last executing test programs: 8m15.220899211s ago: executing program 0 (id=4980): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xb}) recvmmsg(r0, &(0x7f0000006300)=[{{&(0x7f0000001300)=@hci, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001380)=""/177, 0xb1}, {&(0x7f0000006440)=""/118, 0x76}, {&(0x7f00000014c0)=""/57, 0x39}, {&(0x7f0000001500)=""/81, 0x51}, {&(0x7f0000001580)=""/199, 0xc7}, {&(0x7f0000001680)=""/170, 0xaa}, {&(0x7f0000001740)=""/124, 0x7c}, {&(0x7f0000001800)=""/140, 0x8c}], 0x8, &(0x7f0000001940)=""/42, 0x2a}, 0x1}, {{&(0x7f0000001980)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/231, 0xe7}], 0x1, &(0x7f0000001b40)=""/114, 0x72}, 0x7ff}, {{&(0x7f0000001bc0)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000006580)=[{&(0x7f0000001c40)=""/125, 0x7d}, {&(0x7f0000001cc0)=""/176, 0xb0}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000006600)=""/88, 0x58}], 0x5, &(0x7f0000003e80)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000004fc0)=[{&(0x7f0000004e80)=""/179, 0xb3}, {&(0x7f0000004f40)=""/98, 0x62}], 0x2, &(0x7f0000005000)=""/195, 0xc3}, 0x200000}, {{0x0, 0x0, &(0x7f0000006240)=[{&(0x7f0000003d80)=""/75, 0x4b}, {&(0x7f0000005180)=""/183, 0xb7}, {&(0x7f0000005240)=""/4090, 0xffa}], 0x3, &(0x7f0000006280)=""/83, 0x53}, 0x6}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(r0, &(0x7f0000005100)=[{&(0x7f00000064c0)="e805dd8881005c6a9c7c0fd25cb73368c798cb2e30e93a1856cf192fa4ae340661df0dc1132e33f35c616fb5abef14551dd920ad3cc375aed1e12df4febbd0af80fd0b5265fd3c132689cf4712719e7987e6e4cbedb6b71294ae478189b8c42ed7f6577a10f9c84502d39c0b309b6aa978c0c65c2a4c313a60a12dc68e019bb205e2e825391059d1355dce1a283f32f19a6a103c43ae475d2ded96a187985c871cf53ff62d9c738f962608b1780a59b3c45a2cd356", 0xb5}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030009ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r8, 0x80000}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001240)=0x0) r11 = syz_open_procfs(r10, &(0x7f0000001180)='net/nf_conntrack\x00') preadv(r11, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000001280)={{0xf5, 0x1}, {0xe, 0x10}, 0x2003, 0xbfbf}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r12, &(0x7f0000003e00)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="280000000107010377d32d01400000000000000001000009140007800800014000000006080002400000000155c0e6e1925d9283312503769565833b23e54c69b419"], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0x45) 8m14.314927586s ago: executing program 0 (id=4983): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$pppoe(0x18, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000037b1e19020800000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x100000000000000, 0x4000}, 0x0) 8m13.661885267s ago: executing program 0 (id=4987): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0xfff}, 0x1, [0x6, 0xfffffffffffffffc, 0x95, 0x2, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x7, 0xffffffffffff7fff, 0x9, 0x83, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0x100000002, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0xd, 0x2, 0x6a44d0ea, 0x9, 0xf, 0x5f0, 0xfffffffffffff2e3, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf1, 0x26e69303, 0x5, 0x2, 0x5, 0x0, 0x2, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7fff, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0xb, 0x1, 0x8000000000000eb, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x3, 0x4, 0x1, 0xb, 0x1, 0xffff, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x2000000000007, 0x5, 0x0, 0x20000000003, 0x7, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52aa, 0x8, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000380)=ANY=[@ANYBLOB="00000086dd606ed6c400482f00fe8000000400000000000000000000aaff020000000000000000000000000001242088a80000fffc0002a74900000800000086dd88a893be08000000100800fe0100000000000001080022eb000000042000c0000200000000000000000000000800655800"/126], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, 0x0) name_to_handle_at(r3, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="1c0000008100000005000000000000000010000000000c00000000000000fcffffff"], &(0x7f0000001500), 0x200) sendmsg$NFT_MSG_GETCHAIN(r3, 0x0, 0x20) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(r5) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f0000000140)=@ethtool_dump={0x40, 0x1, 0x9, 0x12, "88ae4178257ed6a2b22abbfcfe11c0aea454"}}) recvmmsg(r2, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="64000000100001044000"/20, @ANYRES32=0x0, @ANYBLOB="1e00050076100000440012800e0001006970366772657461700000003000028006000f000000000014000700fe80000000000000000000000000002b060011004e22000008000100", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000) 8m12.114716912s ago: executing program 0 (id=4995): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000440)=0x2000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, 0x0) ptrace$cont(0x1f, 0x0, 0x100, 0x4) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000340)="7210ec0e65eb18223831eba89a2803de2dcb34275c34ee5fb91b5a3d089fb591400abfb7115a689bcdbfd9d6ca0323d77b384c6c1ed4792543388ada5ef7b168ff79aee65d99acc3a670bda266a634067d0ef22cb36f1a7e25ad567e31a88e4fbdeedba2d3477436a6ecbae8e742ddd805ffc1deca47e4f6878ba808f64b12d149e94997d60a496d1468f1f57d801704ca621097fdd248bed678dfddfacbdfc8bb66e165560580d731b3e40a4ba0405eed96bf6a9788cc54998061f06c6cb2647c33c70168561dfcd3c8ec3bb0db", 0xce, 0x20040000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@host}, {@hyper}, 0x400, "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"}, 0x418}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) unshare(0x2a060c00) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 8m10.081133219s ago: executing program 0 (id=5006): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00'}, 0x94) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001080)="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", 0x224}], 0x1}}], 0x1, 0x4000011) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@hopopts={{0x18, 0x29, 0x36, {0x87}}}, @flowinfo={{0x14, 0x29, 0xb, 0x80000001}}], 0x30}, 0x40c0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x2de07c, 0x334e8b}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000000000200000000000000000000000000000000000000400"/104], 0x68) 8m9.785738827s ago: executing program 0 (id=5012): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(r1, &(0x7f0000000840)=[{0x0}, {&(0x7f00000009c0)=""/212, 0xd4}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000540)=""/255, 0xff}, {&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)=""/99, 0x63}, {&(0x7f0000000440)=""/236, 0xec}], 0xa) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000002100000000000000", @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x5, 0x6, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd7000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x884) 8m9.42507394s ago: executing program 32 (id=5012): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(r1, &(0x7f0000000840)=[{0x0}, {&(0x7f00000009c0)=""/212, 0xd4}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000540)=""/255, 0xff}, {&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)=""/99, 0x63}, {&(0x7f0000000440)=""/236, 0xec}], 0xa) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000002100000000000000", @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x5, 0x6, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd7000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x884) 8.077488391s ago: executing program 2 (id=7385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) io_setup(0x81, &(0x7f0000001440)=0x0) r6 = syz_io_uring_setup(0x2af8, &(0x7f0000000100)={0x0, 0x0, 0x13090, 0x3}, &(0x7f00000000c0), &(0x7f0000000080)) io_submit(r5, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) io_uring_enter(r6, 0x2226, 0x24dc, 0x44, 0x0, 0x0) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f0000000000)={0x17, &(0x7f00000000c0)=[{0x11, '\x00', @data=0x10, 0x9}]}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x100000000000007, 0x8, 0x3}, 0x0) r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) preadv2(r8, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/178, 0xb2}], 0x1, 0x6, 0x7ff, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f00000001c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) fchdir(r3) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) io_setup(0x81, &(0x7f0000001440)) (async) syz_io_uring_setup(0x2af8, &(0x7f0000000100)={0x0, 0x0, 0x13090, 0x3}, &(0x7f00000000c0), &(0x7f0000000080)) (async) io_submit(r5, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) (async) io_uring_enter(r6, 0x2226, 0x24dc, 0x44, 0x0, 0x0) (async) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f0000000000)={0x17, &(0x7f00000000c0)=[{0x11, '\x00', @data=0x10, 0x9}]}) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x100000000000007, 0x8, 0x3}, 0x0) (async) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) (async) preadv2(r8, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/178, 0xb2}], 0x1, 0x6, 0x7ff, 0x10) (async) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f00000001c0)) (async) 7.577630822s ago: executing program 2 (id=7386): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00'}, 0x94) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001080)="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", 0x224}], 0x1}}], 0x1, 0x4000011) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@hopopts={{0x18, 0x29, 0x36, {0x87}}}, @flowinfo={{0x14, 0x29, 0xb, 0x80000001}}], 0x30}, 0x40c0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x2de07c, 0x334e8b}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000000000200000000000000000000000000000000000000400"/104], 0x68) 6.544375573s ago: executing program 1 (id=7393): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200"], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffffffffffd, 0x6, 0x10, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="44000000d3ab", 0x0, 0xf2b2, 0x10016, 0x1, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r5 = landlock_create_ruleset(&(0x7f0000000440)={0x6621, 0x2}, 0x18, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="00050d0000005e6424818332961f8300045e9e071ef9beb9449af87539f21adeaac9e7636182650587cd1d3196e74342fe8fb2b3290562c40b98abe9f4b848e97c075f9e9d8b06a018e3f949c64981e763cda9d8b6fbfc6bf5cac3b1d4b02e3c75e62f4fb55f80b105c9f0a679846775064c845ffe4b40070b11a3ec429a006720913204d43e5acf1a4227c274745690efa324d3898cfd1f9bab82ab29458dd19b71a569d02528ca768111493e31af1b144f5024c3a0ef4f74eabe7703b261bfaddeffff93a1b27c807b0f5104e75079401c3df624cc67388792d6cddf211abe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000380)=ANY=[@ANYRES8=r2, @ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000240)={&(0x7f0000000080)=[{0x81, 0x1000, 0x0, 0x0}], 0x1}) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@delsa={0x34, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0xa, 0x6c}, [@mark={0xc, 0x15, {0x35075c, 0xa}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc4}, 0x20040884) 5.844658962s ago: executing program 3 (id=7395): syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0x6, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=@deltclass={0x190, 0x29, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0x3}, {0x0, 0x3}, {0x5, 0xd}}, [@c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_FD={0x8, 0x1, r0}]}}, @c_atm={{0x8}, {0x28, 0x2, [@TCA_ATM_HDR={0x22, 0x3, "f99a6544b7a02a9a26227df060ddef5afd487aa25fd612b70975739a27fa"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x1}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x10}}}, @c_cbq={{0x8}, {0xac, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0x3}, 0x200, 0x80000000}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x0, 0xe, 0xf8, 0x3, 0x1}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x2, 0x8, 0x1, 0x1, 0x7fff, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x2, 0x5, 0x2, 0x8, 0x72}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xd, 0x1, 0x11, 0x1, 0xa3, 0x9, 0xd8629fd, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x1, 0x2, 0x1, 0x6, 0x0, 0x3376}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf7, 0x8, 0x80, 0x81, 0x95a, 0x5}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x0, 0xc}, 0x748, 0x200}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0x8}, 0x5, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x1, 0x0, 0x9, 0x44, 0x10000}}]}}, @c_atm={{0x8}, {0x3c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0xb}}, @TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_HDR={0xb, 0x3, "ecdb27abc34060"}, @TCA_ATM_HDR={0xc, 0x3, "9ab81ce2e0507fec"}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8, 0x1, r0}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000008"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000200)=r8, 0x4) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ppoll(&(0x7f0000000200)=[{r9, 0x20}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x4e20, 0x2d2f, @mcast2, 0x7}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x0, 0x0) 4.619656273s ago: executing program 3 (id=7399): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1) 4.118131929s ago: executing program 5 (id=7400): prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x8920, &(0x7f00000013c0)={'ip6gre0\x00', @ifru_settings={0x6e0602e1, 0x9, @cisco=0x0}}) r2 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000140)={0x40, 0x8, 0x1a, "4f59475539c4f7c36e4d05430fc148ce3c2940f2099e8b4e5028"}, 0x0, 0x0}) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)=r0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000400)) 3.957952801s ago: executing program 2 (id=7401): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000001bbbbbbbbbbbb86dd60cb800000383aff00000000000000000000ffffac1e0001ff020000000000000000000002000001"], 0x0) 3.881799605s ago: executing program 2 (id=7402): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x469, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3086dd634adb0404333a00fe800000000000000000000000000020ff020000000000000000000000000001010a040501400900fe8000000000000000000000000000aa20010000000000000000000000000001fe8000000000000000000000000000aaff020000000000000000000000000001fc020000000000000000000000000001320604030c404157ff01000000000000000000000000000100000000000000000000000000000000fc0100000000000000000000000000003a1e000000000000040106040106000100c2040000000004d83c41df82b74a611414ab7ac6dee9f7c81c552b0b37ff4c16401fc57bd1189825b7bbaceca2dd7887f8841a96e85b06f3e758d8714459ee819ad0eda571e2bb0f1d63bef9a98716c2c660bcbe670f53baeda55219437c7f6f64f3480b0cc687c3736c73f216f76808e71b6e66e9a67f08fa744ef06775289ba8c3ce9f68e11597c4dc41c54c097c74138c732a2b4413ca18f5e800652cf8bf8ee7e0d0415ef5a09a32af0d9b63ede6649d7ffbb3312a3689483835b1568248de3eb82b83d506a37ff2c5eb285802f6ddf2a591da8b27c80b49d49e6a18e1fbc204000000020103000000000000002b0801ba00000000fe800000000000000000000000000013ff010000000000000000000000000001ff020000000000000000000000000001fc010000000000000000000000000000ff07000000000000071000000002029c07000700000000000000000100c910fe880000000000000000000000000001c910fc020000000000000000000000000001000000000000003a14020200000000fe8000000000000000000000000000bbfc010000000000000000000000000001fe800000001500000000000000000033fe80000000000000000000000000001ffe80000000000000000000000000003efe880000000000000000000000000001200100000000000000000000000000010000000000000000000000000000000100000000000000000000000000000001ff0100000000000000000000000000018900907800000000fc000000000000000000000000000001ff0100000000000000000000000000011a1f496dc6dc48ee2e2bd79a5a28c17b9203a513e23d45372003d2f47d6479a769d1cb374d8e1b92e1a2cde079b43f9f18b4ba328a7e59dacbe9119a54f69c85bdcb92dd01405373c7bbd2ea4fd0bf6882f2ef104a1281ec5a395e9f0e6c7b18b7eac62effe25b1e7e9668568f320c2c18e91934cf7b89fb82b474ce4b9886606c12cfc70a248b0fd4a28c1daa91af4f9579caf27b9eb2290dbc9692ae8db350735fb1bd12895658385cb9b54ccc54b3922f1e1c2dd7f8c137cab6a9765033bba7951115db888ed64bcaccf3b2afeb2f51b76f73df9fcc277a6b9a3749125612741da7606d5419c472951bb0b7898ab6f3eda6f75dd47e42ee3431550dc301081cd28050fe079545d2b6617752f16be779119321718e07b3a56a7e3e479efda6d89a494580ee9067161e82fd90c52d8745d22382f45e658592353b1dd0bc729932f9dd"], 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x0, 0xfff1}, {0xc, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x4a}]}}]}, 0x3c}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xd) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r7, 0x0, 0x2000fb) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000300)=0x11) keyctl$dh_compute(0x17, &(0x7f0000000380), &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) 3.825557031s ago: executing program 4 (id=7403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x42, &(0x7f0000000740)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x4, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x8, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xc7ba, 0x53}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings]}, 0x34}}, 0x8000040) 3.794362996s ago: executing program 4 (id=7404): recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f00000007c0)=""/63, 0x3f}, {&(0x7f0000000880)=""/96, 0x60}], 0x2}, 0xc}], 0x1, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) unshare(0x22020600) socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000200)='udf\x00', 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) 3.714334455s ago: executing program 3 (id=7405): syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = dup3(r3, r2, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_emit_ethernet(0x32, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x4, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x4e20, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x288000) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa8aaaaaaa86dd7101011f000c2cfffe8000000000000000000000000000aafe8000000000000000000000000000aa33000002c1557a5a4e7ba4e156ceca007755a170258b02f2c09457144f0fd101c5cc6f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5008000090780000"], 0x0) 3.714110911s ago: executing program 3 (id=7406): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00'}, 0x94) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001080)="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", 0x235}], 0x1}}], 0x1, 0x4000011) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r7, 0x0, 0x40c0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x2de07c, 0x334e8b}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000000000200000000000000000000000000000000000000400"/104], 0x68) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x4, 0x353983, 0x167ba7}) 3.658632378s ago: executing program 4 (id=7407): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000c00)="e7c257e562333b950621d520eabc64e878df3ba3ec1ade14495de8398b39748640a6f17d682926b878ea42983a9d5ec4668ab674763032c73997b139fbc6fe3c2e4462027b6cc93e61cd18fab0a8b68aa8424877c870cb018aff0efbed0a32dd7c965a72541d8ba9572d779eedd0ced9ca41dd3eabd6d490ee1d41c207e4942a9207c4ff76b6298b2fa5022c596402f8714d7ea9a504d2db294741d16b04f42c5e21", 0xa2}, {&(0x7f0000000180)="223e17e639757536314bb304", 0xc}, {&(0x7f00000005c0)="176b76f016fd2af7dde17a0441d14fc8bdf9094e2f7f23aa1ef1ad08b2784c95080c855144890f27ef94e7fbffd330e7fffa3b610be921cd5cdcd6c82fbdd5344169df400bee7387da1ad26c4e65f7e613e2987d79510f357e86d8eeca386059be8410b0d2449b4652017fee3eaa331883548cedc70b853e9ef0288e6a8a6335d0660cd6", 0x84}, {&(0x7f0000000680)="fff286f2a72ebe2f4a8e2eba6447ce8862dc50eef6172362e2432dddf847d9383f30534cc6801d4175f77134a94e103f5b06d329564a54ae4dc3389a55ead512f166d6ef684ff8da4160c9662fe60f05e99ee52975097e50df0508f934010bed347d222f7d9e6cf1a9f22df8ed18276a88afbb452acaae5537c55d1ed6b12351c24cda1d3e2d86b5de0f25877ddafad963e6cb240bb02c2d1ff00146bd8374eabdeea10c57c0434c5cbb294d32bcdc", 0xaf}, {&(0x7f0000000740)="7373c6f02069b72bd63dd822a35b3b1a560867c938fe0f87e4e28751232edaeb548904b6f188a78e8698c49a26481256501c921ea5ef03c4cf2f2bc31a38f8026fb83d71515d017fc6c6023f4ca4a8dcb052a328c45dde0bd93642924e6ff38334add36b1add956a21866b53dd5fe21f32f2d5b96f09c5167ec3e41a1cfa23fb953bc4a6bcc12d90d6867e07364acb957b596afd3bd11677eaf01240", 0x9c}, {&(0x7f0000000800)="8ec49b56f3056d517193909fc7974900af9d2157ba6c80cc4bce465a011a069ddd33add8bfe7e4b919be2f83ec27225792e299c2c12520aa545007760328c23e921bb4e8800bc560b5e3b6759b", 0x4d}, {&(0x7f0000000880)="477af5b712752ca4d6198d756285a04321f1997ea53eecf1618e047679feae401391a0d1e83cc775da6aee24119718916d650a0d0e6dbc157afdd5f8857c1b0bbb6658cad505ba46a198d4c744bed066030358ce0b6b3bf80f492073b4d342278ce96ab711a2395cfbba28d2ec611a0085b3798161fef99e47ea1a413105d6490d55a1fb396200f078029e00bc6212de69f821bd0d19c8c749272f9529b5634c257a83796fd9d544821cc44e898c75e8bbbe09c4f46171a17c84c0a2b0ef2c60d4816bca152250fb802bf7d86d50fa25509e93397a1c4fc3fa29c68e34395937", 0xe0}, {&(0x7f0000000980)="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", 0xfa}], 0x8, &(0x7f0000000b00)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x3a, 0x5, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x9, 0x3, [0x2925, 0x9, 0x3, 0x6]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @hopopts_2292={{0x58, 0x29, 0x36, {0xc, 0x7, '\x00', [@ra={0x5, 0x2, 0x200}, @generic={0x6, 0x2a, "4fa987ee975213292d20cf4f019d4ede6844c03b183f941c7c909fe8c8dcda6f44c80aa1ec8021732442"}, @pad1, @jumbo={0xc2, 0x4, 0x5}]}}}, @tclass={{0x14, 0x29, 0x43, 0x200}}], 0xe8}, 0x80) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x40000000, 0x7, 0x2, 0xd, 0xd, 0x0, 0x236874ac}]}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, 0x0, 0x0, 0xf2, 0x207fff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @empty=0xe0009eff}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e23, @local}}}, 0x108) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f00000003c0)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e24, @multicast1}}}, 0x108) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="594c553a6957a49419b78a318095f0b1a25427f8dbf41e8041b1712f08786b2636a3a310f675ff2c7fa9c3dd4c86404d0be61f246cd717f351e37cc9407ee579c7e91f99752d9863221e8f5b5521e7a7dcdd44e1dfeb491a0591430a76dc473251c9cb7aa6faa32b4988f41a3dfe2246de5041359e4f34eb1a50fbb797993d174dd7a4ebf279820d3a8b0e1c06e9e4db38eeee4390abea5cd027434cb335446a9944831aaab791d410252041ac6b984bff7484dedff521958643d7439dc097711a4cfa2b900008403952a378a811183f67", 0xd1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @local, 0x80}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) 3.424193612s ago: executing program 4 (id=7408): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB], 0xe0}], 0x1}, 0x40040) socket(0x10, 0x803, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x10c091, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000400)="1b", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000240)={r2, 0x2}, 0x8) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000080)={0x20000000}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010000104000002800000000000000601", @ANYRES32=0x0, @ANYBLOB="0380000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x240048c1}, 0x4054) 2.965579528s ago: executing program 4 (id=7409): syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r1, 0x6, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=@deltclass={0x190, 0x29, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0x3}, {0x0, 0x3}, {0x5, 0xd}}, [@c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_FD={0x8, 0x1, r0}]}}, @c_atm={{0x8}, {0x28, 0x2, [@TCA_ATM_HDR={0x22, 0x3, "f99a6544b7a02a9a26227df060ddef5afd487aa25fd612b70975739a27fa"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x1}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x10}}}, @c_cbq={{0x8}, {0xac, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0x3}, 0x200, 0x80000000}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x0, 0xe, 0xf8, 0x3, 0x1}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x2, 0x8, 0x1, 0x1, 0x7fff, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x2, 0x5, 0x2, 0x8, 0x72}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xd, 0x1, 0x11, 0x1, 0xa3, 0x9, 0xd8629fd, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x1, 0x2, 0x1, 0x6, 0x0, 0x3376}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf7, 0x8, 0x80, 0x81, 0x95a, 0x5}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x0, 0xc}, 0x748, 0x200}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0x8}, 0x5, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x1, 0x0, 0x9, 0x44, 0x10000}}]}}, @c_atm={{0x8}, {0x3c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0xb}}, @TCA_ATM_FD={0x8, 0x1, r4}, @TCA_ATM_HDR={0xb, 0x3, "ecdb27abc34060"}, @TCA_ATM_HDR={0xc, 0x3, "9ab81ce2e0507fec"}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8, 0x1, r0}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000008"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000200)=r7, 0x4) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ppoll(&(0x7f0000000200)=[{r8, 0x20}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x4e20, 0x2d2f, @mcast2, 0x7}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x0, 0x0) 2.482160259s ago: executing program 1 (id=7410): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f00000004c0)="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", 0x1000) socketpair(0x113140203e06e834, 0x4, 0x1, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom1\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000740)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x20000002, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.240813466s ago: executing program 5 (id=7411): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="e8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="f7", 0x1}], 0x1}}], 0x2, 0x4004000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000017c0)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000200)=0x40) (fail_nth: 6) 1.658341396s ago: executing program 5 (id=7412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x801) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x4000, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x400002, r2}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x7fff0003}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1a) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x1f, 0xffffc000, 0x8000}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x6, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) dup3(r7, r5, 0x0) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f00000001c0)='\x00\x12q\xed\xdd\x95\xc0\xec\xc2\xfa', 0xa) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x202002, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x4, r8, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, &(0x7f0000000dc0)={0xffffffff, 0x1, 0x1}) 1.39767965s ago: executing program 5 (id=7413): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.19201855s ago: executing program 1 (id=7414): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x4b0, 0xbbba, 0x0, 0x4, 0x0, {}, {0x2, 0x2}, {0x0, 0x3, 0x20}, {0x1, 0x8}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x20, 0x1, 0xb}) 934.344626ms ago: executing program 4 (id=7415): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) r2 = gettid() r3 = socket$isdn(0x22, 0x3, 0x20) kcmp(r2, r2, 0x1, r3, 0xffffffffffffffff) 933.908204ms ago: executing program 5 (id=7416): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x3742, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a40)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000005c0)=0xe8) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_clone3(&(0x7f0000002500)={0xa14000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x0, {0x1c}, &(0x7f0000002380)=""/117, 0x75, &(0x7f0000002400)=""/164, &(0x7f00000024c0)=[0x0], 0x1}, 0x58) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) r12 = gettid() sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r11, @ANYBLOB, @ANYRES32=r12], 0x28}}, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002580)={{0x0, r5, r6, r7, 0xee01, 0x20, 0x6}, 0x7a6, 0x7, 0xb26, 0x9, r9, r12, 0x7}) read$FUSE(0xffffffffffffffff, &(0x7f0000001dc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r14 = getuid() r15 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r15, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendmmsg$unix(r2, &(0x7f000000b680)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000280)="43633584d51595d6e7a087e4bb05522213410b1ade4c13d192d32ce93101b5eebe31215317b1e0b38f6bd68d39c1006269aa9d244af4d672867800d13a915f68b05bccbc6d8454a40bc499e4386774691f50ca312b935d1b3493047cda3daa126a0ee1079745cfcd841e6bed521b6b604a10761fef56ed8268eaa7aba0d2ec30c8ca43398b3ae7c99cc31e557a8db51755b0cb9e14e77331bedb4cae57d34d90777c7a961de8f4f0132c52c226d08e6afb21e93d90cbc7950802bb8c3547d6ea07953e945201ef6fecead3d3136990f38028b0acc73201ea52425baa4f2414e8bad41b8d9575389b3ba82368cdae91a481661c9197ec55f51a935c", 0xfb}, {&(0x7f0000000dc0)="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", 0x1000}, {&(0x7f0000000140)="e3c179fa57fc9d23b0d4615ed5e1e3e8f762e27350b89f4a85777f51b7bc947799635d22dbde34d64b2606256c1e86384e6c3d644a223e7071f8", 0x3a}, {&(0x7f0000000380)="584f793eb2ecff7d861138f99d1718e966b0d8c398c20b8cee70de2d3e84e117d2206f45da26696c02d687be2b619c824d805cabe4cb650f054189862de57d9fa74fa5a25f78a3d4b5128bf739a3a3cb520e94f34afeef56cc8bc694aeef1ae4ab8d73ca2c364ed4dde531a1142bb3109cd16e0a746615f7f6f7b9", 0x7b}, {&(0x7f0000000400)="0a7b18ee0193c25e8a88328a1455e637ffe19271932bbd40ec90367a2236f9", 0x1f}, {&(0x7f0000000440)="6a49f6089de57af243210a0ff7830415f1b567ed2ed57039634c0a41538d78b6115dafbe9465bf24cf2bf9eb57e86d9d9bb3ee9bea83c4132c0a6b083da064030eb440d9e2", 0x45}, {&(0x7f0000000840)="a4003e137c5ac425e979035abd1445e1fe90296cc3bcf48b799940bc071ea0c73eda985cde5469e1573a882d1f8047e752b0dc2faa2156ae6fac03cad2fbd58bca6a8928b16b2b36ae54f8bea09f45190aed07287818bdc48c635326fb4844f2da5c24ead2c9e3258855955339327857f685a3f77b26fee4ec59708c02d6949bffdaa4da45ddcea017c8813a31090803c08c3ccb85469f7d4a9ddee07ae697f9418a5eba068497524637132fbd5c562e10ada91dd37c1ddc99c003d8312d4f79fe952ae07409e55d91bd8ffc8e49d8a3145b2d7593bcc1026554d7aea2c8e8f8057f9d4642c874be968638083174d5c3f419da61", 0xf4}, {&(0x7f0000000940)="e284035a2955d4520a534f247c9f30e5454cb2cd96f949c5cb36f867ce55680b9b400185d5aecef89c54f5e9f39b44f61a6742b74159e4163a802acd8c11d2386fe6921e4aa719d744847660b19109f6379258a466ac464b8e2b15ef01a80322e7ca26ed5c1cc37b244ee0392e2e9d84dc4bc4b2bf635f9366314bcd1d07ce443b750193484039affe682f7f410f940f6495c51c094e0d62820cde08e25f27f5a0c1870d5c619a760bd9474b682d22c9ecfda649c2abe0f69d3acb108ba083233fa2ecda73a860300c40", 0xca}], 0x8, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r6}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r1, r8]}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, r1, r2, r0, r1, r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r2]}}], 0xb0}}, {{&(0x7f00000081c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f000000b600), 0x0, &(0x7f0000008380)=ANY=[@ANYBLOB="000000e4ff000100000001000000", @ANYRES32, @ANYRES32=r8], 0x18, 0x20000040}}], 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x840000000002, 0x3, 0xfa) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r16, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4004850) sendmsg$NFT_BATCH(r16, &(0x7f0000004280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004200)=ANY=[@ANYBLOB="14000000100001008080b10080000000000000005c3980d6afec8b75b691d000000a3c000000120a01020000001370a3af45f402a2e3d513bc45ce48dbbcbf9e7b00"/81], 0x64}}, 0x44004) sendmsg$NFT_BATCH(r16, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000740)=""/252, &(0x7f0000000180)=0xfc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) 878.120462ms ago: executing program 1 (id=7417): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adbaa402}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000b00)={@val={0xa}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0xd9, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x4f19, 0x4e20, 0xd9, 0x0, @opaque="6032a60d61027fc56132c70c5b2e374ea5c9f253bf510947670b66f27987c44cc92a4983e3a69d4d66f715db6bc3764c5d931bc54d44513770f4b8bab1f436c8435573795c1f21366220b8b21cf6acdd26fea91dd8728f7d1c0a41155f0da56ee7de80b5f1c653c10b002572c5c4da53d762eb53958e6688b73b8e214e6751ee18257e15bcde775faacada05890f86de2e3f8bd227b6c8631f9e340f3df7da564f3805ecf13af8303b52c516fa111f175b274d20b8f4559a9e06479a313217e7889387906d40e1dfb031cd684a466a82b4"}}}}}}}, 0x113) recvmmsg(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/208, 0xd0}, {0x0, 0x12}, {&(0x7f0000000700)=""/241, 0xf1}], 0x3}, 0x7dcf}], 0x1, 0x120, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs$pagemap(r4, &(0x7f00000000c0)) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x5c) 726.715256ms ago: executing program 1 (id=7418): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x109000, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5) sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c8621fd04e900d8fda446adba2741587c32d3e45be277b9734775b7a1e5d4622fca17f2d24a9c4a5901f7089656f8cf4918f3c88eea8f020a855bd42165f", @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf251f00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200040d4) splice(r3, 0x0, r2, 0x0, 0xea7, 0xa) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x100, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, 0x5c}) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) r10 = dup2(r8, r8) write$tun(r10, &(0x7f0000000980)=ANY=[@ANYRESHEX], 0x46) recvmmsg(r10, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x7fbfffff}], 0x1, 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x5, 0x7ef6, 0x8}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) ppoll(&(0x7f00000000c0)=[{r0, 0x651}], 0x1, 0x0, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x0) 570.714578ms ago: executing program 3 (id=7419): r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000000000000005cc672851e4f72b400"], 0x0, 0x1a, 0x0, 0x1, 0xfffff929}, 0x28) r3 = syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000880)=@multiplanar_mmap={0x6, 0x6, 0x4, 0xe000, 0x1000, {}, {0x1, 0x2, 0x4e, 0xc, 0xc, 0xf8, "d66bb72d"}, 0x4, 0x1, {0x0}, 0x889c}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r1], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) write$dsp(r0, &(0x7f00000002c0)="b7a2ce152628c87f5f226e36b3220d4c1a4f5ee1302826a6cc09ddc4e633d7d080747732b416b85e7f5a507f0e2ece753f03a42f252d9ad16dcc8bfbf2a81061e7edc522f4400fc73477547ab174e87a3db7b625fbfe83a6745291f047c82314e8afaae606b4bb2c4ae3c60042bc7950aa7ad70b2888f9c4ae60ef42aef7705374ba2c3b2f4107665e779295cbde7afed9b51c9ad12031c5cc9ee6c4eaf44f24cb5b4807f436c52c8f96764bb6", 0xad) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001003000c00171aa886ffff58001393945af296df971c4bdf1300004000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc02000000000000000000000000000004001200"], 0x64}}, 0x0) 490.213085ms ago: executing program 1 (id=7420): syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=@deltclass={0x190, 0x29, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0x3}, {0x0, 0x3}, {0x5, 0xd}}, [@c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_FD={0x8, 0x1, r0}]}}, @c_atm={{0x8}, {0x28, 0x2, [@TCA_ATM_HDR={0x22, 0x3, "f99a6544b7a02a9a26227df060ddef5afd487aa25fd612b70975739a27fa"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x1}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x10}}}, @c_cbq={{0x8}, {0xac, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0x3}, 0x200, 0x80000000}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x0, 0xe, 0xf8, 0x3, 0x1}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x2, 0x8, 0x1, 0x1, 0x7fff, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x2, 0x5, 0x2, 0x8, 0x72}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xd, 0x1, 0x11, 0x1, 0xa3, 0x9, 0xd8629fd, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x1, 0x2, 0x1, 0x6, 0x0, 0x3376}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf7, 0x8, 0x80, 0x81, 0x95a, 0x5}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x0, 0xc}, 0x748, 0x200}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0x8}, 0x5, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x1, 0x0, 0x9, 0x44, 0x10000}}]}}, @c_atm={{0x8}, {0x3c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0xb}}, @TCA_ATM_FD={0x8, 0x1, r4}, @TCA_ATM_HDR={0xb, 0x3, "ecdb27abc34060"}, @TCA_ATM_HDR={0xc, 0x3, "9ab81ce2e0507fec"}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8, 0x1, r0}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000008"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000200)=r7, 0x4) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ppoll(&(0x7f0000000200)=[{r8, 0x20}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x4e20, 0x2d2f, @mcast2, 0x7}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x0, 0x0) 444.935428ms ago: executing program 3 (id=7421): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) syz_open_dev$audion(&(0x7f0000000100), 0x8, 0x8000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000240), &(0x7f00000002c0)=0x8) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000500), 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffff5, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) utimensat(r4, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{}, {0x0, 0xea60}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1, 0x55, 0xfffffffc) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1}) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="bb7e0700000000"], 0x10}}, 0x40800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000440)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440), &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x2, 0x7, 0x0, r8}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000000003ff) r10 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r10, 0x4112, 0x0) 129.142861ms ago: executing program 2 (id=7422): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) close(r2) 781.938µs ago: executing program 5 (id=7423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x8c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x10000}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}]}, 0x8c}}, 0x20004000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x800003) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x25, &(0x7f0000000200), 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r5, 0x3, 0xfffffffa}, &(0x7f0000000280)=0xc) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) 0s ago: executing program 2 (id=7424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000019c0)=[@in_dx={0x69, 0x20, {0x23cb, 0x6}}, @nested_create_vm={0x12d, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x0, 0x3}}, @nested_load_syzos={0x136, 0xf2, {0x1, 0xfffffffffffffffa, [@wr_crn={0x67, 0x20, {0x8, 0x7fffffff}}, @rdmsr={0x66, 0x18, {0x261}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x7fffffff, 0x5}}, @nested_load_code={0x12e, 0x6a, {0x2, "b9800000c00f3235000800000f30b9a10900000f3266ba610066b8000066efb8010000000f01c148b80a000000000000000f23d80f21f835c00000700f23f80f72f077420f20df0f01df410f01c50fc75f00"}}]}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0xbe, 0xf55, 0x3}}, @rdmsr={0x66, 0x18, {0x985}}, @rdmsr={0x66, 0x18, {0x229}}, @uexit={0x0, 0x18, 0x200}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest16=0x810, 0x1000000000, 0xffffffffffffff7f, 0x200}}, @set_irq_handler={0xc8, 0x20, {0x1b, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x4, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host32=0x4c00, 0x6, 0x0, 0x101}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x635, 0x7, 0xe9}}, @wrmsr={0x65, 0x20, {0x9f4, 0x7}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x1d, 0x0, 0x1, 0x1}}, @set_irq_handler={0xc8, 0x20, {0xe1, 0x2}}, @nested_amd_inject_event={0x180, 0x38, {0x6b, 0x6c, 0x1, 0x80000000, 0x2}}, @wr_crn={0x67, 0x20, {0x0, 0x1}}, @nested_load_syzos={0x136, 0xa8, {0x0, 0x1, [@in_dx={0x69, 0x20, {0x2515, 0x2}}, @wr_drn={0x68, 0x20, {0x6, 0x7}}, @wr_crn={0x67, 0x20, {0x8, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}]}}], 0x472}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r4, 0x4, 0x40800) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000500)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000200)="66450fc7746e0a0fb51ef2ab400f79ac680080000066bba100ed0fc77310c4427d988c170500000074495470fb70190c190c75a854ff048fa800b6c3f9", 0x3d}], 0x1, 0x8, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) tkill(r6, 0x7) wait4(r6, 0x0, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001300010029bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="86ee01000904000008000300", @ANYRES32=r6, @ANYBLOB], 0x28}}, 0x24008844) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000004700)=@vmx={0x181, 0x0, 0x2080, {0x3000, 0xffff1000, {0x3}, 0x0, 0x10000}, {"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", "36dced962d4d9446ed35020b7b158910667596be7b163acac14a390d61884bfde460eaba336970225c6488b234dc7e0007f8cc4328f1c9c640c9b2eb395376d70c7145ed687cb19173d3f3fd6b2eb92b7a280401c07af608af6c0edf66e996d1b8c991c4c3fb0ef54f7aa3761d3013ddf622cbacc19610e736d801272f1802cb75e7c78c80d61baa815767465b301ab6e2d7ee44f65ec635d140c6ec56e04e3c95da78ed8bdfd28225f3ca895a875224fd99f478ad44ce939294d67f58c1fec6c029db68adcf55b52a5fe5f85eeeb1dc655323fda2d8ff02079668f5038ee4c1816ddaed4d247c1a83df7cf3ba3f5cb82c228ba069f9d3b1e38406dfcc22e0b1fe76e387cdba2a772f236ba4f6839cf63143f91475e3fcf12aa998a7efc179294bd68d9c0836a5e0359a66b54fa367df6c29ac6877f5370367cc41cf0429eabefa63f8e92661ece20edbbee8afe27b44b9119fd88090a7bef6ef8700506c325db45953df86e068ed4c2918d933c4c2ea8061f9516f85dd536878d6fb560b7bcf377a0f69bbfe9c051fb93b48c91c2a8acfe81032ca1b435c5ed84d4ff676e536ac8f6cd18cbcdd75eab385318f3c1d96ca6c7d7df314dae040d09e072a43f5dc0b192efefc90c033050a45b3a8d0f4d9dbfe98527d9b73b162a5ee49cfd9cea2d86b4656907d49be9c73e6d3aa6e3aa82878d8d32b939a24162acb865abdebf0438c8244513da950f678ea2477271c81beb55a3cd285d51e9f69f37896838af62c9df67621e6bd0b1ba421c5309e3782cf2adc46e2d05534c129e5fd865a8bd58d973615b337984e5bfc5f632085974cde32f7feb9242c00c16165fa8cdebbb221a7a7cc2614d795f3f8fa0316d97c99d34a17cef6c1ab2938863779627ec2a64b6a1b2dbae0a83ab8f12b0ad7d40b82c703be385b84c5ddcfd2a5749c3ff337fb15d578af7cacb63052d5b97db0a1605eb0902c4b83c58ce1f992ec1b260ed65f5b30417802092a5be447bb383e21ecfed7c6ef940d78f70c073275ccab9b69c1a38a18299846f509c9eb4979ea90b079c6b03db557b21aff635f3db3f8aacf83a06663b2fe15bf17e1b3260eace1e98a3704308820d03ce4cdf742e575eedcaa9a1e070b283b007d84615166475fef494f9a994f21e8c4a2839a25541560b8f0aa17296b5eead9133e1c9f3de312b8f71937a00f87e87bd262db2b85003796c3c2b9c5b9e39c5b232c055b7d29d4edf51bbb1db02206013e8ca0e9c58f02c87060e720059ba1e0c49e3b871dca5e2ed0f8d39322f2e30f06f9c12f34c19205e5c0ede59a4867d3b88eba54571784ac489aee5508573aa2a5b7532625b00d56bab290170db47111b6fad3c6b0de108e3758aca0c7565672a231df9dc6b30d58660e4081ee311398b0474ffc91f6356b51d1d555336cf4a5cd5618e2c05f203c3fe6983df992cc9dcd8495ef79d18e753b011d59778cde5690b6e9de6a0389ed03b83501c14953d6472a81a012d94ecadb42ec9ba37ed99da56cce302a35ea375b90a62b1698e08537885644938ebe8831c87d42bc06830103dfc5775c29d455447a5d89ddb8d8dff3bc875253a281f54c1dfe8b4b8e023bc516a59cde0820008bec91dd036d2e22a66052d188fc12d2f34ca6c9f05ad06309a99cc1e1a89febc5070d87cabb403f0b665ce1b4cc0d7137ddbea70ac64828351d88473313c9a653f067146ae0ec2e9ba0bb69ffa249e0a1d18186d9b9dea997ed73364472855cf9538667806f910e63ce3cb671d135d45c25479c06b30ee26a55bbec3c842d3180274a85d1e02224f7a30f969262c07fecd012e4c0be1eae976071b11587a7eed06c42965b80b63a3ad771211c8bef87c5c9a7ca0e39405fde7a9f4d4bae43106d665b1534e973e26791b5471bbae563fe0ccd5b82c9b2dfe897c50a3d3e5d4228982c2f41d2c59be2b705d3233e135e8d49aae6a9aef5bdadebff6cc7427f2c8f6a250ab3878e80c026680be33df869502686e0ffec32d0a54085a6e7e8b4037c0a751228db34e3a22648d9a5f4619604fda71d0eb33612a1e791e2e1eb62d034f1a3778ba6226b553b7906710700bfc10f0d173771e12bbb3c8a80f9016bb94089f186217b99a247d2749100a2a15554cce7a959647f980724fd717804d71b94490ae1e46e87c77025aa1303c03176cc6e7d53dc0c82c8dc4ac934469fb87a327de8209831d0d5a86a26218f2615df477d0c09edb2f2596b197438d529e45695064b95fb21d1f1a62d763143801995e143bb8e81298e4139807376a73bf625499749c7ed4e6780647d863fdbcbb3984346f2a3bc20285651cb9570d7ac2c1616c24a6b2ffc853ce72e8b1146160c5a6f7b06c8888d2534ec8e579241ce7554f9f7519c79df716958fc841835a571e6ccf94d3218abdc37c3689da5037949a510628685d5e7922acf283ae58563e1afee327dee068de2e782fbd7570e91088cac53ed11856593888b0d0e127c0cd45e05e752e2e1f1dea34ce494563aa08e665d6254b16499a38bfe6405b23d86750ff853f115a82c97bce5f86cdd26cd6684663383e833c83a1e6998b4c9d790805a4bb304c1d976da68c31ca06b9414820e33cde58d787ec05627a8d0e60a0afe407bdca252480a043b47621ab2b571b19abc2bc88d6fa44e86e5481606d867bbe3f65c7b09860cfdfee0d52e9cc683ba830585dd4e24735a622dc3edb2fbc634f1e0be8c59a4705c63b6877bd6c08a2679c0ca913ab1fc708cc5a2d6724d27327360c752d3662bbf5a011e06c15792e8997ef8288e04de47bfefc93cc1e416d8d7eeba493034cba44015ce950127048f711a133c3176950ea20eea06bb9506fb59b23234ecfdb73539c910b4f5fb310f50687bf97abe15d581ca94be3a4a9b369364057f62659bab45729047e79e9f57a9009bcb7cbbcb98ecf75efedde5278d2894744bba5915f3f55af319adca424ac0e33d39253c7319223b37ada10e366ad7db1a763ef1f817c87b251949eae126928a86be86c0cfd27461f1751d73e6e87d083a7fa499f16d2ad0af7d5da690e1ed61de7d143b56e1a56907f7bec2dc620101118fca0017ccc67ca2fbc2dce01ccaf72c53887b756102912cb9bf57d91f08bc7c591263403ea90c39187dae444c7c0baa8e4022cdab23d7885de18d0a2b2be0719ce5af2d34988a8439136e102dee993926792cb9078b6ea0dfdc18335fffed20dbc5be9bc9fa31667d47890a5af55003cfadcc6f218e354d29e99b6c18dc49b6ad12269a4d99ea683ac1b4944047f5ea8a554af8c57b6eac75cc4a804f46dc7d8ad10a9db21be7ceb60d6eedb3397b8186d11fec9d7e03680695b99ea050a735201a171b176506d08ee7419d9dc73a2fccdbd79583162c81d856cf60f01fe67b9b67b3578cb76dcdcf9bebda6b4eb18b22b26dd310d6c3847854ee26ea2da165a0578b16bea5c10a738cd245eb95cee69e0849c06df46f4c8805cdda2098a6997e9c937fb1a865abdf6e310974dc348509c8b7b1c623f22340f0e46a2743d987b4144c1fcc8cf806242364478e30b1bdbfc0580990625c783735daa2020dac2692cae9881cbd13ea779f673ead1fc97e5b8dc22f278f9d07d8ca6ebb7ebbbca2d735d88bc922ac3c0f807c830697d47245b2f06d593c62262a1fd78c6b2e023f1abe20ee38da4904ae9cd1daf1695919af00661840c105ee8a4b136947656caf6d83885425668fb75e01c7c9ef09cba1b0de30ed9de2fac40ad882783001ccb992317683dbf5a6746876f6270af1bbb1f856324c4483166cabb5c37902ffc3fd467bc760c96bcadc32439638e6ce6bda8bddcba438f9dd6eab81c23c1cc6b0452590006088e91a889573e7f36dab1e65203f6c65f4129adac9535519877d17b32aa2ba24dc97d26f80e681c6588822569bef6a2ec43594f0c4e600c7498f424087bfd725d00c04573a1315f76cfa3a00ae0e404b8baeeacca9ce798746699c2391bfce00d934c9b685870ebb3789654ae2f90384aea1aa091e9d8aa8aee6087157f4df2506e4c19c3a9830057a056728b84778287aa77b28e1c6d030d9de8a35df6e9c30137127833613566e5f97693b5d39f3aae35bb4b8a1f96ddfa639bf78b3d7797d87874a3486be6dc3c026ec560fdc293bfe4aa21c40b3f6456de76f468202f4e5672c52cc7919a376b27e8049ce656864dfcdd4d072ece237888e048bf5a3f9e20a3fc96b56ed1e5f0356f67c21fd268376b56af2df65d4d8135327b9ccd497f91d61e06a76b42ec168380939659776cbfba01b4ac46e0d6cf3f9edc3ae270529d38640077c972beb5d1876e149d18045193f598c5d08ee368f1394b99d428df1f3f059ca3bdbd7ed637aefa6eb48719423cb5709a669f136ff1010195e2f19cf10a7a7cf2d83e518d960a4c731b0fe6f87625cf8d1143b3212272bfaf2a1d094e58d91f2c848047d50a35de5c3a19dc4bfb079004da5cfd4291b3a407035c5bccd8f98c4381e7c73767bab042aa445d3b9e9ad74535d4bd8f2c265071530ca6216474f50b9118ee8afc7011e46e91a34a66d1bdc188d83eadc1f2eeecd57ba8ecb6e8532d139b5d1405430b56a269096c40404d444d9654f60d01088ae978101791d29d369d68ddec9ce051f0fff20dc7c34cd8b1f392e30c12b364fb52cf74036c57c4e8d5aa7f43a5ed479a079cc3e23b0f4ec893ed348b10d5e9c714931092e34c8eeff45fc5be1ad79b4f80aa881048ecb221d91f45e6b7b2e1948a66c4d2bf63bd7f0283049bf2167ac09c95ede05a4976cb52d4a2ea81ba12b8709d5ce7c8cba970ce60ca82c4c27da0832ec5c42d05a3bc142cf4be7ecc6eea491a177f88866fe885c61065e8f651c3a73ba735d7899b661c3c62b5a7eec03f80aca4bb77a86e80d8462c5dd59eb1d4e8d58450991703016894267c639fce08ce3192da6cef052f06efbe281455a8b28c0029dea7f26262b3f195b0affcde48ce3a3171e0f398a93b19c25754c272065d7d37f4c1b396a86601cfbc63814882104e48809cf0146a5c2b0e1af427505b51e90d70d0a95ee3a6f9230823feaca1c9a5bd67ded1b4bd9a89dd79fa88a7f9997cda8be9927a854d31d0faf086645899003c6e2e4f842d74b525d9774b493b0bf7168ed4741ff46fd952443ade515d30ef2316445ac1304e118a8461ffdeafd074eef0ed518189ffa1c9bbcc106c51c9624e04d9c9a9617993033c6d692b2361625c5424f920d68799360176fa9c34c5343ca1a0547c63a46dca08bfe461db3f77a52ad137257fd49b675ed0954ddbf1f223ed39b8439791b06920b231ec08129a7d9de1fcf3ef7bf4325febb85cac1ed7dcf2d82435f45a8b38fd6b603f889d1b65c01cc838de8de8a8ee8db533c51303ae9c79b6cf27c1548cbc2c7565b713c388bf524ac19d329ac8c00dd30425c6fad5b45923d6728ef41d284b3f454f0ac3020db82c160243ff7fea8b03039161a9946c5e86c907ee1b2e6ddb4277645a96c7ffab070177b057c1389cec36abfa8ffa72d6a95ce5aeef1d0831726858ea04c16e258313651d82acab6a5bb6f332f107d23d6c4185d9b56fe493576fecfc517296e18beb8270bf89baef4f0db58a36351bb7e27823698c352827e1cb28daa31486fb272fdf4857584bc2d2acd2688c5f6de68aa7e3e09f1e3c215e35d10ab7c650f2dd7467c4967ee7ed112c35122a09f61441d579b59c5a2b563d8bf3e7b61da47c639a4230bd40d0ec2bafc02531d6dd788b491114ba467e8d3"}}) ioprio_set$pid(0x1, r6, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000001880)={{r1, &(0x7f00000000c0)='/dev/kvm\x00', 0x80300, &(0x7f0000000100)={@align=0x1ff, {0x3, 0xfff7, 0x3326, 0x1}}, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x7}, {[0x94d, 0x0, 0x1]}, 0x9, 0x1000, &(0x7f0000000880)=""/4096}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000240)={0x2b, @empty, 0x4e20, 0x2, 'dh\x00', 0x29, 0x2, 0x53}, 0x2c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000100)={0xc000, 0x0, 0x4, 0x6, r10}, &(0x7f0000000140)=0x10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x3f, 0xb, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r12, 0x40000007}}, 0x48) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000001900)={r10, 0xa4, "6230832c6faf92341924691c6819ff2723268b00d9aac67d1080e3a0d79f06581030a9b01d1719e024f7b93ffd6d538920efd0d0e5c641b888216f7dd07837e900b749810e799dac79b354c96a3050e324a02bd73277668d569bfe700e6c57d79a6073be9a9d73f6a5de68fd595da250a105bb81129145c93beeb0d291bb1bb1998ded8a2c49f12815cf29d813faed222d57b47af54ee2c0bdce102be56986f18d5d29ef"}, &(0x7f00000001c0)=0xac) kernel console output (not intermixed with test programs): (-320) [ 1896.029375][T29809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1896.040386][T29809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1896.051401][T29809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1896.062409][T29809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1896.073601][T29809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1896.084621][T29809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1896.095641][T29809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1896.106706][T29809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1896.423001][ T5879] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1896.646481][T29822] netlink: 179596 bytes leftover after parsing attributes in process `syz.5.6984'. [ 1896.672603][ T5879] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1896.686014][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.714785][ T5879] usb 2-1: config 0 descriptor?? [ 1897.153052][ T5928] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1897.395333][ T5928] usb 5-1: config 0 has no interfaces? [ 1897.400876][ T5928] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1897.435692][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.446713][ T5928] usb 5-1: config 0 descriptor?? [ 1897.690938][T29824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.735609][T29824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.758067][ T5928] usb 5-1: USB disconnect, device number 5 [ 1897.774977][T29841] netlink: 'syz.2.6990': attribute type 1 has an invalid length. [ 1897.816600][T29841] bond2: entered promiscuous mode [ 1897.823139][T29841] bond2: entered allmulticast mode [ 1897.844804][T29841] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1897.975663][T29824] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 29824 comm: syz.4.6985) [ 1898.016015][ T30] audit: type=1800 audit(1772423853.515:1770): pid=29824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6985" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=151231 res=0 errno=0 [ 1898.116181][T29855] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6993'. [ 1898.186653][ T5879] usb 2-1: Cannot set autoneg [ 1898.191819][ T5879] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1898.212332][T29857] batman_adv: batadv0: Adding interface: dummy0 [ 1898.214777][ T5879] usb 2-1: USB disconnect, device number 107 [ 1898.226224][T29857] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1898.259710][T29857] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1898.283001][T29527] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1898.527583][T29527] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1898.536758][T29527] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.572926][T29527] usb 5-1: Product: syz [ 1898.592923][T29527] usb 5-1: Manufacturer: syz [ 1898.597563][T29527] usb 5-1: SerialNumber: syz [ 1898.640785][T29862] Cannot find add_set index 0 as target [ 1899.023737][T29824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1899.061110][T29824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1899.085878][T29527] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1899.127201][T29527] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1899.167284][T29527] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1899.197431][T29527] usb 5-1: USB disconnect, device number 6 [ 1899.310545][T29872] FAULT_INJECTION: forcing a failure. [ 1899.310545][T29872] name failslab, interval 1, probability 0, space 0, times 0 [ 1899.323702][T29872] CPU: 1 UID: 0 PID: 29872 Comm: syz.3.6999 Tainted: G L syzkaller #0 PREEMPT(full) [ 1899.323720][T29872] Tainted: [L]=SOFTLOCKUP [ 1899.323723][T29872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1899.323729][T29872] Call Trace: [ 1899.323734][T29872] [ 1899.323739][T29872] dump_stack_lvl+0xe8/0x150 [ 1899.323759][T29872] should_fail_ex+0x412/0x560 [ 1899.323774][T29872] should_failslab+0xa8/0x100 [ 1899.323787][T29872] ? sctp_get_port_local+0x6f2/0x1730 [ 1899.323805][T29872] kmem_cache_alloc_noprof+0x87/0x650 [ 1899.323818][T29872] sctp_get_port_local+0x6f2/0x1730 [ 1899.323838][T29872] ? __pfx_sctp_get_port_local+0x10/0x10 [ 1899.323853][T29872] ? sctp_bind_addr_match+0x28b/0x2b0 [ 1899.323868][T29872] sctp_do_bind+0x4f1/0x9d0 [ 1899.323887][T29872] sctp_connect_new_asoc+0x270/0x6b0 [ 1899.323903][T29872] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1899.323920][T29872] ? __local_bh_enable_ip+0xd0/0x130 [ 1899.323932][T29872] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1899.323943][T29872] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1899.323955][T29872] sctp_sendmsg+0x1528/0x2c10 [ 1899.323975][T29872] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1899.323990][T29872] ? aa_sk_perm+0x6d5/0x900 [ 1899.324005][T29872] ? __pfx_aa_sk_perm+0x10/0x10 [ 1899.324017][T29872] ? sock_rps_record_flow+0x19/0x400 [ 1899.324033][T29872] ? inet_sendmsg+0x2f4/0x370 [ 1899.324044][T29872] ____sys_sendmsg+0x894/0xad0 [ 1899.324063][T29872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1899.324081][T29872] ? import_iovec+0x73/0xa0 [ 1899.324096][T29872] ___sys_sendmsg+0x2a5/0x360 [ 1899.324113][T29872] ? __pfx____sys_sendmsg+0x10/0x10 [ 1899.324129][T29872] ? kstrtouint+0x6e/0xe0 [ 1899.324157][T29872] ? __fget_files+0x2a/0x420 [ 1899.324171][T29872] ? __fget_files+0x3a0/0x420 [ 1899.324188][T29872] __sys_sendmmsg+0x27c/0x4e0 [ 1899.324204][T29872] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1899.324217][T29872] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1899.324239][T29872] ? ksys_write+0x242/0x270 [ 1899.324250][T29872] ? __pfx_ksys_write+0x10/0x10 [ 1899.324263][T29872] __x64_sys_sendmmsg+0xa0/0xc0 [ 1899.324277][T29872] do_syscall_64+0x14d/0xf80 [ 1899.324286][T29872] ? trace_irq_disable+0x3b/0x150 [ 1899.324300][T29872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1899.324310][T29872] ? clear_bhb_loop+0x40/0x90 [ 1899.324322][T29872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1899.324331][T29872] RIP: 0033:0x7ff35b59c799 [ 1899.324341][T29872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1899.324349][T29872] RSP: 002b:00007ff35c3b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1899.324361][T29872] RAX: ffffffffffffffda RBX: 00007ff35b815fa0 RCX: 00007ff35b59c799 [ 1899.324368][T29872] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 1899.324374][T29872] RBP: 00007ff35c3b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1899.324380][T29872] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001 [ 1899.324385][T29872] R13: 00007ff35b816038 R14: 00007ff35b815fa0 R15: 00007ff35b93fa48 [ 1899.324400][T29872] [ 1900.017667][T29879] netlink: 'syz.2.7002': attribute type 1 has an invalid length. [ 1900.071837][T29879] bond3: entered promiscuous mode [ 1900.077233][T29879] bond3: entered allmulticast mode [ 1900.083778][T29879] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1900.332950][ T5928] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 1900.496848][ T5928] usb 2-1: not running at top speed; connect to a high speed hub [ 1900.512198][ T5928] usb 2-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1900.531824][ T5928] usb 2-1: config 1 interface 0 altsetting 15 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1900.545566][ T5928] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1900.582960][ T5879] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1900.745149][ T5879] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1900.754830][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.772441][ T5879] usb 3-1: config 0 descriptor?? [ 1900.846487][T29905] loop5: detected capacity change from 0 to 7 [ 1900.884180][T29905] Dev loop5: unable to read RDB block 7 [ 1900.890465][T29905] loop5: AHDI p4 [ 1900.895539][T29905] loop5: partition table partially beyond EOD, truncated [ 1900.962136][T29909] netlink: 'syz.5.7013': attribute type 1 has an invalid length. [ 1900.973515][T29909] netlink: 64475 bytes leftover after parsing attributes in process `syz.5.7013'. [ 1901.200286][T29914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1901.207576][T29914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1901.223204][T29914] batman_adv: batadv0: Interface deactivated: dummy0 [ 1901.311217][T29914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1901.329138][T29914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1901.371462][T29914] veth1_macvtap: left allmulticast mode [ 1901.385094][T29914] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 1901.421960][T29914] macsec0: left allmulticast mode [ 1901.439339][T29914] macsec1: left allmulticast mode [ 1901.456879][T29914] vlan2: left allmulticast mode [ 1901.462022][T29914] bond0: left allmulticast mode [ 1901.468658][T29914] bond1: left allmulticast mode [ 1901.477761][T29914] bond2: left promiscuous mode [ 1901.482697][T29914] bond2: left allmulticast mode [ 1901.490008][T25938] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1901.505603][T25938] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1901.523891][T25938] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1901.543432][T25938] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1901.848924][T29527] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1901.879889][T29924] loop5: detected capacity change from 0 to 7 [ 1901.897361][T29924] Dev loop5: unable to read RDB block 7 [ 1901.903270][T29924] loop5: unable to read partition table [ 1901.923181][T29924] loop5: partition table beyond EOD, truncated [ 1901.943017][T29924] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1902.032978][T29527] usb 6-1: Using ep0 maxpacket: 32 [ 1902.041292][T29527] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 1902.057613][T29527] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1902.065743][T29527] usb 6-1: can't read configurations, error -61 [ 1902.075239][ T5879] usb 3-1: Cannot set autoneg [ 1902.080148][ T5879] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1902.096229][ T5879] usb 3-1: USB disconnect, device number 13 [ 1902.203121][T29527] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1902.353030][ T6007] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1902.373013][T29527] usb 6-1: Using ep0 maxpacket: 32 [ 1902.379042][T29527] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 1902.391626][T29527] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1902.404131][T29527] usb 6-1: can't read configurations, error -61 [ 1902.410792][T29527] usb usb6-port1: attempt power cycle [ 1902.454482][T29936] program syz.3.7021 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1902.510851][ T6007] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1902.520276][ T6007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.529898][ T6007] usb 5-1: Product: syz [ 1902.534611][ T6007] usb 5-1: Manufacturer: syz [ 1902.539235][ T6007] usb 5-1: SerialNumber: syz [ 1902.546857][ T6007] usb 5-1: config 0 descriptor?? [ 1902.753145][T29527] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1902.760146][ T6007] usb 5-1: f81604_read: reg: 105 failed: -EPIPE [ 1902.771604][ T6007] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 1902.773632][T29527] usb 6-1: Using ep0 maxpacket: 32 [ 1902.780818][ T6007] f81604 5-1:0.0: probe with driver f81604 failed with error -32 [ 1902.786827][T29527] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 1902.795868][ T6007] usb 5-1: USB disconnect, device number 7 [ 1902.810728][T29527] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1902.819079][T29527] usb 6-1: can't read configurations, error -61 [ 1902.933115][ T5879] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1902.953207][T29527] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1902.973876][T29527] usb 6-1: Using ep0 maxpacket: 32 [ 1902.979532][T29527] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 1902.989537][T29527] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1902.997435][T29527] usb 6-1: can't read configurations, error -61 [ 1903.004207][T29527] usb usb6-port1: unable to enumerate USB device [ 1903.084214][ T5928] usb 2-1: New USB device found, idVendor=1241, idProduct=f767, bcdDevice= 0.40 [ 1903.095697][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 1903.104407][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.112504][ T5928] usb 2-1: Product: ᐉ [ 1903.119709][ T5879] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1903.130186][ T5879] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1903.130387][ T5928] usb 2-1: can't set config #1, error -71 [ 1903.145997][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1903.157503][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1903.171929][ T5928] usb 2-1: USB disconnect, device number 108 [ 1903.178363][ T5879] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1903.195037][ T5879] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1903.204400][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.673522][T29955] FAULT_INJECTION: forcing a failure. [ 1903.673522][T29955] name failslab, interval 1, probability 0, space 0, times 0 [ 1903.687779][T29955] CPU: 1 UID: 0 PID: 29955 Comm: syz.3.7028 Tainted: G L syzkaller #0 PREEMPT(full) [ 1903.687806][T29955] Tainted: [L]=SOFTLOCKUP [ 1903.687812][T29955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1903.687822][T29955] Call Trace: [ 1903.687830][T29955] [ 1903.687838][T29955] dump_stack_lvl+0xe8/0x150 [ 1903.687871][T29955] should_fail_ex+0x412/0x560 [ 1903.687896][T29955] should_failslab+0xa8/0x100 [ 1903.687918][T29955] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1903.687937][T29955] ? __alloc_skb+0x186/0x7d0 [ 1903.687957][T29955] ? __alloc_skb+0x1d0/0x7d0 [ 1903.687975][T29955] ? __local_bh_enable_ip+0xd0/0x130 [ 1903.688000][T29955] __alloc_skb+0x1d0/0x7d0 [ 1903.688025][T29955] netlink_sendmsg+0x5d4/0xb40 [ 1903.688053][T29955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1903.688076][T29955] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1903.688096][T29955] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1903.688115][T29955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1903.688132][T29955] ____sys_sendmsg+0xa68/0xad0 [ 1903.688162][T29955] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1903.688191][T29955] ? import_iovec+0x73/0xa0 [ 1903.688216][T29955] ___sys_sendmsg+0x2a5/0x360 [ 1903.688242][T29955] ? __pfx____sys_sendmsg+0x10/0x10 [ 1903.688294][T29955] ? __fget_files+0x2a/0x420 [ 1903.688315][T29955] ? __fget_files+0x3a0/0x420 [ 1903.688344][T29955] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1903.688368][T29955] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1903.688398][T29955] ? __pfx_ksys_write+0x10/0x10 [ 1903.688425][T29955] do_syscall_64+0x14d/0xf80 [ 1903.688441][T29955] ? trace_irq_disable+0x3b/0x150 [ 1903.688465][T29955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.688483][T29955] ? clear_bhb_loop+0x40/0x90 [ 1903.688502][T29955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.688518][T29955] RIP: 0033:0x7ff35b59c799 [ 1903.688535][T29955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1903.688549][T29955] RSP: 002b:00007ff35c3b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1903.688567][T29955] RAX: ffffffffffffffda RBX: 00007ff35b815fa0 RCX: 00007ff35b59c799 [ 1903.688579][T29955] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1903.688590][T29955] RBP: 00007ff35c3b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1903.688599][T29955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1903.688609][T29955] R13: 00007ff35b816038 R14: 00007ff35b815fa0 R15: 00007ff35b93fa48 [ 1903.688635][T29955] [ 1904.067974][T29959] usbtmc 3-1:16.0: simple usb_control_msg failed -32 [ 1904.294810][T29526] usb 3-1: USB disconnect, device number 14 [ 1904.533987][T29968] program syz.4.7032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1904.629752][T29970] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7031'. [ 1904.755713][T29969] vlan2: entered allmulticast mode [ 1904.791426][T29969] bond0: entered allmulticast mode [ 1904.805942][T29969] bond_slave_0: entered allmulticast mode [ 1904.824442][T29969] bond_slave_1: entered allmulticast mode [ 1904.871220][T29970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1904.886682][T29970] bond_slave_0: left allmulticast mode [ 1904.916118][T29970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1904.965882][T29970] bond_slave_1: left allmulticast mode [ 1904.991922][T29970] bond0 (unregistering): Released all slaves [ 1905.564622][T30001] netlink: 'syz.4.7041': attribute type 1 has an invalid length. [ 1905.581708][T30003] program syz.5.7043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1905.737108][T30006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7041'. [ 1906.232969][ T5879] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1906.255881][T30012] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7041'. [ 1906.331274][T30017] FAULT_INJECTION: forcing a failure. [ 1906.331274][T30017] name failslab, interval 1, probability 0, space 0, times 0 [ 1906.342970][T29526] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1906.442587][ T5879] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 1906.463084][T30017] CPU: 0 UID: 0 PID: 30017 Comm: syz.1.7047 Tainted: G L syzkaller #0 PREEMPT(full) [ 1906.463104][T30017] Tainted: [L]=SOFTLOCKUP [ 1906.463108][T30017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1906.463114][T30017] Call Trace: [ 1906.463119][T30017] [ 1906.463124][T30017] dump_stack_lvl+0xe8/0x150 [ 1906.463143][T30017] should_fail_ex+0x412/0x560 [ 1906.463159][T30017] should_failslab+0xa8/0x100 [ 1906.463172][T30017] __kmalloc_noprof+0xe8/0x760 [ 1906.463184][T30017] ? tomoyo_encode+0x28b/0x550 [ 1906.463199][T30017] tomoyo_encode+0x28b/0x550 [ 1906.463214][T30017] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1906.463231][T30017] ? tomoyo_path_number_perm+0x219/0x630 [ 1906.463241][T30017] tomoyo_path_number_perm+0x246/0x630 [ 1906.463253][T30017] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1906.463265][T30017] ? __lock_acquire+0x6b5/0x2cf0 [ 1906.463282][T30017] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1906.463302][T30017] ? __fget_files+0x2a/0x420 [ 1906.463317][T30017] ? __fget_files+0x2a/0x420 [ 1906.463329][T30017] ? __fget_files+0x3a0/0x420 [ 1906.463341][T30017] ? __fget_files+0x2a/0x420 [ 1906.463356][T30017] security_file_ioctl+0xc3/0x2a0 [ 1906.463367][T30017] __se_sys_ioctl+0x47/0x170 [ 1906.463380][T30017] do_syscall_64+0x14d/0xf80 [ 1906.463389][T30017] ? trace_irq_disable+0x3b/0x150 [ 1906.463402][T30017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.463412][T30017] ? clear_bhb_loop+0x40/0x90 [ 1906.463424][T30017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.463433][T30017] RIP: 0033:0x7feafe39c799 [ 1906.463443][T30017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1906.463451][T30017] RSP: 002b:00007feaff1aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1906.463463][T30017] RAX: ffffffffffffffda RBX: 00007feafe615fa0 RCX: 00007feafe39c799 [ 1906.463473][T30017] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 1906.463480][T30017] RBP: 00007feaff1aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1906.463486][T30017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1906.463491][T30017] R13: 00007feafe616038 R14: 00007feafe615fa0 R15: 00007feafe73fa48 [ 1906.463506][T30017] [ 1906.463519][T30017] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1906.561380][ T5879] usb 3-1: config 0 has no interface number 0 [ 1906.663002][T29526] usb 6-1: Using ep0 maxpacket: 32 [ 1906.684328][T30017] program syz.1.7047 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1906.718758][ T5879] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1906.830845][ T5879] usb 3-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1906.845998][ T5879] usb 3-1: config 0 interface 113 has no altsetting 0 [ 1906.865485][T29526] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 1906.876817][ T5879] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1906.886983][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.895398][ T5879] usb 3-1: Product: syz [ 1906.900166][ T5879] usb 3-1: Manufacturer: syz [ 1906.906244][ T5879] usb 3-1: SerialNumber: syz [ 1906.911241][T29526] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1906.924214][ T5879] usb 3-1: config 0 descriptor?? [ 1906.935907][T29526] usb 6-1: can't read configurations, error -61 [ 1906.938374][ T5879] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1906.975186][T30024] x_tables: duplicate underflow at hook 1 [ 1906.989891][T30024] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1907.100858][T29526] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1907.352593][ T5879] usb 3-1: USB disconnect, device number 15 [ 1907.382941][T29526] usb 6-1: Using ep0 maxpacket: 32 [ 1907.389550][T29526] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 1907.400008][T29526] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1907.409921][T29526] usb 6-1: can't read configurations, error -61 [ 1907.418310][T29526] usb usb6-port1: attempt power cycle [ 1907.772944][T29526] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1907.814040][T29526] usb 6-1: Using ep0 maxpacket: 32 [ 1907.827955][T29526] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 1907.859351][T29526] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1907.934041][T29526] usb 6-1: can't read configurations, error -61 [ 1907.950858][T30028] bond2: left promiscuous mode [ 1908.025862][T30028] bond2: left allmulticast mode [ 1908.039481][T30028] bond3: left promiscuous mode [ 1908.057684][T30028] bond3: left allmulticast mode [ 1908.143084][T29526] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1908.193467][T29526] usb 6-1: Using ep0 maxpacket: 32 [ 1908.212508][T29526] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 1908.252111][T29526] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1908.284237][T29526] usb 6-1: can't read configurations, error -61 [ 1908.299983][T29526] usb usb6-port1: unable to enumerate USB device [ 1908.352562][T30040] program syz.2.7054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1908.562977][ T5928] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1908.722958][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 1908.878311][T30046] Cannot find add_set index 0 as target [ 1908.965906][ T5928] usb 4-1: config 11 has an invalid interface number: 95 but max is 0 [ 1908.974599][ T5928] usb 4-1: config 11 has no interface number 0 [ 1908.980920][ T5928] usb 4-1: config 11 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1909.022989][ T5928] usb 4-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1909.042957][ T5928] usb 4-1: config 11 interface 95 has no altsetting 0 [ 1909.174945][ T5928] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 1909.184559][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.251880][ T5928] usb 4-1: Product: syz [ 1909.373901][ T5928] usb 4-1: Manufacturer: syz [ 1909.378643][ T5928] usb 4-1: SerialNumber: syz [ 1909.601363][T30033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1909.611908][T30033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1909.637206][ T5928] usbtouchscreen 4-1:11.95: probe with driver usbtouchscreen failed with error -90 [ 1909.664078][ T5928] usb 4-1: USB disconnect, device number 99 [ 1910.395679][T30074] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7065'. [ 1910.459089][T30077] program syz.2.7066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1910.517516][T30074] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7065'. [ 1910.564158][T29525] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 1910.662907][T25707] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1910.783323][T29526] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1910.882725][T25707] usb 5-1: Using ep0 maxpacket: 16 [ 1910.909882][T25707] usb 5-1: config 0 has no interfaces? [ 1910.919263][T25707] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1910.929500][T25707] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1910.937826][T25707] usb 5-1: Manufacturer: syz [ 1910.946274][T25707] usb 5-1: config 0 descriptor?? [ 1910.955941][T29525] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1910.983940][T29526] usb 3-1: Using ep0 maxpacket: 32 [ 1911.000847][T29526] usb 3-1: config 254 has too many interfaces: 206, using maximum allowed: 32 [ 1911.016828][T29525] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1911.026088][T29525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.039339][T29526] usb 3-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 1911.061491][T29525] usb 4-1: Product: syz [ 1911.068510][T29526] usb 3-1: config 254 has 0 interfaces, different from the descriptor's value: 206 [ 1911.078587][T29525] usb 4-1: Manufacturer: syz [ 1911.091540][T29525] usb 4-1: SerialNumber: syz [ 1911.101681][T29526] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1911.111794][T29525] usb 4-1: config 0 descriptor?? [ 1911.147344][T29525] usb 4-1: no audio or video endpoints found [ 1911.155192][T29526] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.167939][T29526] usb 3-1: Product: syz [ 1911.174470][T29526] usb 3-1: Manufacturer: syz [ 1911.183012][T29526] usb 3-1: SerialNumber: syz [ 1911.199831][T30071] net_ratelimit: 12 callbacks suppressed [ 1911.199851][T30071] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1911.494539][T25707] usb 3-1: USB disconnect, device number 16 [ 1911.890482][ T6007] usb 4-1: USB disconnect, device number 100 [ 1912.028620][T30098] FAULT_INJECTION: forcing a failure. [ 1912.028620][T30098] name failslab, interval 1, probability 0, space 0, times 0 [ 1912.093577][T30098] CPU: 1 UID: 0 PID: 30098 Comm: syz.2.7073 Tainted: G L syzkaller #0 PREEMPT(full) [ 1912.093597][T30098] Tainted: [L]=SOFTLOCKUP [ 1912.093601][T30098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1912.093607][T30098] Call Trace: [ 1912.093612][T30098] [ 1912.093617][T30098] dump_stack_lvl+0xe8/0x150 [ 1912.093636][T30098] should_fail_ex+0x412/0x560 [ 1912.093651][T30098] should_failslab+0xa8/0x100 [ 1912.093665][T30098] __kmalloc_noprof+0xe8/0x760 [ 1912.093676][T30098] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1912.093692][T30098] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1912.093709][T30098] ? tomoyo_path_number_perm+0x219/0x630 [ 1912.093719][T30098] tomoyo_path_number_perm+0x246/0x630 [ 1912.093731][T30098] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1912.093743][T30098] ? __lock_acquire+0x6b5/0x2cf0 [ 1912.093761][T30098] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1912.093781][T30098] ? __fget_files+0x2a/0x420 [ 1912.093797][T30098] ? __fget_files+0x2a/0x420 [ 1912.093809][T30098] ? __fget_files+0x3a0/0x420 [ 1912.093822][T30098] ? __fget_files+0x2a/0x420 [ 1912.093842][T30098] security_file_ioctl+0xc3/0x2a0 [ 1912.093861][T30098] __se_sys_ioctl+0x47/0x170 [ 1912.093882][T30098] do_syscall_64+0x14d/0xf80 [ 1912.093896][T30098] ? trace_irq_disable+0x3b/0x150 [ 1912.093916][T30098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1912.093933][T30098] ? clear_bhb_loop+0x40/0x90 [ 1912.093947][T30098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1912.093956][T30098] RIP: 0033:0x7f066b59c799 [ 1912.093966][T30098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1912.093974][T30098] RSP: 002b:00007f066c466028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1912.093985][T30098] RAX: ffffffffffffffda RBX: 00007f066b815fa0 RCX: 00007f066b59c799 [ 1912.093992][T30098] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 1912.093999][T30098] RBP: 00007f066c466090 R08: 0000000000000000 R09: 0000000000000000 [ 1912.094004][T30098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1912.094010][T30098] R13: 00007f066b816038 R14: 00007f066b815fa0 R15: 00007f066b93fa48 [ 1912.094025][T30098] [ 1912.094036][T30098] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1912.333022][T30098] program syz.2.7073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1912.366151][T30104] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.7074'. [ 1912.663474][T30111] program syz.2.7077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1913.450337][T30136] pim6reg: entered allmulticast mode [ 1913.479698][T30133] pim6reg: left allmulticast mode [ 1913.712966][ T6007] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 1913.880332][ T6007] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1913.918246][ T6007] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1913.940750][ T6007] usb 6-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.40 [ 1913.950243][ T6007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.974184][ T6007] usb 6-1: Product: syz [ 1914.014155][ T6007] usb 6-1: Manufacturer: ࠁ [ 1914.018864][ T6007] usb 6-1: SerialNumber: syz [ 1914.063036][T25707] usb 5-1: USB disconnect, device number 8 [ 1914.124581][T30140] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1914.368804][ T6007] usbhid 6-1:1.0: can't add hid device: -71 [ 1914.378682][ T6007] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1914.447131][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.467069][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.475829][ T6007] usb 6-1: USB disconnect, device number 58 [ 1914.557528][T30156] program syz.3.7091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1915.775022][T30183] netlink: 51 bytes leftover after parsing attributes in process `syz.4.7099'. [ 1915.882973][ T6007] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 1916.046221][ T6007] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1916.058997][ T6007] usb 2-1: not running at top speed; connect to a high speed hub [ 1916.076275][ T6007] usb 2-1: config 6 has an invalid interface number: 244 but max is 0 [ 1916.144049][ T6007] usb 2-1: config 6 has no interface number 0 [ 1916.151604][ T6007] usb 2-1: config 6 interface 244 has no altsetting 0 [ 1916.160900][ T6007] usb 2-1: New USB device found, idVendor=045e, idProduct=007a, bcdDevice=2b.c3 [ 1916.170306][ T6007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.172978][T29524] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1916.178441][ T6007] usb 2-1: Product: syz [ 1916.252734][ T6007] usb 2-1: Manufacturer: syz [ 1916.263014][ T6007] usb 2-1: SerialNumber: syz [ 1916.333450][T29524] usb 6-1: Using ep0 maxpacket: 16 [ 1916.369090][T29524] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1916.415228][T29524] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1916.438251][T29524] usb 6-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1916.461126][T29524] usb 6-1: Manufacturer: syz [ 1916.477715][T29524] usb 6-1: config 0 descriptor?? [ 1916.492979][T29526] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1916.524807][T30205] program syz.3.7106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1916.553554][ T6007] pegasus 2-1:6.244: Missing or invalid endpoints [ 1916.581911][ T6007] usb 2-1: USB disconnect, device number 109 [ 1916.645037][T29526] usb 5-1: Using ep0 maxpacket: 16 [ 1916.755931][T29526] usb 5-1: config 0 has no interfaces? [ 1916.774754][T29526] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1916.787378][T29526] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1916.796690][T29526] usb 5-1: Manufacturer: syz [ 1916.808310][T29526] usb 5-1: config 0 descriptor?? [ 1916.893552][T29525] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1916.938574][T29524] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:041E:3100.002D/input/input173 [ 1917.006217][T29524] creative-sb0540 0003:041E:3100.002D: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1917.042981][T29525] usb 3-1: Using ep0 maxpacket: 8 [ 1917.117821][T30196] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1917.162458][T29525] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1917.181886][T29525] usb 3-1: config 0 has no interface number 0 [ 1917.223439][ C0] creative-sb0540 0003:041E:3100.002D: Could not get a key for main_code 9966 [ 1917.241163][T29525] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1917.257422][T29525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.307854][T29525] usb 3-1: Product: syz [ 1917.312144][T29525] usb 3-1: Manufacturer: syz [ 1917.341027][T29525] usb 3-1: SerialNumber: syz [ 1917.347927][T30220] fuse: Bad value for 'group_id' [ 1917.357571][T30220] fuse: Bad value for 'group_id' [ 1917.365608][T29525] usb 3-1: config 0 descriptor?? [ 1917.425973][T29524] usb 6-1: USB disconnect, device number 59 [ 1917.459338][T30217] fido_id[30217]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1917.529622][T30222] FAULT_INJECTION: forcing a failure. [ 1917.529622][T30222] name failslab, interval 1, probability 0, space 0, times 0 [ 1917.560209][T30222] CPU: 1 UID: 0 PID: 30222 Comm: syz.1.7111 Tainted: G L syzkaller #0 PREEMPT(full) [ 1917.560237][T30222] Tainted: [L]=SOFTLOCKUP [ 1917.560242][T30222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1917.560251][T30222] Call Trace: [ 1917.560259][T30222] [ 1917.560266][T30222] dump_stack_lvl+0xe8/0x150 [ 1917.560295][T30222] should_fail_ex+0x412/0x560 [ 1917.560319][T30222] should_failslab+0xa8/0x100 [ 1917.560344][T30222] __kmalloc_noprof+0xe8/0x760 [ 1917.560370][T30222] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1917.560385][T30222] ? sock_kmalloc+0xd6/0x160 [ 1917.560407][T30222] sock_kmalloc+0xd6/0x160 [ 1917.560425][T30222] af_alg_alloc_areq+0x99/0x200 [ 1917.560446][T30222] skcipher_recvmsg+0x332/0x1140 [ 1917.560477][T30222] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1917.560499][T30222] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1917.560515][T30222] ? security_socket_recvmsg+0x7e/0x2c0 [ 1917.560536][T30222] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1917.560556][T30222] sock_recvmsg+0x22c/0x270 [ 1917.560578][T30222] ____sys_recvmsg+0x1e6/0x4a0 [ 1917.560607][T30222] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1917.560640][T30222] ? import_iovec+0x73/0xa0 [ 1917.560664][T30222] ___sys_recvmsg+0x215/0x590 [ 1917.560685][T30222] ? get_pid_task+0x20/0x1f0 [ 1917.560705][T30222] ? __pfx____sys_recvmsg+0x10/0x10 [ 1917.560743][T30222] ? __fget_files+0x3a0/0x420 [ 1917.560774][T30222] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1917.560790][T30222] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1917.560810][T30222] ? __pfx_ksys_write+0x10/0x10 [ 1917.560837][T30222] do_syscall_64+0x14d/0xf80 [ 1917.560853][T30222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1917.560867][T30222] ? clear_bhb_loop+0x40/0x90 [ 1917.560886][T30222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1917.560902][T30222] RIP: 0033:0x7feafe39c799 [ 1917.560919][T30222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1917.560933][T30222] RSP: 002b:00007feaff1aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1917.560950][T30222] RAX: ffffffffffffffda RBX: 00007feafe615fa0 RCX: 00007feafe39c799 [ 1917.560961][T30222] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1917.560971][T30222] RBP: 00007feaff1aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1917.560980][T30222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1917.560988][T30222] R13: 00007feafe616038 R14: 00007feafe615fa0 R15: 00007feafe73fa48 [ 1917.561015][T30222] [ 1918.023642][T30228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1918.050527][T30201] ip6gre1: entered promiscuous mode [ 1918.100707][T30201] ip6gre1: entered allmulticast mode [ 1918.155431][T29525] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1918.187770][T29525] uvcvideo 3-1:0.31: No streaming interface found for terminal 32774. [ 1918.232333][T29525] usb 3-1: USB disconnect, device number 17 [ 1918.257158][T25938] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1918.279009][T25938] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1918.287943][ T6007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1918.374523][ T6007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1918.466465][T30242] netlink: 179596 bytes leftover after parsing attributes in process `syz.1.7116'. [ 1918.524496][ T6007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1919.023266][ T6007] usb 5-1: USB disconnect, device number 9 [ 1920.388409][T30264] fuse: Bad value for 'group_id' [ 1920.500479][T30264] fuse: Bad value for 'group_id' [ 1920.910650][T30273] FAULT_INJECTION: forcing a failure. [ 1920.910650][T30273] name failslab, interval 1, probability 0, space 0, times 0 [ 1920.928730][T30273] CPU: 1 UID: 0 PID: 30273 Comm: syz.1.7124 Tainted: G L syzkaller #0 PREEMPT(full) [ 1920.928759][T30273] Tainted: [L]=SOFTLOCKUP [ 1920.928765][T30273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1920.928774][T30273] Call Trace: [ 1920.928781][T30273] [ 1920.928788][T30273] dump_stack_lvl+0xe8/0x150 [ 1920.928816][T30273] should_fail_ex+0x412/0x560 [ 1920.928840][T30273] should_failslab+0xa8/0x100 [ 1920.928861][T30273] __kmalloc_cache_noprof+0x88/0x660 [ 1920.928879][T30273] ? sctp_add_bind_addr+0x8c/0x370 [ 1920.928896][T30273] ? __pfx_sctp_get_port_local+0x10/0x10 [ 1920.928919][T30273] sctp_add_bind_addr+0x8c/0x370 [ 1920.928937][T30273] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 1920.928959][T30273] sctp_do_bind+0x5b2/0x9d0 [ 1920.928988][T30273] sctp_connect_new_asoc+0x270/0x6b0 [ 1920.929012][T30273] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1920.929038][T30273] ? __local_bh_enable_ip+0xd0/0x130 [ 1920.929056][T30273] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1920.929073][T30273] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1920.929107][T30273] sctp_sendmsg+0x1528/0x2c10 [ 1920.929139][T30273] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1920.929162][T30273] ? aa_sk_perm+0x6d5/0x900 [ 1920.929186][T30273] ? __pfx_aa_sk_perm+0x10/0x10 [ 1920.929205][T30273] ? sock_rps_record_flow+0x19/0x400 [ 1920.929230][T30273] ? inet_sendmsg+0x2f4/0x370 [ 1920.929247][T30273] ____sys_sendmsg+0x894/0xad0 [ 1920.929276][T30273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1920.929303][T30273] ? import_iovec+0x73/0xa0 [ 1920.929326][T30273] ___sys_sendmsg+0x2a5/0x360 [ 1920.929351][T30273] ? __pfx____sys_sendmsg+0x10/0x10 [ 1920.929375][T30273] ? kstrtouint+0x6e/0xe0 [ 1920.929414][T30273] ? __fget_files+0x2a/0x420 [ 1920.929434][T30273] ? __fget_files+0x3a0/0x420 [ 1920.929461][T30273] __sys_sendmmsg+0x27c/0x4e0 [ 1920.929484][T30273] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1920.929501][T30273] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1920.929534][T30273] ? ksys_write+0x242/0x270 [ 1920.929549][T30273] ? __pfx_ksys_write+0x10/0x10 [ 1920.929567][T30273] __x64_sys_sendmmsg+0xa0/0xc0 [ 1920.929587][T30273] do_syscall_64+0x14d/0xf80 [ 1920.929600][T30273] ? trace_irq_disable+0x3b/0x150 [ 1920.929617][T30273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1920.929630][T30273] ? clear_bhb_loop+0x40/0x90 [ 1920.929646][T30273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1920.929659][T30273] RIP: 0033:0x7feafe39c799 [ 1920.929673][T30273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1920.929684][T30273] RSP: 002b:00007feaff1aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1920.929699][T30273] RAX: ffffffffffffffda RBX: 00007feafe615fa0 RCX: 00007feafe39c799 [ 1920.929708][T30273] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 1920.929717][T30273] RBP: 00007feaff1aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1920.929725][T30273] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001 [ 1920.929733][T30273] R13: 00007feafe616038 R14: 00007feafe615fa0 R15: 00007feafe73fa48 [ 1920.929755][T30273] [ 1921.737503][T30293] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7131'. [ 1922.332958][T30311] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7136'. [ 1922.353043][T30311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7136'. [ 1922.363011][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1923.973132][ T30] audit: type=1326 audit(1772423879.465:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30326 comm="syz.3.7141" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff35b59c799 code=0x0 [ 1925.060542][T30359] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1926.562948][T29526] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1926.716767][T29526] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1926.812127][T29526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.833043][T29526] usb 2-1: Product: syz [ 1926.840578][T29526] usb 2-1: Manufacturer: syz [ 1926.852790][T29526] usb 2-1: SerialNumber: syz [ 1926.871990][T29526] usb 2-1: config 0 descriptor?? [ 1927.384185][T29526] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1927.545769][T29526] usb 6-1: Using ep0 maxpacket: 32 [ 1927.568587][T29526] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1927.582973][T25707] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1927.618787][T29526] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1927.628193][T29526] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.637988][T29526] usb 6-1: Product: syz [ 1927.642293][T29526] usb 6-1: Manufacturer: syz [ 1927.655324][T29526] usb 6-1: SerialNumber: syz [ 1927.669817][T29526] usb 6-1: config 0 descriptor?? [ 1927.772961][T25707] usb 4-1: Using ep0 maxpacket: 16 [ 1927.782329][T25707] usb 4-1: config 0 has no interfaces? [ 1927.791583][T25707] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1927.802099][T25707] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1927.817899][T25707] usb 4-1: Manufacturer: syz [ 1927.834580][T25707] usb 4-1: config 0 descriptor?? [ 1927.890943][T29526] usb 6-1: USB disconnect, device number 60 [ 1928.151018][T30409] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1929.342697][T25707] usb 2-1: USB disconnect, device number 110 [ 1929.573637][ T6007] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 1929.764046][T30450] program syz.5.7181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1929.765527][ T6007] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1929.793675][ T6007] usb 3-1: string descriptor 0 read error: -22 [ 1929.800316][ T6007] usb 3-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.40 [ 1930.219951][T29526] usb 4-1: USB disconnect, device number 101 [ 1930.238856][ T6007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.268568][ T6007] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1930.443007][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1930.563546][ T6007] usb 3-1: USB disconnect, device number 18 [ 1931.320799][T30477] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7189'. [ 1931.330442][T30477] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7189'. [ 1931.340065][T30477] netlink: 39 bytes leftover after parsing attributes in process `syz.3.7189'. [ 1931.439420][T30481] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1931.455932][T30477] netlink: 'syz.3.7189': attribute type 2 has an invalid length. [ 1931.463780][T30477] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7189'. [ 1932.508349][T30509] netlink: 'syz.1.7198': attribute type 1 has an invalid length. [ 1932.564442][T30512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7198'. [ 1932.651507][T30509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7198'. [ 1933.462942][ T6007] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1933.623007][ T6007] usb 3-1: Using ep0 maxpacket: 32 [ 1933.633700][ T6007] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1933.647395][ T6007] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1933.657948][ T6007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.670507][ T6007] usb 3-1: Product: syz [ 1933.677150][ T6007] usb 3-1: Manufacturer: syz [ 1933.702047][ T6007] usb 3-1: SerialNumber: syz [ 1933.717408][ T6007] usb 3-1: config 0 descriptor?? [ 1933.939991][ T6007] usb 3-1: USB disconnect, device number 19 [ 1934.392174][T30530] fuse: Unknown parameter 'grou00000000000000000000' [ 1934.412935][T29526] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1934.574656][T29526] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1934.584032][T29526] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1934.595555][T29526] usb 6-1: config 0 descriptor?? [ 1935.283175][T29526] usb 6-1: Cannot set MAC address [ 1935.318858][T29526] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1935.334785][T29526] usb 6-1: USB disconnect, device number 61 [ 1936.231100][T30562] FAULT_INJECTION: forcing a failure. [ 1936.231100][T30562] name failslab, interval 1, probability 0, space 0, times 0 [ 1936.329298][T30562] CPU: 1 UID: 0 PID: 30562 Comm: syz.4.7214 Tainted: G L syzkaller #0 PREEMPT(full) [ 1936.329327][T30562] Tainted: [L]=SOFTLOCKUP [ 1936.329334][T30562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1936.329344][T30562] Call Trace: [ 1936.329352][T30562] [ 1936.329367][T30562] dump_stack_lvl+0xe8/0x150 [ 1936.329396][T30562] should_fail_ex+0x412/0x560 [ 1936.329421][T30562] should_failslab+0xa8/0x100 [ 1936.329443][T30562] __kmalloc_noprof+0xe8/0x760 [ 1936.329461][T30562] ? tomoyo_encode+0x28b/0x550 [ 1936.329486][T30562] tomoyo_encode+0x28b/0x550 [ 1936.329512][T30562] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1936.329541][T30562] ? tomoyo_path_number_perm+0x219/0x630 [ 1936.329559][T30562] tomoyo_path_number_perm+0x246/0x630 [ 1936.329579][T30562] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1936.329599][T30562] ? __lock_acquire+0x6b5/0x2cf0 [ 1936.329629][T30562] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1936.329664][T30562] ? __fget_files+0x2a/0x420 [ 1936.329688][T30562] ? __fget_files+0x2a/0x420 [ 1936.329708][T30562] ? __fget_files+0x3a0/0x420 [ 1936.329727][T30562] ? __fget_files+0x2a/0x420 [ 1936.329751][T30562] security_file_ioctl+0xc3/0x2a0 [ 1936.329766][T30562] __se_sys_ioctl+0x47/0x170 [ 1936.329784][T30562] do_syscall_64+0x14d/0xf80 [ 1936.329798][T30562] ? trace_irq_disable+0x3b/0x150 [ 1936.329819][T30562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.329835][T30562] ? clear_bhb_loop+0x40/0x90 [ 1936.329855][T30562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.329870][T30562] RIP: 0033:0x7f70c399c799 [ 1936.329887][T30562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1936.329902][T30562] RSP: 002b:00007f70c4778028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1936.329919][T30562] RAX: ffffffffffffffda RBX: 00007f70c3c15fa0 RCX: 00007f70c399c799 [ 1936.329931][T30562] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 1936.329941][T30562] RBP: 00007f70c4778090 R08: 0000000000000000 R09: 0000000000000000 [ 1936.329952][T30562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1936.329962][T30562] R13: 00007f70c3c16038 R14: 00007f70c3c15fa0 R15: 00007f70c3d3fa48 [ 1936.329988][T30562] [ 1936.330009][T30562] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1936.336448][T30564] fuse: Unknown parameter 'grou00000000000000000000' [ 1936.408484][T30562] program syz.4.7214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1936.945976][T30576] netlink: 136 bytes leftover after parsing attributes in process `syz.4.7219'. [ 1936.992913][T29526] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1937.213428][T29526] usb 4-1: Using ep0 maxpacket: 32 [ 1937.220803][T29526] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1937.234421][T29526] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1937.250789][T29526] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.259402][T29526] usb 4-1: Product: syz [ 1937.266680][T29526] usb 4-1: Manufacturer: syz [ 1937.272929][T29525] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1937.273000][ T6007] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1937.288242][T29526] usb 4-1: SerialNumber: syz [ 1937.297446][T29526] usb 4-1: config 0 descriptor?? [ 1937.453052][T29525] usb 6-1: Using ep0 maxpacket: 16 [ 1937.465154][ T6007] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1937.487279][T29525] usb 6-1: config 0 has no interfaces? [ 1937.496592][ T6007] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1937.497551][T29525] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1937.520803][ T5928] usb 4-1: USB disconnect, device number 102 [ 1937.546549][T29525] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1937.553035][ T6007] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1937.593888][ T6007] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1937.600581][T29525] usb 6-1: Manufacturer: syz [ 1937.611935][ T6007] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1937.633063][ T6007] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1937.649003][T29525] usb 6-1: config 0 descriptor?? [ 1937.711908][ T6007] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1937.726139][ T6007] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1937.740543][ T6007] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1937.759589][ T6007] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1937.798167][ T6007] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1937.814598][ T6007] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1937.834463][ T6007] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1937.849253][ T6007] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1937.862993][ T6007] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1937.874060][ T6007] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1937.886219][ T6007] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1937.895361][ T6007] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1937.906287][ T6007] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1937.914502][ T6007] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1937.923571][ T6007] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1937.934541][ T6007] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1937.942443][ T6007] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1937.951554][ T6007] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1937.965075][ T6007] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1937.981002][ T6007] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1937.990217][ T6007] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1937.998693][ T6007] usb 5-1: Product: syz [ 1938.004010][ T6007] usb 5-1: Manufacturer: syz [ 1938.010729][ T6007] usb 5-1: SerialNumber: syz [ 1938.013138][T30573] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1938.111400][ T6007] usb 5-1: config 0 descriptor?? [ 1938.205547][ T6007] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1938.378822][T30601] fuse: Unknown parameter 'grou00000000000000000000' [ 1938.380043][T29526] usb 5-1: USB disconnect, device number 10 [ 1938.405686][T29526] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1938.958538][ T6007] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1939.132948][ T6007] usb 2-1: Using ep0 maxpacket: 16 [ 1939.178109][ T6007] usb 2-1: config 0 has no interfaces? [ 1939.344890][ T6007] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1939.354249][ T6007] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1939.362338][ T6007] usb 2-1: Manufacturer: syz [ 1939.380310][ T6007] usb 2-1: config 0 descriptor?? [ 1939.798450][T29526] usb 6-1: USB disconnect, device number 62 [ 1939.813098][T29525] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1939.982950][T29525] usb 3-1: Using ep0 maxpacket: 32 [ 1939.989797][T29525] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1940.029441][T29525] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1940.061387][T29525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.090558][T29525] usb 3-1: Product: syz [ 1940.110761][T29525] usb 3-1: Manufacturer: syz [ 1940.136993][T29525] usb 3-1: SerialNumber: syz [ 1940.158368][T29525] usb 3-1: config 0 descriptor?? [ 1940.385118][T29526] usb 3-1: USB disconnect, device number 20 [ 1940.437969][T29525] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1940.642665][T29525] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1940.651511][T29525] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1940.663636][T29525] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1940.673021][T29525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.681769][T29525] usb 4-1: Product: syz [ 1940.690252][T29525] usb 4-1: Manufacturer: syz [ 1940.746112][T29525] usb 4-1: SerialNumber: syz [ 1940.752342][T30629] FAULT_INJECTION: forcing a failure. [ 1940.752342][T30629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1940.768691][T30629] CPU: 0 UID: 0 PID: 30629 Comm: syz.4.7236 Tainted: G L syzkaller #0 PREEMPT(full) [ 1940.768717][T30629] Tainted: [L]=SOFTLOCKUP [ 1940.768723][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1940.768733][T30629] Call Trace: [ 1940.768740][T30629] [ 1940.768748][T30629] dump_stack_lvl+0xe8/0x150 [ 1940.768779][T30629] should_fail_ex+0x412/0x560 [ 1940.768805][T30629] _copy_from_iter+0x1d3/0x1670 [ 1940.768829][T30629] ? rcu_is_watching+0x15/0xb0 [ 1940.768855][T30629] ? __pfx__copy_from_iter+0x10/0x10 [ 1940.768878][T30629] ? netlink_sendmsg+0x650/0xb40 [ 1940.768896][T30629] ? skb_put+0x11b/0x210 [ 1940.768919][T30629] netlink_sendmsg+0x6c0/0xb40 [ 1940.768939][T30629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1940.768959][T30629] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1940.768974][T30629] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1940.768987][T30629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1940.768998][T30629] ____sys_sendmsg+0xa68/0xad0 [ 1940.769016][T30629] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1940.769033][T30629] ? import_iovec+0x73/0xa0 [ 1940.769048][T30629] ___sys_sendmsg+0x2a5/0x360 [ 1940.769064][T30629] ? __pfx____sys_sendmsg+0x10/0x10 [ 1940.769093][T30629] ? __fget_files+0x2a/0x420 [ 1940.769109][T30629] ? __fget_files+0x3a0/0x420 [ 1940.769126][T30629] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1940.769141][T30629] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1940.769159][T30629] ? __pfx_ksys_write+0x10/0x10 [ 1940.769176][T30629] do_syscall_64+0x14d/0xf80 [ 1940.769185][T30629] ? trace_irq_disable+0x3b/0x150 [ 1940.769199][T30629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.769210][T30629] ? clear_bhb_loop+0x40/0x90 [ 1940.769221][T30629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.769231][T30629] RIP: 0033:0x7f70c399c799 [ 1940.769241][T30629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1940.769249][T30629] RSP: 002b:00007f70c4778028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1940.769261][T30629] RAX: ffffffffffffffda RBX: 00007f70c3c15fa0 RCX: 00007f70c399c799 [ 1940.769267][T30629] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1940.769274][T30629] RBP: 00007f70c4778090 R08: 0000000000000000 R09: 0000000000000000 [ 1940.769279][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1940.769285][T30629] R13: 00007f70c3c16038 R14: 00007f70c3c15fa0 R15: 00007f70c3d3fa48 [ 1940.769299][T30629] [ 1940.770134][T29525] usb 4-1: config 0 descriptor?? [ 1941.023825][T29525] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1941.072141][T30636] fuse: Unknown parameter 'group_i00000000000000000000' [ 1941.149820][T30638] netlink: 136 bytes leftover after parsing attributes in process `syz.2.7239'. [ 1941.628262][T30658] netlink: 'syz.4.7244': attribute type 12 has an invalid length. [ 1941.644749][T30658] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7244'. [ 1941.749872][ T5928] usb 2-1: USB disconnect, device number 111 [ 1942.324002][T29525] gspca_sunplus: reg_r err -71 [ 1942.328959][T29525] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1942.353304][T29525] usb 4-1: USB disconnect, device number 103 [ 1942.695378][T30676] fuse: Unknown parameter 'group_i00000000000000000000' [ 1943.070628][T30683] FAULT_INJECTION: forcing a failure. [ 1943.070628][T30683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1943.128624][T30683] CPU: 1 UID: 0 PID: 30683 Comm: syz.3.7253 Tainted: G L syzkaller #0 PREEMPT(full) [ 1943.128645][T30683] Tainted: [L]=SOFTLOCKUP [ 1943.128649][T30683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1943.128655][T30683] Call Trace: [ 1943.128660][T30683] [ 1943.128664][T30683] dump_stack_lvl+0xe8/0x150 [ 1943.128684][T30683] should_fail_ex+0x412/0x560 [ 1943.128699][T30683] _copy_from_iter+0x1d3/0x1670 [ 1943.128714][T30683] ? rcu_is_watching+0x15/0xb0 [ 1943.128731][T30683] ? __pfx__copy_from_iter+0x10/0x10 [ 1943.128746][T30683] ? netlink_sendmsg+0x650/0xb40 [ 1943.128758][T30683] ? skb_put+0x11b/0x210 [ 1943.128773][T30683] netlink_sendmsg+0x6c0/0xb40 [ 1943.128789][T30683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1943.128802][T30683] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1943.128815][T30683] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1943.128827][T30683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1943.128838][T30683] ____sys_sendmsg+0xa68/0xad0 [ 1943.128856][T30683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1943.128874][T30683] ? import_iovec+0x73/0xa0 [ 1943.128889][T30683] ___sys_sendmsg+0x2a5/0x360 [ 1943.128905][T30683] ? __pfx____sys_sendmsg+0x10/0x10 [ 1943.128933][T30683] ? __fget_files+0x2a/0x420 [ 1943.128947][T30683] ? __fget_files+0x3a0/0x420 [ 1943.128964][T30683] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1943.128979][T30683] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1943.128998][T30683] ? __pfx_ksys_write+0x10/0x10 [ 1943.129013][T30683] do_syscall_64+0x14d/0xf80 [ 1943.129022][T30683] ? trace_irq_disable+0x3b/0x150 [ 1943.129036][T30683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1943.129045][T30683] ? clear_bhb_loop+0x40/0x90 [ 1943.129056][T30683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1943.129066][T30683] RIP: 0033:0x7ff35b59c799 [ 1943.129076][T30683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1943.129085][T30683] RSP: 002b:00007ff35c3b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1943.129096][T30683] RAX: ffffffffffffffda RBX: 00007ff35b815fa0 RCX: 00007ff35b59c799 [ 1943.129103][T30683] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1943.129109][T30683] RBP: 00007ff35c3b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1943.129115][T30683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1943.129121][T30683] R13: 00007ff35b816038 R14: 00007ff35b815fa0 R15: 00007ff35b93fa48 [ 1943.129135][T30683] [ 1943.490025][ T6007] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1943.687744][ T6007] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 1943.696392][ T6007] usb 5-1: config 0 has no interface number 0 [ 1943.703724][ T6007] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1943.783129][ T6007] usb 5-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1943.984833][ T6007] usb 5-1: config 0 interface 113 has no altsetting 0 [ 1944.080588][ T6007] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1944.091548][ T6007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.101027][ T6007] usb 5-1: Product: syz [ 1944.107119][ T6007] usb 5-1: Manufacturer: syz [ 1944.111770][ T6007] usb 5-1: SerialNumber: syz [ 1944.147318][ T6007] usb 5-1: config 0 descriptor?? [ 1944.167357][ T6007] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1944.364244][T30704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7259'. [ 1944.376074][T30704] bond0: ARP target 128.0.0.0 is already present [ 1944.382441][T30704] bond0: option arp_ip_target: invalid value (128) [ 1944.388828][T30678] IPv6: NLM_F_CREATE should be specified when creating new route [ 1944.402270][ T6007] usb 5-1: USB disconnect, device number 11 [ 1944.623110][T25707] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1944.784282][T25707] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1944.793288][T25707] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1944.804414][T25707] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1944.813686][T25707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.821657][T25707] usb 2-1: Product: syz [ 1944.825893][T25707] usb 2-1: Manufacturer: syz [ 1944.830478][T25707] usb 2-1: SerialNumber: syz [ 1944.837058][T25707] usb 2-1: config 0 descriptor?? [ 1945.057815][T30709] fuse: Unknown parameter 'group_i00000000000000000000' [ 1945.208379][T30715] loop4: detected capacity change from 0 to 7 [ 1945.216948][T11456] buffer_io_error: 14 callbacks suppressed [ 1945.216964][T11456] Buffer I/O error on dev loop4, logical block 0, async page read [ 1945.242250][T11456] Buffer I/O error on dev loop4, logical block 0, async page read [ 1945.250606][T11456] Buffer I/O error on dev loop4, logical block 0, async page read [ 1945.259703][T11456] Buffer I/O error on dev loop4, logical block 0, async page read [ 1945.269352][T11456] Buffer I/O error on dev loop4, logical block 0, async page read [ 1945.277347][T11456] Buffer I/O error on dev loop4, logical block 0, async page read [ 1945.286196][T11456] Buffer I/O error on dev loop4, logical block 0, async page read [ 1945.302316][T11456] ldm_validate_partition_table(): Disk read failed. [ 1945.311044][T11456] Buffer I/O error on dev loop4, logical block 0, async page read [ 1945.325315][T11456] Buffer I/O error on dev loop4, logical block 0, async page read [ 1945.333329][T11456] Buffer I/O error on dev loop4, logical block 0, async page read [ 1945.341191][T11456] Dev loop4: unable to read RDB block 0 [ 1945.348884][T30718] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20004 [ 1945.358638][T11456] loop4: unable to read partition table [ 1945.364935][T29526] IPVS: starting estimator thread 0... [ 1945.373079][T11456] loop4: partition table beyond EOD, truncated [ 1945.380116][T30715] ldm_validate_partition_table(): Disk read failed. [ 1945.382928][ T5928] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 1945.388815][T30715] Dev loop4: unable to read RDB block 0 [ 1945.419637][T30715] loop4: unable to read partition table [ 1945.429067][T30715] loop4: partition table beyond EOD, truncated [ 1945.442391][T30715] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 1945.453802][T30719] IPVS: using max 43 ests per chain, 103200 per kthread [ 1945.585622][ T5928] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1945.594733][ T5928] usb 4-1: not running at top speed; connect to a high speed hub [ 1945.606959][ T5928] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 1945.645243][ T5928] usb 4-1: config 0 has no interface number 0 [ 1945.676982][ T5928] usb 4-1: config 0 interface 164 has no altsetting 0 [ 1945.697943][ T5928] usb 4-1: New USB device found, idVendor=0d5c, idProduct=a002, bcdDevice= a.37 [ 1945.708767][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.751100][ T5928] usb 4-1: Product: syz [ 1945.763412][ T5928] usb 4-1: Manufacturer: syz [ 1945.776962][ T5928] usb 4-1: SerialNumber: syz [ 1945.823294][ T5928] usb 4-1: config 0 descriptor?? [ 1945.993150][T25707] mos7840 2-1:0.0: required endpoints missing [ 1946.043678][T25707] usb 2-1: USB disconnect, device number 112 [ 1946.060902][ T5928] usb 4-1: USB disconnect, device number 104 [ 1946.193277][T30724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7266'. [ 1946.442923][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1946.674262][ T5928] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1946.718772][T30744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7274'. [ 1946.743683][T30738] netlink: 'syz.5.7272': attribute type 1 has an invalid length. [ 1946.770994][T30738] bond4: entered promiscuous mode [ 1946.776333][T30738] bond4: entered allmulticast mode [ 1946.781882][T30738] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1946.895706][ T5928] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1946.906629][ T5928] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1946.935203][ T5928] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1947.075427][ T5928] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1947.085188][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.093541][ T5928] usb 2-1: Product: syz [ 1947.097835][ T5928] usb 2-1: Manufacturer: syz [ 1947.102446][ T5928] usb 2-1: SerialNumber: syz [ 1947.113697][ T5928] hub 2-1:1.0: bad descriptor, ignoring hub [ 1947.119741][ T5928] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1947.223423][T29526] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1947.316738][ T5928] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 113 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1947.382963][T29526] usb 3-1: Using ep0 maxpacket: 16 [ 1947.391521][T29526] usb 3-1: config 0 has no interfaces? [ 1947.407209][T29526] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1947.416359][ T10] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1947.439720][T29526] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1947.459349][T29526] usb 3-1: Manufacturer: syz [ 1947.467918][T29526] usb 3-1: config 0 descriptor?? [ 1947.572909][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1947.578979][ T30] audit: type=1326 audit(1772423903.075:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30729 comm="syz.1.7268" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feafe39c799 code=0x0 [ 1947.606088][ T10] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1947.616714][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1947.628855][ T10] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1947.647888][ T10] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1947.658788][T29526] usb 2-1: USB disconnect, device number 113 [ 1947.668328][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1947.680305][T29526] usblp0: removed [ 1947.686152][ T10] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1947.708103][ T10] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1947.718874][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1947.730509][ T10] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1947.747482][ T10] usb 6-1: string descriptor 0 read error: -22 [ 1947.760328][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1947.770454][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.794789][ T10] adutux 6-1:168.0: interrupt endpoints not found [ 1947.912494][T30748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1947.934626][T30748] 8021q: adding VLAN 0 to HW filter on device team0 [ 1947.954484][T30748] batman_adv: batadv0: Interface activated: dummy0 [ 1947.961092][T30748] batadv0: mtu less than device minimum [ 1947.970915][T30748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1947.981975][T30748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1947.993600][T30748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1948.004664][T30748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1948.015737][T30748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1948.026760][T30748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1948.037767][T30748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1948.048821][T30748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1948.059839][T30748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1948.210742][T30765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1948.257214][T30765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1948.339457][T30765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1948.348257][T30765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1948.810561][T30782] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7286'. [ 1949.173149][T25707] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1949.343091][T25707] usb 5-1: Using ep0 maxpacket: 8 [ 1949.356437][T25707] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 1949.367954][T25707] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1949.383549][T25707] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 1949.393121][T25707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.405944][T25707] usb 5-1: Product: 纃쳜촧牱蜁鋄机෤⽇炾ﻬ哎䧾᫝龌喗纟㩗ꓸﲋⲉﷸ쩬Ⲩ퇱瑃曨✃䁼徿쥦ᚣ筍含ퟲ㖛ᐚㅩ쥒廉ⵛ剈諻澭買ꙝ즊ݷ㠰쾚㠤挹经Ӄ憵ᮁ滌⸓팊ᗶ廝왑ẇ㫳ߒᱣཽ훫ꌯ⢹ᵔ嵫 [ 1949.450099][T25707] usb 5-1: Manufacturer: 句讓♓푀襶牙䩢ᯂ湑⌎令媕ᭇ떺褷릀獢鿢텄녝ꉤ経儾⬱ˡ鏛ᦂ栵⯝ⱄ掏방 [ 1949.467909][T25707] usb 5-1: SerialNumber: ⡪遉섀ඟລ쬪霕⥡ɣ嗺鰘뗳읧⨓㭄䬬竻嬚泯ꪪ┡⸌⌴᨝捕䱸痰ⷈ龡뭘單ᄫ췾ḕ魂龤န膓댣懛 [ 1949.549352][T30785] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1949.922155][ T10] usb 3-1: USB disconnect, device number 21 [ 1949.997336][T30785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1950.007638][T30785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1950.038202][T25707] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1950.321102][T30808] FAULT_INJECTION: forcing a failure. [ 1950.321102][T30808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1950.336662][T25707] usb 5-1: MIDIStreaming interface descriptor not found [ 1950.403660][ T5928] usb 6-1: USB disconnect, device number 63 [ 1950.433063][T30808] CPU: 0 UID: 0 PID: 30808 Comm: syz.2.7291 Tainted: G L syzkaller #0 PREEMPT(full) [ 1950.433084][T30808] Tainted: [L]=SOFTLOCKUP [ 1950.433087][T30808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1950.433093][T30808] Call Trace: [ 1950.433098][T30808] [ 1950.433103][T30808] dump_stack_lvl+0xe8/0x150 [ 1950.433123][T30808] should_fail_ex+0x412/0x560 [ 1950.433139][T30808] _copy_from_user+0x2d/0xb0 [ 1950.433154][T30808] io_submit_one+0xd3/0x14c0 [ 1950.433167][T30808] ? irqentry_exit+0x59e/0x620 [ 1950.433177][T30808] ? lockdep_hardirqs_on+0x7a/0x110 [ 1950.433191][T30808] ? irqentry_exit+0x59e/0x620 [ 1950.433199][T30808] ? trace_irq_disable+0x3b/0x150 [ 1950.433216][T30808] ? __pfx_io_submit_one+0x10/0x10 [ 1950.433232][T30808] ? __might_fault+0xaf/0x130 [ 1950.433249][T30808] __se_sys_io_submit+0x195/0x340 [ 1950.433266][T30808] ? __pfx___se_sys_io_submit+0x10/0x10 [ 1950.433279][T30808] ? ksys_write+0x242/0x270 [ 1950.433297][T30808] do_syscall_64+0x14d/0xf80 [ 1950.433305][T30808] ? trace_irq_disable+0x3b/0x150 [ 1950.433317][T30808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1950.433326][T30808] ? clear_bhb_loop+0x40/0x90 [ 1950.433338][T30808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1950.433347][T30808] RIP: 0033:0x7f066b59c799 [ 1950.433357][T30808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1950.433365][T30808] RSP: 002b:00007f066c466028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1950.433377][T30808] RAX: ffffffffffffffda RBX: 00007f066b815fa0 RCX: 00007f066b59c799 [ 1950.433384][T30808] RDX: 0000200000001440 RSI: 000000000000027f RDI: 00007f066c441000 [ 1950.433391][T30808] RBP: 00007f066c466090 R08: 0000000000000000 R09: 0000000000000000 [ 1950.433396][T30808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1950.433402][T30808] R13: 00007f066b816038 R14: 00007f066b815fa0 R15: 00007f066b93fa48 [ 1950.433416][T30808] [ 1950.647989][ T6007] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1950.966625][T25707] usb 5-1: USB disconnect, device number 12 [ 1951.059864][ T6007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1951.085836][ T6007] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1951.111367][ T6007] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1951.143656][ T6007] usb 4-1: config 0 descriptor?? [ 1951.204814][ T6007] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1951.221144][T12808] udevd[12808]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1951.303496][T29524] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1951.682212][T29524] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1951.697722][T29524] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1951.728433][T29524] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1951.740042][T29524] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1951.771921][T29524] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1951.782248][T29524] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1951.791509][T29524] usb 2-1: Product: syz [ 1951.801952][T29524] usb 2-1: Manufacturer: syz [ 1951.831803][T29524] cdc_wdm 2-1:1.0: skipping garbage [ 1951.838147][T29524] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1951.863905][T30835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7298'. [ 1952.176012][T30837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1952.195666][T30837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1952.622968][ T6007] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1952.780952][ T6007] usb 3-1: Using ep0 maxpacket: 8 [ 1952.794552][ T6007] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1952.806827][ T6007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.838590][ T6007] usb 3-1: Product: syz [ 1952.847932][ T6007] usb 3-1: Manufacturer: syz [ 1952.869831][ T6007] usb 3-1: SerialNumber: syz [ 1952.881363][ T6007] usb 3-1: config 0 descriptor?? [ 1952.900761][ T6007] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1952.922768][ T6007] pctv452e: pctv452e_power_ctrl: 1 [ 1952.922768][ T6007] [ 1952.942348][ T6007] usb 3-1: selecting invalid altsetting 3 [ 1952.956241][ T6007] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1952.956241][ T6007] [ 1952.977459][ T6007] dvb-usb: bulk message failed: -22 (5/0) [ 1952.993211][ T6007] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1953.025837][ T6007] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1953.067058][ T6007] usb 3-1: media controller created [ 1953.072523][T29524] usb 4-1: USB disconnect, device number 105 [ 1953.096486][T30840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1953.138004][T30840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1953.158696][ T6007] dvb-usb: bulk message failed: -22 (8/0) [ 1953.327764][ T6007] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1953.353365][ T6007] dvb-usb: MAC address reading failed. [ 1953.402113][ T6007] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1953.517389][ T6007] DVB: Unable to find symbol stb0899_attach() [ 1953.524639][ T6007] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1953.616014][ T6007] rc_core: IR keymap rc-tt-1500 not found [ 1953.630770][ T6007] Registered IR keymap rc-empty [ 1953.656936][ T6007] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1953.727294][ T6007] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input176 [ 1954.283168][ T6007] dvb-usb: schedule remote query interval to 100 msecs. [ 1954.290173][ T6007] pctv452e: pctv452e_power_ctrl: 0 [ 1954.290173][ T6007] [ 1954.329151][T30861] FAULT_INJECTION: forcing a failure. [ 1954.329151][T30861] name failslab, interval 1, probability 0, space 0, times 0 [ 1954.346486][ T6007] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1954.361767][T25707] usb 2-1: USB disconnect, device number 114 [ 1954.402988][ T5879] dvb-usb: bulk message failed: -22 (4/0) [ 1954.408821][ T5879] dvb-usb: error -22 while querying for an remote control event. [ 1954.424166][T30861] CPU: 1 UID: 0 PID: 30861 Comm: syz.5.7304 Tainted: G L syzkaller #0 PREEMPT(full) [ 1954.424186][T30861] Tainted: [L]=SOFTLOCKUP [ 1954.424190][T30861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1954.424196][T30861] Call Trace: [ 1954.424201][T30861] [ 1954.424206][T30861] dump_stack_lvl+0xe8/0x150 [ 1954.424225][T30861] should_fail_ex+0x412/0x560 [ 1954.424240][T30861] should_failslab+0xa8/0x100 [ 1954.424254][T30861] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1954.424264][T30861] ? __alloc_skb+0x186/0x7d0 [ 1954.424278][T30861] ? __alloc_skb+0x1d0/0x7d0 [ 1954.424289][T30861] ? __local_bh_enable_ip+0xd0/0x130 [ 1954.424305][T30861] __alloc_skb+0x1d0/0x7d0 [ 1954.424320][T30861] netlink_sendmsg+0x5d4/0xb40 [ 1954.424336][T30861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1954.424349][T30861] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1954.424362][T30861] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1954.424374][T30861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1954.424385][T30861] ____sys_sendmsg+0xa68/0xad0 [ 1954.424404][T30861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1954.424421][T30861] ? import_iovec+0x73/0xa0 [ 1954.424437][T30861] ___sys_sendmsg+0x2a5/0x360 [ 1954.424453][T30861] ? __pfx____sys_sendmsg+0x10/0x10 [ 1954.424482][T30861] ? __fget_files+0x2a/0x420 [ 1954.424496][T30861] ? __fget_files+0x3a0/0x420 [ 1954.424513][T30861] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1954.424528][T30861] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1954.424546][T30861] ? __pfx_ksys_write+0x10/0x10 [ 1954.424561][T30861] do_syscall_64+0x14d/0xf80 [ 1954.424579][T30861] ? trace_irq_disable+0x3b/0x150 [ 1954.424592][T30861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1954.424602][T30861] ? clear_bhb_loop+0x40/0x90 [ 1954.424613][T30861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1954.424623][T30861] RIP: 0033:0x7fd57e19c799 [ 1954.424633][T30861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1954.424641][T30861] RSP: 002b:00007fd57f100028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1954.424653][T30861] RAX: ffffffffffffffda RBX: 00007fd57e415fa0 RCX: 00007fd57e19c799 [ 1954.424660][T30861] RDX: 0000000000040010 RSI: 0000200000000200 RDI: 0000000000000003 [ 1954.424667][T30861] RBP: 00007fd57f100090 R08: 0000000000000000 R09: 0000000000000000 [ 1954.424672][T30861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1954.424678][T30861] R13: 00007fd57e416038 R14: 00007fd57e415fa0 R15: 00007fd57e53fa48 [ 1954.424692][T30861] [ 1954.700043][ T6007] dvb-usb: bulk message failed: -22 (4/0) [ 1954.705921][ T6007] dvb-usb: error -22 while querying for an remote control event. [ 1954.832918][ T5879] dvb-usb: bulk message failed: -22 (4/0) [ 1954.838809][ T5879] dvb-usb: error -22 while querying for an remote control event. [ 1955.054531][ T5879] dvb-usb: bulk message failed: -22 (4/0) [ 1955.060348][ T5879] dvb-usb: error -22 while querying for an remote control event. [ 1955.121381][T30872] FAULT_INJECTION: forcing a failure. [ 1955.121381][T30872] name failslab, interval 1, probability 0, space 0, times 0 [ 1955.186026][ T5879] dvb-usb: bulk message failed: -22 (4/0) [ 1955.191883][ T5879] dvb-usb: error -22 while querying for an remote control event. [ 1955.203165][T30872] CPU: 0 UID: 0 PID: 30872 Comm: syz.4.7307 Tainted: G L syzkaller #0 PREEMPT(full) [ 1955.203192][T30872] Tainted: [L]=SOFTLOCKUP [ 1955.203199][T30872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1955.203209][T30872] Call Trace: [ 1955.203217][T30872] [ 1955.203224][T30872] dump_stack_lvl+0xe8/0x150 [ 1955.203252][T30872] should_fail_ex+0x412/0x560 [ 1955.203277][T30872] should_failslab+0xa8/0x100 [ 1955.203296][T30872] ? sctp_chunkify+0x5a/0x260 [ 1955.203316][T30872] kmem_cache_alloc_noprof+0x87/0x650 [ 1955.203341][T30872] sctp_chunkify+0x5a/0x260 [ 1955.203363][T30872] _sctp_make_chunk+0x122/0x290 [ 1955.203386][T30872] sctp_make_heartbeat+0xc5/0x4c0 [ 1955.203412][T30872] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 1955.203437][T30872] ? is_bpf_text_address+0x26/0x2b0 [ 1955.203461][T30872] sctp_sf_do_prm_requestheartbeat+0x32/0x280 [ 1955.203485][T30872] sctp_do_sm+0x238/0x5cf0 [ 1955.203505][T30872] ? __pfx_sctp_pname+0x10/0x10 [ 1955.203523][T30872] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1955.203540][T30872] ? arch_stack_walk+0xfb/0x150 [ 1955.203568][T30872] ? __pfx_sctp_do_sm+0x10/0x10 [ 1955.203613][T30872] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1955.203634][T30872] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1955.203653][T30872] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1955.203675][T30872] ? sctp_v6_addr_to_user+0x217/0x420 [ 1955.203698][T30872] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 1955.203725][T30872] sctp_apply_peer_addr_params+0xdf/0x1880 [ 1955.203744][T30872] ? __pfx_sctp_addr_id2transport+0x10/0x10 [ 1955.203772][T30872] sctp_setsockopt_peer_addr_params+0x5e5/0x940 [ 1955.203798][T30872] sctp_setsockopt+0x752/0x12c0 [ 1955.203820][T30872] ? sock_common_setsockopt+0x36/0xc0 [ 1955.203840][T30872] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1955.203861][T30872] do_sock_setsockopt+0x17c/0x1b0 [ 1955.203888][T30872] __x64_sys_setsockopt+0x13d/0x1b0 [ 1955.203914][T30872] do_syscall_64+0x14d/0xf80 [ 1955.203930][T30872] ? trace_irq_disable+0x3b/0x150 [ 1955.203951][T30872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.203968][T30872] ? clear_bhb_loop+0x40/0x90 [ 1955.203987][T30872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.204011][T30872] RIP: 0033:0x7f70c399c799 [ 1955.204027][T30872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1955.204041][T30872] RSP: 002b:00007f70c1bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1955.204059][T30872] RAX: ffffffffffffffda RBX: 00007f70c3c16090 RCX: 00007f70c399c799 [ 1955.204071][T30872] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 1955.204081][T30872] RBP: 00007f70c1bf6090 R08: 000000000000009c R09: 0000000000000000 [ 1955.204091][T30872] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 1955.204101][T30872] R13: 00007f70c3c16128 R14: 00007f70c3c16090 R15: 00007f70c3d3fa48 [ 1955.204129][T30872] [ 1955.498894][T25707] dvb-usb: bulk message failed: -22 (4/0) [ 1955.504818][T25707] dvb-usb: error -22 while querying for an remote control event. [ 1955.590263][T29524] usb 3-1: USB disconnect, device number 22 [ 1955.612557][ T30] audit: type=1326 audit(1772423910.765:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30866 comm="syz.5.7306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd57e19c799 code=0x0 [ 1956.028074][T29524] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1956.446624][T29524] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1956.765027][T29524] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 1956.773682][T29524] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 1956.822920][T29524] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1956.882004][T29524] usb 5-1: config 0 has no interface number 0 [ 1956.892881][T29524] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1956.902719][T29524] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1956.921774][T29524] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1956.944362][T29524] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1956.982970][ T5879] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1956.990669][T25707] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1957.015999][T29524] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.038053][T29524] usb 5-1: config 0 descriptor?? [ 1957.080763][T29524] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1957.143728][T25707] usb 2-1: Using ep0 maxpacket: 16 [ 1957.151165][T25707] usb 2-1: config 6 has an invalid interface number: 152 but max is 3 [ 1957.160092][T25707] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1957.173868][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 1957.199696][ T5879] usb 3-1: config 0 has no interfaces? [ 1957.217898][ T5879] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1957.227413][T25707] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 1957.257765][T30889] net_ratelimit: 11 callbacks suppressed [ 1957.257778][T30889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1957.289334][ T5879] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1957.300508][T25707] usb 2-1: config 6 has no interface number 0 [ 1957.331425][T25707] usb 2-1: config 6 interface 152 altsetting 253 endpoint 0xB has invalid wMaxPacketSize 0 [ 1957.357466][ T5879] usb 3-1: Manufacturer: syz [ 1957.389473][T20927] usb 5-1: Failed to submit usb control message: -71 [ 1957.397071][ T6007] usb 5-1: USB disconnect, device number 13 [ 1957.404899][T20927] usb 5-1: unable to send the bmi data to the device: -71 [ 1957.412030][T20927] usb 5-1: unable to get target info from device [ 1957.418857][ T5879] usb 3-1: config 0 descriptor?? [ 1957.431894][T25707] usb 2-1: config 6 interface 152 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1957.458519][T20927] usb 5-1: could not get target info (-71) [ 1957.469617][T25707] usb 2-1: config 6 interface 152 has no altsetting 0 [ 1957.483094][T20927] usb 5-1: could not probe fw (-71) [ 1957.497583][T25707] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 1957.527753][T25707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.553478][T25707] usb 2-1: Product: syz [ 1957.569502][T25707] usb 2-1: Manufacturer: syz [ 1957.574513][T25707] usb 2-1: SerialNumber: syz [ 1957.806902][T30892] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1957.823460][T25707] ushc 2-1:6.152: probe with driver ushc failed with error -71 [ 1957.876989][T25707] usb 2-1: USB disconnect, device number 115 [ 1958.643008][T25707] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1958.920971][T30924] netlink: 'syz.3.7320': attribute type 6 has an invalid length. [ 1958.932966][T30924] netlink: 'syz.3.7320': attribute type 7 has an invalid length. [ 1958.948955][T30924] netlink: 'syz.3.7320': attribute type 8 has an invalid length. [ 1958.992959][T25707] usb 2-1: device descriptor read/64, error -71 [ 1959.243344][T29524] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1959.335660][T29525] usb 3-1: USB disconnect, device number 23 [ 1959.423617][T29524] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1959.443043][T25707] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1959.587267][T29524] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1959.610535][T29524] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.627371][T29524] usb 4-1: Product: syz [ 1959.646657][T29524] usb 4-1: Manufacturer: syz [ 1959.658599][T29524] usb 4-1: SerialNumber: syz [ 1959.787561][T29524] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1960.226153][T29524] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1960.245995][T29524] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1960.277303][T29524] usb 4-1: media controller created [ 1960.338871][T29524] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1960.542938][T25707] usb 2-1: device descriptor read/64, error -71 [ 1960.579243][T29524] usb 4-1: USB disconnect, device number 106 [ 1960.588639][T30958] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7329'. [ 1960.663454][T25707] usb usb2-port1: attempt power cycle [ 1961.420159][T25707] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1961.439543][T30965] Cannot find add_set index 0 as target [ 1961.532102][T30964] FAULT_INJECTION: forcing a failure. [ 1961.532102][T30964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1961.563171][T30964] CPU: 1 UID: 0 PID: 30964 Comm: syz.2.7331 Tainted: G L syzkaller #0 PREEMPT(full) [ 1961.563200][T30964] Tainted: [L]=SOFTLOCKUP [ 1961.563207][T30964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1961.563216][T30964] Call Trace: [ 1961.563223][T30964] [ 1961.563229][T30964] dump_stack_lvl+0xe8/0x150 [ 1961.563258][T30964] should_fail_ex+0x412/0x560 [ 1961.563281][T30964] _copy_to_user+0x31/0xb0 [ 1961.563304][T30964] simple_read_from_buffer+0xe1/0x170 [ 1961.563329][T30964] proc_fail_nth_read+0x1bb/0x230 [ 1961.563354][T30964] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1961.563377][T30964] ? rw_verify_area+0x2a6/0x4d0 [ 1961.563393][T30964] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1961.563414][T30964] vfs_read+0x20c/0xa70 [ 1961.563429][T30964] ? fdget_pos+0x246/0x320 [ 1961.563453][T30964] ? __pfx___mutex_lock+0x10/0x10 [ 1961.563472][T30964] ? __pfx_vfs_read+0x10/0x10 [ 1961.563490][T30964] ? __fget_files+0x2a/0x420 [ 1961.563512][T30964] ? __fget_files+0x3a0/0x420 [ 1961.563530][T30964] ? __fget_files+0x2a/0x420 [ 1961.563554][T30964] ksys_read+0x150/0x270 [ 1961.563571][T30964] ? __pfx_ksys_read+0x10/0x10 [ 1961.563594][T30964] do_syscall_64+0x14d/0xf80 [ 1961.563608][T30964] ? trace_irq_disable+0x3b/0x150 [ 1961.563627][T30964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1961.563642][T30964] ? clear_bhb_loop+0x40/0x90 [ 1961.563660][T30964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1961.563674][T30964] RIP: 0033:0x7f066b55cfce [ 1961.563689][T30964] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1961.563702][T30964] RSP: 002b:00007f066c465fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1961.563718][T30964] RAX: ffffffffffffffda RBX: 00007f066c4666c0 RCX: 00007f066b55cfce [ 1961.563726][T30964] RDX: 000000000000000f RSI: 00007f066c4660a0 RDI: 0000000000000006 [ 1961.563732][T30964] RBP: 00007f066c466090 R08: 0000000000000000 R09: 0000000000000000 [ 1961.563738][T30964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1961.563744][T30964] R13: 00007f066b816038 R14: 00007f066b815fa0 R15: 00007f066b93fa48 [ 1961.563759][T30964] [ 1961.565647][T25707] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1961.973196][T25707] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1961.982512][T25707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.103814][T30969] syzkaller0: entered promiscuous mode [ 1962.112192][T30969] syzkaller0: entered allmulticast mode [ 1962.243682][T25707] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1962.495317][T25707] usb 2-1: USB disconnect, device number 118 [ 1962.588801][ T30] audit: type=1326 audit(1772423918.085:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30979 comm="syz.4.7335" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70c399c799 code=0x0 [ 1962.793981][T30983] dlm: no locking on control device [ 1962.859315][T30988] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7338'. [ 1962.891115][T30988] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1963.102886][T29524] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1963.292913][T29524] usb 6-1: Using ep0 maxpacket: 32 [ 1963.303962][T29524] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1963.322100][T29524] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1963.331408][T29524] usb 6-1: can't read configurations, error -61 [ 1963.852936][T29524] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1963.964902][T31015] FAULT_INJECTION: forcing a failure. [ 1963.964902][T31015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1963.983030][T31015] CPU: 0 UID: 0 PID: 31015 Comm: syz.2.7345 Tainted: G L syzkaller #0 PREEMPT(full) [ 1963.983059][T31015] Tainted: [L]=SOFTLOCKUP [ 1963.983065][T31015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1963.983075][T31015] Call Trace: [ 1963.983082][T31015] [ 1963.983089][T31015] dump_stack_lvl+0xe8/0x150 [ 1963.983118][T31015] should_fail_ex+0x412/0x560 [ 1963.983143][T31015] _copy_to_user+0x31/0xb0 [ 1963.983167][T31015] simple_read_from_buffer+0xe1/0x170 [ 1963.983192][T31015] proc_fail_nth_read+0x1bb/0x230 [ 1963.983216][T31015] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1963.983239][T31015] ? rw_verify_area+0x2a6/0x4d0 [ 1963.983254][T31015] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1963.983271][T31015] vfs_read+0x20c/0xa70 [ 1963.983280][T31015] ? fdget_pos+0x246/0x320 [ 1963.983296][T31015] ? __pfx___mutex_lock+0x10/0x10 [ 1963.983308][T31015] ? __pfx_vfs_read+0x10/0x10 [ 1963.983318][T31015] ? __fget_files+0x2a/0x420 [ 1963.983333][T31015] ? __fget_files+0x3a0/0x420 [ 1963.983345][T31015] ? __fget_files+0x2a/0x420 [ 1963.983362][T31015] ksys_read+0x150/0x270 [ 1963.983371][T31015] ? __pfx_filldir64+0x10/0x10 [ 1963.983384][T31015] ? __pfx_ksys_read+0x10/0x10 [ 1963.983398][T31015] do_syscall_64+0x14d/0xf80 [ 1963.983407][T31015] ? trace_irq_disable+0x3b/0x150 [ 1963.983422][T31015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1963.983431][T31015] ? clear_bhb_loop+0x40/0x90 [ 1963.983443][T31015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1963.983452][T31015] RIP: 0033:0x7f066b55cfce [ 1963.983462][T31015] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1963.983470][T31015] RSP: 002b:00007f066c444fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1963.983482][T31015] RAX: ffffffffffffffda RBX: 00007f066c4456c0 RCX: 00007f066b55cfce [ 1963.983489][T31015] RDX: 000000000000000f RSI: 00007f066c4450a0 RDI: 0000000000000007 [ 1963.983495][T31015] RBP: 00007f066c445090 R08: 0000000000000000 R09: 0000000000000000 [ 1963.983501][T31015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1963.983506][T31015] R13: 00007f066b816128 R14: 00007f066b816090 R15: 00007f066b93fa48 [ 1963.983521][T31015] [ 1964.281190][T29524] usb 6-1: Using ep0 maxpacket: 32 [ 1964.289028][T29524] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1964.298489][T29524] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1964.306343][T29524] usb 6-1: can't read configurations, error -61 [ 1964.313338][T29524] usb usb6-port1: attempt power cycle [ 1964.395323][T31026] qrtr: Invalid version 20 [ 1964.652993][T29524] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1964.684107][T29524] usb 6-1: Using ep0 maxpacket: 32 [ 1964.726896][T29524] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1964.779322][T29524] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1964.829038][T29524] usb 6-1: can't read configurations, error -61 [ 1964.943077][T31039] tipc: Enabling of bearer rejected, already enabled [ 1965.052983][T29524] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1965.102283][T29524] usb 6-1: Using ep0 maxpacket: 32 [ 1965.114515][T29524] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1965.127394][T29524] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1965.167548][T29524] usb 6-1: can't read configurations, error -61 [ 1965.193472][T29524] usb usb6-port1: unable to enumerate USB device [ 1966.348827][T31058] netlink: 7 bytes leftover after parsing attributes in process `syz.2.7361'. [ 1966.769472][T31068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7362'. [ 1966.778656][T31068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7362'. [ 1966.850796][T31070] syzkaller0: entered promiscuous mode [ 1966.857364][T31070] syzkaller0: entered allmulticast mode [ 1966.877740][T31070] input: syz1 as /devices/virtual/input/input178 [ 1967.405161][T31080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7365'. [ 1967.555214][T31082] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1967.635296][T31085] Cannot find add_set index 0 as target [ 1967.823182][T29525] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1967.955577][T31091] tipc: Enabling of bearer rejected, already enabled [ 1968.023062][T29525] usb 5-1: Using ep0 maxpacket: 8 [ 1968.158308][T29525] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1968.173526][T29525] usb 5-1: config 179 has no interface number 0 [ 1968.230927][T29525] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1968.261316][T29525] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1968.346958][T29525] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1968.406308][T29525] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1968.438164][T29525] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1968.470967][T29525] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1968.504543][T29525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.529524][T31082] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1968.579994][T31095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7371'. [ 1968.589036][T31095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7371'. [ 1968.800662][T29525] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input179 [ 1968.990726][T31099] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1969.054587][T31099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7372'. [ 1969.242752][T31082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1969.271822][T31082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1969.953062][ T5879] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1969.994726][T31115] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1970.025462][T31117] program syz.1.7379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1970.037754][T31117] FAULT_INJECTION: forcing a failure. [ 1970.037754][T31117] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1970.068302][T31117] CPU: 1 UID: 0 PID: 31117 Comm: syz.1.7379 Tainted: G L syzkaller #0 PREEMPT(full) [ 1970.068332][T31117] Tainted: [L]=SOFTLOCKUP [ 1970.068339][T31117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1970.068349][T31117] Call Trace: [ 1970.068356][T31117] [ 1970.068364][T31117] dump_stack_lvl+0xe8/0x150 [ 1970.068393][T31117] should_fail_ex+0x412/0x560 [ 1970.068417][T31117] prepare_alloc_pages+0x22a/0x650 [ 1970.068445][T31117] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1970.068468][T31117] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1970.068490][T31117] ? __pfx_policy_nodemask+0x10/0x10 [ 1970.068510][T31117] ? do_raw_spin_lock+0x12b/0x2f0 [ 1970.068533][T31117] alloc_pages_mpol+0x232/0x4a0 [ 1970.068558][T31117] alloc_pages_noprof+0xa8/0x190 [ 1970.068578][T31117] blk_rq_map_kern+0x368/0x710 [ 1970.068603][T31117] scsi_ioctl+0x1b11/0x2130 [ 1970.068632][T31117] ? __pfx_scsi_ioctl+0x10/0x10 [ 1970.068678][T31117] ? kasan_quarantine_put+0xbb/0x1f0 [ 1970.068702][T31117] ? tomoyo_path_number_perm+0x219/0x630 [ 1970.068722][T31117] ? tomoyo_path_number_perm+0x219/0x630 [ 1970.068742][T31117] ? do_vfs_ioctl+0x1166/0x1530 [ 1970.068764][T31117] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1970.068792][T31117] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1970.068814][T31117] sg_ioctl+0x1605/0x2220 [ 1970.068841][T31117] ? __pfx_sg_ioctl+0x10/0x10 [ 1970.068859][T31117] ? __fget_files+0x2a/0x420 [ 1970.068883][T31117] ? __fget_files+0x2a/0x420 [ 1970.068903][T31117] ? __fget_files+0x3a0/0x420 [ 1970.068921][T31117] ? __fget_files+0x2a/0x420 [ 1970.068944][T31117] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1970.068963][T31117] ? __pfx_sg_ioctl+0x10/0x10 [ 1970.068980][T31117] __se_sys_ioctl+0xfc/0x170 [ 1970.068998][T31117] do_syscall_64+0x14d/0xf80 [ 1970.069013][T31117] ? trace_irq_disable+0x3b/0x150 [ 1970.069033][T31117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1970.069049][T31117] ? clear_bhb_loop+0x40/0x90 [ 1970.069086][T31117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1970.069101][T31117] RIP: 0033:0x7feafe39c799 [ 1970.069117][T31117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1970.069130][T31117] RSP: 002b:00007feaff1aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1970.069148][T31117] RAX: ffffffffffffffda RBX: 00007feafe615fa0 RCX: 00007feafe39c799 [ 1970.069160][T31117] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 1970.069170][T31117] RBP: 00007feaff1aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1970.069180][T31117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1970.069190][T31117] R13: 00007feafe616038 R14: 00007feafe615fa0 R15: 00007feafe73fa48 [ 1970.069216][T31117] [ 1970.372889][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 1970.393650][ T5879] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1970.402764][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1970.414609][ T5879] usb 4-1: Product: syz [ 1970.418777][ T5879] usb 4-1: Manufacturer: syz [ 1970.423452][ T5879] usb 4-1: SerialNumber: syz [ 1970.432233][ T5879] usb 4-1: config 0 descriptor?? [ 1970.469421][ T5879] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1970.507669][T25707] usb 5-1: USB disconnect, device number 14 [ 1970.507920][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1970.523294][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 1970.982977][T29525] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1971.001114][T31133] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1971.199825][T29525] usb 6-1: Using ep0 maxpacket: 16 [ 1971.239585][T29525] usb 6-1: config 0 has no interfaces? [ 1971.258074][T29525] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1971.282861][T29525] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1971.301467][T29525] usb 6-1: Manufacturer: syz [ 1971.320207][T29525] usb 6-1: config 0 descriptor?? [ 1971.469209][ T5879] gspca_sq905: bulk read fail (-22) len 0/4 [ 1971.475395][ T5879] sq905 4-1:0.0: probe with driver sq905 failed with error -5 [ 1971.562114][T31121] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1971.743377][ T5879] usb 4-1: USB disconnect, device number 107 [ 1971.920773][T29525] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1972.084111][T29525] usb 3-1: Using ep0 maxpacket: 16 [ 1972.092135][T29525] usb 3-1: config 0 has no interfaces? [ 1972.100414][T29525] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1972.110923][T31155] program syz.1.7390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1972.111175][T29525] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1972.143529][T29525] usb 3-1: Manufacturer: syz [ 1972.144366][T31155] FAULT_INJECTION: forcing a failure. [ 1972.144366][T31155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1972.162856][T31155] CPU: 1 UID: 0 PID: 31155 Comm: syz.1.7390 Tainted: G L syzkaller #0 PREEMPT(full) [ 1972.162882][T31155] Tainted: [L]=SOFTLOCKUP [ 1972.162888][T31155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1972.162897][T31155] Call Trace: [ 1972.162904][T31155] [ 1972.162911][T31155] dump_stack_lvl+0xe8/0x150 [ 1972.162937][T31155] should_fail_ex+0x412/0x560 [ 1972.162961][T31155] _copy_to_user+0x31/0xb0 [ 1972.162985][T31155] simple_read_from_buffer+0xe1/0x170 [ 1972.163009][T31155] proc_fail_nth_read+0x1bb/0x230 [ 1972.163030][T31155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1972.163054][T31155] ? rw_verify_area+0x2a6/0x4d0 [ 1972.163068][T31155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1972.163090][T31155] vfs_read+0x20c/0xa70 [ 1972.163102][T31155] ? fdget_pos+0x246/0x320 [ 1972.163125][T31155] ? __pfx___mutex_lock+0x10/0x10 [ 1972.163141][T31155] ? __pfx_vfs_read+0x10/0x10 [ 1972.163158][T31155] ? __fget_files+0x2a/0x420 [ 1972.163182][T31155] ? __fget_files+0x3a0/0x420 [ 1972.163201][T31155] ? __fget_files+0x2a/0x420 [ 1972.163227][T31155] ksys_read+0x150/0x270 [ 1972.163246][T31155] ? __pfx_ksys_read+0x10/0x10 [ 1972.163272][T31155] do_syscall_64+0x14d/0xf80 [ 1972.163287][T31155] ? trace_irq_disable+0x3b/0x150 [ 1972.163306][T31155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1972.163321][T31155] ? clear_bhb_loop+0x40/0x90 [ 1972.163343][T31155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1972.163358][T31155] RIP: 0033:0x7feafe35cfce [ 1972.163373][T31155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1972.163386][T31155] RSP: 002b:00007feaff1a9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1972.163404][T31155] RAX: ffffffffffffffda RBX: 00007feaff1aa6c0 RCX: 00007feafe35cfce [ 1972.163414][T31155] RDX: 000000000000000f RSI: 00007feaff1aa0a0 RDI: 0000000000000004 [ 1972.163424][T31155] RBP: 00007feaff1aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1972.163434][T31155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1972.163443][T31155] R13: 00007feafe616038 R14: 00007feafe615fa0 R15: 00007feafe73fa48 [ 1972.163469][T31155] [ 1972.169347][T29525] usb 3-1: config 0 descriptor?? [ 1972.468881][T31161] program syz.3.7392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1973.078736][ T30] audit: type=1326 audit(1772423928.415:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31162 comm="syz.1.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39c799 code=0x7ffc0000 [ 1973.242957][ T5879] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1973.261383][ T30] audit: type=1326 audit(1772423928.415:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31162 comm="syz.1.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39c799 code=0x7ffc0000 [ 1973.319165][T31145] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1973.371645][ T30] audit: type=1326 audit(1772423928.415:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31162 comm="syz.1.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feafe39c799 code=0x7ffc0000 [ 1973.412884][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 1973.425215][ T5879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1973.437232][ T5879] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1973.443988][ T30] audit: type=1326 audit(1772423928.415:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31162 comm="syz.1.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39c799 code=0x7ffc0000 [ 1973.586260][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.612492][ T30] audit: type=1326 audit(1772423928.415:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31162 comm="syz.1.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39c799 code=0x7ffc0000 [ 1973.689000][ T5879] usb 2-1: config 0 descriptor?? [ 1973.709942][ T5879] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1973.721112][ T30] audit: type=1326 audit(1772423928.415:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31162 comm="syz.1.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7feafe39c799 code=0x7ffc0000 [ 1973.822360][ T6007] usb 6-1: USB disconnect, device number 68 [ 1973.915996][ T30] audit: type=1326 audit(1772423928.415:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31162 comm="syz.1.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39c799 code=0x7ffc0000 [ 1974.003271][T31176] ALSA: mixer_oss: invalid OSS volume '0x0000000000000047' [ 1974.020990][ T30] audit: type=1326 audit(1772423928.415:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31162 comm="syz.1.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39c799 code=0x7ffc0000 [ 1974.063058][ T30] audit: type=1326 audit(1772423928.415:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31162 comm="syz.1.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7feafe39c799 code=0x7ffc0000 [ 1974.087064][ T30] audit: type=1326 audit(1772423928.415:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31162 comm="syz.1.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39c799 code=0x7ffc0000 [ 1974.146133][T31178] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7396'. [ 1974.226637][T31180] 8021q: VLANs not supported on ip_vti0 [ 1974.983285][T29524] usb 3-1: USB disconnect, device number 24 [ 1975.122941][T29525] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1975.275011][T29525] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1975.285641][T29525] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1975.312881][T29525] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1975.333403][T29525] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1975.359409][T29525] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.367707][T29524] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1975.376186][T29525] usb 6-1: Product: syz [ 1975.467671][T29525] usb 6-1: Manufacturer: syz [ 1975.472512][T29525] usb 6-1: SerialNumber: syz [ 1975.483262][T29525] usb 6-1: config 0 descriptor?? [ 1975.491845][T31190] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1975.499500][T31190] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1975.508302][T29525] usb 6-1: ucan: probing device on interface #0 [ 1975.712930][T29524] usb 3-1: Using ep0 maxpacket: 32 [ 1975.720399][T29524] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1975.733074][T29524] usb 3-1: config 0 has no interface number 0 [ 1975.739242][T29524] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1975.753105][T29524] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1975.763271][ T6007] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1975.772458][T29524] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.781056][T29524] usb 3-1: Product: syz [ 1975.785803][T29524] usb 3-1: Manufacturer: syz [ 1975.790542][T29524] usb 3-1: SerialNumber: syz [ 1975.814203][T29524] usb 3-1: config 0 descriptor?? [ 1975.829029][T29524] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1975.839271][T29524] em28xx 3-1:0.132: Video interface 132 found: [ 1975.893030][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.902026][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1975.942908][ T6007] usb 4-1: Using ep0 maxpacket: 16 [ 1975.952602][ T6007] usb 4-1: config 0 has no interfaces? [ 1975.974034][ T6007] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1975.983300][ T6007] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1975.995796][ T6007] usb 4-1: Manufacturer: syz [ 1976.024923][ T6007] usb 4-1: config 0 descriptor?? [ 1976.121248][T29525] ucan 6-1:0.0: probe with driver ucan failed with error -71 [ 1976.164930][T29525] usb 6-1: USB disconnect, device number 69 [ 1976.225089][T29524] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1976.400591][T31208] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1976.467674][ T6007] usb 2-1: USB disconnect, device number 119 [ 1976.626743][T31221] binder: 31219:31221 ioctl c0306201 0 returned -14 [ 1976.697770][T29524] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1976.850219][T29524] em28xx 3-1:0.132: board has no eeprom [ 1976.883386][T31225] FAULT_INJECTION: forcing a failure. [ 1976.883386][T31225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1976.939297][T31225] CPU: 1 UID: 0 PID: 31225 Comm: syz.5.7411 Tainted: G L syzkaller #0 PREEMPT(full) [ 1976.939329][T31225] Tainted: [L]=SOFTLOCKUP [ 1976.939334][T31225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1976.939342][T31225] Call Trace: [ 1976.939347][T31225] [ 1976.939352][T31225] dump_stack_lvl+0xe8/0x150 [ 1976.939397][T31225] should_fail_ex+0x412/0x560 [ 1976.939413][T31225] _copy_to_user+0x31/0xb0 [ 1976.939429][T31225] simple_read_from_buffer+0xe1/0x170 [ 1976.939446][T31225] proc_fail_nth_read+0x1bb/0x230 [ 1976.939461][T31225] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1976.939475][T31225] ? rw_verify_area+0x2a6/0x4d0 [ 1976.939485][T31225] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1976.939499][T31225] vfs_read+0x20c/0xa70 [ 1976.939508][T31225] ? fdget_pos+0x246/0x320 [ 1976.939523][T31225] ? __pfx___mutex_lock+0x10/0x10 [ 1976.939535][T31225] ? __pfx_vfs_read+0x10/0x10 [ 1976.939545][T31225] ? __fget_files+0x2a/0x420 [ 1976.939560][T31225] ? __fget_files+0x3a0/0x420 [ 1976.939572][T31225] ? __fget_files+0x2a/0x420 [ 1976.939589][T31225] ksys_read+0x150/0x270 [ 1976.939600][T31225] ? __pfx_ksys_read+0x10/0x10 [ 1976.939608][T31225] ? fput+0xa0/0xd0 [ 1976.939627][T31225] do_syscall_64+0x14d/0xf80 [ 1976.939636][T31225] ? trace_irq_disable+0x3b/0x150 [ 1976.939649][T31225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1976.939659][T31225] ? clear_bhb_loop+0x40/0x90 [ 1976.939670][T31225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1976.939679][T31225] RIP: 0033:0x7fd57e15cfce [ 1976.939689][T31225] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1976.939698][T31225] RSP: 002b:00007fd57f0defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1976.939709][T31225] RAX: ffffffffffffffda RBX: 00007fd57f0df6c0 RCX: 00007fd57e15cfce [ 1976.939716][T31225] RDX: 000000000000000f RSI: 00007fd57f0df0a0 RDI: 0000000000000005 [ 1976.939722][T31225] RBP: 00007fd57f0df090 R08: 0000000000000000 R09: 0000000000000000 [ 1976.939728][T31225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1976.939734][T31225] R13: 00007fd57e416128 R14: 00007fd57e416090 R15: 00007fd57e53fa48 [ 1976.939748][T31225] [ 1977.043249][T29524] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1977.215617][T29524] em28xx 3-1:0.132: analog set to bulk mode. [ 1977.260354][ T10] em28xx 3-1:0.132: Registering V4L2 extension [ 1977.687265][T31221] syz.1.7410 (31221): drop_caches: 2 [ 1978.095930][T31240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7416'. [ 1978.271098][T29526] usb 4-1: USB disconnect, device number 108 [ 1978.403255][ T6007] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 1978.443196][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1978.444134][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1978.468227][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1978.479812][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1978.501976][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1978.561598][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1978.588458][ T6007] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1978.593227][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1978.614878][ T6007] usb 5-1: config 0 has no interface number 0 [ 1978.621921][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1978.622168][ T6007] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1978.654094][ T6007] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1978.678995][ T6007] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1978.683613][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 1978.754155][ T6007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1978.767050][ T6007] usb 5-1: config 0 descriptor?? [ 1978.790910][T31242] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1978.803627][ T6007] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1978.829241][ T5879] usb 3-1: USB disconnect, device number 25 [ 1978.840349][ T5879] em28xx 3-1:0.132: Disconnecting em28xx [ 1978.896473][ T10] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1978.943568][ T10] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1978.964409][ T10] em28xx 3-1:0.132: No AC97 audio processor [ 1978.975464][ T10] usb 3-1: Decoder not found [ 1978.992368][ T10] em28xx 3-1:0.132: failed to create media graph [ 1979.005099][ T6007] usb 5-1: USB disconnect, device number 15 [ 1979.005144][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1979.061460][ T10] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1979.106178][ T10] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1979.106881][T31266] ================================================================== [ 1979.122863][T31266] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 1979.130227][T31266] Read of size 8 at addr ffff88807dcac748 by task v4l_id/31266 [ 1979.137751][T31266] [ 1979.140142][T31266] CPU: 1 UID: 0 PID: 31266 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1979.140159][T31266] Tainted: [L]=SOFTLOCKUP [ 1979.140163][T31266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1979.140170][T31266] Call Trace: [ 1979.140177][T31266] [ 1979.140184][T31266] dump_stack_lvl+0xe8/0x150 [ 1979.140210][T31266] print_report+0xba/0x230 [ 1979.140229][T31266] ? v4l2_fh_open+0xac/0x420 [ 1979.140245][T31266] kasan_report+0x117/0x150 [ 1979.140260][T31266] ? v4l2_fh_open+0xac/0x420 [ 1979.140271][T31266] v4l2_fh_open+0xac/0x420 [ 1979.140280][T31266] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1979.140291][T31266] em28xx_v4l2_open+0x157/0x9a0 [ 1979.140306][T31266] ? do_raw_spin_lock+0x12b/0x2f0 [ 1979.140317][T31266] v4l2_open+0x1bf/0x3a0 [ 1979.140328][T31266] chrdev_open+0x4cd/0x5e0 [ 1979.140340][T31266] ? __pfx_chrdev_open+0x10/0x10 [ 1979.140350][T31266] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1979.140366][T31266] ? __pfx_chrdev_open+0x10/0x10 [ 1979.140376][T31266] do_dentry_open+0x785/0x14e0 [ 1979.140391][T31266] vfs_open+0x3b/0x340 [ 1979.140402][T31266] ? path_openat+0x2df0/0x3860 [ 1979.140413][T31266] path_openat+0x2e08/0x3860 [ 1979.140425][T31266] ? __pfx_stack_trace_save+0x10/0x10 [ 1979.140435][T31266] ? stack_depot_save_flags+0x33/0x810 [ 1979.140448][T31266] ? __pfx_path_openat+0x10/0x10 [ 1979.140457][T31266] ? __x64_sys_openat+0x138/0x170 [ 1979.140469][T31266] ? do_syscall_64+0x14d/0xf80 [ 1979.140477][T31266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1979.140488][T31266] ? __lock_acquire+0x6b5/0x2cf0 [ 1979.140501][T31266] do_file_open+0x23e/0x4a0 [ 1979.140511][T31266] ? __pfx_do_file_open+0x10/0x10 [ 1979.140524][T31266] ? _raw_spin_unlock+0x28/0x50 [ 1979.140542][T31266] ? alloc_fd+0x64b/0x6c0 [ 1979.140556][T31266] do_sys_openat2+0x113/0x200 [ 1979.140569][T31266] ? __pfx_do_sys_openat2+0x10/0x10 [ 1979.140582][T31266] ? exc_page_fault+0x6a/0xc0 [ 1979.140596][T31266] ? do_user_addr_fault+0xc6f/0x1340 [ 1979.140609][T31266] __x64_sys_openat+0x138/0x170 [ 1979.140622][T31266] do_syscall_64+0x14d/0xf80 [ 1979.140631][T31266] ? trace_irq_disable+0x3b/0x150 [ 1979.140644][T31266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1979.140653][T31266] ? clear_bhb_loop+0x40/0x90 [ 1979.140664][T31266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1979.140673][T31266] RIP: 0033:0x7f9e7eaa7407 [ 1979.140684][T31266] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1979.140693][T31266] RSP: 002b:00007fff896e9e00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1979.140704][T31266] RAX: ffffffffffffffda RBX: 00007f9e7f1eb880 RCX: 00007f9e7eaa7407 [ 1979.140711][T31266] RDX: 0000000000000000 RSI: 00007fff896eaf1a RDI: ffffffffffffff9c [ 1979.140718][T31266] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1979.140724][T31266] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1979.140730][T31266] R13: 00007fff896ea050 R14: 00007f9e7f352000 R15: 00005560f63014d8 [ 1979.140740][T31266] [ 1979.140744][T31266] [ 1979.440152][T31266] Allocated by task 10: [ 1979.444291][T31266] kasan_save_track+0x3e/0x80 [ 1979.448956][T31266] __kasan_kmalloc+0x93/0xb0 [ 1979.453529][T31266] __kmalloc_cache_noprof+0x31c/0x660 [ 1979.458885][T31266] em28xx_v4l2_init+0x10b/0x2e70 [ 1979.463810][T31266] em28xx_init_extension+0x120/0x1c0 [ 1979.469079][T31266] process_scheduled_works+0xb02/0x1830 [ 1979.474609][T31266] worker_thread+0xa50/0xfc0 [ 1979.479182][T31266] kthread+0x388/0x470 [ 1979.483237][T31266] ret_from_fork+0x51e/0xb90 [ 1979.487812][T31266] ret_from_fork_asm+0x1a/0x30 [ 1979.492564][T31266] [ 1979.494869][T31266] Freed by task 10: [ 1979.498654][T31266] kasan_save_track+0x3e/0x80 [ 1979.503313][T31266] kasan_save_free_info+0x46/0x50 [ 1979.508326][T31266] __kasan_slab_free+0x5c/0x80 [ 1979.513071][T31266] kfree+0x1c1/0x630 [ 1979.516952][T31266] em28xx_v4l2_init+0x1683/0x2e70 [ 1979.521964][T31266] em28xx_init_extension+0x120/0x1c0 [ 1979.527231][T31266] process_scheduled_works+0xb02/0x1830 [ 1979.532764][T31266] worker_thread+0xa50/0xfc0 [ 1979.537342][T31266] kthread+0x388/0x470 [ 1979.541395][T31266] ret_from_fork+0x51e/0xb90 [ 1979.545969][T31266] ret_from_fork_asm+0x1a/0x30 [ 1979.550721][T31266] [ 1979.553050][T31266] The buggy address belongs to the object at ffff88807dcac000 [ 1979.553050][T31266] which belongs to the cache kmalloc-8k of size 8192 [ 1979.567086][T31266] The buggy address is located 1864 bytes inside of [ 1979.567086][T31266] freed 8192-byte region [ffff88807dcac000, ffff88807dcae000) [ 1979.581036][T31266] [ 1979.583344][T31266] The buggy address belongs to the physical page: [ 1979.589827][T31266] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7dca8 [ 1979.598576][T31266] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1979.607058][T31266] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1979.614595][T31266] page_type: f5(slab) [ 1979.618563][T31266] raw: 00fff00000000040 ffff88813fea9280 dead000000000100 dead000000000122 [ 1979.627124][T31266] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1979.635690][T31266] head: 00fff00000000040 ffff88813fea9280 dead000000000100 dead000000000122 [ 1979.644342][T31266] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1979.652994][T31266] head: 00fff00000000003 ffffea0001f72a01 00000000ffffffff 00000000ffffffff [ 1979.661644][T31266] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1979.670291][T31266] page dumped because: kasan: bad access detected [ 1979.676691][T31266] page_owner tracks the page as allocated [ 1979.682386][T31266] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15015, tgid 15015 (syz-executor), ts 1023488405913, free_ts 1022110607065 [ 1979.704259][T31266] post_alloc_hook+0x231/0x280 [ 1979.709029][T31266] get_page_from_freelist+0x24dc/0x2580 [ 1979.714560][T31266] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1979.720361][T31266] allocate_slab+0x77/0x660 [ 1979.724868][T31266] refill_objects+0x331/0x3c0 [ 1979.729537][T31266] __pcs_replace_empty_main+0x2b9/0x620 [ 1979.735075][T31266] __kmalloc_cache_noprof+0x392/0x660 [ 1979.740440][T31266] mr_table_alloc+0x65/0x250 [ 1979.745020][T31266] ip6mr_net_init+0x21a/0x390 [ 1979.749683][T31266] ops_init+0x35c/0x5c0 [ 1979.753830][T31266] setup_net+0x118/0x340 [ 1979.758060][T31266] copy_net_ns+0x50e/0x730 [ 1979.762460][T31266] create_new_namespaces+0x3e7/0x6a0 [ 1979.767742][T31266] unshare_nsproxy_namespaces+0x11a/0x160 [ 1979.773468][T31266] ksys_unshare+0x51d/0x930 [ 1979.777966][T31266] __x64_sys_unshare+0x38/0x50 [ 1979.782724][T31266] page last free pid 5194 tgid 5194 stack trace: [ 1979.789030][T31266] __free_frozen_pages+0xc2b/0xdb0 [ 1979.794126][T31266] __slab_free+0x263/0x2b0 [ 1979.798526][T31266] qlist_free_all+0x97/0x100 [ 1979.803096][T31266] kasan_quarantine_reduce+0x148/0x160 [ 1979.808537][T31266] __kasan_slab_alloc+0x22/0x80 [ 1979.813368][T31266] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1979.818809][T31266] do_getname+0x2e/0x250 [ 1979.823034][T31266] do_sys_openat2+0xca/0x200 [ 1979.827607][T31266] __x64_sys_openat+0x138/0x170 [ 1979.832443][T31266] do_syscall_64+0x14d/0xf80 [ 1979.837015][T31266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1979.842895][T31266] [ 1979.845205][T31266] Memory state around the buggy address: [ 1979.850818][T31266] ffff88807dcac600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1979.858863][T31266] ffff88807dcac680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1979.866907][T31266] >ffff88807dcac700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1979.874953][T31266] ^ [ 1979.881346][T31266] ffff88807dcac780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1979.889392][T31266] ffff88807dcac800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1979.897431][T31266] ================================================================== [ 1979.933579][ T5879] em28xx 3-1:0.132: Closing input extension [ 1980.127631][T31266] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1980.134880][T31266] CPU: 1 UID: 0 PID: 31266 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1980.145480][T31266] Tainted: [L]=SOFTLOCKUP [ 1980.149801][T31266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1980.159850][T31266] Call Trace: [ 1980.163128][T31266] [ 1980.166057][T31266] vpanic+0x56c/0xa60 [ 1980.170045][T31266] ? __pfx_vpanic+0x10/0x10 [ 1980.174549][T31266] ? irqentry_exit+0x59e/0x620 [ 1980.179313][T31266] panic+0xc5/0xd0 [ 1980.183033][T31266] ? __pfx_panic+0x10/0x10 [ 1980.187454][T31266] ? __pfx_panic+0x10/0x10 [ 1980.191871][T31266] ? v4l2_fh_open+0xac/0x420 [ 1980.196470][T31266] check_panic_on_warn+0x89/0xb0 [ 1980.201421][T31266] ? v4l2_fh_open+0xac/0x420 [ 1980.206014][T31266] end_report+0x73/0x180 [ 1980.210266][T31266] ? v4l2_fh_open+0xac/0x420 [ 1980.214854][T31266] kasan_report+0x128/0x150 [ 1980.219363][T31266] ? v4l2_fh_open+0xac/0x420 [ 1980.223953][T31266] v4l2_fh_open+0xac/0x420 [ 1980.228387][T31266] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1980.234366][T31266] em28xx_v4l2_open+0x157/0x9a0 [ 1980.239224][T31266] ? do_raw_spin_lock+0x12b/0x2f0 [ 1980.244250][T31266] v4l2_open+0x1bf/0x3a0 [ 1980.248492][T31266] chrdev_open+0x4cd/0x5e0 [ 1980.252906][T31266] ? __pfx_chrdev_open+0x10/0x10 [ 1980.257840][T31266] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1980.264173][T31266] ? __pfx_chrdev_open+0x10/0x10 [ 1980.269112][T31266] do_dentry_open+0x785/0x14e0 [ 1980.273882][T31266] vfs_open+0x3b/0x340 [ 1980.277951][T31266] ? path_openat+0x2df0/0x3860 [ 1980.282718][T31266] path_openat+0x2e08/0x3860 [ 1980.287320][T31266] ? __pfx_stack_trace_save+0x10/0x10 [ 1980.292687][T31266] ? stack_depot_save_flags+0x33/0x810 [ 1980.298129][T31266] ? __pfx_path_openat+0x10/0x10 [ 1980.303045][T31266] ? __x64_sys_openat+0x138/0x170 [ 1980.308048][T31266] ? do_syscall_64+0x14d/0xf80 [ 1980.312791][T31266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1980.318845][T31266] ? __lock_acquire+0x6b5/0x2cf0 [ 1980.323763][T31266] do_file_open+0x23e/0x4a0 [ 1980.328245][T31266] ? __pfx_do_file_open+0x10/0x10 [ 1980.333251][T31266] ? _raw_spin_unlock+0x28/0x50 [ 1980.338086][T31266] ? alloc_fd+0x64b/0x6c0 [ 1980.342399][T31266] do_sys_openat2+0x113/0x200 [ 1980.347059][T31266] ? __pfx_do_sys_openat2+0x10/0x10 [ 1980.352236][T31266] ? exc_page_fault+0x6a/0xc0 [ 1980.356893][T31266] ? do_user_addr_fault+0xc6f/0x1340 [ 1980.362157][T31266] __x64_sys_openat+0x138/0x170 [ 1980.366989][T31266] do_syscall_64+0x14d/0xf80 [ 1980.371556][T31266] ? trace_irq_disable+0x3b/0x150 [ 1980.376560][T31266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1980.382601][T31266] ? clear_bhb_loop+0x40/0x90 [ 1980.387260][T31266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1980.393135][T31266] RIP: 0033:0x7f9e7eaa7407 [ 1980.397534][T31266] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1980.417116][T31266] RSP: 002b:00007fff896e9e00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1980.425509][T31266] RAX: ffffffffffffffda RBX: 00007f9e7f1eb880 RCX: 00007f9e7eaa7407 [ 1980.433464][T31266] RDX: 0000000000000000 RSI: 00007fff896eaf1a RDI: ffffffffffffff9c [ 1980.441416][T31266] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1980.449365][T31266] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1980.457316][T31266] R13: 00007fff896ea050 R14: 00007f9e7f352000 R15: 00005560f63014d8 [ 1980.465271][T31266] [ 1980.468540][T31266] Kernel Offset: disabled [ 1980.472877][T31266] Rebooting in 86400 seconds..