_sys_openat2+0x10/0x10 [ 868.068225][T15213] __x64_sys_openat+0x12d/0x210 [ 868.068243][T15213] ? __pfx___x64_sys_openat+0x10/0x10 [ 868.068264][T15213] ? do_user_addr_fault+0x8d6/0x12f0 [ 868.068282][T15213] do_syscall_64+0x106/0xf80 [ 868.068297][T15213] ? clear_bhb_loop+0x40/0x90 [ 868.068314][T15213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.068333][T15213] RIP: 0033:0x7f63c21d8407 [ 868.068345][T15213] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 868.068359][T15213] RSP: 002b:00007fff44851450 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 868.068374][T15213] RAX: ffffffffffffffda RBX: 00007f63c214c880 RCX: 00007f63c21d8407 [ 868.068384][T15213] RDX: 0000000000000000 RSI: 00007fff44851f1b RDI: ffffffffffffff9c [ 868.068393][T15213] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 868.068402][T15213] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 868.068410][T15213] R13: 00007fff448516a0 R14: 00007f63c2431000 R15: 000055eee09704d8 [ 868.068425][T15213] [ 868.068430][T15213] [ 868.324427][T15213] Allocated by task 6258: [ 868.328731][T15213] kasan_save_stack+0x30/0x50 [ 868.333399][T15213] kasan_save_track+0x14/0x30 [ 868.338059][T15213] __kasan_kmalloc+0xaa/0xb0 [ 868.342631][T15213] em28xx_v4l2_init.cold+0x94/0x3503 [ 868.347892][T15213] em28xx_init_extension+0x13a/0x200 [ 868.353155][T15213] request_module_async+0x61/0x80 [ 868.358157][T15213] process_one_work+0xa23/0x19a0 [ 868.363072][T15213] worker_thread+0x5ef/0xe50 [ 868.367639][T15213] kthread+0x370/0x450 [ 868.371685][T15213] ret_from_fork+0x754/0xd80 [ 868.376254][T15213] ret_from_fork_asm+0x1a/0x30 [ 868.380999][T15213] [ 868.383299][T15213] Freed by task 6258: [ 868.387252][T15213] kasan_save_stack+0x30/0x50 [ 868.391912][T15213] kasan_save_track+0x14/0x30 [ 868.396573][T15213] kasan_save_free_info+0x3b/0x70 [ 868.401578][T15213] __kasan_slab_free+0x5f/0x80 [ 868.406318][T15213] kfree+0x1f6/0x6b0 [ 868.410195][T15213] kref_put.isra.0+0x56/0x90 [ 868.414777][T15213] em28xx_v4l2_init.cold+0x280/0x3503 [ 868.420125][T15213] em28xx_init_extension+0x13a/0x200 [ 868.425389][T15213] request_module_async+0x61/0x80 [ 868.430391][T15213] process_one_work+0xa23/0x19a0 [ 868.435306][T15213] worker_thread+0x5ef/0xe50 [ 868.439879][T15213] kthread+0x370/0x450 [ 868.443923][T15213] ret_from_fork+0x754/0xd80 [ 868.448490][T15213] ret_from_fork_asm+0x1a/0x30 [ 868.453232][T15213] [ 868.455533][T15213] The buggy address belongs to the object at ffff888078f88000 [ 868.455533][T15213] which belongs to the cache kmalloc-8k of size 8192 [ 868.469563][T15213] The buggy address is located 1936 bytes inside of [ 868.469563][T15213] freed 8192-byte region [ffff888078f88000, ffff888078f8a000) [ 868.483507][T15213] [ 868.485807][T15213] The buggy address belongs to the physical page: [ 868.492192][T15213] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78f88 [ 868.500927][T15213] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 868.509398][T15213] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 868.516918][T15213] page_type: f5(slab) [ 868.520877][T15213] raw: 00fff00000000040 ffff88813fe41280 dead000000000100 dead000000000122 [ 868.529437][T15213] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 868.537998][T15213] head: 00fff00000000040 ffff88813fe41280 dead000000000100 dead000000000122 [ 868.546645][T15213] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 868.555293][T15213] head: 00fff00000000003 ffffea0001e3e201 00000000ffffffff 00000000ffffffff [ 868.563945][T15213] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 868.572587][T15213] page dumped because: kasan: bad access detected [ 868.578971][T15213] page_owner tracks the page as allocated [ 868.584660][T15213] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5791, tgid 5791 (syz-executor), ts 51319927933, free_ts 51231803816 [ 868.605996][T15213] post_alloc_hook+0x153/0x170 [ 868.610747][T15213] get_page_from_freelist+0x111d/0x3140 [ 868.616275][T15213] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 868.622153][T15213] new_slab+0xa6/0x6b0 [ 868.626202][T15213] refill_objects+0x26b/0x400 [ 868.630863][T15213] __pcs_replace_empty_main+0x43f/0x660 [ 868.636401][T15213] __kmalloc_cache_noprof+0x493/0x6f0 [ 868.641752][T15213] cgroup1_get_tree+0xd96/0x1620 [ 868.646672][T15213] vfs_get_tree+0x92/0x320 [ 868.651071][T15213] path_mount+0x7d0/0x23d0 [ 868.655471][T15213] __x64_sys_mount+0x293/0x310 [ 868.660215][T15213] do_syscall_64+0x106/0xf80 [ 868.664801][T15213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.670675][T15213] page last free pid 5791 tgid 5791 stack trace: [ 868.676978][T15213] __free_frozen_pages+0x7e1/0x10d0 [ 868.682160][T15213] qlist_free_all+0x47/0xe0 [ 868.686650][T15213] kasan_quarantine_reduce+0x1a0/0x1f0 [ 868.692096][T15213] __kasan_slab_alloc+0x69/0x90 [ 868.696924][T15213] __kmalloc_node_track_caller_noprof+0x2ba/0x850 [ 868.703330][T15213] memdup_user+0x2a/0xe0 [ 868.707566][T15213] strndup_user+0x78/0xe0 [ 868.711874][T15213] __x64_sys_mount+0x136/0x310 [ 868.716622][T15213] do_syscall_64+0x106/0xf80 [ 868.721190][T15213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.727064][T15213] [ 868.729366][T15213] Memory state around the buggy address: [ 868.734971][T15213] ffff888078f88680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 868.743012][T15213] ffff888078f88700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 868.751052][T15213] >ffff888078f88780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 868.759092][T15213] ^ [ 868.763655][T15213] ffff888078f88800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 868.771694][T15213] ffff888078f88880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 868.779742][T15213] ================================================================== [ 868.813674][T15213] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 868.820937][T15213] CPU: 1 UID: 0 PID: 15213 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 868.831535][T15213] Tainted: [L]=SOFTLOCKUP [ 868.835855][T15213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 868.845910][T15213] Call Trace: [ 868.849190][T15213] [ 868.852120][T15213] dump_stack_lvl+0x100/0x190 [ 868.856811][T15213] vpanic+0x552/0x970 [ 868.860792][T15213] ? __pfx_vpanic+0x10/0x10 [ 868.865295][T15213] ? v4l2_fh_init+0x27d/0x2c0 [ 868.869982][T15213] panic+0xd1/0xe0 [ 868.873698][T15213] ? __pfx_panic+0x10/0x10 [ 868.878112][T15213] ? v4l2_fh_init+0x27d/0x2c0 [ 868.882796][T15213] ? preempt_schedule_common+0x42/0xc0 [ 868.888269][T15213] ? check_panic_on_warn+0x1f/0x90 [ 868.893382][T15213] check_panic_on_warn.cold+0x19/0x34 [ 868.898761][T15213] end_report.part.0+0x3a/0x90 [ 868.903532][T15213] kasan_report.cold+0xe/0x18 [ 868.908216][T15213] ? v4l2_fh_init+0x27d/0x2c0 [ 868.912904][T15213] v4l2_fh_init+0x27d/0x2c0 [ 868.917423][T15213] v4l2_fh_open+0x64/0xa0 [ 868.921763][T15213] em28xx_v4l2_open+0x11e/0x570 [ 868.926645][T15213] v4l2_open+0x1d2/0x490 [ 868.930894][T15213] ? __pfx_v4l2_open+0x10/0x10 [ 868.935667][T15213] chrdev_open+0x234/0x6a0 [ 868.940102][T15213] ? __pfx_chrdev_open+0x10/0x10 [ 868.945051][T15213] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 868.951383][T15213] do_dentry_open+0x6d8/0x1660 [ 868.956144][T15213] ? __pfx_chrdev_open+0x10/0x10 [ 868.961083][T15213] vfs_open+0x82/0x3f0 [ 868.965143][T15213] path_openat+0x208c/0x31a0 [ 868.969718][T15213] ? __pfx_path_openat+0x10/0x10 [ 868.974638][T15213] do_file_open+0x20e/0x430 [ 868.979124][T15213] ? __pfx_do_file_open+0x10/0x10 [ 868.984137][T15213] ? alloc_fd+0x476/0x790 [ 868.988450][T15213] ? do_getname+0x191/0x390 [ 868.992938][T15213] do_sys_openat2+0x10d/0x1e0 [ 868.997598][T15213] ? __pfx_do_sys_openat2+0x10/0x10 [ 869.002782][T15213] __x64_sys_openat+0x12d/0x210 [ 869.007615][T15213] ? __pfx___x64_sys_openat+0x10/0x10 [ 869.012970][T15213] ? do_user_addr_fault+0x8d6/0x12f0 [ 869.018240][T15213] do_syscall_64+0x106/0xf80 [ 869.022812][T15213] ? clear_bhb_loop+0x40/0x90 [ 869.027480][T15213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.033356][T15213] RIP: 0033:0x7f63c21d8407 [ 869.037758][T15213] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 869.057358][T15213] RSP: 002b:00007fff44851450 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 869.065755][T15213] RAX: ffffffffffffffda RBX: 00007f63c214c880 RCX: 00007f63c21d8407 [ 869.073712][T15213] RDX: 0000000000000000 RSI: 00007fff44851f1b RDI: ffffffffffffff9c [ 869.081660][T15213] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 869.089608][T15213] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 869.097557][T15213] R13: 00007fff448516a0 R14: 00007f63c2431000 R15: 000055eee09704d8 [ 869.105514][T15213] [ 869.108791][T15213] Kernel Offset: disabled [ 869.113090][T15213] Rebooting in 86400 seconds..