last executing test programs: 31m47.320977394s ago: executing program 32 (id=176): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000100) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x410a00, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000040)=""/46) 31m14.917122666s ago: executing program 33 (id=204): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) umount2(&(0x7f0000000040)='.\x00', 0x2) 28m23.399301388s ago: executing program 3 (id=570): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722851b51828adebd5bcb1ece", 0x4f}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a40)=""/88, 0x58}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x2041) 28m23.288691984s ago: executing program 3 (id=571): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722851b51828adebd5bcb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800) 28m21.210685317s ago: executing program 3 (id=576): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xa, 0x1ff, 0xed1, 0x200, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 28m14.837598007s ago: executing program 3 (id=598): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 28m4.171376681s ago: executing program 3 (id=601): socket(0x10, 0x803, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 28m2.582238083s ago: executing program 3 (id=609): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xa, 0x1ff, 0xed1, 0x200, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000), 0x1000}, 0x38) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 27m44.690021999s ago: executing program 34 (id=609): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xa, 0x1ff, 0xed1, 0x200, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000), 0x1000}, 0x38) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 26m10.918648792s ago: executing program 6 (id=834): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10000) close(r1) 26m9.167050344s ago: executing program 6 (id=839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) pipe(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) setpgid(r0, r1) read(r3, &(0x7f0000000200)=""/95, 0x5f) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) 26m5.638786565s ago: executing program 6 (id=845): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x9}], 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x2c, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}}, 0x18) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) 26m0.536668867s ago: executing program 6 (id=859): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file0\x00') 26m0.201381115s ago: executing program 6 (id=864): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file1\x00', 0x0) 25m59.794970968s ago: executing program 6 (id=865): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x6, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "4e7ff8b2280400", "5c089103301794085f981ba8fb3ca61b1351ab0cc30928996d7ba83640119ac6", "69e8cdb2", "f2f3606400"}, 0xff2c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='lp', 0x2) io_setup(0x7, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f0000000440)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000300)="ab6a963fc9afe02344536698caef0808d9172f54a7a85f37e5245f68a4927f0ae68746ec970dcaf2adb149586f6293fced58cba0766dbae07a3367c5ed041f4dd3616f27ada440f78d0ec96c8301f0d18d937af004a2a23ba9a04dcc66df044beb4ca8182e12c8f55af5d28fa59e40b3d286cef92a5bfb9380914c11226043987bcc9cbd3e5de05bf0dd5c588f1f387fd259248c84aaf41b8e84e7535f9d7c19", 0xa0, 0x26c000000000, 0x0, 0x1, r1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8, r2, &(0x7f00000003c0)="93f7d0dffae9564d49168c19d6534e8835fb01ae7cce84cf7ea6a2da5906fc1913affdb180f9877c04b411196f992b8f19c7cba208a406603dbc14f15d645ee1e39c11ad169e4b5a2a39f394b44aeeb29df95f552602", 0x56, 0x80000000, 0x0, 0x0, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f00000004c0)="60fc5cc0d49c8f6639838b16f9c73d75863333b9f50be9aef72876fba29121e308deef8f180c1251df2e370d912bf6dce82ea4d545c98093c3f4c68a2e661d290105909f1447c683762a39dd3b9ba995eb3e60579c68f3900095fce8433b75f9013bc237770e8add651f1f9c1469e00cab505ba2a412cde99736b5774116d16c6d17461e94eecad77e0829f84baeb490959b04dacb7a910e5b499bb70e7d2446de988ab0fa6290696f8ed8f74c104302e3d1b5af190e1a528298775f737375ce3f887d2193717e11d4d146712aee9afc3bb664645e15d40ebf6b14c4d3198295f7235dee5452bbf54a78bc6fa562c4f70a51aabe", 0xf4, 0x0, 0x0, 0x3, r1}]) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(r0, r1, 0x0, 0xffffffff004) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) socket$nl_generic(0x10, 0x3, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 25m57.712154988s ago: executing program 0 (id=869): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x9}], 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x2c, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}}, 0x18) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) 25m57.598664801s ago: executing program 5 (id=870): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000440), 0x37ad5285, 0x12b043) ioctl$VIDIOC_S_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x4, @vbi={0x7, 0x205, 0x24a2, 0x34363248, [0x7fffffff, 0x10001], [0x3, 0x3], 0x1}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000640)) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) mkdir(&(0x7f0000000480)='./file0\x00', 0x108) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @sack_perm, @mss={0x2, 0xcb2}, @window={0x3, 0xa58e, 0x8fc7}, @timestamp, @sack_perm, @sack_perm], 0x9) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$inet(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ac0)="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", 0x169}], 0x1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="840000000215050000000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a00000014000780080011400000000005001500030000003800078008000b4000000004060005404e230000080017400000800105000300040000000c00028008000146df055f6c1e0a0165c760a8ab"], 0x84}}, 0x24008000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000005c0)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffb, 0x0, @private0, 0x4}, {0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, r3, 0x800}}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1, 0x6, 0x100, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000080)) faccessat(0xffffffffffffff9c, 0x0, 0x80) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722851b51828adebd5bcb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a40)=""/88, 0x58}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x2041) 25m56.507498434s ago: executing program 0 (id=871): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d03e8000000e4031680a40001800c0007"], 0x40c}}, 0x4000000) 25m56.092250801s ago: executing program 0 (id=873): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d03e8000000e4031680a40001800c0007"], 0x40c}}, 0x4000000) (fail_nth: 1) 25m55.708239722s ago: executing program 0 (id=875): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file1\x00', 0x0) 25m55.666559221s ago: executing program 0 (id=876): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb3", 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x5, 0x5], &(0x7f0000000280)=[0x2], 0x0, 0x2}}, 0x40) 25m54.23718458s ago: executing program 5 (id=881): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x9}], 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x2c, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}}, 0x18) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) 25m53.845259985s ago: executing program 0 (id=883): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000280)=[0x0], &(0x7f00000000c0), 0x1, r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000300)={0x8, r5, r3}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf252a0000000c002e80060001008100000008000300", @ANYRES32=r8], 0x28}, 0x1, 0x0, 0x0, 0xc014}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xddec}]}, 0x30}}, 0x40840) r12 = socket(0x2a, 0x2, 0x0) getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r13, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x2000c800) r14 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r14, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="04002cbd7000fcdbdf251f00000008000300", @ANYRES32=r15, @ANYBLOB="bc577536862dc2a63065d97c56eacbe72265672e95d9ddcfeadc24f9c31a31d7b171c8517b69095ee640c3fbe847be7cbc9096385c060c2c330b3efcd0805829108a0bd392adce415be913b0f1131b02d000db44de2b91c9a82dc38fa29651bb7e7e22b2374fad949d0ff4d9c69dd9c83256d209"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x94) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dvmrp1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:locale_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 25m53.519181475s ago: executing program 35 (id=883): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000280)=[0x0], &(0x7f00000000c0), 0x1, r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000300)={0x8, r5, r3}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf252a0000000c002e80060001008100000008000300", @ANYRES32=r8], 0x28}, 0x1, 0x0, 0x0, 0xc014}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xddec}]}, 0x30}}, 0x40840) r12 = socket(0x2a, 0x2, 0x0) getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r13, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x2000c800) r14 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r14, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="04002cbd7000fcdbdf251f00000008000300", @ANYRES32=r15, @ANYBLOB="bc577536862dc2a63065d97c56eacbe72265672e95d9ddcfeadc24f9c31a31d7b171c8517b69095ee640c3fbe847be7cbc9096385c060c2c330b3efcd0805829108a0bd392adce415be913b0f1131b02d000db44de2b91c9a82dc38fa29651bb7e7e22b2374fad949d0ff4d9c69dd9c83256d209"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x94) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dvmrp1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:locale_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 25m52.684132934s ago: executing program 5 (id=885): unshare(0x4000400) r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r0, 0x6a, 0x4, 0x0, 0x0) (fail_nth: 1) 25m52.492316957s ago: executing program 5 (id=886): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file1\x00', 0x0) 25m52.359575046s ago: executing program 5 (id=887): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r9 = add_key$user(0x0, &(0x7f0000006c00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r8, r9}, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=@allocspi={0x144, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x7e, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, 0x4d6, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256-ce\x00'}}}]}, 0x144}, 0x1, 0x0, 0x0, 0x20054040}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r10, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@link_local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x401, 0x40000000000002}}}}}}, 0x0) r11 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r11, 0x47f6, 0x0, 0x2, 0x0, 0x300) 25m51.644188446s ago: executing program 5 (id=889): openat$tun(0xffffffffffffff9c, 0x0, 0xc0b01, 0x0) chdir(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000003740)=""/102394, 0x18ffa}], 0x1, 0x0, 0x0) (fail_nth: 1) 25m51.326921263s ago: executing program 36 (id=889): openat$tun(0xffffffffffffff9c, 0x0, 0xc0b01, 0x0) chdir(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000003740)=""/102394, 0x18ffa}], 0x1, 0x0, 0x0) (fail_nth: 1) 25m44.607715301s ago: executing program 37 (id=865): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x6, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "4e7ff8b2280400", "5c089103301794085f981ba8fb3ca61b1351ab0cc30928996d7ba83640119ac6", "69e8cdb2", "f2f3606400"}, 0xff2c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='lp', 0x2) io_setup(0x7, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f0000000440)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000300)="ab6a963fc9afe02344536698caef0808d9172f54a7a85f37e5245f68a4927f0ae68746ec970dcaf2adb149586f6293fced58cba0766dbae07a3367c5ed041f4dd3616f27ada440f78d0ec96c8301f0d18d937af004a2a23ba9a04dcc66df044beb4ca8182e12c8f55af5d28fa59e40b3d286cef92a5bfb9380914c11226043987bcc9cbd3e5de05bf0dd5c588f1f387fd259248c84aaf41b8e84e7535f9d7c19", 0xa0, 0x26c000000000, 0x0, 0x1, r1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8, r2, &(0x7f00000003c0)="93f7d0dffae9564d49168c19d6534e8835fb01ae7cce84cf7ea6a2da5906fc1913affdb180f9877c04b411196f992b8f19c7cba208a406603dbc14f15d645ee1e39c11ad169e4b5a2a39f394b44aeeb29df95f552602", 0x56, 0x80000000, 0x0, 0x0, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f00000004c0)="60fc5cc0d49c8f6639838b16f9c73d75863333b9f50be9aef72876fba29121e308deef8f180c1251df2e370d912bf6dce82ea4d545c98093c3f4c68a2e661d290105909f1447c683762a39dd3b9ba995eb3e60579c68f3900095fce8433b75f9013bc237770e8add651f1f9c1469e00cab505ba2a412cde99736b5774116d16c6d17461e94eecad77e0829f84baeb490959b04dacb7a910e5b499bb70e7d2446de988ab0fa6290696f8ed8f74c104302e3d1b5af190e1a528298775f737375ce3f887d2193717e11d4d146712aee9afc3bb664645e15d40ebf6b14c4d3198295f7235dee5452bbf54a78bc6fa562c4f70a51aabe", 0xf4, 0x0, 0x0, 0x3, r1}]) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(r0, r1, 0x0, 0xffffffff004) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) socket$nl_generic(0x10, 0x3, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 17m51.74243844s ago: executing program 1 (id=2327): r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000011c0), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000018c0)=@multiplanar_fd={0xe0, 0x3, 0x4, 0x20, 0x40, {0x77359400}, {0x2, 0x2, 0x3, 0xe4, 0x4, 0x4, "03aa307b"}, 0x4, 0x4, {0x0}, 0x1}) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000102050000000000000000000d0000090800044000008009080005000000000708000440000009f3"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r2]) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="6400000010000100000000001bfa010000000001"], 0x64}}, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f0000001100), 0x5eb, &(0x7f0000001000/0x13000)=nil, 0x3) 17m51.470181431s ago: executing program 1 (id=2329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r4, 0x0, 0x13, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000280)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0xee, 0x8, 0xe01, 0x10, 0x1ff, 0xfffffff9, "a4fc446a7153f850e4e96bf2ffe167b289fb9b06773f643c445a3c6c57350691435ca73a589a76d74422c9c9d6ec57113614803297b3d928fd24ed8d1a331b4f3cfd9f3deaaca2b05605c62066f1e13ee3d09d7d74a53ded86cd05b7accf4490f858965de26f9072c4b87ac55e67c53a4c2f620571789c444f470083aa95fa7223c466e822e6e12495a5b9a895017712485f9f04a01d388bed80585c12418db51e2a1945e456b09c63ffe00c14b261c94df1e593768bf2a92358249fa2e8785f05bf5a97cecfcd619949256d9db3266b520e762a3c6d5bda83d12bd4642e36b64485e97560a4a4a4817dd3943e77"}}, 0x206) 17m49.635975066s ago: executing program 1 (id=2336): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) kexec_load(0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "40064fef4c60c87f0239b66568c28deaf12f959a119953ee4d2021d997934a50c4e4fdc4894010ddc8743b6a8c22d685c7f6cec870f0cbb693506700eab437e8c790ae00000000000000"}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 17m46.559736098s ago: executing program 1 (id=2341): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0xc7}}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 17m46.247895027s ago: executing program 1 (id=2345): socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mbind(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000040)=0x2000000000000000, 0x8001, 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000000440)=""/139, 0x8b}, {&(0x7f0000000500)=""/236, 0xec}], 0x3, &(0x7f0000001880)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000002880)=@alg, 0x80, &(0x7f0000002980)=[{&(0x7f0000002900)=""/101, 0x65}], 0x1, &(0x7f0000003f80)=""/4096, 0x1000}, 0x7e3}, {{&(0x7f00000029c0)=@generic, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002a40)}, {&(0x7f0000002e00)=""/186, 0xba}, {&(0x7f0000002b40)=""/60, 0x3c}], 0x3, &(0x7f0000002bc0)=""/175, 0xaf}, 0xe}], 0x3, 0x143, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)={0x11b8, 0x4, 0x5, 0x101, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x4}, [@generic="5116b14e2a33ca5c69e6f923a2d541eb8426fe6f4b0d8d9c28cfb4216093b0afa568fbd76a0787a737bc5b39f20a5a7439143751cb9ee5ac1d105830eb1d79521d115eef369d15fd50896f3e15ebf6326eead38ec76a93ffeb83b5423688f04f4a7c8288d90f9e27ddf96ce973c6f3bb4c2345f49b17aaacb56b159276db52cb5cc25fd6a78a246cc00b1f4c0a1c42d1701c0fefebc0fbeeb3f85de308025ff093b98e08753e268c930fa664b66ccf54799aa71c40c5fa83e4097944963333177ca1fed6a3b65307e860bff6f07d", @generic="9a2508fa3f213adfc0f84b0fffa58c0d75a1e788fd0ad93dd3e79e186f8c6a798c2bce8fead5bad0e163e762d296102caf1dcb6aebb06985057563851d8385ddea584c753b2e105c682ce17e02e2aafeef48adb14235934ae43cd6a05da5e69ba87a5c0d318f9d0597f78573204e6782fd092238adc7ace2f642246890faced7ff47aeba4487caadb7bdc155ff2b89224e216abd7166c926788582371afd832da345a8b5bada93cd817d8491df8f402b0f282803dbfddaa74ccb7be471fe94b9d6664af99fec222c9f1fcd9724c7802f3d706ef5", @generic="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"]}, 0x11b8}, 0x1, 0x0, 0x0, 0x4}, 0x40004) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) recvmmsg(r3, &(0x7f0000002dc0)=[{{&(0x7f0000002d40)=@can, 0x80, &(0x7f0000002a40)}, 0x4}], 0x1, 0x40000100, 0x0) getgid() getdents64(r3, &(0x7f0000002f40)=""/4097, 0x1001) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="34010000170001002bbd7000fbdbdf25e0000002000000000000000000000000000004d56c000000fc0200000000000000000000000000010a010102000000000000000000000000640101010000000000000000000000004e2400004e2154a70200008016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000038ffffffff0000000000000000000000004e2200074e2200050200200016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="050000000000000001000100000000000700000000000000000000000100000006000000000000007f000000000000000f000000000000000100000000000000ffffffff0000000000800000000000000400000000000000000000000000000003000000000020000000000300000000ec00000005000000010000002dbd70000c0008"], 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) munmap(&(0x7f0000013000/0x1000)=nil, 0x1000) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0xe28, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) 17m46.030981028s ago: executing program 1 (id=2349): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@datasec={0x3, 0x0, 0x0, 0xf, 0x3, [], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x2e, 0x61, 0x2e]}}, &(0x7f00000014c0)=""/2, 0x3a, 0x2, 0x1}, 0x28) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/kcm\x00') copy_file_range(r2, 0x0, r0, 0x0, 0x800, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_gettime(r4, &(0x7f0000000000)) lstat(0x0, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x0) 17m30.520682837s ago: executing program 38 (id=2349): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@datasec={0x3, 0x0, 0x0, 0xf, 0x3, [], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x2e, 0x61, 0x2e]}}, &(0x7f00000014c0)=""/2, 0x3a, 0x2, 0x1}, 0x28) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/kcm\x00') copy_file_range(r2, 0x0, r0, 0x0, 0x800, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_gettime(r4, &(0x7f0000000000)) lstat(0x0, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x0) 15.658514729s ago: executing program 7 (id=5487): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, 0x0, &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) 15.249100062s ago: executing program 7 (id=5489): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x20, 0x80000001, 0x1, {{0x5, 0x4, 0x0, 0x21, 0x14, 0x64, 0x0, 0x80, 0x2f, 0x0, @multicast2, @remote}}}}) fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.722327602s ago: executing program 7 (id=5493): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20122, 0x60181}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfcfe}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001, 0xe15, 0xd113}}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) read$char_usb(r2, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6d4, 0x8, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x150, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff3}, {0x0, 0xfff1}, {0x7, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "36474ef234885eaefd993437a57a1db4e1b92364a421e6c0e6423af3de669271d958dd34fa19de0d84a8f72311bb55313174c464dc819c1aed2a3358a58f77bb26c32f5262797f55f13bd0584385125d60c6df314e2b92a2c960570966ec1c7cf268dc5e0ed1c32bef7cb1161ee5cc96376e3d306c050ef4d2fa64ff7a09794ecc9ca442a07ad2a3f7fb30c05225bb8a3b1a62a23b47d14d5fe8f66521f1df4eeb086bdb15e10b811383d4547d6b86220c751678506afd8a6635d93231f27d85a8664508c90e2018788a6c8c8efc5d9dbf6c30cfaea915ae8947a8c55cfb1234d1eb62bc76b73e71497fe54e39c31cf2effef29c4e75be326e967727827b9f8b"}, @TCA_GRED_DPS={0x10, 0x3, {0xb, 0x6, 0x0, 0x6}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x150}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x977, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_usb_disconnect(r0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 7.108747165s ago: executing program 7 (id=5546): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (fail_nth: 2) 6.204401411s ago: executing program 9 (id=5559): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @fwd={0x2}, @var={0x1, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x6f, 0x5f]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f00000100000074cf058600200002000a"], 0x60}}, 0x0) socket$key(0xf, 0x3, 0x2) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) read(r4, 0x0, 0x0) 5.650405171s ago: executing program 8 (id=5568): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)=0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000), 0x1, 0x121000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x1}}, 0x24, 0x3) getxattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x0) ioctl$XFS_IOC_FSINUMBERS(r2, 0xc0205867, &(0x7f00000002c0)={&(0x7f0000000300), 0xc20, &(0x7f0000000100)=[{}, {}], &(0x7f0000000280)}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x600000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, '\x00', @bt={0x8, 0x0, 0x3, 0x1, 0x5, 0x6606e9b1, 0x5, 0x4}}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f00000014c0)=@vmx={0x104, 0x0, 0x2080, {0x8000000, 0xb000, {0x3}, 0x1, 0x3}, {"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", "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"}}) 4.566921159s ago: executing program 8 (id=5580): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r1 = fanotify_init(0x81, 0x40000) fanotify_mark(r1, 0x105, 0x4800002b, r0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x28) (fail_nth: 1) 4.384266325s ago: executing program 8 (id=5583): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) 4.269240848s ago: executing program 8 (id=5585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x1040, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1040}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) fsetxattr$smack_xattr_label(r3, &(0x7f0000000000)='security.SMACK64EXEC\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='FN'], 0x2, 0x2) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9", 0x31}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af0", 0x9f}], 0x3}], 0x1, 0x44802) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)=""/53, 0x35}, {&(0x7f0000000100)=""/41, 0x29}, {&(0x7f00000003c0)=""/168, 0xa8}], 0x3}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) r5 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r5, 0x0, 0x5ce) 4.038944532s ago: executing program 9 (id=5588): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x60680, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 3.958979002s ago: executing program 9 (id=5590): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') pwrite64(r0, 0x0, 0x0, 0x800000000000001) r1 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r1, 0x6efc, 0x3900, 0xb, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x810, r0, 0x53995000) 3.819661766s ago: executing program 9 (id=5593): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x60680, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @local, 0x2}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x1}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0x7, 0xfe00, 0x2, 0x6, 0x54, 0x6, 0xf9}, &(0x7f0000000000)=0x9c) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 3.644406019s ago: executing program 2 (id=5594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x6c, r1, 0xa3959ba9c9468c63, 0x6, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9dc0faaa982619cd"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="dd483eabec969e8b5a4897a61506ac7bbbd37c892efb1005dd3b3b53c37b640d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="56fbe883aa28637b7eca8ecd189ed459def191ad83905dcd"}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x24000000) (fail_nth: 2) 3.584173235s ago: executing program 2 (id=5595): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) 3.416694501s ago: executing program 2 (id=5597): r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000280)={{r0}, 0x4, &(0x7f0000000140)=[0x2, 0x5, 0x5, 0x4], 0xffffffff, 0x9}) getdents64(0xffffffffffffff9c, &(0x7f0000000600)=""/4096, 0x1000) fsopen(&(0x7f0000000080)='zonefs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r4}, 0x38) r5 = socket$alg(0x26, 0x5, 0x0) syz_pidfd_open(0x0, 0x0) fcntl$setown(r5, 0x8, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x3c) accept4(r5, 0x0, 0x0, 0x800) 3.35033826s ago: executing program 2 (id=5599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x6c, r1, 0xa3959ba9c9468c63, 0x6, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9dc0faaa982619cd"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="dd483eabec969e8b5a4897a61506ac7bbbd37c892efb1005dd3b3b53c37b640d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="56fbe883aa28637b7eca8ecd189ed459def191ad83905dcd"}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x24000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r4) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8008050}, 0x44890) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wlan1\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x24004010}, 0x20004000) 3.246207243s ago: executing program 9 (id=5600): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa7}, {0x85, 0x0, 0x0, 0x2d}}, @generic={0x10, 0x7, 0x4, 0xfff, 0x7f}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0x5) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) write$sndseq(r5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000000c0)) syz_clone(0x8021000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bond0\x00', 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000140), 0x80, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$DRM_IOCTL_ADD_MAP(r6, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffb000/0x2000)=nil, 0x4e895f07, 0x5, 0x16}) r7 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 3.180340922s ago: executing program 2 (id=5602): socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_clone(0x8021000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x4}) (fail_nth: 2) 2.975736241s ago: executing program 4 (id=5603): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') pwrite64(r0, 0x0, 0x0, 0x800000000000001) r1 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r1, 0x6efc, 0x3900, 0xb, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x810, r0, 0x53995000) 2.879929889s ago: executing program 4 (id=5604): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000600)}) syz_usb_connect(0x4, 0xdef, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x2b, 0x4b, 0x90, 0x40, 0x1199, 0x90d2, 0x761f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xddd, 0x2, 0x2, 0x0, 0xb0, 0x1, [{{0x9, 0x4, 0xf2, 0xa, 0xd, 0x49, 0x58, 0x4f, 0x1, [], [{{0x9, 0x5, 0x1, 0x1, 0x10, 0x0, 0xd, 0x1, [@generic={0x1f, 0x6, "15b762a60d040483a0cd5f5b9615327676e11843b77bdedf76ebce5712"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x2, 0x1, 0xf0, [@generic={0xfe, 0x1, "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"}]}}, {{0x9, 0x5, 0x0, 0x14, 0x3ff, 0x7, 0xa9, 0x7, [@generic={0x53, 0x5, "bcc0c5a11a49fcb9901564c27358bfb4f4358be050b5df4828bb2533293a54fab569d98b375d347c64e63a07f415b713e6eb3bea96ab5b2cc15f890139ccc642e90574777050be39bd37635762d4ff4108"}, @generic={0xc6, 0x4, "68a4802ffb4ae929b73090a43bdc62fd489ed7f0a2b3dc0f0ec07b43a45bea418ef996b635876a81da93c77a0c31c7cbdbde4a70f417b8d334ad2e51fe3d419935cb33dc5e3e8fc6e6f10c3310f0062c4e74d3a734ec7ea7fa880c4ed1d15ada34ff704fedf786498b322efd540a6364573170a20274d73b73ca94f986554d1360b190ed6df29d10f8afc7e66aaa80f31e9d7c5d4ed7d51d1f840362c5d609aed1bcae65e1f8d2b5e28ec25388a0bee4ac693537ead29444961ddb690cd0643f04f9d6e6"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x5, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x4}]}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0x4, 0x2, 0x4, [@generic={0xf1, 0x11, "4d0649b0ca8aaaa0268cb7e348181e916d19b46b5171d2f0c61ecd9f083e5045b66897719115895346703effbb50997823105dfb5ce00d2b9b5b336593a5b338db53b56060b068bc3ccb311ac4e3769691f31573954eaf3c23feed6f0a509f088c6abfdfed8e9dd10d1ff1b3998b4d2dabe6ceaed99f80735d0dc033090452e001faf0ff99de461d6d6aa26be15c39b44e1e7a4e15280e4688cc6be25536ef36ca9ac3b20433072194ba08d693edbcb5abefc0c4da1d100d715dae6ed30096cb2d3fd46d7b0c777a9436797bcd523a285be0936fa83a37edd4b3168768cdb24f13f68bd3bd7028eeb33519b97f6b42"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x5, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xef, 0x401}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x3, 0xff, 0x6, [@generic={0x32, 0x2, "d6a887aa933fdc6361dd8eddef0be35a9b3d136604dba322bd78bf86a5516e5818f139f0ca1d95a3a591ba21e21f3139"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x0, 0xfb, 0x6, 0xd, [@generic={0xc4, 0x4, "e23e49a0cddbe1afd72ac91fe682e87b873cbad04cbd39c1fdc9c1060f966c78c52aabd807c5f8297684ba4b2f6b246e23ed9bdbc69ea6c4dd06bad8258c6b9832b3d7caa4275748e0e3f6357e43e5be91617b68609f6732a1b8df5b5d2f0d9b1d6b51a451008655a05412e02cc812361a894bfd0616fbca629ea0c45978fa67e5b6689806463e22103c7b8507f682aafb28a130785e30cebc99a1916f8701b63e977cb86f903541033d4821625a9ce9766a415a04822dc7550de1212d46c7caced0"}, @generic={0x8a, 0x23, "aee445dd39f2bbbeec3bdc092da059bcc0caeae2ff0f98bd9de2f6d6718a7991c34f74739cd8eaec25b342296730bf547000ba427c75dd8fd34245816e6c7c5267d47845223e9efd022d17646dd5c44ac017ce23a6e768f7460a6f5549a481dcb74fa4e0a48b6a78c436253570def8255d59cba3c8312e57f79f2ea69fa0b4dc9f991f43fad53b9d"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0xff, 0x3a, 0x2, [@generic={0xe1, 0x31, "3a70e4885c4c93d1433a9fd019ac3bd30d31e16183bbd22fa21fb680e4b5bcf5ca36c182916ee2c871275a8f5612ba5d3b36cff716e7fa2d13afead698acf4947a4e4dd4847bc82a7f53ce9107dfc1ac9f2d1f349c793dcb100376bacaadeb5465998567b7ec66e186d6a4a4d46e677e33502f9f296b6330209c6a8152129dbcff46a08bc0e045e39431f3892b198765d5bb5140f0b1d123707a50d6eea4e7de4afde1c0ba7bed9d09be431d63b151bfeec37c0c9cd8c5913769d6bbc8d6a50c8c91f5cd21757a4697caf318d27539e54cf172cbe93f33476c92a7d8eb287f"}]}}, {{0x9, 0x5, 0x8, 0x0, 0xc4b6e1cb8bed733d, 0x2, 0x4, 0x4f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xf, 0x3ff}]}}, {{0x9, 0x5, 0x3, 0xe, 0x3ff, 0xd9, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x8}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0xd, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x25, 0x8}, @generic={0x8a, 0x7, "8220d006bccdfc96851a3d637b04e74e9350ce868019ee92af371bb1fa990a3c4a42e5777d1a80639ee277561e64188db7b65b2980450e2fc1a1b4e8e50fac646ea1d14dd916b254c67dbbcd9860a41d034914a94a35efb358b936da458206fead4d5b6201b686f23b7438294758287b026447d7b4562092c98ada4afcdff3c883337ca7dc7aee31"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x10, 0x4, 0x8, 0x1, [@generic={0xfe, 0x23, "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"}]}}]}}, {{0x9, 0x4, 0xef, 0x2, 0xe, 0xf7, 0x70, 0x71, 0x51, [@uac_as, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "f63eed5b4b"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x5, 0xf85, 0x17}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0xa2}, @dmm={0x7, 0x24, 0x14, 0x5, 0x384}, @network_terminal={0x7, 0x24, 0xa, 0x6b, 0x2, 0x4, 0x90}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x10}, @dmm={0x7, 0x24, 0x14, 0x7, 0xc}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0xd, 0x0, 0x5}]}], [{{0x9, 0x5, 0xc, 0x10, 0x20, 0x6a, 0x11, 0x3, [@generic={0x87, 0xc, "a04aa3edf0b15c6bb086c9e3b0285e8f5aa88419bc79d7ffb1cc57f58e1e0191ce4c76132c80e8a7df6fa37bd2573ea16d1ce0b83b126278b3c7aa190abd279aadc117427b8e8f36740ce1d98dcbfe4a9244942d057dc12c5014205a793cf21ee023ce88b447804d9d450f7e6a8595991f4faf65f2599a89ee11cf1c12e4373c900eaf9f45"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x9, 0xfa, 0xb2, [@generic={0xb4, 0xf, "9c6de60b4514179f99bfb6492bd011829cbfb9322228812d34985706a0883cce0a8f3191ef21986c4d0269920a6ec696f341006d989af3f7aadd6b720a26cace94f03fd64052af1e901e6e682dcf3b6da223ac113b087621166ce7a99d3830f63c8dc0e5736a514843ed7676b49b6777cefcf81a08a80dfa9b118b69e348f7911e891193ddd545628e2fb2df8f7c397e6174b8d1423ab362f9d1c5ccc74886680c3a3c165334f458cc5121ccbfb2627546b3"}]}}, {{0x9, 0x5, 0x1, 0x1e, 0x400, 0x3, 0x7, 0xb, [@generic={0xdb, 0x6, "db2dc626f088e95678c5be4ca2104f1adc92ecf31cea41200ebbad66d10f59997a15ebc180543e0ee652835d9b9cb83e1489f247f916b448908f5876e1a31be5cf21992ca5efb8a255517ceaa2586d0b627fc91f262eb708d705b8556841ff21c561ca49aff1d61afa953046e424ff321966ebe533733f68ca730d39799cded918a371521a7cb0e071816f1e486e6a29e2adafdf9c9fc5b0c1184c5a934cebe9be4389e8e16663207865639656dd7c16a1ee0e609aa7513991a771d5148459a9a44953776cc243556c7c5abcf37e9846bd027e3870392b59f6"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x3, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0xe}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x2, 0x4, 0x80, [@generic={0x1e, 0x4, "bd786ce71d7deb4b1e306e247c350be5d15b74c69506f052bb2b08f7"}, @generic={0xc1, 0x4, "fb70fe8ef321261a5c91a84b7d77507c7c5aca1c7139d6cd9062f48e440005da455e84bebee96392bbf6b50fff22fc9536baa7d076311e44f98fe8863f12037190b7b5bb6d9375b71ea5339206b02fb1e64d8bf7c854314dafb3affa535f4fa5b545756d9a850a1bde9b084a75e5a2e2794c359ac5914de78ba763fed01652efc50d3cc285bd34b6199fe708285111e51f56625cae99cb40a4b5634ba2aa10514ed391b6cc198912fd26d26c41d002349e001eab280d7ef228343882c1a407"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x40, 0x7, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x5}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x8, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xffff}, @generic={0xb0, 0x9, "76e117c2d348dbab8cd2abfe9f8e7a7276d9d68ca098cb4aeae8478bdb908fed14e825c01dec5c94dd4d5d3b6a0c698419284dadbc2a1f7afda18acaf5e8909589da44a8870170ef4f51db7014e8f3dc5c152a0fb26902a0010757447052857038337866a4336c1353b86598ca419d6b786c414b1af122b4220a1884c3070ea6a82b50a758ba28eaaca5770bfee941d7492259c8507260f55fea778dee3dffc3b6d952d7451267af99a98b6939fa"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x6, 0x3, 0x2, [@generic={0xb8, 0x11, "2fea54138f7b145a48dfebe207f64c377bfb53c997a5efcae46e5ee283513464b4b03d39c4d9275d68516f64a6e7f1fd436995b3591c5ef6134a5e7ce17fa2e1612d35f3416c57e097b87c5914541079672c91b7a88f47fc91af0ff914bb8a5d127618e14307b9258698dab3bb88e5dee444bee793f8b0dcf22fcecbfbc3d5f40d990391ea932ce50560da92107d299703e6a040d1aefb30ea8e975674c41528edefe5f919ea8bb9864b6c49f9f284b9046309a04b3f"}, @generic={0x95, 0xd, "c3ec1e99eb2d62d60686b4efedf1a1ccbb237fbd1f599e59ec9cc2e947a4402dc5d1f29bd8947ac9804e81b1b3bb4bdf703d1af96a7cbb270253b02b972bae26daf96b685c1aa773f9a65da973e35425e37194da13629281a44893cba090eac95007c8030c3c40c1154fdb278c3a7fd42e553941393e183f8c034587b282fb5171e498b6471046904ec2f2364940a09bfc36ee"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x7, 0x7, 0x3}}, {{0x9, 0x5, 0xa, 0x1, 0x90, 0x6, 0x7f, 0x7d}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x4, 0x45, 0x7f, [@generic={0x3e, 0x9, "d256aec8d916c2b678b27d0bad06b11f34c0c53c73f19cfa5574a8369e30c620ec9e522557612504d5e57e28d04e8e70885c3e5af4f4075a9a29b166"}, @generic={0x6, 0x9, "39b3197b"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x81, 0x3, 0xff}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0x1, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf9, 0xb7}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x3f, 0x2, 0x1}}]}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x1, 0x5, 0x3, 0x0, 0xb}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xca, 0x5, 0xfff9}]}, 0x2, [{0xa5, &(0x7f0000000fc0)=@string={0xa5, 0x3, "7ee470bfea74668f50da0fd34e72f0757201985cf0f1c598b22c71a22ea2c067f619499d443834570a80cb382ab83cb714530e152bb7efce4137576e45828c5ece5e3eda54e82f5259f68d46a2851f6274e6dd705d4088075f9b70d61b11d919014bfd40ed9e354023ed4818d48e0b5a4928e050edc3eab6c9deaf24a47807c5fb0c547f73c43234c3e7243ddb708f00ac66fca3a7c57c97ec479e0b3d978ef2d3aee8"}}, {0x20, &(0x7f0000001080)=@string={0x20, 0x3, "7b1c056d783466e9de5f6a82a60633a569a2f2b5ba5330e0552093321493"}}]}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='target PCI:e:'], 0x13) r3 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="200100f200011e505dffed1533235357f366561a39428511b89d630efedf3d182032ea5b9a953e7ab51986c4538466ab0d103fc84fdec1fa9d5e986d32c25818725eac6a8ab0564d303b56cf75aea5ddfa96f522767885d046eb6b0daae0ef0084fe94caac23fb2654bace472891b371f49d4015e4b200b38d6263913b75438e1e168f7a4abf3161eb20d4bc0b03d4cc87e5a4"], 0x0}) 2.708728747s ago: executing program 4 (id=5605): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="430f320f07b083410fdf3f75c462a59a11b8050000b95ea997c00f01c1c7442400d87b0000c74424025b1d82ffc7442406000000000f011c248f4978d1812e4b00006466460f78c7f08a", 0x4a}], 0x1, 0x7d, 0x0, 0x0) 2.395276882s ago: executing program 9 (id=5606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="430f320f07b083410fdf3f75c462a59a11b8050000b95ea997c00f01c1c7442400d87b0000c74424025b1d82ffc7442406000000000f011c248f4978d1812e4b00006466460f78c7f08a", 0x4a}], 0x1, 0x7d, 0x0, 0x0) 2.356096767s ago: executing program 2 (id=5607): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) 1.834247152s ago: executing program 7 (id=5609): r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000280)={{r0}, 0x4, &(0x7f0000000140)=[0x2, 0x5, 0x5, 0x4], 0xffffffff, 0x9}) getdents64(0xffffffffffffff9c, &(0x7f0000000600)=""/4096, 0x1000) fsopen(&(0x7f0000000080)='zonefs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r4}, 0x38) r5 = socket$alg(0x26, 0x5, 0x0) syz_pidfd_open(0x0, 0x0) fcntl$setown(r5, 0x8, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x3c) accept4(r5, 0x0, 0x0, 0x800) 1.675942081s ago: executing program 4 (id=5610): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000023c0)=""/4103, 0x1007}], 0x1, 0x5, 0x0) unshare(0x2040400) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setsig(r2, 0xa, 0x2027) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x40, 0xd, 0x23, "dc15a3755bc8caf39519aa3d4c1be9d45bb08e741132aee88fe9bb28cf98896ee92d43"}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x85, 0x4, 0xff3}, 0x0, 0x0, 0x0}) 275.866545ms ago: executing program 4 (id=5611): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @fwd={0x2}, @var={0x1, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x6f, 0x5f]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f00000100000074cf058600200002000a"], 0x60}}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb) read(0xffffffffffffffff, 0x0, 0x0) 271.384987ms ago: executing program 7 (id=5612): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12ade2f66d61e30100000000453754e63c3591fcf4c3005509147200ed00000001090216616bdee1020000000000000000000000090400000303000000092100"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f00000006c0)=""/134) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "1a3952b5"}]}}, 0x0}, 0x0) 176.344827ms ago: executing program 8 (id=5613): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mknod(0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0xfffffffffffffffc, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="0500"]) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan1\x00'}) r1 = socket(0x11, 0x800000003, 0x0) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb5}}, 0x14) 100.472407ms ago: executing program 4 (id=5614): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x13, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x1000}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000005c0), 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='[}^\x91$\\{\xff+)+\'^!/a\x00', &(0x7f0000000180)='@\\-+--\x00', 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) rename(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xb) 0s ago: executing program 8 (id=5615): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'veth1_vlan\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{0x0, 0xdd12}], 0x1, 0x0, 0x0, 0x40800}, 0x20000050) kernel console output (not intermixed with test programs): de [ 2005.856721][T25437] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 2007.140620][T25456] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5253'. [ 2007.287769][ T5783] usb 3-1: USB disconnect, device number 85 [ 2007.293251][T25461] FAULT_INJECTION: forcing a failure. [ 2007.293251][T25461] name failslab, interval 1, probability 0, space 0, times 0 [ 2007.293285][T25461] CPU: 1 UID: 0 PID: 25461 Comm: syz.8.5256 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2007.293311][T25461] Tainted: [L]=SOFTLOCKUP [ 2007.293318][T25461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2007.293329][T25461] Call Trace: [ 2007.293336][T25461] [ 2007.293345][T25461] dump_stack_lvl+0xe8/0x150 [ 2007.293373][T25461] should_fail_ex+0x46b/0x600 [ 2007.293400][T25461] should_failslab+0xa8/0x100 [ 2007.293421][T25461] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 2007.293441][T25461] ? __alloc_skb+0x1d7/0x390 [ 2007.293464][T25461] ? lockdep_hardirqs_on+0x7a/0x110 [ 2007.293488][T25461] ? __alloc_skb+0x193/0x390 [ 2007.293511][T25461] __alloc_skb+0x1d7/0x390 [ 2007.293537][T25461] netlink_sendmsg+0x5d4/0xb40 [ 2007.293568][T25461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2007.293597][T25461] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2007.293619][T25461] ____sys_sendmsg+0xa4e/0xac0 [ 2007.293637][T25461] ? __might_fault+0xaf/0x130 [ 2007.293663][T25461] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2007.293696][T25461] ? import_iovec+0x73/0xa0 [ 2007.293721][T25461] ___sys_sendmsg+0x2a5/0x360 [ 2007.293737][T25461] ? __lock_acquire+0x6b5/0x2cf0 [ 2007.293764][T25461] ? __pfx____sys_sendmsg+0x10/0x10 [ 2007.293812][T25461] ? __fget_files+0x2a/0x420 [ 2007.293835][T25461] ? __fget_files+0x3a6/0x420 [ 2007.293865][T25461] __x64_sys_sendmsg+0x1c3/0x2a0 [ 2007.293886][T25461] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2007.293913][T25461] ? __pfx_ksys_write+0x10/0x10 [ 2007.293940][T25461] do_syscall_64+0x14d/0xf80 [ 2007.293962][T25461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2007.293979][T25461] ? trace_irq_disable+0x37/0x100 [ 2007.293994][T25461] ? clear_bhb_loop+0x40/0x90 [ 2007.294015][T25461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2007.294033][T25461] RIP: 0033:0x7fa05a86c629 [ 2007.294053][T25461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2007.294070][T25461] RSP: 002b:00007fa058ac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2007.294089][T25461] RAX: ffffffffffffffda RBX: 00007fa05aae5fa0 RCX: 00007fa05a86c629 [ 2007.294103][T25461] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 2007.294115][T25461] RBP: 00007fa058ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 2007.294127][T25461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2007.294139][T25461] R13: 00007fa05aae6038 R14: 00007fa05aae5fa0 R15: 00007ffedf22b038 [ 2007.294168][T25461] [ 2010.355248][T25483] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5264'. [ 2010.356969][T25487] 9p: Bad value for 'rfdno' [ 2012.449767][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 2012.449785][ T37] audit: type=1326 audit(1771401772.341:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25509 comm="syz.2.5270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43442c629 code=0x7ffc0000 [ 2012.453547][ T37] audit: type=1326 audit(1771401772.341:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25509 comm="syz.2.5270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43442c629 code=0x7ffc0000 [ 2012.453594][ T37] audit: type=1326 audit(1771401772.341:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25509 comm="syz.2.5270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc43442c629 code=0x7ffc0000 [ 2012.453632][ T37] audit: type=1326 audit(1771401772.341:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25509 comm="syz.2.5270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43442c629 code=0x7ffc0000 [ 2012.453669][ T37] audit: type=1326 audit(1771401772.341:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25509 comm="syz.2.5270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43442c629 code=0x7ffc0000 [ 2012.454499][ T37] audit: type=1326 audit(1771401772.341:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25509 comm="syz.2.5270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fc43442c629 code=0x7ffc0000 [ 2012.454770][ T37] audit: type=1326 audit(1771401772.341:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25509 comm="syz.2.5270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43442c629 code=0x7ffc0000 [ 2012.455174][ T37] audit: type=1326 audit(1771401772.341:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25509 comm="syz.2.5270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43442c629 code=0x7ffc0000 [ 2012.455413][ T37] audit: type=1326 audit(1771401772.341:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25509 comm="syz.2.5270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc43442c629 code=0x7ffc0000 [ 2012.455837][ T37] audit: type=1326 audit(1771401772.341:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25509 comm="syz.2.5270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43442c629 code=0x7ffc0000 [ 2013.628599][T10699] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2013.839941][T25511] kthread_run failed with err -4 [ 2013.858531][T10699] usb 5-1: Using ep0 maxpacket: 8 [ 2013.860819][T10699] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2013.867937][T10699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2013.867972][T10699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2013.867997][T10699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2013.868021][T10699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 2013.868047][T10699] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 2013.868072][T10699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2013.868095][T10699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2013.980862][T10699] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 2013.980894][T10699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.980914][T10699] usb 5-1: Product: syz [ 2013.980929][T10699] usb 5-1: Manufacturer: syz [ 2013.980943][T10699] usb 5-1: SerialNumber: syz [ 2014.020982][T10699] usb 5-1: config 0 descriptor?? [ 2014.205211][T25520] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2014.233470][T10699] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2015.258684][T25520] EXT4-fs: Conflicting test_dummy_encryption options [ 2016.049572][ T5783] usb 10-1: new full-speed USB device number 88 using dummy_hcd [ 2016.069702][T10699] usb 5-1: USB disconnect, device number 121 [ 2016.139821][T25548] udevd[25548]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2016.179308][T15936] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 2016.210541][ T5783] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2016.210581][ T5783] usb 10-1: config 0 has no interfaces? [ 2016.225236][T25546] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5279'. [ 2016.225305][T25546] netlink: 'syz.2.5279': attribute type 1 has an invalid length. [ 2016.238740][ T5783] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2016.238772][ T5783] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2016.238793][ T5783] usb 10-1: SerialNumber: syz [ 2016.280608][ T5783] usb 10-1: config 0 descriptor?? [ 2016.332751][T15936] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2016.333533][T15936] usb 8-1: not running at top speed; connect to a high speed hub [ 2016.356982][T15936] usb 8-1: config 3 has an invalid interface number: 161 but max is 0 [ 2016.357010][T15936] usb 8-1: config 3 has no interface number 0 [ 2016.357041][T15936] usb 8-1: config 3 interface 161 has no altsetting 0 [ 2016.381379][T15936] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=32.3e [ 2016.381411][T15936] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.381430][T15936] usb 8-1: Product: syz [ 2016.381444][T15936] usb 8-1: Manufacturer: syz [ 2016.381459][T15936] usb 8-1: SerialNumber: syz [ 2016.633195][ T5783] usb 10-1: USB disconnect, device number 88 [ 2016.647356][T25556] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5282'. [ 2016.837504][T15936] imon 8-1:3.161: unable to register, err -19 [ 2016.859900][T15936] usb 8-1: USB disconnect, device number 23 [ 2019.327103][T25571] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5286'. [ 2019.359092][T25580] FAULT_INJECTION: forcing a failure. [ 2019.359092][T25580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2019.359116][T25580] CPU: 0 UID: 0 PID: 25580 Comm: syz.4.5287 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2019.359131][T25580] Tainted: [L]=SOFTLOCKUP [ 2019.359135][T25580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2019.359142][T25580] Call Trace: [ 2019.359147][T25580] [ 2019.359152][T25580] dump_stack_lvl+0xe8/0x150 [ 2019.359172][T25580] should_fail_ex+0x46b/0x600 [ 2019.359188][T25580] _copy_from_user+0x2d/0xb0 [ 2019.359204][T25580] do_sock_getsockopt+0x165/0x3f0 [ 2019.359216][T25580] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2019.359226][T25580] ? __fget_files+0x3a6/0x420 [ 2019.359240][T25580] ? __fget_files+0x2a/0x420 [ 2019.359257][T25580] __x64_sys_getsockopt+0x1aa/0x250 [ 2019.359272][T25580] do_syscall_64+0x14d/0xf80 [ 2019.359286][T25580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2019.359296][T25580] ? trace_irq_disable+0x37/0x100 [ 2019.359305][T25580] ? clear_bhb_loop+0x40/0x90 [ 2019.359317][T25580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2019.359327][T25580] RIP: 0033:0x7f257265c629 [ 2019.359338][T25580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2019.359348][T25580] RSP: 002b:00007f25708b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2019.359360][T25580] RAX: ffffffffffffffda RBX: 00007f25728d5fa0 RCX: 00007f257265c629 [ 2019.359368][T25580] RDX: 000000000000001f RSI: 0000000000000084 RDI: 0000000000000005 [ 2019.359375][T25580] RBP: 00007f25708b6090 R08: 0000200000000100 R09: 0000000000000000 [ 2019.359382][T25580] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 2019.359388][T25580] R13: 00007f25728d6038 R14: 00007f25728d5fa0 R15: 00007fffb1b7d878 [ 2019.359405][T25580] [ 2019.499855][T25582] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5289'. [ 2019.501336][T25582] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5289'. [ 2019.629491][T25585] EXT4-fs: Conflicting test_dummy_encryption options [ 2022.060049][T25600] team_slave_0: entered promiscuous mode [ 2022.060132][T25600] team_slave_1: entered promiscuous mode [ 2022.060608][T25600] macvlan2: entered allmulticast mode [ 2022.060623][T25600] team0: entered allmulticast mode [ 2022.060635][T25600] team_slave_0: entered allmulticast mode [ 2022.060653][T25600] team_slave_1: entered allmulticast mode [ 2022.062440][T25600] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2022.075644][T25600] team0: left allmulticast mode [ 2022.075665][T25600] team_slave_0: left allmulticast mode [ 2022.075684][T25600] team_slave_1: left allmulticast mode [ 2022.075768][T25600] team_slave_0: left promiscuous mode [ 2022.075827][T25600] team_slave_1: left promiscuous mode [ 2023.658584][T10699] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 2023.863236][T10699] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2023.868044][T10699] usb 3-1: config 5 has an invalid interface number: 254 but max is 3 [ 2023.868082][T10699] usb 3-1: config 5 has an invalid interface number: 243 but max is 3 [ 2023.868104][T10699] usb 3-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 2023.868122][T10699] usb 3-1: config 5 has an invalid interface number: 183 but max is 3 [ 2023.868144][T10699] usb 3-1: config 5 has an invalid interface number: 236 but max is 3 [ 2023.868164][T10699] usb 3-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 2023.868185][T10699] usb 3-1: config 5 has no interface number 0 [ 2023.868201][T10699] usb 3-1: config 5 has no interface number 1 [ 2023.868217][T10699] usb 3-1: config 5 has no interface number 2 [ 2023.868233][T10699] usb 3-1: config 5 has no interface number 3 [ 2023.868338][T10699] usb 3-1: config 5 interface 254 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 2023.868366][T10699] usb 3-1: config 5 interface 254 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 8 [ 2023.868392][T10699] usb 3-1: config 5 interface 254 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2023.985542][T10699] usb 3-1: config 5 interface 254 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 8 [ 2023.985584][T10699] usb 3-1: config 5 interface 254 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 2023.985610][T10699] usb 3-1: config 5 interface 254 altsetting 0 endpoint 0xA is Bulk; changing to Interrupt [ 2023.985634][T10699] usb 3-1: config 5 interface 254 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 2023.985679][T10699] usb 3-1: config 5 interface 243 altsetting 236 has an invalid descriptor for endpoint zero, skipping [ 2023.985703][T10699] usb 3-1: config 5 interface 243 altsetting 236 endpoint 0x8 has invalid maxpacket 16, setting to 8 [ 2023.985730][T10699] usb 3-1: config 5 interface 243 altsetting 236 has a duplicate endpoint with address 0xA, skipping [ 2023.985753][T10699] usb 3-1: config 5 interface 243 altsetting 236 has a duplicate endpoint with address 0xA, skipping [ 2023.985790][T10699] usb 3-1: config 5 interface 183 altsetting 123 has a duplicate endpoint with address 0xB, skipping [ 2023.985813][T10699] usb 3-1: config 5 interface 183 altsetting 123 endpoint 0x1 is Bulk; changing to Interrupt [ 2023.985836][T10699] usb 3-1: config 5 interface 183 altsetting 123 has a duplicate endpoint with address 0xA, skipping [ 2023.985858][T10699] usb 3-1: config 5 interface 183 altsetting 123 has a duplicate endpoint with address 0xB, skipping [ 2023.985882][T10699] usb 3-1: config 5 interface 183 altsetting 123 endpoint 0xE has invalid maxpacket 16, setting to 8 [ 2023.985907][T10699] usb 3-1: config 5 interface 183 altsetting 123 has an invalid descriptor for endpoint zero, skipping [ 2023.985928][T10699] usb 3-1: config 5 interface 183 altsetting 123 has a duplicate endpoint with address 0x3, skipping [ 2023.985951][T10699] usb 3-1: config 5 interface 183 altsetting 123 has a duplicate endpoint with address 0xA, skipping [ 2023.985974][T10699] usb 3-1: config 5 interface 183 altsetting 123 has an invalid descriptor for endpoint zero, skipping [ 2023.985995][T10699] usb 3-1: config 5 interface 183 altsetting 123 has a duplicate endpoint with address 0x4, skipping [ 2023.986030][T10699] usb 3-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0xA, skipping [ 2023.986052][T10699] usb 3-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0x8, skipping [ 2023.986074][T10699] usb 3-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0xA, skipping [ 2023.986097][T10699] usb 3-1: config 5 interface 236 altsetting 80 endpoint 0x7 has invalid maxpacket 64, setting to 8 [ 2023.986123][T10699] usb 3-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0x7, skipping [ 2023.986145][T10699] usb 3-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0x1, skipping [ 2023.986168][T10699] usb 3-1: config 5 interface 236 altsetting 80 endpoint 0xC has invalid maxpacket 1023, setting to 8 [ 2023.986194][T10699] usb 3-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0xF, skipping [ 2023.986217][T10699] usb 3-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0x7, skipping [ 2023.986240][T10699] usb 3-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0x4, skipping [ 2023.986263][T10699] usb 3-1: config 5 interface 243 has no altsetting 0 [ 2023.986281][T10699] usb 3-1: config 5 interface 183 has no altsetting 0 [ 2023.986307][T10699] usb 3-1: config 5 interface 236 has no altsetting 0 [ 2024.146492][T25620] FAULT_INJECTION: forcing a failure. [ 2024.146492][T25620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2024.146531][T25620] CPU: 1 UID: 0 PID: 25620 Comm: syz.7.5293 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2024.146558][T25620] Tainted: [L]=SOFTLOCKUP [ 2024.146565][T25620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2024.146577][T25620] Call Trace: [ 2024.146584][T25620] [ 2024.146594][T25620] dump_stack_lvl+0xe8/0x150 [ 2024.146624][T25620] should_fail_ex+0x46b/0x600 [ 2024.146652][T25620] _copy_from_user+0x2d/0xb0 [ 2024.146677][T25620] kstrtouint_from_user+0xd6/0x180 [ 2024.146701][T25620] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2024.146738][T25620] proc_fail_nth_write+0x8e/0x210 [ 2024.146758][T25620] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2024.146783][T25620] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2024.146803][T25620] vfs_write+0x2a3/0xba0 [ 2024.146831][T25620] ? __pfx_vfs_write+0x10/0x10 [ 2024.146851][T25620] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2024.146874][T25620] ? lockdep_hardirqs_on+0x7a/0x110 [ 2024.146896][T25620] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2024.146918][T25620] ? mutex_lock_nested+0x152/0x1d0 [ 2024.146934][T25620] ? fdget_pos+0x252/0x320 [ 2024.146966][T25620] ksys_write+0x156/0x270 [ 2024.146985][T25620] ? __pfx_ksys_write+0x10/0x10 [ 2024.147015][T25620] do_syscall_64+0x14d/0xf80 [ 2024.147037][T25620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2024.147056][T25620] ? clear_bhb_loop+0x40/0x90 [ 2024.147086][T25620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2024.147103][T25620] RIP: 0033:0x7facf324cece [ 2024.147121][T25620] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2024.147137][T25620] RSP: 002b:00007facf149bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2024.147158][T25620] RAX: ffffffffffffffda RBX: 00007facf149c6c0 RCX: 00007facf324cece [ 2024.147172][T25620] RDX: 0000000000000001 RSI: 00007facf149c0a0 RDI: 0000000000000005 [ 2024.147184][T25620] RBP: 00007facf149c090 R08: 0000000000000000 R09: 0000000000000000 [ 2024.147197][T25620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2024.147209][T25620] R13: 00007facf3506218 R14: 00007facf3506180 R15: 00007ffcd32f96b8 [ 2024.147240][T25620] [ 2025.088951][T10699] usb 3-1: string descriptor 0 read error: -22 [ 2025.089117][T10699] usb 3-1: New USB device found, idVendor=083a, idProduct=7511, bcdDevice=e3.0c [ 2025.089141][T10699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.333444][T25624] sg_write: data in/out 262109/64 bytes for SCSI command 0x69-- guessing data in; [ 2025.333444][T25624] program syz.4.5302 not setting count and/or reply_len properly [ 2025.628630][T15936] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 2025.714681][T10699] usb 3-1: can't set config #5, error -71 [ 2025.744673][T10699] usb 3-1: USB disconnect, device number 86 [ 2025.797476][T15936] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2025.798031][T15936] usb 5-1: not running at top speed; connect to a high speed hub [ 2025.815278][T15936] usb 5-1: config 66 interface 0 has no altsetting 0 [ 2025.818052][T15936] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 2025.818081][T15936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.818098][T15936] usb 5-1: Product: ࡃ [ 2025.818111][T15936] usb 5-1: Manufacturer: 砕ಇ㒶ꙋ䚸後ᇠ硥컵谝쟚鷆Ꞃ噡觐㧇璘Ἲ쁉⾏럆豈늍氵咚赜㋐⋢桒䖊智鴤略ﺀ칊칆螱䍸梃쿇 [ 2025.818130][T15936] usb 5-1: SerialNumber: ࠁ [ 2026.935817][T25624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2026.936325][T25624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2026.971187][T15936] ati_remote2 5-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 2027.223561][T15936] usb 5-1: USB disconnect, device number 122 [ 2027.274671][T25636] EXT4-fs: Conflicting test_dummy_encryption options [ 2027.352649][ T5114] Bluetooth: hci4: connection err: -111 [ 2027.521570][T25642] fuse: Bad value for 'fd' [ 2028.209488][T15936] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 2028.738543][T15936] usb 8-1: Using ep0 maxpacket: 32 [ 2028.740760][T15936] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 2028.740787][T15936] usb 8-1: config 0 has no interface number 0 [ 2028.744268][T15936] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2028.744298][T15936] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.744319][T15936] usb 8-1: Product: syz [ 2028.744334][T15936] usb 8-1: Manufacturer: syz [ 2028.744349][T15936] usb 8-1: SerialNumber: syz [ 2028.835465][T15936] usb 8-1: config 0 descriptor?? [ 2028.845247][T15936] smsc95xx v2.0.0 [ 2030.529128][T25663] EXT4-fs: Conflicting test_dummy_encryption options [ 2030.701082][T25665] 9p: Bad value for 'rfdno' [ 2030.791512][T15936] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 2030.791543][T15936] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 2030.818921][T15936] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2030.819206][T15936] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 2030.824624][T15936] usb 8-1: USB disconnect, device number 24 [ 2031.083146][T25675] 9p: Bad value for 'rfdno' [ 2031.188537][T10699] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2031.354593][T10699] usb 5-1: Using ep0 maxpacket: 32 [ 2032.121753][T10699] usb 5-1: config 0 has an invalid interface number: 22 but max is 0 [ 2032.121782][T10699] usb 5-1: config 0 has no interface number 0 [ 2032.121827][T10699] usb 5-1: config 0 interface 22 has no altsetting 0 [ 2032.136394][T10699] usb 5-1: New USB device found, idVendor=0846, idProduct=4301, bcdDevice=22.c4 [ 2032.136425][T10699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.136445][T10699] usb 5-1: Product: syz [ 2032.136459][T10699] usb 5-1: Manufacturer: syz [ 2032.136473][T10699] usb 5-1: SerialNumber: syz [ 2032.143968][T10699] usb 5-1: config 0 descriptor?? [ 2032.299547][T25685] FAULT_INJECTION: forcing a failure. [ 2032.299547][T25685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2032.299584][T25685] CPU: 1 UID: 0 PID: 25685 Comm: syz.7.5326 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2032.299609][T25685] Tainted: [L]=SOFTLOCKUP [ 2032.299615][T25685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2032.299626][T25685] Call Trace: [ 2032.299633][T25685] [ 2032.299642][T25685] dump_stack_lvl+0xe8/0x150 [ 2032.299672][T25685] should_fail_ex+0x46b/0x600 [ 2032.299700][T25685] _copy_to_user+0x31/0xb0 [ 2032.299726][T25685] bpf_prog_test_run_syscall+0x337/0x4c0 [ 2032.299752][T25685] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 2032.299781][T25685] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 2032.299805][T25685] bpf_prog_test_run+0x2cd/0x340 [ 2032.299828][T25685] __sys_bpf+0x643/0x950 [ 2032.299855][T25685] ? __pfx___sys_bpf+0x10/0x10 [ 2032.299875][T25685] ? rt_mutex_slowunlock+0x1cb/0x300 [ 2032.299910][T25685] ? ksys_write+0x248/0x270 [ 2032.299931][T25685] ? __pfx_ksys_write+0x10/0x10 [ 2032.299957][T25685] __x64_sys_bpf+0x7c/0x90 [ 2032.299980][T25685] do_syscall_64+0x14d/0xf80 [ 2032.300003][T25685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2032.300020][T25685] ? trace_irq_disable+0x37/0x100 [ 2032.300035][T25685] ? clear_bhb_loop+0x40/0x90 [ 2032.300058][T25685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2032.300075][T25685] RIP: 0033:0x7facf328c629 [ 2032.300092][T25685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2032.300109][T25685] RSP: 002b:00007facf14de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2032.300130][T25685] RAX: ffffffffffffffda RBX: 00007facf3505fa0 RCX: 00007facf328c629 [ 2032.300145][T25685] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 2032.300157][T25685] RBP: 00007facf14de090 R08: 0000000000000000 R09: 0000000000000000 [ 2032.300169][T25685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2032.300180][T25685] R13: 00007facf3506038 R14: 00007facf3505fa0 R15: 00007ffcd32f96b8 [ 2032.300210][T25685] [ 2032.328705][T15854] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 2032.420721][T10699] usb 5-1: Could not find all expected endpoints [ 2032.453225][T10699] usb 5-1: USB disconnect, device number 123 [ 2032.488633][T15854] usb 9-1: Using ep0 maxpacket: 8 [ 2032.505301][T15854] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2032.522827][T15854] usb 9-1: config 13 has an invalid interface number: 183 but max is 0 [ 2032.522857][T15854] usb 9-1: config 13 has no interface number 0 [ 2032.522888][T15854] usb 9-1: config 13 interface 183 has no altsetting 0 [ 2032.527767][T15854] usb 9-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=68.eb [ 2032.527797][T15854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.527817][T15854] usb 9-1: Product: syz [ 2032.527830][T15854] usb 9-1: Manufacturer: syz [ 2032.527845][T15854] usb 9-1: SerialNumber: syz [ 2033.095104][T25680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2033.150332][T25680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2033.649644][T15854] uvcvideo 9-1:13.183: probe with driver uvcvideo failed with error -22 [ 2033.668776][T15854] usb 9-1: USB disconnect, device number 32 [ 2033.835389][T25705] 9p: Bad value for 'rfdno' [ 2033.988600][T15936] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 2034.179169][T25712] FAULT_INJECTION: forcing a failure. [ 2034.179169][T25712] name failslab, interval 1, probability 0, space 0, times 0 [ 2034.179205][T25712] CPU: 0 UID: 0 PID: 25712 Comm: syz.8.5335 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2034.179227][T25712] Tainted: [L]=SOFTLOCKUP [ 2034.179233][T25712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2034.179242][T25712] Call Trace: [ 2034.179249][T25712] [ 2034.179256][T25712] dump_stack_lvl+0xe8/0x150 [ 2034.179291][T25712] should_fail_ex+0x46b/0x600 [ 2034.179314][T25712] should_failslab+0xa8/0x100 [ 2034.179332][T25712] __kmalloc_noprof+0xdf/0x7b0 [ 2034.179349][T25712] ? unregister_netdevice_many_notify+0xc24/0x2360 [ 2034.179372][T25712] unregister_netdevice_many_notify+0xc24/0x2360 [ 2034.179394][T25712] ? do_raw_spin_unlock+0xf5/0x210 [ 2034.179417][T25712] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 2034.179443][T25712] ? __queue_work+0x1cf/0xff0 [ 2034.179467][T25712] unregister_netdevice_queue+0x31f/0x360 [ 2034.179486][T25712] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 2034.179501][T25712] ? queue_delayed_work_on+0x12f/0x1e0 [ 2034.179519][T25712] ? lockdep_hardirqs_on+0x7a/0x110 [ 2034.179538][T25712] ? queue_delayed_work_on+0x171/0x1e0 [ 2034.179565][T25712] __tun_detach+0xe4d/0x1600 [ 2034.179593][T25712] ? __tun_detach+0x93b/0x1600 [ 2034.179612][T25712] ? __pfx_tun_chr_close+0x10/0x10 [ 2034.179630][T25712] tun_chr_close+0x10d/0x1c0 [ 2034.179648][T25712] __fput+0x45e/0xa80 [ 2034.179678][T25712] fput_close_sync+0x11f/0x240 [ 2034.179697][T25712] ? __pfx_fput_close_sync+0x10/0x10 [ 2034.179725][T25712] __x64_sys_close+0x7e/0x110 [ 2034.179746][T25712] do_syscall_64+0x14d/0xf80 [ 2034.179765][T25712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2034.179780][T25712] ? trace_irq_disable+0x37/0x100 [ 2034.179793][T25712] ? clear_bhb_loop+0x40/0x90 [ 2034.179812][T25712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2034.179826][T25712] RIP: 0033:0x7fa05a86c629 [ 2034.179841][T25712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2034.179855][T25712] RSP: 002b:00007fa058ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2034.179872][T25712] RAX: ffffffffffffffda RBX: 00007fa05aae5fa0 RCX: 00007fa05a86c629 [ 2034.179883][T25712] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2034.179893][T25712] RBP: 00007fa058ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 2034.179903][T25712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2034.179913][T25712] R13: 00007fa05aae6038 R14: 00007fa05aae5fa0 R15: 00007ffedf22b038 [ 2034.179939][T25712] [ 2034.619173][T15936] usb 8-1: Using ep0 maxpacket: 8 [ 2034.695342][T15936] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2034.755842][T15936] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2034.755932][T15936] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2034.756002][T15936] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2034.756047][T15936] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 2034.756099][T15936] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 2034.756218][T15936] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2034.756271][T15936] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2035.218214][T15936] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 2035.218249][T15936] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2035.218270][T15936] usb 8-1: Product: syz [ 2035.218285][T15936] usb 8-1: Manufacturer: syz [ 2035.218300][T15936] usb 8-1: SerialNumber: syz [ 2035.260833][T15936] usb 8-1: config 0 descriptor?? [ 2035.262159][T25701] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2035.310679][T15936] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 2035.987641][T25701] EXT4-fs: Conflicting test_dummy_encryption options [ 2036.209408][ T8363] usb 10-1: new full-speed USB device number 89 using dummy_hcd [ 2036.340978][T15936] usb 8-1: USB disconnect, device number 25 [ 2036.360619][ T8363] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2036.360664][ T8363] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2036.360678][ T8363] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.401408][ T8363] usb 10-1: config 0 descriptor?? [ 2036.411596][T25721] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2036.518341][T25738] udevd[25738]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2036.638714][T25743] 9p: Bad value for 'rfdno' [ 2036.834483][T25721] CUSE: info not properly terminated [ 2036.881287][ T8363] elan 0003:04F3:0755.002F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 2037.064794][ T8363] usb 10-1: USB disconnect, device number 89 [ 2037.149580][T25747] FAULT_INJECTION: forcing a failure. [ 2037.149580][T25747] name failslab, interval 1, probability 0, space 0, times 0 [ 2037.149615][T25747] CPU: 0 UID: 0 PID: 25747 Comm: syz.7.5348 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2037.149642][T25747] Tainted: [L]=SOFTLOCKUP [ 2037.149649][T25747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2037.149660][T25747] Call Trace: [ 2037.149668][T25747] [ 2037.149677][T25747] dump_stack_lvl+0xe8/0x150 [ 2037.149706][T25747] should_fail_ex+0x46b/0x600 [ 2037.149759][T25747] should_failslab+0xa8/0x100 [ 2037.149783][T25747] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 2037.149803][T25747] ? __alloc_skb+0x1d7/0x390 [ 2037.149825][T25747] ? lockdep_hardirqs_on+0x7a/0x110 [ 2037.149845][T25747] ? __alloc_skb+0x193/0x390 [ 2037.149866][T25747] __alloc_skb+0x1d7/0x390 [ 2037.149894][T25747] netlink_sendmsg+0x5d4/0xb40 [ 2037.149925][T25747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2037.149954][T25747] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2037.149978][T25747] ____sys_sendmsg+0xa4e/0xac0 [ 2037.149997][T25747] ? __might_fault+0xaf/0x130 [ 2037.150023][T25747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2037.150050][T25747] ? import_iovec+0x73/0xa0 [ 2037.150081][T25747] ___sys_sendmsg+0x2a5/0x360 [ 2037.150098][T25747] ? __lock_acquire+0x6b5/0x2cf0 [ 2037.150125][T25747] ? __pfx____sys_sendmsg+0x10/0x10 [ 2037.150178][T25747] ? __fget_files+0x2a/0x420 [ 2037.150199][T25747] ? __fget_files+0x3a6/0x420 [ 2037.150231][T25747] __x64_sys_sendmsg+0x1c3/0x2a0 [ 2037.150260][T25747] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2037.150288][T25747] ? __pfx_ksys_write+0x10/0x10 [ 2037.150318][T25747] do_syscall_64+0x14d/0xf80 [ 2037.150340][T25747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2037.150358][T25747] ? trace_irq_disable+0x37/0x100 [ 2037.150374][T25747] ? clear_bhb_loop+0x40/0x90 [ 2037.150396][T25747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2037.150414][T25747] RIP: 0033:0x7facf328c629 [ 2037.150431][T25747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2037.150448][T25747] RSP: 002b:00007facf14de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2037.150469][T25747] RAX: ffffffffffffffda RBX: 00007facf3505fa0 RCX: 00007facf328c629 [ 2037.150483][T25747] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000003 [ 2037.150495][T25747] RBP: 00007facf14de090 R08: 0000000000000000 R09: 0000000000000000 [ 2037.150508][T25747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2037.150520][T25747] R13: 00007facf3506038 R14: 00007facf3505fa0 R15: 00007ffcd32f96b8 [ 2037.150550][T25747] [ 2037.547533][T25755] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5350'. [ 2037.919297][T15936] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 2038.394394][T25763] netlink: 'syz.2.5353': attribute type 13 has an invalid length. [ 2038.394417][T25763] netlink: 'syz.2.5353': attribute type 27 has an invalid length. [ 2038.438558][T15936] usb 9-1: Using ep0 maxpacket: 8 [ 2038.440999][T15936] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 2038.445803][T15936] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2038.445834][T15936] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.445854][T15936] usb 9-1: Product: syz [ 2038.445868][T15936] usb 9-1: Manufacturer: syz [ 2038.445877][T15936] usb 9-1: SerialNumber: syz [ 2038.463634][T15936] usb 9-1: config 0 descriptor?? [ 2038.517600][T15936] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2038.517663][T15936] usb 9-1: setting power ON [ 2038.517694][T15936] dvb-usb: bulk message failed: -22 (2/0) [ 2038.545549][T15936] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2038.552908][T15936] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2038.553002][T15936] usb 9-1: media controller created [ 2038.689526][T25776] 9p: Bad value for 'rfdno' [ 2038.698273][T25755] dvb-usb: bulk message failed: -22 (3/0) [ 2038.698302][T25755] dvb-usb: bulk message failed: -22 (8/0) [ 2038.706779][T15936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2038.818553][ T8363] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2038.868561][T10699] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 2038.897204][T15936] usb 9-1: selecting invalid altsetting 6 [ 2038.897228][T15936] usb 9-1: digital interface selection failed (-22) [ 2038.897243][T15936] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2038.921634][T15936] usb 9-1: setting power OFF [ 2038.921747][T15936] dvb-usb: bulk message failed: -22 (2/0) [ 2038.921758][T15936] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2038.921765][T15936] (NULL device *): no alternate interface [ 2038.973038][ T8363] usb 3-1: config 0 has an invalid interface number: 33 but max is 0 [ 2038.973066][ T8363] usb 3-1: config 0 has no interface number 0 [ 2038.973132][ T8363] usb 3-1: config 0 interface 33 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2038.973168][ T8363] usb 3-1: New USB device found, idVendor=2304, idProduct=0207, bcdDevice=be.87 [ 2038.973190][ T8363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2039.030190][ T8363] usb 3-1: config 0 descriptor?? [ 2039.062690][T10699] usb 8-1: Using ep0 maxpacket: 8 [ 2039.066895][T10699] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2039.084739][T10699] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2039.084772][T10699] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2039.084854][T10699] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2039.084878][T10699] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 2039.084906][T10699] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 2039.084930][T10699] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2039.084952][T10699] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2039.167356][T10699] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 2039.167388][T10699] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.167410][T10699] usb 8-1: Product: syz [ 2039.167424][T10699] usb 8-1: Manufacturer: syz [ 2039.167440][T10699] usb 8-1: SerialNumber: syz [ 2039.234797][T10699] usb 8-1: config 0 descriptor?? [ 2039.280671][T25774] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 2039.315800][T10699] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 2039.905518][T25789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5361'. [ 2039.905594][T25789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5361'. [ 2039.948599][T25774] EXT4-fs: Conflicting test_dummy_encryption options [ 2040.233121][T25738] udevd[25738]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2040.335001][T24029] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2040.408647][T15936] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2040.419547][T15936] usb 9-1: USB disconnect, device number 33 [ 2040.488618][T24029] usb 5-1: Using ep0 maxpacket: 16 [ 2040.490600][T24029] usb 5-1: config 252 has an invalid interface number: 15 but max is 0 [ 2040.490628][T24029] usb 5-1: config 252 has no interface number 0 [ 2040.490672][T24029] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2040.494369][T24029] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2040.494398][T24029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.494425][T24029] usb 5-1: Product: syz [ 2040.494440][T24029] usb 5-1: Manufacturer: syz [ 2040.494454][T24029] usb 5-1: SerialNumber: syz [ 2040.726752][T24029] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2041.418323][T25763] syz.2.5353 (25763) used greatest stack depth: 18184 bytes left [ 2041.667808][ T13] usb 5-1: Failed to submit usb control message: -71 [ 2041.667843][ T13] usb 5-1: unable to send the bmi data to the device: -71 [ 2041.667861][ T13] usb 5-1: unable to get target info from device [ 2041.667875][ T13] usb 5-1: could not get target info (-71) [ 2041.668115][ T13] usb 5-1: could not probe fw (-71) [ 2041.709646][T17755] usb 3-1: USB disconnect, device number 87 [ 2041.710634][T10699] usb 5-1: USB disconnect, device number 124 [ 2041.817831][T15936] usb 8-1: USB disconnect, device number 26 [ 2042.068567][T24029] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 2042.350836][T24029] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2042.350865][T24029] usb 9-1: config 0 has no interface number 0 [ 2042.350901][T24029] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2042.350914][T24029] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.354631][T24029] usb 9-1: config 0 descriptor?? [ 2042.369880][T24029] usb 9-1: selecting invalid altsetting 1 [ 2042.371326][T24029] dvb_ttusb_budget: ttusb_init_controller: error [ 2042.371346][T24029] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2042.469383][T15936] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 2043.286823][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 2043.286890][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 2043.301464][T15936] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2043.302034][T15936] usb 8-1: not running at top speed; connect to a high speed hub [ 2043.303302][T15936] usb 8-1: config 3 has an invalid interface number: 161 but max is 0 [ 2043.303326][T15936] usb 8-1: config 3 has no interface number 0 [ 2043.303357][T15936] usb 8-1: config 3 interface 161 has no altsetting 0 [ 2043.306217][T15936] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=32.3e [ 2043.306246][T15936] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.306266][T15936] usb 8-1: Product: syz [ 2043.306280][T15936] usb 8-1: Manufacturer: syz [ 2043.306296][T15936] usb 8-1: SerialNumber: syz [ 2043.382669][T24029] DVB: Unable to find symbol cx22700_attach() [ 2043.546178][T25833] FAULT_INJECTION: forcing a failure. [ 2043.546178][T25833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2043.546215][T25833] CPU: 1 UID: 0 PID: 25833 Comm: syz.2.5374 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2043.546246][T25833] Tainted: [L]=SOFTLOCKUP [ 2043.546253][T25833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2043.546264][T25833] Call Trace: [ 2043.546272][T25833] [ 2043.546281][T25833] dump_stack_lvl+0xe8/0x150 [ 2043.546312][T25833] should_fail_ex+0x46b/0x600 [ 2043.546340][T25833] _copy_from_user+0x2d/0xb0 [ 2043.546365][T25833] snd_pcm_oss_write2+0x227/0x440 [ 2043.546399][T25833] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 2043.546423][T25833] ? up_read+0x23/0x40 [ 2043.546449][T25833] snd_pcm_oss_write+0x6d1/0xbe0 [ 2043.546484][T25833] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 2043.546509][T25833] vfs_write+0x2a3/0xba0 [ 2043.546536][T25833] ? __pfx_vfs_write+0x10/0x10 [ 2043.546557][T25833] ? __fget_files+0x2a/0x420 [ 2043.546587][T25833] ? __fget_files+0x2a/0x420 [ 2043.546608][T25833] ? __fget_files+0x3a6/0x420 [ 2043.546633][T25833] ? __fget_files+0x2a/0x420 [ 2043.546662][T25833] ksys_write+0x156/0x270 [ 2043.546684][T25833] ? __pfx_ksys_write+0x10/0x10 [ 2043.546713][T25833] do_syscall_64+0x14d/0xf80 [ 2043.546735][T25833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2043.546752][T25833] ? trace_irq_disable+0x37/0x100 [ 2043.546769][T25833] ? clear_bhb_loop+0x40/0x90 [ 2043.546791][T25833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2043.546809][T25833] RIP: 0033:0x7fc43442c629 [ 2043.546826][T25833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2043.546842][T25833] RSP: 002b:00007fc432686028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2043.546862][T25833] RAX: ffffffffffffffda RBX: 00007fc4346a5fa0 RCX: 00007fc43442c629 [ 2043.546877][T25833] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000007 [ 2043.546889][T25833] RBP: 00007fc432686090 R08: 0000000000000000 R09: 0000000000000000 [ 2043.546902][T25833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2043.546913][T25833] R13: 00007fc4346a6038 R14: 00007fc4346a5fa0 R15: 00007fffc3855e48 [ 2043.546945][T25833] [ 2043.747097][T24029] DVB: Unable to find symbol tda10046_attach() [ 2043.747110][T24029] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2043.767661][T24029] usb 9-1: USB disconnect, device number 34 [ 2044.037185][T15936] imon 8-1:3.161: unable to register, err -19 [ 2044.050058][T15936] usb 8-1: USB disconnect, device number 27 [ 2044.301004][ T5783] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2045.079018][ T5783] usb 3-1: Using ep0 maxpacket: 8 [ 2045.084174][ T5783] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2045.085661][ T5783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2045.085694][ T5783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2045.085717][ T5783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2045.085740][ T5783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 2045.085767][ T5783] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 2045.085791][ T5783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2045.085814][ T5783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2045.181793][ T5783] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 2045.181825][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.181847][ T5783] usb 3-1: Product: syz [ 2045.181863][ T5783] usb 3-1: Manufacturer: syz [ 2045.181878][ T5783] usb 3-1: SerialNumber: syz [ 2045.229488][ T5783] usb 3-1: config 0 descriptor?? [ 2045.233557][T25844] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2045.255086][ T5783] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2046.896111][T25844] EXT4-fs: Conflicting test_dummy_encryption options [ 2046.908232][T25735] udevd[25735]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2047.040307][T15936] usb 3-1: USB disconnect, device number 88 [ 2047.308564][ T31] usb 5-1: new low-speed USB device number 125 using dummy_hcd [ 2047.462367][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2047.468135][ T31] usb 5-1: config 5 has an invalid interface number: 254 but max is 3 [ 2047.468165][ T31] usb 5-1: config 5 has an invalid interface number: 243 but max is 3 [ 2047.468184][ T31] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 2047.468202][ T31] usb 5-1: config 5 has an invalid interface number: 183 but max is 3 [ 2047.468220][ T31] usb 5-1: config 5 has an invalid interface number: 236 but max is 3 [ 2047.468230][ T31] usb 5-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 2047.468240][ T31] usb 5-1: config 5 has no interface number 0 [ 2047.468250][ T31] usb 5-1: config 5 has no interface number 1 [ 2047.468258][ T31] usb 5-1: config 5 has no interface number 2 [ 2047.468267][ T31] usb 5-1: config 5 has no interface number 3 [ 2047.468328][ T31] usb 5-1: config 5 interface 254 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 2047.468343][ T31] usb 5-1: config 5 interface 254 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 8 [ 2047.468356][ T31] usb 5-1: config 5 interface 254 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2047.468367][ T31] usb 5-1: config 5 interface 254 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 8 [ 2047.468381][ T31] usb 5-1: config 5 interface 254 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 2047.468393][ T31] usb 5-1: config 5 interface 254 altsetting 0 endpoint 0xA is Bulk; changing to Interrupt [ 2047.468405][ T31] usb 5-1: config 5 interface 254 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 2047.472995][ T31] usb 5-1: config 5 interface 243 altsetting 236 has an invalid descriptor for endpoint zero, skipping [ 2047.473015][ T31] usb 5-1: config 5 interface 243 altsetting 236 endpoint 0x8 has invalid maxpacket 16, setting to 8 [ 2047.473030][ T31] usb 5-1: config 5 interface 243 altsetting 236 has a duplicate endpoint with address 0xA, skipping [ 2047.473042][ T31] usb 5-1: config 5 interface 243 altsetting 236 has a duplicate endpoint with address 0xA, skipping [ 2047.473063][ T31] usb 5-1: config 5 interface 183 altsetting 123 has a duplicate endpoint with address 0xB, skipping [ 2047.473076][ T31] usb 5-1: config 5 interface 183 altsetting 123 endpoint 0x1 is Bulk; changing to Interrupt [ 2047.473088][ T31] usb 5-1: config 5 interface 183 altsetting 123 has a duplicate endpoint with address 0xA, skipping [ 2047.473101][ T31] usb 5-1: config 5 interface 183 altsetting 123 has a duplicate endpoint with address 0xB, skipping [ 2047.473113][ T31] usb 5-1: config 5 interface 183 altsetting 123 endpoint 0xE has invalid maxpacket 16, setting to 8 [ 2047.473127][ T31] usb 5-1: config 5 interface 183 altsetting 123 has an invalid descriptor for endpoint zero, skipping [ 2047.473138][ T31] usb 5-1: config 5 interface 183 altsetting 123 has a duplicate endpoint with address 0x3, skipping [ 2047.473150][ T31] usb 5-1: config 5 interface 183 altsetting 123 has a duplicate endpoint with address 0xA, skipping [ 2047.473163][ T31] usb 5-1: config 5 interface 183 altsetting 123 has an invalid descriptor for endpoint zero, skipping [ 2047.473173][ T31] usb 5-1: config 5 interface 183 altsetting 123 has a duplicate endpoint with address 0x4, skipping [ 2047.473192][ T31] usb 5-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0xA, skipping [ 2047.473204][ T31] usb 5-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0x8, skipping [ 2047.473215][ T31] usb 5-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0xA, skipping [ 2047.473226][ T31] usb 5-1: config 5 interface 236 altsetting 80 endpoint 0x7 has invalid maxpacket 64, setting to 8 [ 2047.473239][ T31] usb 5-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0x7, skipping [ 2047.473251][ T31] usb 5-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0x1, skipping [ 2047.473262][ T31] usb 5-1: config 5 interface 236 altsetting 80 endpoint 0xC has invalid maxpacket 1023, setting to 8 [ 2047.473275][ T31] usb 5-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0xF, skipping [ 2047.473286][ T31] usb 5-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0x7, skipping [ 2047.473298][ T31] usb 5-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0x4, skipping [ 2047.473309][ T31] usb 5-1: config 5 interface 243 has no altsetting 0 [ 2047.473319][ T31] usb 5-1: config 5 interface 183 has no altsetting 0 [ 2047.473328][ T31] usb 5-1: config 5 interface 236 has no altsetting 0 [ 2047.529008][T15936] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 2047.762475][T15936] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2047.762837][T15936] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2047.762914][T15936] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 2047.762963][T15936] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2047.763238][T15936] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2047.763287][T15936] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2048.400529][ T31] usb 5-1: string descriptor 0 read error: -22 [ 2048.400769][ T31] usb 5-1: New USB device found, idVendor=083a, idProduct=7511, bcdDevice=e3.0c [ 2048.400797][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2048.436454][T15936] usb 8-1: config 0 descriptor?? [ 2048.450745][T25869] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2048.450953][T25869] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2048.474120][T25883] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5391'. [ 2048.474205][T25883] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5391'. [ 2048.639854][T15936] rc_core: IR keymap rc-hauppauge not found [ 2048.639876][T15936] Registered IR keymap rc-empty [ 2048.640327][T15936] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 2048.660794][T15936] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 2049.026386][T15936] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 2049.503611][ T8363] usb 5-1: USB disconnect, device number 125 [ 2049.530534][T15936] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input80 [ 2049.538727][T10699] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 2049.658973][T15936] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 2049.678916][T15936] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 2049.698599][T10699] usb 9-1: Using ep0 maxpacket: 16 [ 2049.698921][T15936] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 2049.700736][T10699] usb 9-1: config 252 has an invalid interface number: 15 but max is 0 [ 2049.700763][T10699] usb 9-1: config 252 has no interface number 0 [ 2049.700808][T10699] usb 9-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2049.703489][T10699] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2049.703519][T10699] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2049.703540][T10699] usb 9-1: Product: syz [ 2049.703556][T10699] usb 9-1: Manufacturer: syz [ 2049.703569][T10699] usb 9-1: SerialNumber: syz [ 2049.718854][T15936] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 2049.738946][T15936] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 2049.767271][T15936] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 2049.794450][T15936] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 2049.808898][T15936] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 2049.828868][T15936] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 2049.848931][T15936] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 2049.867088][T10699] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2050.038004][T20297] usb 9-1: Failed to submit usb control message: -71 [ 2050.038041][T20297] usb 9-1: unable to send the bmi data to the device: -71 [ 2050.038059][T20297] usb 9-1: unable to get target info from device [ 2050.038074][T20297] usb 9-1: could not get target info (-71) [ 2050.038326][T20297] usb 9-1: could not probe fw (-71) [ 2050.059696][T24545] usb 9-1: USB disconnect, device number 35 [ 2050.901603][T15936] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 2050.901631][T15936] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2050.967227][T15936] usb 8-1: USB disconnect, device number 28 [ 2051.223026][ T31] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2051.436314][ T31] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 2051.436404][ T31] usb 3-1: config 1 has no interface number 0 [ 2051.436905][ T31] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 2051.436996][ T31] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2051.437078][ T31] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2051.597404][ T31] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 2051.597493][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.597607][ T31] usb 3-1: Product: syz [ 2051.597797][ T31] usb 3-1: Manufacturer: syz [ 2051.597984][ T31] usb 3-1: SerialNumber: syz [ 2051.816975][T25901] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2052.828628][T25901] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2053.034383][ T31] usb 3-1: Incompatible driver and firmware versions [ 2053.039002][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 2053.039019][ T37] audit: type=1326 audit(1771401812.921:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25925 comm="syz.8.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05a86c629 code=0x7ffc0000 [ 2053.039059][ T37] audit: type=1326 audit(1771401812.931:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25926 comm="syz.7.5405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facf328c629 code=0x7ffc0000 [ 2053.039094][ T37] audit: type=1326 audit(1771401812.931:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25925 comm="syz.8.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05a86c629 code=0x7ffc0000 [ 2053.039315][ T37] audit: type=1326 audit(1771401812.931:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25926 comm="syz.7.5405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facf328c629 code=0x7ffc0000 [ 2053.040152][ T37] audit: type=1326 audit(1771401812.931:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25925 comm="syz.8.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fa05a86c629 code=0x7ffc0000 [ 2053.040190][ T37] audit: type=1326 audit(1771401812.931:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25925 comm="syz.8.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05a86c629 code=0x7ffc0000 [ 2053.040225][ T37] audit: type=1326 audit(1771401812.931:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25925 comm="syz.8.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05a86c629 code=0x7ffc0000 [ 2053.040559][ T37] audit: type=1326 audit(1771401812.931:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25925 comm="syz.8.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa05a86c629 code=0x7ffc0000 [ 2053.109828][ T37] audit: type=1326 audit(1771401813.001:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25926 comm="syz.7.5405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7facf328c629 code=0x7ffc0000 [ 2053.109876][ T37] audit: type=1326 audit(1771401813.001:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25926 comm="syz.7.5405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facf328c629 code=0x7ffc0000 [ 2053.188652][ T8363] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2053.297813][T25931] netlink: 148 bytes leftover after parsing attributes in process `syz.8.5404'. [ 2053.297888][T25931] netlink: 'syz.8.5404': attribute type 1 has an invalid length. [ 2053.348581][ T8363] usb 5-1: Using ep0 maxpacket: 8 [ 2053.355660][ T8363] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2053.367158][ T8363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2053.367192][ T8363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2053.367215][ T8363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2053.367250][ T8363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 2053.367276][ T8363] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 2053.367301][ T8363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2053.367322][ T8363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2053.376440][ T8363] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 2053.376470][ T8363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2053.376549][ T8363] usb 5-1: Product: syz [ 2053.376572][ T8363] usb 5-1: Manufacturer: syz [ 2053.376586][ T8363] usb 5-1: SerialNumber: syz [ 2053.483611][ T8363] usb 5-1: config 0 descriptor?? [ 2053.484953][T25923] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2053.549183][T25932] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5405'. [ 2053.549253][T25932] netlink: 'syz.7.5405': attribute type 1 has an invalid length. [ 2053.560865][ T8363] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2053.737136][T25923] EXT4-fs: Conflicting test_dummy_encryption options [ 2053.991951][ T807] usb 9-1: new low-speed USB device number 36 using dummy_hcd [ 2054.062794][T25953] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5408'. [ 2054.144665][T25593] udevd[25593]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2054.147239][ T8363] usb 5-1: USB disconnect, device number 126 [ 2054.152254][ T807] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2054.157149][ T807] usb 9-1: config 5 has an invalid interface number: 254 but max is 3 [ 2054.157176][ T807] usb 9-1: config 5 has an invalid interface number: 243 but max is 3 [ 2054.157196][ T807] usb 9-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 2054.157214][ T807] usb 9-1: config 5 has an invalid interface number: 183 but max is 3 [ 2054.157235][ T807] usb 9-1: config 5 has an invalid interface number: 236 but max is 3 [ 2054.157258][ T807] usb 9-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 2054.157276][ T807] usb 9-1: config 5 has no interface number 0 [ 2054.157292][ T807] usb 9-1: config 5 has no interface number 1 [ 2054.157309][ T807] usb 9-1: config 5 has no interface number 2 [ 2054.157324][ T807] usb 9-1: config 5 has no interface number 3 [ 2054.157455][ T807] usb 9-1: config 5 interface 254 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 2054.157482][ T807] usb 9-1: config 5 interface 254 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 8 [ 2054.157507][ T807] usb 9-1: config 5 interface 254 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2054.157529][ T807] usb 9-1: config 5 interface 254 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 8 [ 2054.157555][ T807] usb 9-1: config 5 interface 254 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 2054.157578][ T807] usb 9-1: config 5 interface 254 altsetting 0 endpoint 0xA is Bulk; changing to Interrupt [ 2054.157600][ T807] usb 9-1: config 5 interface 254 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 2054.157637][ T807] usb 9-1: config 5 interface 243 altsetting 236 has an invalid descriptor for endpoint zero, skipping [ 2054.157659][ T807] usb 9-1: config 5 interface 243 altsetting 236 endpoint 0x8 has invalid maxpacket 16, setting to 8 [ 2054.157685][ T807] usb 9-1: config 5 interface 243 altsetting 236 has a duplicate endpoint with address 0xA, skipping [ 2054.157707][ T807] usb 9-1: config 5 interface 243 altsetting 236 has a duplicate endpoint with address 0xA, skipping [ 2054.157742][ T807] usb 9-1: config 5 interface 183 altsetting 123 has a duplicate endpoint with address 0xB, skipping [ 2054.157765][ T807] usb 9-1: config 5 interface 183 altsetting 123 endpoint 0x1 is Bulk; changing to Interrupt [ 2054.157786][ T807] usb 9-1: config 5 interface 183 altsetting 123 has a duplicate endpoint with address 0xA, skipping [ 2054.157808][ T807] usb 9-1: config 5 interface 183 altsetting 123 has a duplicate endpoint with address 0xB, skipping [ 2054.157831][ T807] usb 9-1: config 5 interface 183 altsetting 123 endpoint 0xE has invalid maxpacket 16, setting to 8 [ 2054.157856][ T807] usb 9-1: config 5 interface 183 altsetting 123 has an invalid descriptor for endpoint zero, skipping [ 2054.157877][ T807] usb 9-1: config 5 interface 183 altsetting 123 has a duplicate endpoint with address 0x3, skipping [ 2054.157899][ T807] usb 9-1: config 5 interface 183 altsetting 123 has a duplicate endpoint with address 0xA, skipping [ 2054.157921][ T807] usb 9-1: config 5 interface 183 altsetting 123 has an invalid descriptor for endpoint zero, skipping [ 2054.157941][ T807] usb 9-1: config 5 interface 183 altsetting 123 has a duplicate endpoint with address 0x4, skipping [ 2054.157976][ T807] usb 9-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0xA, skipping [ 2054.157999][ T807] usb 9-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0x8, skipping [ 2054.158024][ T807] usb 9-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0xA, skipping [ 2054.158050][ T807] usb 9-1: config 5 interface 236 altsetting 80 endpoint 0x7 has invalid maxpacket 64, setting to 8 [ 2054.158075][ T807] usb 9-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0x7, skipping [ 2054.158096][ T807] usb 9-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0x1, skipping [ 2054.158118][ T807] usb 9-1: config 5 interface 236 altsetting 80 endpoint 0xC has invalid maxpacket 1023, setting to 8 [ 2054.158143][ T807] usb 9-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0xF, skipping [ 2054.158165][ T807] usb 9-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0x7, skipping [ 2054.158187][ T807] usb 9-1: config 5 interface 236 altsetting 80 has a duplicate endpoint with address 0x4, skipping [ 2054.158209][ T807] usb 9-1: config 5 interface 243 has no altsetting 0 [ 2054.158226][ T807] usb 9-1: config 5 interface 183 has no altsetting 0 [ 2054.158243][ T807] usb 9-1: config 5 interface 236 has no altsetting 0 [ 2054.164486][ T807] usb 9-1: string descriptor 0 read error: -22 [ 2054.164617][ T807] usb 9-1: New USB device found, idVendor=083a, idProduct=7511, bcdDevice=e3.0c [ 2054.164641][ T807] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.263101][T25946] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 2054.266651][T25946] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 2054.328639][T10699] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 2054.491491][T10699] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 2054.491553][T10699] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2054.493099][T10699] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2054.493127][T10699] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2054.493148][T10699] usb 8-1: Manufacturer: syz [ 2054.528328][ T807] usb 9-1: USB disconnect, device number 36 [ 2054.559627][T10699] usb 8-1: config 0 descriptor?? [ 2055.686899][ T8363] usb 3-1: USB disconnect, device number 89 [ 2055.750009][T10699] rc_core: IR keymap rc-hauppauge not found [ 2055.750030][T10699] Registered IR keymap rc-empty [ 2055.751818][T10699] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 2055.764298][T25951] tipc: Started in network mode [ 2055.764330][T25951] tipc: Node identity 00000074cf0586, cluster identity 4711 [ 2055.764458][T25951] tipc: Enabling of bearer rejected, failed to enable media [ 2055.786278][T10699] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input81 [ 2055.885389][T25963] syzkaller1: entered promiscuous mode [ 2055.885419][T25963] syzkaller1: entered allmulticast mode [ 2056.558166][T15936] usb 8-1: USB disconnect, device number 29 [ 2056.568204][T25971] netlink: 'syz.2.5414': attribute type 8 has an invalid length. [ 2056.731083][T25980] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5415'. [ 2056.731177][T25980] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5415'. [ 2057.099101][T15936] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2057.158786][T10699] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 2057.314800][T10699] usb 9-1: Using ep0 maxpacket: 16 [ 2057.317239][T10699] usb 9-1: config 252 has an invalid interface number: 15 but max is 0 [ 2057.317268][T10699] usb 9-1: config 252 has no interface number 0 [ 2057.317311][T10699] usb 9-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2057.325821][T10699] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2057.325851][T10699] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2057.325871][T10699] usb 9-1: Product: syz [ 2057.325885][T10699] usb 9-1: Manufacturer: syz [ 2057.325899][T10699] usb 9-1: SerialNumber: syz [ 2057.466537][T10699] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2057.592995][T20297] usb 9-1: Failed to submit usb control message: -71 [ 2057.593036][T20297] usb 9-1: unable to send the bmi data to the device: -71 [ 2057.593053][T20297] usb 9-1: unable to get target info from device [ 2057.593068][T20297] usb 9-1: could not get target info (-71) [ 2057.593304][T20297] usb 9-1: could not probe fw (-71) [ 2057.594989][T15936] usb 9-1: USB disconnect, device number 37 [ 2057.779215][ T31] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2057.958662][T10699] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 2058.019785][T20297] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2058.040397][T26018] nfs: Unknown parameter '>΍0C%ԝ53jn_/3#Jz)cM}(c$۔{' [ 2058.138537][T10699] usb 10-1: Using ep0 maxpacket: 8 [ 2058.442314][T10699] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2058.612650][T10699] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2058.612695][T10699] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2058.612719][T10699] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2058.612742][T10699] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 2058.612769][T10699] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 2058.612793][T10699] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2058.612816][T10699] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2058.706135][T10699] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 2058.706166][T10699] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.706187][T10699] usb 10-1: Product: syz [ 2058.706202][T10699] usb 10-1: Manufacturer: syz [ 2058.706216][T10699] usb 10-1: SerialNumber: syz [ 2058.713902][T10699] usb 10-1: config 0 descriptor?? [ 2058.725020][T26007] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2058.797508][T10699] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2058.996668][T26007] EXT4-fs: Conflicting test_dummy_encryption options [ 2059.407652][ T1148] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2059.407825][ T1148] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2060.470644][ T807] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2060.629790][T10699] usb 10-1: USB disconnect, device number 90 [ 2060.827355][T25735] udevd[25735]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2060.869332][ T37] kauditd_printk_skb: 38 callbacks suppressed [ 2060.869345][ T37] audit: type=1326 audit(1771401820.761:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26043 comm="syz.4.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257265c629 code=0x7ffc0000 [ 2060.869369][ T37] audit: type=1326 audit(1771401820.761:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26043 comm="syz.4.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257265c629 code=0x7ffc0000 [ 2060.888839][ T37] audit: type=1326 audit(1771401820.771:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26043 comm="syz.4.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f257265c629 code=0x7ffc0000 [ 2060.888885][ T37] audit: type=1326 audit(1771401820.781:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26043 comm="syz.4.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257265c629 code=0x7ffc0000 [ 2060.888921][ T37] audit: type=1326 audit(1771401820.781:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26043 comm="syz.4.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257265c629 code=0x7ffc0000 [ 2060.899418][ T37] audit: type=1326 audit(1771401820.791:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26043 comm="syz.4.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f257265c629 code=0x7ffc0000 [ 2061.128891][T26054] fuse: Bad value for 'user_id' [ 2061.128905][T26054] fuse: Bad value for 'user_id' [ 2061.368772][ T8363] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2061.860323][ T8363] usb 3-1: Using ep0 maxpacket: 8 [ 2061.931196][ T8363] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 2061.931228][ T8363] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.931249][ T8363] usb 3-1: Product: syz [ 2061.931263][ T8363] usb 3-1: Manufacturer: syz [ 2061.931277][ T8363] usb 3-1: SerialNumber: syz [ 2062.061207][ T8363] usb 3-1: config 0 descriptor?? [ 2062.062118][ T37] audit: type=1326 audit(1771401821.951:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26043 comm="syz.4.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257265c629 code=0x7ffc0000 [ 2062.062424][ T37] audit: type=1326 audit(1771401821.951:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26043 comm="syz.4.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257265c629 code=0x7ffc0000 [ 2062.311765][T26069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5442'. [ 2062.331683][ T8363] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 2062.339076][ T807] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 2062.424909][ T8363] gspca_sunplus: reg_w_riv err -71 [ 2062.425003][ T8363] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 2062.470739][ T8363] usb 3-1: USB disconnect, device number 90 [ 2062.553044][ T807] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2062.553755][ T807] usb 9-1: not running at top speed; connect to a high speed hub [ 2062.556636][ T807] usb 9-1: config 3 has an invalid interface number: 161 but max is 0 [ 2062.556665][ T807] usb 9-1: config 3 has no interface number 0 [ 2062.556695][ T807] usb 9-1: config 3 interface 161 has no altsetting 0 [ 2062.602469][ T807] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=32.3e [ 2062.602500][ T807] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.602527][ T807] usb 9-1: Product: syz [ 2062.602542][ T807] usb 9-1: Manufacturer: syz [ 2062.602557][ T807] usb 9-1: SerialNumber: syz [ 2062.668669][T10699] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2062.840661][T10699] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 2062.840721][T10699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2062.849669][T10699] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2062.849745][T10699] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2062.849766][T10699] usb 5-1: Manufacturer: syz [ 2062.940332][T10699] usb 5-1: config 0 descriptor?? [ 2063.220881][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2063.320486][T26067] tipc: Started in network mode [ 2063.320506][T26067] tipc: Node identity 00000074cf0586, cluster identity 4711 [ 2063.320543][T26067] tipc: Enabling of bearer rejected, failed to enable media [ 2063.442009][T10699] rc_core: IR keymap rc-hauppauge not found [ 2063.442032][T10699] Registered IR keymap rc-empty [ 2063.558813][T10699] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2063.618663][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2063.691216][ T807] imon 9-1:3.161: unable to register, err -19 [ 2064.788548][ T807] usb 9-1: USB disconnect, device number 38 [ 2064.832705][T10699] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input82 [ 2064.983247][T10699] usb 5-1: USB disconnect, device number 127 [ 2065.608304][T26103] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 2066.720842][T26097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2069.232162][T26122] FAULT_INJECTION: forcing a failure. [ 2069.232162][T26122] name failslab, interval 1, probability 0, space 0, times 0 [ 2069.232197][T26122] CPU: 1 UID: 0 PID: 26122 Comm: syz.4.5460 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2069.232223][T26122] Tainted: [L]=SOFTLOCKUP [ 2069.232230][T26122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2069.232241][T26122] Call Trace: [ 2069.232249][T26122] [ 2069.232257][T26122] dump_stack_lvl+0xe8/0x150 [ 2069.232287][T26122] should_fail_ex+0x46b/0x600 [ 2069.232314][T26122] should_failslab+0xa8/0x100 [ 2069.232337][T26122] __kmalloc_noprof+0xdf/0x7b0 [ 2069.232357][T26122] ? tomoyo_encode+0x28b/0x550 [ 2069.232382][T26122] tomoyo_encode+0x28b/0x550 [ 2069.232407][T26122] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2069.232437][T26122] ? tomoyo_path_number_perm+0x219/0x630 [ 2069.232462][T26122] tomoyo_path_number_perm+0x246/0x630 [ 2069.232489][T26122] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2069.232511][T26122] ? __lock_acquire+0x6b5/0x2cf0 [ 2069.232538][T26122] ? do_raw_spin_lock+0x12b/0x2f0 [ 2069.232596][T26122] ? __fget_files+0x2a/0x420 [ 2069.232621][T26122] ? __fget_files+0x2a/0x420 [ 2069.232641][T26122] ? __fget_files+0x3a6/0x420 [ 2069.232662][T26122] ? __fget_files+0x2a/0x420 [ 2069.232685][T26122] security_file_ioctl+0xc3/0x2a0 [ 2069.232712][T26122] __se_sys_ioctl+0x47/0x170 [ 2069.232734][T26122] do_syscall_64+0x14d/0xf80 [ 2069.232756][T26122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2069.232774][T26122] ? trace_irq_disable+0x37/0x100 [ 2069.232790][T26122] ? clear_bhb_loop+0x40/0x90 [ 2069.232812][T26122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2069.232830][T26122] RIP: 0033:0x7f257265c629 [ 2069.232849][T26122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2069.232865][T26122] RSP: 002b:00007f25708b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2069.232886][T26122] RAX: ffffffffffffffda RBX: 00007f25728d5fa0 RCX: 00007f257265c629 [ 2069.232900][T26122] RDX: 00002000000000c0 RSI: 0000000000003b85 RDI: 0000000000000003 [ 2069.232912][T26122] RBP: 00007f25708b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2069.232930][T26122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2069.232942][T26122] R13: 00007f25728d6038 R14: 00007f25728d5fa0 R15: 00007fffb1b7d878 [ 2069.232974][T26122] [ 2069.233799][T26122] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2069.769138][ T37] audit: type=1326 audit(1771401829.661:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26127 comm="syz.9.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1677c629 code=0x7ffc0000 [ 2069.769187][ T37] audit: type=1326 audit(1771401829.661:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26127 comm="syz.9.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1677c629 code=0x7ffc0000 [ 2069.796048][ T37] audit: type=1326 audit(1771401829.681:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26127 comm="syz.9.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b1677c629 code=0x7ffc0000 [ 2069.796093][ T37] audit: type=1326 audit(1771401829.681:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26127 comm="syz.9.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1677c629 code=0x7ffc0000 [ 2069.796129][ T37] audit: type=1326 audit(1771401829.681:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26127 comm="syz.9.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1677c629 code=0x7ffc0000 [ 2069.862022][ T37] audit: type=1326 audit(1771401829.751:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26127 comm="syz.9.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b1673cece code=0x7ffc0000 [ 2069.862071][ T37] audit: type=1326 audit(1771401829.751:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26127 comm="syz.9.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b1677c2bb code=0x7ffc0000 [ 2069.862108][ T37] audit: type=1326 audit(1771401829.751:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26127 comm="syz.9.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b1677c2bb code=0x7ffc0000 [ 2069.862143][ T37] audit: type=1326 audit(1771401829.751:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26127 comm="syz.9.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b1677c2bb code=0x7ffc0000 [ 2069.862178][ T37] audit: type=1326 audit(1771401829.751:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26127 comm="syz.9.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b1677c2bb code=0x7ffc0000 [ 2070.148622][ T8363] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 2071.529548][ T8363] usb 10-1: Using ep0 maxpacket: 16 [ 2071.533872][ T8363] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2071.533922][ T8363] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 2071.533946][ T8363] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2071.551681][ T8363] usb 10-1: config 0 descriptor?? [ 2071.569069][ T8363] uvcvideo 10-1:0.0: Found UVC 0.00 device (10c4:ea90) [ 2071.569102][ T8363] uvcvideo 10-1:0.0: No valid video chain found. [ 2071.658722][T15936] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2071.818202][T15936] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 2071.818260][T15936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2071.847002][T15936] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2071.847034][T15936] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2071.847055][T15936] usb 5-1: Manufacturer: syz [ 2072.776253][T15936] usb 5-1: config 0 descriptor?? [ 2072.776473][ T31] usb 10-1: USB disconnect, device number 91 [ 2072.818631][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2072.987877][T15936] usb 5-1: can't set config #0, error -71 [ 2072.997164][T15936] usb 5-1: USB disconnect, device number 2 [ 2076.229664][T25068] Bluetooth: hci4: command 0x0405 tx timeout [ 2076.308544][T17755] usb 10-1: new full-speed USB device number 92 using dummy_hcd [ 2076.472950][T17755] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2076.473012][T17755] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2076.473040][T17755] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2076.473067][T17755] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2076.477894][T17755] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2076.477925][T17755] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2076.477946][T17755] usb 10-1: Product: syz [ 2076.477961][T17755] usb 10-1: Manufacturer: syz [ 2076.477975][T17755] usb 10-1: SerialNumber: syz [ 2076.532019][T17755] usb 10-1: config 0 descriptor?? [ 2076.684506][T26183] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5480'. [ 2076.789053][T17755] radio-si470x 10-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2076.789078][T17755] radio-si470x 10-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2077.007741][T26174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2077.008269][T26174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2077.018725][ T8363] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 2077.171390][ T8363] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 2077.171429][ T8363] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2077.172657][ T8363] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2077.172686][ T8363] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2077.172705][ T8363] usb 9-1: Manufacturer: syz [ 2077.225953][ T8363] usb 9-1: config 0 descriptor?? [ 2077.301509][T17755] radio-si470x 10-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 2077.301537][T17755] radio-si470x 10-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 2077.301854][T17755] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -5 [ 2077.349333][T26192] FAULT_INJECTION: forcing a failure. [ 2077.349333][T26192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2077.349367][T26192] CPU: 1 UID: 0 PID: 26192 Comm: syz.7.5482 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2077.349393][T26192] Tainted: [L]=SOFTLOCKUP [ 2077.349399][T26192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2077.349409][T26192] Call Trace: [ 2077.349416][T26192] [ 2077.349424][T26192] dump_stack_lvl+0xe8/0x150 [ 2077.349451][T26192] should_fail_ex+0x46b/0x600 [ 2077.349478][T26192] _copy_to_user+0x31/0xb0 [ 2077.349503][T26192] simple_read_from_buffer+0xe1/0x170 [ 2077.349529][T26192] proc_fail_nth_read+0x1be/0x230 [ 2077.349552][T26192] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2077.349574][T26192] ? rw_verify_area+0x2ac/0x4e0 [ 2077.349598][T26192] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2077.349617][T26192] vfs_read+0x212/0xa70 [ 2077.349642][T26192] ? __pfx_vfs_read+0x10/0x10 [ 2077.349659][T26192] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2077.349682][T26192] ? lockdep_hardirqs_on+0x7a/0x110 [ 2077.349703][T26192] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2077.349723][T26192] ? mutex_lock_nested+0x152/0x1d0 [ 2077.349739][T26192] ? fdget_pos+0x252/0x320 [ 2077.349769][T26192] ksys_read+0x156/0x270 [ 2077.349788][T26192] ? __pfx_ksys_read+0x10/0x10 [ 2077.349816][T26192] do_syscall_64+0x14d/0xf80 [ 2077.349837][T26192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.349853][T26192] ? trace_irq_disable+0x37/0x100 [ 2077.349868][T26192] ? clear_bhb_loop+0x40/0x90 [ 2077.349887][T26192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.349903][T26192] RIP: 0033:0x7facf324cece [ 2077.349919][T26192] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2077.349933][T26192] RSP: 002b:00007facf14bcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2077.349952][T26192] RAX: ffffffffffffffda RBX: 00007facf14bd6c0 RCX: 00007facf324cece [ 2077.349964][T26192] RDX: 000000000000000f RSI: 00007facf14bd0a0 RDI: 0000000000000004 [ 2077.349975][T26192] RBP: 00007facf14bd090 R08: 0000000000000000 R09: 0000000000000000 [ 2077.349986][T26192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2077.349995][T26192] R13: 00007facf3506128 R14: 00007facf3506090 R15: 00007ffcd32f96b8 [ 2077.350018][T26192] [ 2077.463947][T26183] tipc: Started in network mode [ 2077.463976][T26183] tipc: Node identity 00000074cf0586, cluster identity 4711 [ 2077.464020][T26183] tipc: Enabling of bearer rejected, failed to enable media [ 2078.091239][ T8363] rc_core: IR keymap rc-hauppauge not found [ 2078.091261][ T8363] Registered IR keymap rc-empty [ 2078.120163][ T8363] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 2078.121957][ T8363] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input84 [ 2078.169013][ T8363] usb 9-1: USB disconnect, device number 39 [ 2078.569880][T24545] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2078.718591][T24545] usb 3-1: Using ep0 maxpacket: 8 [ 2078.748795][T24545] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2078.748827][T24545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.748847][T24545] usb 3-1: Product: syz [ 2078.748862][T24545] usb 3-1: Manufacturer: syz [ 2078.748876][T24545] usb 3-1: SerialNumber: syz [ 2078.807083][T24545] usb 3-1: config 0 descriptor?? [ 2079.065380][T24545] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2079.163661][T10877] bridge_slave_1: left allmulticast mode [ 2079.163693][T10877] bridge_slave_1: left promiscuous mode [ 2079.164008][T10877] bridge0: port 2(bridge_slave_1) entered disabled state [ 2079.272811][T26207] openvswitch: netlink: Flow actions attr not present in new flow. [ 2079.289150][T10877] bridge_slave_0: left allmulticast mode [ 2079.291458][T10877] bridge_slave_0: left promiscuous mode [ 2079.314758][T10877] bridge0: port 1(bridge_slave_0) entered disabled state [ 2079.442756][T15936] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 2079.648577][T15936] usb 8-1: Using ep0 maxpacket: 32 [ 2079.658358][T15936] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2079.680385][T15936] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2079.680417][T15936] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2079.680438][T15936] usb 8-1: Product: syz [ 2079.680452][T15936] usb 8-1: Manufacturer: syz [ 2079.680467][T15936] usb 8-1: SerialNumber: syz [ 2079.768101][T15936] usb 8-1: config 0 descriptor?? [ 2079.786890][T26223] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 2079.816500][T15936] hub 8-1:0.0: bad descriptor, ignoring hub [ 2079.816540][T15936] hub 8-1:0.0: probe with driver hub failed with error -5 [ 2081.036771][T24545] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2082.528546][T15854] usb 10-1: USB disconnect, device number 92 [ 2082.633851][T26256] ntfs3(nullb0): Primary boot signature is not NTFS. [ 2082.635402][T26256] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 2082.660184][ T31] usb 8-1: USB disconnect, device number 30 [ 2083.784996][T26294] 9p: Bad value for 'rfdno' [ 2084.037769][T26303] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5523'. [ 2084.037853][T26303] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5523'. [ 2084.407857][T26317] FAULT_INJECTION: forcing a failure. [ 2084.407857][T26317] name failslab, interval 1, probability 0, space 0, times 0 [ 2084.407889][T26317] CPU: 1 UID: 0 PID: 26317 Comm: syz.4.5529 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2084.407911][T26317] Tainted: [L]=SOFTLOCKUP [ 2084.407916][T26317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2084.407926][T26317] Call Trace: [ 2084.407932][T26317] [ 2084.407940][T26317] dump_stack_lvl+0xe8/0x150 [ 2084.407966][T26317] should_fail_ex+0x46b/0x600 [ 2084.407988][T26317] should_failslab+0xa8/0x100 [ 2084.408008][T26317] __kmalloc_noprof+0xdf/0x7b0 [ 2084.408025][T26317] ? tomoyo_encode+0x28b/0x550 [ 2084.408046][T26317] tomoyo_encode+0x28b/0x550 [ 2084.408066][T26317] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2084.408091][T26317] ? tomoyo_path_number_perm+0x219/0x630 [ 2084.408112][T26317] tomoyo_path_number_perm+0x246/0x630 [ 2084.408135][T26317] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2084.408155][T26317] ? __lock_acquire+0x6b5/0x2cf0 [ 2084.408177][T26317] ? do_raw_spin_lock+0x12b/0x2f0 [ 2084.408221][T26317] ? __fget_files+0x2a/0x420 [ 2084.408243][T26317] ? __fget_files+0x2a/0x420 [ 2084.408260][T26317] ? __fget_files+0x3a6/0x420 [ 2084.408277][T26317] ? __fget_files+0x2a/0x420 [ 2084.408298][T26317] security_file_ioctl+0xc3/0x2a0 [ 2084.408322][T26317] __se_sys_ioctl+0x47/0x170 [ 2084.408340][T26317] do_syscall_64+0x14d/0xf80 [ 2084.408360][T26317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2084.408374][T26317] ? trace_irq_disable+0x37/0x100 [ 2084.408387][T26317] ? clear_bhb_loop+0x40/0x90 [ 2084.408416][T26317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2084.408430][T26317] RIP: 0033:0x7f257265c629 [ 2084.408445][T26317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2084.408459][T26317] RSP: 002b:00007f25708b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2084.408476][T26317] RAX: ffffffffffffffda RBX: 00007f25728d5fa0 RCX: 00007f257265c629 [ 2084.408487][T26317] RDX: 0000200000000280 RSI: 00000000c0189378 RDI: 0000000000000004 [ 2084.408497][T26317] RBP: 00007f25708b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2084.408507][T26317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2084.408516][T26317] R13: 00007f25728d6038 R14: 00007f25728d5fa0 R15: 00007fffb1b7d878 [ 2084.408543][T26317] [ 2084.425371][T26317] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2084.535901][T24545] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 2084.678582][T24545] usb 9-1: Using ep0 maxpacket: 16 [ 2084.680970][T24545] usb 9-1: config 252 has an invalid interface number: 15 but max is 0 [ 2084.680998][T24545] usb 9-1: config 252 has no interface number 0 [ 2084.681040][T24545] usb 9-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2084.683846][T24545] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2084.683875][T24545] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2084.683894][T24545] usb 9-1: Product: syz [ 2084.683908][T24545] usb 9-1: Manufacturer: syz [ 2084.683922][T24545] usb 9-1: SerialNumber: syz [ 2084.751670][T24545] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2085.515708][T10877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2085.570248][T10877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2085.591900][T10877] bond0 (unregistering): Released all slaves [ 2085.730282][T26225] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5475'. [ 2085.736922][T26223] bond0: entered promiscuous mode [ 2085.736948][T26223] bond_slave_0: entered promiscuous mode [ 2085.737189][T26223] bond_slave_1: entered promiscuous mode [ 2085.781943][T26223] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2085.831981][T10699] usb 3-1: USB disconnect, device number 91 [ 2085.915534][ T6167] usb 9-1: Failed to submit usb control message: -110 [ 2085.915569][ T6167] usb 9-1: unable to send the bmi data to the device: -110 [ 2085.915588][ T6167] usb 9-1: unable to get target info from device [ 2085.915603][ T6167] usb 9-1: could not get target info (-110) [ 2085.915697][ T6167] usb 9-1: could not probe fw (-110) [ 2086.089460][T26337] FAULT_INJECTION: forcing a failure. [ 2086.089460][T26337] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2086.089499][T26337] CPU: 0 UID: 0 PID: 26337 Comm: syz.4.5537 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2086.089527][T26337] Tainted: [L]=SOFTLOCKUP [ 2086.089534][T26337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2086.089545][T26337] Call Trace: [ 2086.089553][T26337] [ 2086.089562][T26337] dump_stack_lvl+0xe8/0x150 [ 2086.089590][T26337] should_fail_ex+0x46b/0x600 [ 2086.089617][T26337] get_futex_key+0x1ac/0x1690 [ 2086.089650][T26337] ? __pfx_get_futex_key+0x10/0x10 [ 2086.089669][T26337] ? __lock_acquire+0x6b5/0x2cf0 [ 2086.089694][T26337] ? __lock_acquire+0x6b5/0x2cf0 [ 2086.089723][T26337] futex_wake+0x114/0x580 [ 2086.089753][T26337] ? __pfx_futex_wake+0x10/0x10 [ 2086.089777][T26337] ? do_raw_spin_lock+0x12b/0x2f0 [ 2086.089809][T26337] do_futex+0x395/0x420 [ 2086.089830][T26337] ? __might_fault+0xaf/0x130 [ 2086.089855][T26337] ? __pfx_do_futex+0x10/0x10 [ 2086.089881][T26337] ? __might_fault+0xaf/0x130 [ 2086.089902][T26337] mm_release+0x103/0x290 [ 2086.089926][T26337] exit_mm+0x51/0x220 [ 2086.089942][T26337] ? unwind_deferred_task_exit+0x67/0xa0 [ 2086.089969][T26337] do_exit+0x62e/0x2320 [ 2086.089995][T26337] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2086.090018][T26337] ? lockdep_hardirqs_on+0x7a/0x110 [ 2086.090041][T26337] ? __pfx_do_exit+0x10/0x10 [ 2086.090062][T26337] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 2086.090081][T26337] ? reacquire_held_locks+0x104/0x190 [ 2086.090104][T26337] ? rt_spin_lock+0x1e0/0x400 [ 2086.090133][T26337] do_group_exit+0x21b/0x2d0 [ 2086.090155][T26337] ? rt_spin_unlock+0x160/0x200 [ 2086.090176][T26337] get_signal+0x125c/0x1310 [ 2086.090217][T26337] arch_do_signal_or_restart+0xbc/0x830 [ 2086.090241][T26337] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2086.090274][T26337] ? __x64_sys_recvmmsg+0x198/0x250 [ 2086.090303][T26337] exit_to_user_mode_loop+0x86/0x480 [ 2086.090325][T26337] ? rcu_is_watching+0x15/0xb0 [ 2086.090352][T26337] do_syscall_64+0x32d/0xf80 [ 2086.090373][T26337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2086.090391][T26337] ? trace_irq_disable+0x37/0x100 [ 2086.090407][T26337] ? clear_bhb_loop+0x40/0x90 [ 2086.090428][T26337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2086.090446][T26337] RIP: 0033:0x7f257265c629 [ 2086.090463][T26337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2086.090479][T26337] RSP: 002b:00007f2570895028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2086.090500][T26337] RAX: fffffffffffffe00 RBX: 00007f25728d6090 RCX: 00007f257265c629 [ 2086.090514][T26337] RDX: 0000000000000002 RSI: 0000200000009480 RDI: 0000000000000003 [ 2086.090525][T26337] RBP: 00007f2570895090 R08: 0000000000000000 R09: 0000000000000000 [ 2086.090537][T26337] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001 [ 2086.090549][T26337] R13: 00007f25728d6128 R14: 00007f25728d6090 R15: 00007fffb1b7d878 [ 2086.090579][T26337] [ 2086.429765][ T31] usb 9-1: USB disconnect, device number 40 [ 2086.809367][T26362] FAULT_INJECTION: forcing a failure. [ 2086.809367][T26362] name failslab, interval 1, probability 0, space 0, times 0 [ 2086.809403][T26362] CPU: 0 UID: 0 PID: 26362 Comm: syz.4.5548 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2086.809429][T26362] Tainted: [L]=SOFTLOCKUP [ 2086.809436][T26362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2086.809446][T26362] Call Trace: [ 2086.809454][T26362] [ 2086.809462][T26362] dump_stack_lvl+0xe8/0x150 [ 2086.809491][T26362] should_fail_ex+0x46b/0x600 [ 2086.809519][T26362] should_failslab+0xa8/0x100 [ 2086.809539][T26362] __kmalloc_noprof+0xdf/0x7b0 [ 2086.809559][T26362] ? tomoyo_encode+0x28b/0x550 [ 2086.809582][T26362] tomoyo_encode+0x28b/0x550 [ 2086.809606][T26362] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2086.809635][T26362] ? tomoyo_path_number_perm+0x219/0x630 [ 2086.809659][T26362] tomoyo_path_number_perm+0x246/0x630 [ 2086.809686][T26362] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2086.809708][T26362] ? __lock_acquire+0x6b5/0x2cf0 [ 2086.809735][T26362] ? do_raw_spin_lock+0x12b/0x2f0 [ 2086.809786][T26362] ? __fget_files+0x2a/0x420 [ 2086.809812][T26362] ? __fget_files+0x2a/0x420 [ 2086.809832][T26362] ? __fget_files+0x3a6/0x420 [ 2086.809853][T26362] ? __fget_files+0x2a/0x420 [ 2086.809879][T26362] security_file_ioctl+0xc3/0x2a0 [ 2086.809906][T26362] __se_sys_ioctl+0x47/0x170 [ 2086.809928][T26362] do_syscall_64+0x14d/0xf80 [ 2086.809960][T26362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2086.809978][T26362] ? trace_irq_disable+0x37/0x100 [ 2086.809994][T26362] ? clear_bhb_loop+0x40/0x90 [ 2086.810015][T26362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2086.810033][T26362] RIP: 0033:0x7f257265c629 [ 2086.810050][T26362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2086.810066][T26362] RSP: 002b:00007f25708b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2086.810086][T26362] RAX: ffffffffffffffda RBX: 00007f25728d5fa0 RCX: 00007f257265c629 [ 2086.810100][T26362] RDX: 0000200000000200 RSI: 0000000040047435 RDI: 0000000000000008 [ 2086.810113][T26362] RBP: 00007f25708b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2086.810126][T26362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2086.810138][T26362] R13: 00007f25728d6038 R14: 00007f25728d5fa0 R15: 00007fffb1b7d878 [ 2086.810170][T26362] [ 2086.810187][T26362] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2086.852831][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 2086.852849][ T37] audit: type=1326 audit(1771401846.741:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26363 comm="syz.9.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1677c629 code=0x7ffc0000 [ 2086.853673][ T37] audit: type=1326 audit(1771401846.741:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26363 comm="syz.9.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1677c629 code=0x7ffc0000 [ 2086.853989][ T37] audit: type=1326 audit(1771401846.741:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26363 comm="syz.9.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f8b1677c629 code=0x7ffc0000 [ 2086.854260][ T37] audit: type=1326 audit(1771401846.741:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26363 comm="syz.9.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1677c629 code=0x7ffc0000 [ 2086.854574][ T37] audit: type=1326 audit(1771401846.741:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26363 comm="syz.9.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1677c629 code=0x7ffc0000 [ 2086.854802][ T37] audit: type=1326 audit(1771401846.741:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26363 comm="syz.9.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b1677c629 code=0x7ffc0000 [ 2086.855028][ T37] audit: type=1326 audit(1771401846.741:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26363 comm="syz.9.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1677c629 code=0x7ffc0000 [ 2086.855439][ T37] audit: type=1326 audit(1771401846.741:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26363 comm="syz.9.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8b1677c629 code=0x7ffc0000 [ 2086.869508][ T37] audit: type=1326 audit(1771401846.761:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26363 comm="syz.9.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1677c629 code=0x7ffc0000 [ 2086.869555][ T37] audit: type=1326 audit(1771401846.761:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26363 comm="syz.9.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1677c629 code=0x7ffc0000 [ 2087.630193][T26360] FAULT_INJECTION: forcing a failure. [ 2087.630193][T26360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2087.630229][T26360] CPU: 0 UID: 0 PID: 26360 Comm: syz.7.5546 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2087.630256][T26360] Tainted: [L]=SOFTLOCKUP [ 2087.630263][T26360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2087.630273][T26360] Call Trace: [ 2087.630281][T26360] [ 2087.630289][T26360] dump_stack_lvl+0xe8/0x150 [ 2087.630319][T26360] should_fail_ex+0x46b/0x600 [ 2087.630345][T26360] _copy_from_user+0x2d/0xb0 [ 2087.630370][T26360] sctp_getsockopt_connectx3+0x165/0x360 [ 2087.630396][T26360] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 2087.630422][T26360] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 2087.630444][T26360] ? lockdep_hardirqs_on+0x7a/0x110 [ 2087.630470][T26360] sctp_getsockopt+0x984/0xb90 [ 2087.630492][T26360] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2087.630517][T26360] do_sock_getsockopt+0x2d3/0x3f0 [ 2087.630538][T26360] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2087.630558][T26360] ? __fget_files+0x3a6/0x420 [ 2087.630579][T26360] ? __fget_files+0x2a/0x420 [ 2087.630608][T26360] __x64_sys_getsockopt+0x1aa/0x250 [ 2087.630632][T26360] do_syscall_64+0x14d/0xf80 [ 2087.630653][T26360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2087.630671][T26360] ? trace_irq_disable+0x37/0x100 [ 2087.630687][T26360] ? clear_bhb_loop+0x40/0x90 [ 2087.630709][T26360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2087.630726][T26360] RIP: 0033:0x7facf328c629 [ 2087.630743][T26360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2087.630759][T26360] RSP: 002b:00007facf14bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2087.630779][T26360] RAX: ffffffffffffffda RBX: 00007facf3506090 RCX: 00007facf328c629 [ 2087.630793][T26360] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 2087.630804][T26360] RBP: 00007facf14bd090 R08: 0000200000000140 R09: 0000000000000000 [ 2087.630817][T26360] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 2087.630829][T26360] R13: 00007facf3506128 R14: 00007facf3506090 R15: 00007ffcd32f96b8 [ 2087.630859][T26360] [ 2087.636823][T26388] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5559'. [ 2087.878626][T24545] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 2088.039752][T26404] FAULT_INJECTION: forcing a failure. [ 2088.039752][T26404] name failslab, interval 1, probability 0, space 0, times 0 [ 2088.039858][T26404] CPU: 0 UID: 0 PID: 26404 Comm: syz.2.5567 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2088.039884][T26404] Tainted: [L]=SOFTLOCKUP [ 2088.039892][T26404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2088.039902][T26404] Call Trace: [ 2088.039910][T26404] [ 2088.039918][T26404] dump_stack_lvl+0xe8/0x150 [ 2088.039946][T26404] should_fail_ex+0x46b/0x600 [ 2088.039974][T26404] should_failslab+0xa8/0x100 [ 2088.039996][T26404] __kmalloc_noprof+0xdf/0x7b0 [ 2088.040014][T26404] ? kfree+0x4d/0x690 [ 2088.040029][T26404] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2088.040055][T26404] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2088.040076][T26404] ? tomoyo_domain+0xd8/0x130 [ 2088.040099][T26404] ? tomoyo_path_number_perm+0x219/0x630 [ 2088.040122][T26404] tomoyo_path_number_perm+0x246/0x630 [ 2088.040148][T26404] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2088.040171][T26404] ? __lock_acquire+0x6b5/0x2cf0 [ 2088.040197][T26404] ? do_raw_spin_lock+0x12b/0x2f0 [ 2088.040248][T26404] ? __fget_files+0x2a/0x420 [ 2088.040271][T26404] ? __fget_files+0x2a/0x420 [ 2088.040292][T26404] ? __fget_files+0x3a6/0x420 [ 2088.040313][T26404] ? __fget_files+0x2a/0x420 [ 2088.040336][T26404] security_file_ioctl+0xc3/0x2a0 [ 2088.040363][T26404] __se_sys_ioctl+0x47/0x170 [ 2088.040384][T26404] do_syscall_64+0x14d/0xf80 [ 2088.040405][T26404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2088.040422][T26404] ? trace_irq_disable+0x37/0x100 [ 2088.040439][T26404] ? clear_bhb_loop+0x40/0x90 [ 2088.040462][T26404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2088.040480][T26404] RIP: 0033:0x7fc43442c629 [ 2088.040496][T26404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2088.040513][T26404] RSP: 002b:00007fc432686028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2088.040533][T26404] RAX: ffffffffffffffda RBX: 00007fc4346a5fa0 RCX: 00007fc43442c629 [ 2088.040547][T26404] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000004 [ 2088.040559][T26404] RBP: 00007fc432686090 R08: 0000000000000000 R09: 0000000000000000 [ 2088.040572][T26404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2088.040584][T26404] R13: 00007fc4346a6038 R14: 00007fc4346a5fa0 R15: 00007fffc3855e48 [ 2088.040616][T26404] [ 2088.041957][T24545] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 2088.042012][T24545] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2088.043593][T24545] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2088.043620][T24545] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2088.043640][T24545] usb 10-1: Manufacturer: syz [ 2088.089013][T26404] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2088.110975][T24545] usb 10-1: config 0 descriptor?? [ 2088.458592][T24545] rc_core: IR keymap rc-hauppauge not found [ 2088.458614][T24545] Registered IR keymap rc-empty [ 2088.460383][T24545] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 2088.463412][T24545] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input85 [ 2088.798142][T26383] tipc: Enabling of bearer rejected, failed to enable media [ 2088.932513][ T31] usb 10-1: USB disconnect, device number 93 [ 2089.150391][T26433] FAULT_INJECTION: forcing a failure. [ 2089.150391][T26433] name failslab, interval 1, probability 0, space 0, times 0 [ 2089.150427][T26433] CPU: 0 UID: 0 PID: 26433 Comm: syz.4.5579 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2089.150453][T26433] Tainted: [L]=SOFTLOCKUP [ 2089.150460][T26433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2089.150471][T26433] Call Trace: [ 2089.150479][T26433] [ 2089.150487][T26433] dump_stack_lvl+0xe8/0x150 [ 2089.150517][T26433] should_fail_ex+0x46b/0x600 [ 2089.150544][T26433] should_failslab+0xa8/0x100 [ 2089.150566][T26433] __kmalloc_noprof+0xdf/0x7b0 [ 2089.150585][T26433] ? kfree+0x4d/0x690 [ 2089.150600][T26433] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2089.150624][T26433] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2089.150644][T26433] ? tomoyo_domain+0xd8/0x130 [ 2089.150666][T26433] ? tomoyo_path_number_perm+0x219/0x630 [ 2089.150689][T26433] tomoyo_path_number_perm+0x246/0x630 [ 2089.150714][T26433] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2089.150736][T26433] ? __lock_acquire+0x6b5/0x2cf0 [ 2089.150762][T26433] ? do_raw_spin_lock+0x12b/0x2f0 [ 2089.150808][T26433] ? __fget_files+0x2a/0x420 [ 2089.150832][T26433] ? __fget_files+0x2a/0x420 [ 2089.150852][T26433] ? __fget_files+0x3a6/0x420 [ 2089.150871][T26433] ? __fget_files+0x2a/0x420 [ 2089.150895][T26433] security_file_ioctl+0xc3/0x2a0 [ 2089.150929][T26433] __se_sys_ioctl+0x47/0x170 [ 2089.150951][T26433] do_syscall_64+0x14d/0xf80 [ 2089.150971][T26433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2089.150988][T26433] ? trace_irq_disable+0x37/0x100 [ 2089.151004][T26433] ? clear_bhb_loop+0x40/0x90 [ 2089.151026][T26433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2089.151043][T26433] RIP: 0033:0x7f257265c629 [ 2089.151061][T26433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2089.151078][T26433] RSP: 002b:00007f25708b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2089.151098][T26433] RAX: ffffffffffffffda RBX: 00007f25728d5fa0 RCX: 00007f257265c629 [ 2089.151112][T26433] RDX: 0000200000000080 RSI: 000000008048ae66 RDI: 0000000000000004 [ 2089.151125][T26433] RBP: 00007f25708b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2089.151138][T26433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2089.151150][T26433] R13: 00007f25728d6038 R14: 00007f25728d5fa0 R15: 00007fffb1b7d878 [ 2089.151182][T26433] [ 2089.151190][T26433] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2089.183625][T26438] FAULT_INJECTION: forcing a failure. [ 2089.183625][T26438] name failslab, interval 1, probability 0, space 0, times 0 [ 2089.183660][T26438] CPU: 0 UID: 0 PID: 26438 Comm: syz.8.5580 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2089.183685][T26438] Tainted: [L]=SOFTLOCKUP [ 2089.183692][T26438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2089.183704][T26438] Call Trace: [ 2089.183711][T26438] [ 2089.183720][T26438] dump_stack_lvl+0xe8/0x150 [ 2089.183749][T26438] should_fail_ex+0x46b/0x600 [ 2089.183776][T26438] should_failslab+0xa8/0x100 [ 2089.183796][T26438] kmem_cache_alloc_noprof+0x87/0x680 [ 2089.183816][T26438] ? lockdep_hardirqs_on+0x7a/0x110 [ 2089.183836][T26438] ? do_getname+0x2e/0x250 [ 2089.183860][T26438] do_getname+0x2e/0x250 [ 2089.183878][T26438] ? getname_flags+0x11/0x20 [ 2089.183900][T26438] do_sys_openat2+0xca/0x200 [ 2089.183932][T26438] ? __pfx_do_sys_openat2+0x10/0x10 [ 2089.183954][T26438] ? ksys_write+0x248/0x270 [ 2089.183974][T26438] ? __pfx_ksys_write+0x10/0x10 [ 2089.183996][T26438] __x64_sys_creat+0x8f/0xc0 [ 2089.184022][T26438] do_syscall_64+0x14d/0xf80 [ 2089.184044][T26438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2089.184062][T26438] ? trace_irq_disable+0x37/0x100 [ 2089.184078][T26438] ? clear_bhb_loop+0x40/0x90 [ 2089.184098][T26438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2089.184116][T26438] RIP: 0033:0x7fa05a86c629 [ 2089.184132][T26438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2089.184149][T26438] RSP: 002b:00007fa058ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 2089.184169][T26438] RAX: ffffffffffffffda RBX: 00007fa05aae5fa0 RCX: 00007fa05a86c629 [ 2089.184183][T26438] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000200000000340 [ 2089.184195][T26438] RBP: 00007fa058ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 2089.184207][T26438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2089.184219][T26438] R13: 00007fa05aae6038 R14: 00007fa05aae5fa0 R15: 00007ffedf22b038 [ 2089.184249][T26438] [ 2089.878624][ T31] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 2090.052198][T26469] FAULT_INJECTION: forcing a failure. [ 2090.052198][T26469] name failslab, interval 1, probability 0, space 0, times 0 [ 2090.052234][T26469] CPU: 0 UID: 0 PID: 26469 Comm: syz.2.5594 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2090.052260][T26469] Tainted: [L]=SOFTLOCKUP [ 2090.052268][T26469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2090.052279][T26469] Call Trace: [ 2090.052287][T26469] [ 2090.052296][T26469] dump_stack_lvl+0xe8/0x150 [ 2090.052327][T26469] should_fail_ex+0x46b/0x600 [ 2090.052355][T26469] should_failslab+0xa8/0x100 [ 2090.052377][T26469] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 2090.052397][T26469] ? __alloc_skb+0x1d7/0x390 [ 2090.052419][T26469] ? lockdep_hardirqs_on+0x7a/0x110 [ 2090.052443][T26469] ? __alloc_skb+0x193/0x390 [ 2090.052466][T26469] __alloc_skb+0x1d7/0x390 [ 2090.052493][T26469] netlink_sendmsg+0x5d4/0xb40 [ 2090.052524][T26469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2090.052554][T26469] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2090.052578][T26469] ____sys_sendmsg+0xa4e/0xac0 [ 2090.052595][T26469] ? __might_fault+0xaf/0x130 [ 2090.052621][T26469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2090.052649][T26469] ? import_iovec+0x73/0xa0 [ 2090.052675][T26469] ___sys_sendmsg+0x2a5/0x360 [ 2090.052693][T26469] ? __lock_acquire+0x6b5/0x2cf0 [ 2090.052719][T26469] ? __pfx____sys_sendmsg+0x10/0x10 [ 2090.052771][T26469] ? __fget_files+0x2a/0x420 [ 2090.052792][T26469] ? __fget_files+0x3a6/0x420 [ 2090.052824][T26469] __x64_sys_sendmsg+0x1c3/0x2a0 [ 2090.052852][T26469] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2090.052880][T26469] ? __pfx_ksys_write+0x10/0x10 [ 2090.052909][T26469] do_syscall_64+0x14d/0xf80 [ 2090.052930][T26469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2090.052948][T26469] ? trace_irq_disable+0x37/0x100 [ 2090.052965][T26469] ? clear_bhb_loop+0x40/0x90 [ 2090.052987][T26469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2090.053005][T26469] RIP: 0033:0x7fc43442c629 [ 2090.053022][T26469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2090.053039][T26469] RSP: 002b:00007fc432686028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2090.053059][T26469] RAX: ffffffffffffffda RBX: 00007fc4346a5fa0 RCX: 00007fc43442c629 [ 2090.053074][T26469] RDX: 0000000024000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 2090.053087][T26469] RBP: 00007fc432686090 R08: 0000000000000000 R09: 0000000000000000 [ 2090.053099][T26469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2090.053110][T26469] R13: 00007fc4346a6038 R14: 00007fc4346a5fa0 R15: 00007fffc3855e48 [ 2090.053141][T26469] [ 2090.055034][ T31] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 27104, setting to 1024 [ 2090.055070][ T31] usb 9-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 2090.055097][ T31] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2090.112794][ T31] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2090.112824][ T31] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2090.112844][ T31] usb 9-1: Product: syz [ 2090.112858][ T31] usb 9-1: Manufacturer: syz [ 2090.112873][ T31] usb 9-1: SerialNumber: syz [ 2090.412994][ T31] usb 9-1: config 0 descriptor?? [ 2090.413729][T26454] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2090.436911][ T31] usb 9-1: selecting invalid altsetting 0 [ 2090.585303][T26485] FAULT_INJECTION: forcing a failure. [ 2090.585303][T26485] name failslab, interval 1, probability 0, space 0, times 0 [ 2090.585338][T26485] CPU: 1 UID: 0 PID: 26485 Comm: syz.2.5602 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2090.585364][T26485] Tainted: [L]=SOFTLOCKUP [ 2090.585372][T26485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2090.585383][T26485] Call Trace: [ 2090.585392][T26485] [ 2090.585400][T26485] dump_stack_lvl+0xe8/0x150 [ 2090.585429][T26485] should_fail_ex+0x46b/0x600 [ 2090.585457][T26485] should_failslab+0xa8/0x100 [ 2090.585479][T26485] __kmalloc_noprof+0xdf/0x7b0 [ 2090.585499][T26485] ? tomoyo_encode+0x28b/0x550 [ 2090.585525][T26485] tomoyo_encode+0x28b/0x550 [ 2090.585550][T26485] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2090.585580][T26485] ? tomoyo_path_number_perm+0x219/0x630 [ 2090.585606][T26485] tomoyo_path_number_perm+0x246/0x630 [ 2090.585632][T26485] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2090.585653][T26485] ? __lock_acquire+0x6b5/0x2cf0 [ 2090.585676][T26485] ? do_raw_spin_lock+0x12b/0x2f0 [ 2090.585720][T26485] ? __fget_files+0x2a/0x420 [ 2090.585744][T26485] ? __fget_files+0x2a/0x420 [ 2090.585771][T26485] ? __fget_files+0x3a6/0x420 [ 2090.585790][T26485] ? __fget_files+0x2a/0x420 [ 2090.585816][T26485] security_file_ioctl+0xc3/0x2a0 [ 2090.585842][T26485] __se_sys_ioctl+0x47/0x170 [ 2090.585864][T26485] do_syscall_64+0x14d/0xf80 [ 2090.585887][T26485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2090.585905][T26485] ? trace_irq_disable+0x37/0x100 [ 2090.585922][T26485] ? clear_bhb_loop+0x40/0x90 [ 2090.585944][T26485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2090.585962][T26485] RIP: 0033:0x7fc43442c629 [ 2090.585980][T26485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2090.585997][T26485] RSP: 002b:00007fc432686028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2090.586018][T26485] RAX: ffffffffffffffda RBX: 00007fc4346a5fa0 RCX: 00007fc43442c629 [ 2090.586033][T26485] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000c [ 2090.586045][T26485] RBP: 00007fc432686090 R08: 0000000000000000 R09: 0000000000000000 [ 2090.586058][T26485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2090.586071][T26485] R13: 00007fc4346a6038 R14: 00007fc4346a5fa0 R15: 00007fffc3855e48 [ 2090.586102][T26485] [ 2090.586164][T26485] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2090.674717][T26483] kvm: user requested TSC rate below hardware speed [ 2090.748645][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2090.985859][T26494] FAULT_INJECTION: forcing a failure. [ 2090.985859][T26494] name failslab, interval 1, probability 0, space 0, times 0 [ 2090.985895][T26494] CPU: 0 UID: 0 PID: 26494 Comm: syz.4.5605 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2090.985921][T26494] Tainted: [L]=SOFTLOCKUP [ 2090.985929][T26494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2090.985940][T26494] Call Trace: [ 2090.985947][T26494] [ 2090.985956][T26494] dump_stack_lvl+0xe8/0x150 [ 2090.985986][T26494] should_fail_ex+0x46b/0x600 [ 2090.986013][T26494] should_failslab+0xa8/0x100 [ 2090.986036][T26494] __kmalloc_noprof+0xdf/0x7b0 [ 2090.986057][T26494] ? tomoyo_encode+0x28b/0x550 [ 2090.986082][T26494] tomoyo_encode+0x28b/0x550 [ 2090.986107][T26494] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2090.986128][T26494] ? tomoyo_domain+0xd8/0x130 [ 2090.986154][T26494] ? tomoyo_path_number_perm+0x219/0x630 [ 2090.986178][T26494] tomoyo_path_number_perm+0x246/0x630 [ 2090.986205][T26494] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2090.986228][T26494] ? __lock_acquire+0x6b5/0x2cf0 [ 2090.986254][T26494] ? do_raw_spin_lock+0x12b/0x2f0 [ 2090.986306][T26494] ? __fget_files+0x2a/0x420 [ 2090.986331][T26494] ? __fget_files+0x2a/0x420 [ 2090.986352][T26494] ? __fget_files+0x3a6/0x420 [ 2090.986372][T26494] ? __fget_files+0x2a/0x420 [ 2090.986398][T26494] security_file_ioctl+0xc3/0x2a0 [ 2090.986426][T26494] __se_sys_ioctl+0x47/0x170 [ 2090.986447][T26494] do_syscall_64+0x14d/0xf80 [ 2090.986474][T26494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2090.986492][T26494] ? trace_irq_disable+0x37/0x100 [ 2090.986508][T26494] ? clear_bhb_loop+0x40/0x90 [ 2090.986529][T26494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2090.986547][T26494] RIP: 0033:0x7f257265c629 [ 2090.986569][T26494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2090.986585][T26494] RSP: 002b:00007f25708b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2090.986605][T26494] RAX: ffffffffffffffda RBX: 00007f25728d5fa0 RCX: 00007f257265c629 [ 2090.986619][T26494] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2090.986631][T26494] RBP: 00007f25708b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2090.986643][T26494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2090.986654][T26494] R13: 00007f25728d6038 R14: 00007f25728d5fa0 R15: 00007fffb1b7d878 [ 2090.986685][T26494] [ 2090.986781][T26494] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2091.605328][T10877] hsr_slave_0: left promiscuous mode [ 2091.654623][T10877] hsr_slave_1: left promiscuous mode [ 2091.656265][T10877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2091.656291][T10877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2091.742278][T10877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2091.742312][T10877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2092.171443][T25068] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2092.180618][T25068] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2092.184453][T25068] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2092.188896][T25068] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2092.189491][T25068] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2093.157038][T10877] veth1_macvtap: left promiscuous mode [ 2093.157135][T10877] veth0_macvtap: left promiscuous mode [ 2093.157421][T10877] veth1_vlan: left promiscuous mode [ 2093.157581][T10877] @: left promiscuous mode [ 2093.493971][T10699] usb 9-1: USB disconnect, device number 41 [ 2093.612160][T26517] 9p: Bad value for 'rfdno' [ 2093.678864][T24545] ================================================================== [ 2093.678884][T24545] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 2093.678915][T24545] Read of size 8 at addr ffffc90005f71008 by task kworker/0:0/24545 [ 2093.678931][T24545] [ 2093.678946][T24545] CPU: 0 UID: 0 PID: 24545 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2093.678972][T24545] Tainted: [L]=SOFTLOCKUP [ 2093.678979][T24545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2093.678991][T24545] Workqueue: usb_hub_wq hub_event [ 2093.679016][T24545] Call Trace: [ 2093.679024][T24545] [ 2093.679032][T24545] dump_stack_lvl+0xe8/0x150 [ 2093.679057][T24545] print_report+0xba/0x230 [ 2093.679079][T24545] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 2093.679098][T24545] kasan_report+0x117/0x150 [ 2093.679119][T24545] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 2093.679143][T24545] __list_del_entry_valid_or_report+0xb5/0x190 [ 2093.679164][T24545] kcov_remote_start+0x2af/0x710 [ 2093.679190][T24545] hub_event+0x150/0x4f60 [ 2093.679211][T24545] ? __lock_acquire+0x6b5/0x2cf0 [ 2093.679235][T24545] ? __lock_acquire+0x6b5/0x2cf0 [ 2093.679257][T24545] ? look_up_lock_class+0x57/0x110 [ 2093.679280][T24545] ? update_load_avg+0x1b0/0x1e70 [ 2093.679304][T24545] ? __lock_acquire+0x6b5/0x2cf0 [ 2093.679329][T24545] ? finish_task_switch+0x161/0x920 [ 2093.679353][T24545] ? lock_acquire+0x106/0x330 [ 2093.679380][T24545] ? __pfx_hub_event+0x10/0x10 [ 2093.679401][T24545] ? process_scheduled_works+0xa0f/0x17a0 [ 2093.679425][T24545] ? process_scheduled_works+0xa0f/0x17a0 [ 2093.679443][T24545] ? process_scheduled_works+0xa0f/0x17a0 [ 2093.679464][T24545] process_scheduled_works+0xaec/0x17a0 [ 2093.679501][T24545] ? __pfx_process_scheduled_works+0x10/0x10 [ 2093.679524][T24545] ? assign_work+0x3d5/0x5e0 [ 2093.679545][T24545] worker_thread+0xa50/0xfc0 [ 2093.679577][T24545] kthread+0x388/0x470 [ 2093.679600][T24545] ? __pfx_worker_thread+0x10/0x10 [ 2093.679619][T24545] ? __pfx_kthread+0x10/0x10 [ 2093.679642][T24545] ret_from_fork+0x51e/0xb90 [ 2093.679665][T24545] ? __pfx_ret_from_fork+0x10/0x10 [ 2093.679685][T24545] ? __switch_to+0xc7d/0x1400 [ 2093.679706][T24545] ? __pfx_kthread+0x10/0x10 [ 2093.679728][T24545] ret_from_fork_asm+0x1a/0x30 [ 2093.679759][T24545] [ 2093.679766][T24545] [ 2093.679771][T24545] The buggy address belongs to a vmalloc virtual mapping [ 2093.679789][T24545] Memory state around the buggy address: [ 2093.679800][T24545] ffffc90005f70f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2093.679813][T24545] ffffc90005f70f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2093.679826][T24545] >ffffc90005f71000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2093.679836][T24545] ^ [ 2093.679846][T24545] ffffc90005f71080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2093.679858][T24545] ffffc90005f71100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2093.679868][T24545] ================================================================== [ 2093.679889][T24545] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2093.679907][T24545] CPU: 0 UID: 0 PID: 24545 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2093.679933][T24545] Tainted: [L]=SOFTLOCKUP [ 2093.679941][T24545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2093.679952][T24545] Workqueue: usb_hub_wq hub_event [ 2093.679973][T24545] Call Trace: [ 2093.679980][T24545] [ 2093.679987][T24545] vpanic+0x1e0/0x670 [ 2093.680011][T24545] panic+0xc5/0xd0 [ 2093.680032][T24545] ? __pfx_panic+0x10/0x10 [ 2093.680055][T24545] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 2093.680075][T24545] ? rcu_is_watching+0x15/0xb0 [ 2093.680102][T24545] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 2093.680121][T24545] check_panic_on_warn+0x89/0xb0 [ 2093.680139][T24545] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 2093.680158][T24545] end_report+0x6f/0x140 [ 2093.680176][T24545] kasan_report+0x128/0x150 [ 2093.680197][T24545] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 2093.680220][T24545] __list_del_entry_valid_or_report+0xb5/0x190 [ 2093.680241][T24545] kcov_remote_start+0x2af/0x710 [ 2093.680266][T24545] hub_event+0x150/0x4f60 [ 2093.680287][T24545] ? __lock_acquire+0x6b5/0x2cf0 [ 2093.680311][T24545] ? __lock_acquire+0x6b5/0x2cf0 [ 2093.680334][T24545] ? look_up_lock_class+0x57/0x110 [ 2093.680356][T24545] ? update_load_avg+0x1b0/0x1e70 [ 2093.680381][T24545] ? __lock_acquire+0x6b5/0x2cf0 [ 2093.680405][T24545] ? finish_task_switch+0x161/0x920 [ 2093.680429][T24545] ? lock_acquire+0x106/0x330 [ 2093.680456][T24545] ? __pfx_hub_event+0x10/0x10 [ 2093.680478][T24545] ? process_scheduled_works+0xa0f/0x17a0 [ 2093.680506][T24545] ? process_scheduled_works+0xa0f/0x17a0 [ 2093.680526][T24545] ? process_scheduled_works+0xa0f/0x17a0 [ 2093.680547][T24545] process_scheduled_works+0xaec/0x17a0 [ 2093.680579][T24545] ? __pfx_process_scheduled_works+0x10/0x10 [ 2093.680602][T24545] ? assign_work+0x3d5/0x5e0 [ 2093.680624][T24545] worker_thread+0xa50/0xfc0 [ 2093.680656][T24545] kthread+0x388/0x470 [ 2093.680679][T24545] ? __pfx_worker_thread+0x10/0x10 [ 2093.680697][T24545] ? __pfx_kthread+0x10/0x10 [ 2093.680717][T24545] ret_from_fork+0x51e/0xb90 [ 2093.680737][T24545] ? __pfx_ret_from_fork+0x10/0x10 [ 2093.680757][T24545] ? __switch_to+0xc7d/0x1400 [ 2093.680775][T24545] ? __pfx_kthread+0x10/0x10 [ 2093.680799][T24545] ret_from_fork_asm+0x1a/0x30 [ 2093.680829][T24545] [ 2093.681171][T24545] Kernel Offset: disabled