last executing test programs: 3m57.180080633s ago: executing program 3 (id=3401): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x8, 0x40, 0x2, 0x4, {{0xb, 0x4, 0x0, 0x6, 0x2c, 0x65, 0x0, 0xfc, 0x4, 0x0, @empty, @multicast2, {[@ssrr={0x89, 0x7, 0x62, [@multicast1]}, @lsrr={0x83, 0x7, 0x55, [@rand_addr=0x64010102]}, @ssrr={0x89, 0x7, 0xd2, [@multicast1]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x2b, 0x0, 0xb, 0x3, 0x17, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x10, 0x1, 0x80, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'erspan0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x0, 0x1, 0x8, 0x3, {{0xc, 0x4, 0x1, 0x2e, 0x30, 0x67, 0x0, 0x8, 0x4, 0x0, @broadcast, @private=0xa010101, {[@lsrr={0x83, 0x1b, 0xcf, [@loopback, @empty, @remote, @loopback, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000007c0)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x80, r1, 0x1, 0x70bd2e, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x80}}, 0x400c810) 3m57.130577397s ago: executing program 3 (id=3402): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, 0x0, &(0x7f0000000900)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x5, "bd"}, @local=@item_4={0x3, 0x2, 0x8, "301ef0fd"}]}}, 0x0}, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x3, 0x33, "f5d251d8ada79186797cbcc67ba8f8c527cc75b8df59fabcda84269b17ea372e2ab6b77a856cff4858599140218c82abadd44f"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) read$msr(r2, &(0x7f0000000080)=""/44, 0x2c) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000200)={0x0, 0x14}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0xf3dbcd13ac37d9a7, 0x2, 0x64, {0x64, 0xc, "eba86017efe45e4d690060905216d6cb6f2ccb20915f2cf9bd40b96320ca6c146347183b57f5e75017a8fe3a82ab60fdbe413e1e326425a789964c7f41a0f697324667c6d92824bde5b76bfa8571867c6575e4dbaf38c34cb19cddd0b180fe6ec59d"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x20, 0x5, 0x61, "b397c6713d88e62dc0eb67d9cbb3aa6c5fb74e615149f9579fb1c612211f2ee7ae31c10ebee57edec67b1b4001eb8f21ec321dac065f9834eaac64bd0dec04e677bbdebb8122c6fe677309ed39c02c3f4c8d17529ebffe77a49bf9d1d1ea40dc3d"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000001c0)={0x0, 0x8, 0x1}}) 3m53.843463937s ago: executing program 3 (id=3409): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendmsg$nl_route(r0, 0x0, 0x8004002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async) sendmsg$nl_route(r0, 0x0, 0x8004002) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, 0x0, 0x0) (async) 3m53.495710054s ago: executing program 3 (id=3412): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x105091, 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x0) 3m53.451153972s ago: executing program 3 (id=3413): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x99fe, 0x11, ')\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$x25(0xffffffffffffffff, &(0x7f0000000a80), 0x12) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb20a000, 0x0, 0x3, 0x1, 0x0, 0x89d3}, 0x0) add_key$user(&(0x7f0000000180), 0x0, &(0x7f0000000ac0)="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", 0xef8, 0xfffffffffffffff9) 3m52.787506224s ago: executing program 3 (id=3417): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002e0000001801000020786c2500000000002020077b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$unix(r2, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008000}, 0x20040010) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) lstat(0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x90}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) unshare(0x6020400) recvmsg(0xffffffffffffffff, 0x0, 0x40010000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@enum64={0x4, 0x1, 0x0, 0x13, 0x0, 0x4, [{0xfffffffe, 0x43, 0x2}]}]}, {0x0, [0x2e, 0x71, 0x0, 0x5f]}}, &(0x7f0000003340)=""/5, 0x36, 0x5, 0x1, 0x6abb}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 3m52.636114957s ago: executing program 32 (id=3417): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002e0000001801000020786c2500000000002020077b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$unix(r2, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008000}, 0x20040010) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) lstat(0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x90}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) unshare(0x6020400) recvmsg(0xffffffffffffffff, 0x0, 0x40010000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@enum64={0x4, 0x1, 0x0, 0x13, 0x0, 0x4, [{0xfffffffe, 0x43, 0x2}]}]}, {0x0, [0x2e, 0x71, 0x0, 0x5f]}}, &(0x7f0000003340)=""/5, 0x36, 0x5, 0x1, 0x6abb}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 51.094926885s ago: executing program 0 (id=3875): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f00000014c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffe, 0x3, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666", 0x0, 0xfffffffb, 0x39, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000000)) syz_io_uring_setup(0x3c5d, &(0x7f0000000000)={0x0, 0x0, 0x27, 0x2, 0x1, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000000)) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="000004000000"], 0x0, 0x0}) 47.749514001s ago: executing program 0 (id=3888): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf6", 0x7f}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e", 0x93}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}], 0x2}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 47.638868239s ago: executing program 0 (id=3891): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xa1a) (fail_nth: 2) 47.00714827s ago: executing program 0 (id=3893): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x2100) pidfd_getfd(0xffffffffffffffff, r1, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="54000000120005092abd7000fddbdf030a0906fe4e324e24fbffffff010400008e00000006000000fdbfffff050000010000000000380000", @ANYBLOB="000001000010000006000000ffff"], 0x54}, 0x1, 0x0, 0x0, 0x22044050}, 0x844) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x34) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000280)=0x14) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dfb0000000109022400011b00000009040000022a3e740009458bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) 43.497302917s ago: executing program 0 (id=3910): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c32f"]) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000200)={0x2, 0x7, @value=0x401}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000140)={r3, 0x0, 0x40, 0x7ff, 0x2541beba, 0x8, [0xfffffffffffffff5, 0x68, 0xbee9, 0x9, 0x10000, 0x8]}) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) r5 = signalfd4(r4, &(0x7f0000000000)={[0x10001]}, 0x8, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40405515, &(0x7f00000001c0)={0x5, 0x5, 0x6, 0x408, 'syz1\x00', 0x80}) ioctl$SOUND_MIXER_READ_STEREODEVS(r4, 0x80044dfb, &(0x7f0000000100)) 41.640799933s ago: executing program 0 (id=3916): openat$cuse(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)=',..:\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000200000d0a000000000000000400000010000000020000000000"], &(0x7f0000000f40)=""/4089, 0x36, 0xff9, 0x7, 0x1}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40, 0x134) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, &(0x7f00000000c0)=0x7c40, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 40.546479148s ago: executing program 33 (id=3916): openat$cuse(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)=',..:\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000200000d0a000000000000000400000010000000020000000000"], &(0x7f0000000f40)=""/4089, 0x36, 0xff9, 0x7, 0x1}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40, 0x134) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, &(0x7f00000000c0)=0x7c40, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 6.971115241s ago: executing program 2 (id=4007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ptrace$peeksig(0x4209, r0, &(0x7f0000000180)={0x2, 0x0, 0x3}, &(0x7f0000000400)=[{}, {}, {}]) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000280)={0x6031, 0x4}) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xefc8, 0x1f480, 0x0, 0x332}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000001b40)=ANY=[@ANYBLOB='b 1223'], 0xa) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1}, {}, {}, {0x0, 0xfffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x40000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) 6.261321413s ago: executing program 1 (id=4008): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x2, &(0x7f0000000000)=[{0x1, 0x5, 0x8, 0x200}, {0x6, 0xd, 0xbc, 0x4}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, &(0x7f0000000380)={0x0, 0x10, 0xb1, {0xb1, 0x21, "dedbadbd3173122357c960e22fb60c54b3e2a3d365f7b4a9f4a57d870bc30be4e4d1eb5d037d28c7af1cdea2092a0e842b3f02c2ab1d7642147f7bb959fe8e26ae721183889e40fda1a4aa30d7dec9e811bf885f59547b8d5192118ba89978e70442c9b313dbc51c04d272f6ca541517cf6a84a685bf2a04141b9c6442c47b390384cc82a9119d319359467ce6dd192548fe01fc913fe1a729034724ff7cc015509f6289ad7ae4ba009baad4624c7b"}}, &(0x7f0000000440)={0x0, 0x3, 0xd3, @string={0xd3, 0x3, "11c42854a413302610f6462c3f1934aa0bcca41cf7e3055e8b89fdf81d1ab3e3969c9d6e981c231eeb37b7320dd19091fc4c25779f5a594ec90edd6351036c6a78b2482089fd751006b523bd191057f7d192d347cb7112f71df603c8f0c82bf1c70878aeb89d143c3800e519d0b43d00204c6f8b07f477c52cc8f877c542ca7b3645bc67af9c42263414d510ca47cff7c4799fef21d275f7c9ab732135c324a8db62467513613e2ef45b31fdbd6cb58ca04128190d2a5ba64fd19a58d23750edb480f7e74fb7e7d5df82c4a2878e622a39"}}, &(0x7f0000000540)={0x0, 0x22, 0x15, {[@main=@item_012={0x1, 0x0, 0x9, "99"}, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_4={0x3, 0x1, 0x3, "c384b33d"}, @main=@item_4={0x3, 0x0, 0xb, "9e400afd"}, @main=@item_012={0x1, 0x0, 0xa, 'W'}, @local=@item_012={0x0, 0x2, 0x5}, @local=@item_4={0x3, 0x2, 0x5, "109b59cb"}]}}, &(0x7f0000000580)={0x0, 0x21, 0x9, {0x9, 0x21, 0xcb3, 0x81, 0x1, {0x22, 0x146}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000600)={0x60, 0xf, 0xfa, "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"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000780)={0x20, 0x1, 0x75, "9380a6c5fcda33f3510b8dc0f310c51c733bcecf636a314b1b55ea6cb2a1ecd660f6f0db299633cdada4bbd723a56394d43db91523b5f6dcb8fb3ac6a3bc057ff6bd23527d996c3c26d4df540f4ed190c9d5b1c798eeaf63e2036efe1a28d4475f949b3d3b53b07c6eca1b80991d615f67f2e0f311"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0x8}}) 5.826170218s ago: executing program 2 (id=4010): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x9, &(0x7f0000006680)) futimesat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xe, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x36, '\x00', r2, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, r3}, 0x94) 5.710732979s ago: executing program 4 (id=4011): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff00000502", @ANYRES8=r1, @ANYBLOB="05"], 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\a\x00', "5171bb6725cd126474cd3660020000006e07000000a04000", '\x00', "12000700"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 5.46313043s ago: executing program 2 (id=4012): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x0, 0x9, 0xcf, {0xcf, 0xe8758fab094802a4, "d04267cacdca7f02f2e13383e735bcdee227a008ca0048a09e5dc3f7e8b045a04a69e41889ac98a441f89ccc1e3359e3afa14e4201acb8f860105f0acc19846a80007f5f09e85619479aac8c7f444ee97754bb35221888a3be08761c9a42d4159f112fe450ccd03c7c78f52cb537619f3d5fc867af3cfe37ea2ba321f8ff9470a69b09f72c75f0289f098d3f04ac6d60e8341e7e2b2cd62fd8e38afef4c5064a2a55539f17b218ab1d9a0ca3a60fd5c781e3614d8cfe259675aff1c4bd37bcaf82ad4f4e15ae42c28621c3b46c"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000280)={0x0, 0x13, 0xf5, "7812dbcd8ff29c655fe23d39e52ce4468a79719a7f61c89333f34c5d8fb6d2a478cab062dc6b9c9692965d9ebbcd393ca1498c004f357422e008049371fe3a803ce6e4beb188c0527d2a905e70905a666fea4598cd20a01832845351a2aadc835d594b1bdd7a831f1b47a14c63ecf20b978bb86d6ff70991181801e8f4a5750b51c12973c80329b7363a50dcd51acdb3255b1d73406502c3b1a3009650d85d4451bd3ab26725b1f55c740711bfffd73ec529a672c9cef63c7525dd3b4c4270ca0fd87d4811cb731992b27db0ab4bf4df4877b9a01b617a430d4b0e9807d7959c1a30c85095f00198024fb0c22924ee44d7e67a1992"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}}) 4.474449641s ago: executing program 1 (id=4014): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) setxattr$security_ima(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000), &(0x7f00000003c0)=ANY=[@ANYBLOB="0603"], 0xd, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x3, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@overlay={0x7fff, 0x1, 0x4, 0x1000, 0x1000, {}, {0x3, 0x4, 0xc, 0xe8, 0x8, 0x8, "06b72eeb"}, 0x10, 0x3, {}, 0x8}) syz_usb_connect(0x0, 0x48, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000183b9220b11342002b58010203010902360002000000000904ca57b67a8bb50009050200ff"], 0x0) 3.795504584s ago: executing program 1 (id=4015): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getresgid(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) r4 = getpgid(0x0) kcmp(r4, r4, 0x0, 0xffffffffffffffff, r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x52, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615c"}) 3.410525712s ago: executing program 4 (id=4016): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000080)={r2, @in6={{0xa, 0x4, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, &(0x7f0000000000)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@sndrcv={0x30, 0x84, 0x1, {0xb, 0xc2, 0x5, 0x5, 0x83, 0x0, 0x467b7286, 0x200, r3}}], 0x30, 0x4001}], 0x1, 0x11) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r3}, &(0x7f0000000340)=0x8) 3.316153572s ago: executing program 1 (id=4017): openat$cuse(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)=',..:\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000200000d0a000000000000000400000010000000020000000000"], &(0x7f0000000f40)=""/4089, 0x36, 0xff9, 0x7, 0x1}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40, 0x134) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f00000000c0)=0x7c40, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 3.259115304s ago: executing program 4 (id=4018): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/89, 0x59}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x141) 3.241698728s ago: executing program 6 (id=3918): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'nicvf0\x00'}) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) getpriority(0x0, 0xffffffffffffffff) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f00000014c0)=[{0x1000, 0x6810, 0x0, 0x0}], 0x1}) 3.080344109s ago: executing program 4 (id=4019): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}], 0x1}], 0x1, 0x40800) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500"], 0xd0}}, 0x571f68543cec8180) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x60, r2, 0x1, 0x70bd27, 0x25dfdc01, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40810) socket$xdp(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x10) socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x2, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0xa, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x10}) io_uring_enter(r3, 0x742f, 0x77ae, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) process_madvise(r8, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1, 0x18, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2c00128014000180090001006c617374000000000400028014ed00800a00010071756f746100000004000280080003400000011014"], 0xb8}}, 0x20050800) 2.995467445s ago: executing program 1 (id=4020): open(&(0x7f00000001c0)='./bus\x00', 0x143bc2, 0x1c0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x70}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, 0x0, &(0x7f0000000140)) listen(r6, 0x8) listen(r6, 0x7fff) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000100000008000600ac1414aa08000b00", @ANYRESOCT=r5], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000013c0)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r8, @ANYBLOB="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"/435], 0x1b4}, 0x1, 0x0, 0x0, 0x48800}, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x15, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309002500000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc60efd680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca512b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413fcea0ce9ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3f303a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a3cff46591ccaff3075b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293e37966611602f297de6ff5408777d7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f63520cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c909cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f80000000000000000000000000000000000000000000000000200"}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001000)=[{&(0x7f0000000d00)="5acb0ca679c554530c087f2d2b25f72d09c2f0c3db08064e0719448ca72b0ee394eec35a3516ab1b105ce609c14d0118cb49396c9f10da728c418819365331aa61cd521cd22c78f4301e4fe93f42b3e518af342a164624241dcaa973f660e6384d43c605e893cc5b4e1c40be294704e67856fb0e758c497e414b5c6cc90ff775bddfdd3acb898e138ecda7fed7d19d1be36e54acb0c1ba551ba9d0ed7d0fe7d9a3fdaea105c25265b05c", 0xaa}, {&(0x7f0000000dc0)="31573ea29903feaabc1187ccd74d4b5dffcc7c93bfabe42a5fd77fa47586fb85cd23a29744ef54e1d5b838f5eaadb0f0d8e100e620926ae36cfc2aa2", 0x3c}, {&(0x7f0000000e00)="125a1f69e17b550e121ed4404b9aa4fae0a4f6d4b4ffb3747b08d160291ff1cc629adb76b938f5f1a811bdc9a830c37bfc9be9cce7c6f426e09755098005a293760075c2959ac62288a1ddf79a7a642ae12e6d5e1e7ab106cb9706b4844d20cd1c394b3b6882e21e35f40a25da620fd4d0cff8a4a71880a4d6a1741545a4816feac16280b51c70f0e244641cdd099c97d3fcd7d6946cde072e4b945a2532d62bd0832644070c35f7ebe950b2cda2c856482a30370b9a66e34a85194822a4b8c3bb8f43d58a18fe7c8241", 0xca}, {&(0x7f0000000f00)="d8511f3eb1a0a1229b61e094add16229e7196f85c18068fe806671d6e0e750d3c265eb595deb4fed1523d5f67d6278049f0feb23328209ffc6c2a2cc7c96161711cd79b153025c7cee11290f2993cfc23db647beaa509718761a0886588cddcaaaa997c88decd96f138032adc2b87e8be1b6da94bd41a5b681dcac3d67375eae632f1f543f152346844475c8b6415bef6d6d114cea4084a9dfeb", 0x9a}, {&(0x7f0000000fc0)}], 0x5, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0200000008"], 0xff3c, 0x1) 2.877349758s ago: executing program 4 (id=4021): r0 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1395, 0x300, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x54, 0xc0, 0xf, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0xa, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0xe0, 0x0, {0xa, 0x25, 0x25, 0x8, 0x1f, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0xc, 0x1, {0xa, 0x25, 0x25, 0x800, 0xf3, 0x3}}}}}}}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaa23d9aad0aaaa1780c206050086dd6018232500002c01fe0400000000000000110000000000bbfe8000"/54], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xec, @string={0xba, 0x3, "6d40fd4627cacdb79869edd875c477d69e7a156c12e013877421bae9c7dbf2b59cde232c3ced270183cf7948f4b4a4bd03032285da3803b9468e58d667244f2bde07328fa98e8a798bd4357ee3aae578e0eae457fd7f90d8071ded3c14aceb2a38ee2518eceae276dc5342ef0360d3c25bbbcb82296ac40a0f796efe25bbf6a48de5710368db2e3b8806a3554cc9b772d12bafdde792ee41b0331e2bd1c39c13775dd2382f414c51acfdbdfad0a78ccf0f7aa8f86a0833bd"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00033d0000003d03"]}, 0x0) 1.715026433s ago: executing program 5 (id=4023): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf6", 0x7f}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e", 0x93}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)}], 0x3}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.636102993s ago: executing program 2 (id=4024): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8), 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) 1.401775783s ago: executing program 5 (id=4025): openat$cuse(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000200000d0a000000000000000400000010000000020000000000"], &(0x7f0000000f40)=""/4089, 0x36, 0xff9, 0x7, 0x1}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40, 0x134) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f00000000c0)=0x7c40, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1.305660982s ago: executing program 2 (id=4026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getresgid(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) r4 = getpgid(0x0) kcmp(r4, r4, 0x0, 0xffffffffffffffff, r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x52, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615c"}) 1.222526222s ago: executing program 5 (id=4027): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000080)={r2, @in6={{0xa, 0x4, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, &(0x7f0000000000)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@sndrcv={0x30, 0x84, 0x1, {0xb, 0xc2, 0x5, 0x5, 0x83, 0x0, 0x467b7286, 0x200, r3}}], 0x30, 0x4001}], 0x1, 0x11) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r3}, &(0x7f0000000340)=0x8) 1.151649695s ago: executing program 5 (id=4028): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@sndrcv={0x30, 0x84, 0x1, {0x8, 0x7, 0x800a, 0x0, 0xd19, 0xa, 0x82, 0x1}}], 0x30, 0x20040815}, 0x24000013) (fail_nth: 1) 1.046998882s ago: executing program 5 (id=4029): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/89, 0x59}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x141) 9.993687ms ago: executing program 1 (id=4030): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) r1 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) r2 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000080)) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4606ff78b3050000000000000002003e00cd000000c9030000000000004000000000000000ea0200000000000002000100050038"], 0x178) execveat(r3, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x800) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x62) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) 7.743851ms ago: executing program 6 (id=4031): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x19, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d968119f68f58d94773b9ab884100003c"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='stack\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/123, 0x7b}], 0x1, 0xffffffff, 0xb4e) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="4980020009d000003c0012800b000100697036746e6c00002c00028014000200ff010000000000000000000000000001140003"], 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 7.241525ms ago: executing program 2 (id=4032): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000041dc3208570b8d6a74330102030109021b0001000000000904600301030102"], 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r3 = socket(0x11, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3510019f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e169b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e30a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000740)={0x10, 0x3f, 0x200, 0x70bd26, 0x25dfdbfb}, 0x10}], 0x2}, 0x300408c0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000200)=[{0x0}], 0x1) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 6.808526ms ago: executing program 5 (id=4033): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xca04, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1009, 0x6d, 0x1, {0x22, 0x27}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x2, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000040), 0x4) r3 = epoll_create(0x7ff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000002c0)={0x60000002}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x372, {0x5d}}}, &(0x7f0000000080)={0xffffffffffffff56, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=4034): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x0, 0x9, 0xcf, {0xcf, 0xe8758fab094802a4, "d04267cacdca7f02f2e13383e735bcdee227a008ca0048a09e5dc3f7e8b045a04a69e41889ac98a441f89ccc1e3359e3afa14e4201acb8f860105f0acc19846a80007f5f09e85619479aac8c7f444ee97754bb35221888a3be08761c9a42d4159f112fe450ccd03c7c78f52cb537619f3d5fc867af3cfe37ea2ba321f8ff9470a69b09f72c75f0289f098d3f04ac6d60e8341e7e2b2cd62fd8e38afef4c5064a2a55539f17b218ab1d9a0ca3a60fd5c781e3614d8cfe259675aff1c4bd37bcaf82ad4f4e15ae42c28621c3b46c"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000280)={0x0, 0x13, 0xf5, "7812dbcd8ff29c655fe23d39e52ce4468a79719a7f61c89333f34c5d8fb6d2a478cab062dc6b9c9692965d9ebbcd393ca1498c004f357422e008049371fe3a803ce6e4beb188c0527d2a905e70905a666fea4598cd20a01832845351a2aadc835d594b1bdd7a831f1b47a14c63ecf20b978bb86d6ff70991181801e8f4a5750b51c12973c80329b7363a50dcd51acdb3255b1d73406502c3b1a3009650d85d4451bd3ab26725b1f55c740711bfffd73ec529a672c9cef63c7525dd3b4c4270ca0fd87d4811cb731992b27db0ab4bf4df4877b9a01b617a430d4b0e9807d7959c1a30c85095f00198024fb0c22924ee44d7e67a1992"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}}) kernel console output (not intermixed with test programs): t_return_address+0x4d/0x90 [ 1393.963301][T18253] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1393.963338][T18253] ____sys_sendmsg+0x94c/0x9c0 [ 1393.963371][T18253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1393.963407][T18253] ? import_iovec+0x73/0xa0 [ 1393.963434][T18253] ___sys_sendmsg+0x2a5/0x360 [ 1393.963467][T18253] ? __pfx____sys_sendmsg+0x10/0x10 [ 1393.963531][T18253] ? __fget_files+0x2a/0x420 [ 1393.963560][T18253] ? __fget_files+0x3a6/0x420 [ 1393.963601][T18253] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1393.963631][T18253] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1393.963669][T18253] ? __pfx_ksys_write+0x10/0x10 [ 1393.963717][T18253] do_syscall_64+0x14d/0xf80 [ 1393.963743][T18253] ? trace_irq_disable+0x3b/0x150 [ 1393.963771][T18253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.963795][T18253] ? clear_bhb_loop+0x40/0x90 [ 1393.963824][T18253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.963847][T18253] RIP: 0033:0x7f82f282c819 [ 1393.963875][T18253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1393.963895][T18253] RSP: 002b:00007f82f0a65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1393.963919][T18253] RAX: ffffffffffffffda RBX: 00007f82f2aa6090 RCX: 00007f82f282c819 [ 1393.963936][T18253] RDX: 0000000000000804 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1393.963950][T18253] RBP: 00007f82f0a65090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.963964][T18253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.963978][T18253] R13: 00007f82f2aa6128 R14: 00007f82f2aa6090 R15: 00007ffedf2358f8 [ 1393.964013][T18253] [ 1394.159245][ T5889] usb 5-1: config 0 has an invalid interface number: 96 but max is 0 [ 1394.159332][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.159398][ T5889] usb 5-1: config 0 has no interface number 0 [ 1394.159548][ T5889] usb 5-1: config 0 interface 96 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1394.159635][ T5889] usb 5-1: config 0 interface 96 has no altsetting 0 [ 1394.170866][T15296] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1394.234441][ T5889] usb 5-1: New USB device found, idVendor=0b57, idProduct=6a8d, bcdDevice=33.74 [ 1394.234537][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.234601][ T5889] usb 5-1: Product: syz [ 1394.234647][ T5889] usb 5-1: Manufacturer: syz [ 1394.234716][ T5889] usb 5-1: SerialNumber: syz [ 1394.319327][ T5889] usb 5-1: config 0 descriptor?? [ 1394.356929][ T5889] usbhid 5-1:0.96: couldn't find an input interrupt endpoint [ 1394.378190][T15296] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1394.378331][T15296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.408322][T15296] usb 3-1: config 0 descriptor?? [ 1394.444125][T15296] cp210x 3-1:0.0: cp210x converter detected [ 1394.547852][T18245] binder: 18243:18245 ioctl c0306201 0 returned -14 [ 1395.301474][T18258] FAULT_INJECTION: forcing a failure. [ 1395.301474][T18258] name failslab, interval 1, probability 0, space 0, times 0 [ 1395.301516][T18258] CPU: 1 UID: 0 PID: 18258 Comm: syz.5.3768 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1395.301548][T18258] Tainted: [L]=SOFTLOCKUP [ 1395.301556][T18258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1395.301571][T18258] Call Trace: [ 1395.301581][T18258] [ 1395.301593][T18258] dump_stack_lvl+0xe8/0x150 [ 1395.301633][T18258] should_fail_ex+0x46b/0x600 [ 1395.301673][T18258] should_failslab+0xa8/0x100 [ 1395.301699][T18258] __kmalloc_noprof+0xdf/0x7b0 [ 1395.301722][T18258] ? tomoyo_encode+0x28b/0x550 [ 1395.301767][T18258] tomoyo_encode+0x28b/0x550 [ 1395.301805][T18258] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1395.301848][T18258] ? tomoyo_path_number_perm+0x219/0x630 [ 1395.301873][T18258] tomoyo_path_number_perm+0x246/0x630 [ 1395.301898][T18258] ? rcu_is_watching+0x15/0xb0 [ 1395.301924][T18258] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1395.301953][T18258] ? __lock_acquire+0x6b5/0x2cf0 [ 1395.302009][T18258] ? __fget_files+0x2a/0x420 [ 1395.302042][T18258] ? __fget_files+0x2a/0x420 [ 1395.302072][T18258] ? __fget_files+0x3a6/0x420 [ 1395.302114][T18258] ? __fget_files+0x2a/0x420 [ 1395.302149][T18258] security_file_ioctl+0xc3/0x2a0 [ 1395.302180][T18258] __se_sys_ioctl+0x47/0x170 [ 1395.302205][T18258] do_syscall_64+0x14d/0xf80 [ 1395.302233][T18258] ? trace_irq_disable+0x3b/0x150 [ 1395.302258][T18258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.302275][T18258] ? clear_bhb_loop+0x40/0x90 [ 1395.302330][T18258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.302355][T18258] RIP: 0033:0x7f82f282c819 [ 1395.302375][T18258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1395.302395][T18258] RSP: 002b:00007f82f0a86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1395.302424][T18258] RAX: ffffffffffffffda RBX: 00007f82f2aa5fa0 RCX: 00007f82f282c819 [ 1395.302436][T18258] RDX: 0000200000000480 RSI: 00000000c00464af RDI: 0000000000000003 [ 1395.302447][T18258] RBP: 00007f82f0a86090 R08: 0000000000000000 R09: 0000000000000000 [ 1395.302458][T18258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1395.302487][T18258] R13: 00007f82f2aa6038 R14: 00007f82f2aa5fa0 R15: 00007ffedf2358f8 [ 1395.302523][T18258] [ 1395.302556][T18258] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1395.344512][T15296] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1395.645013][T15296] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1395.713431][ T6232] usb 5-1: USB disconnect, device number 107 [ 1395.746728][T15296] usb 3-1: USB disconnect, device number 116 [ 1395.767183][T15296] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1395.913671][T15296] cp210x 3-1:0.0: device disconnected [ 1396.113890][T18266] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3771'. [ 1396.113918][T18266] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3771'. [ 1396.247697][T18266] syz_tun: entered promiscuous mode [ 1396.415205][T18266] syz_tun: left promiscuous mode [ 1398.138786][T18277] kAFS: unparsable volume name [ 1398.140036][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3774'. [ 1398.140060][T18277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3774'. [ 1398.292485][T18283] kAFS: unparsable volume name [ 1398.293253][T18283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3776'. [ 1398.293267][T18283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3776'. [ 1398.361950][ T5881] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1398.521938][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 1398.525801][ T5881] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1398.525831][ T5881] usb 5-1: config 0 has no interface number 0 [ 1398.525879][ T5881] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1398.529859][ T5881] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1398.529883][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.529897][ T5881] usb 5-1: Product: syz [ 1398.529908][ T5881] usb 5-1: Manufacturer: syz [ 1398.529919][ T5881] usb 5-1: SerialNumber: syz [ 1399.229830][ T5881] usb 5-1: config 0 descriptor?? [ 1399.305488][T18287] FAULT_INJECTION: forcing a failure. [ 1399.305488][T18287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1399.305531][T18287] CPU: 1 UID: 0 PID: 18287 Comm: syz.5.3777 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1399.305576][T18287] Tainted: [L]=SOFTLOCKUP [ 1399.305587][T18287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1399.305602][T18287] Call Trace: [ 1399.305612][T18287] [ 1399.305622][T18287] dump_stack_lvl+0xe8/0x150 [ 1399.305661][T18287] should_fail_ex+0x46b/0x600 [ 1399.305702][T18287] _copy_from_user+0x2d/0xb0 [ 1399.305720][T18287] sk_getsockopt+0x1d4/0x2790 [ 1399.305766][T18287] ? __pfx_sk_getsockopt+0x10/0x10 [ 1399.305809][T18287] ? __lock_acquire+0x6b5/0x2cf0 [ 1399.305861][T18287] do_sock_getsockopt+0x223/0x3f0 [ 1399.305893][T18287] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1399.305912][T18287] ? __fget_files+0x3a6/0x420 [ 1399.305956][T18287] ? __fget_files+0x2a/0x420 [ 1399.305994][T18287] __x64_sys_getsockopt+0x1aa/0x250 [ 1399.306029][T18287] do_syscall_64+0x14d/0xf80 [ 1399.306059][T18287] ? trace_irq_disable+0x3b/0x150 [ 1399.306080][T18287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.306112][T18287] ? clear_bhb_loop+0x40/0x90 [ 1399.306142][T18287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.306165][T18287] RIP: 0033:0x7f82f282c819 [ 1399.306186][T18287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1399.306205][T18287] RSP: 002b:00007f82f0a86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1399.306228][T18287] RAX: ffffffffffffffda RBX: 00007f82f2aa5fa0 RCX: 00007f82f282c819 [ 1399.306248][T18287] RDX: 0000000000000022 RSI: 0000000000000001 RDI: 0000000000000003 [ 1399.306258][T18287] RBP: 00007f82f0a86090 R08: 0000200000000380 R09: 0000000000000000 [ 1399.306268][T18287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1399.306294][T18287] R13: 00007f82f2aa6038 R14: 00007f82f2aa5fa0 R15: 00007ffedf2358f8 [ 1399.306329][T18287] [ 1400.007972][ T931] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1400.171602][ T931] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.171663][ T931] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1400.171690][ T931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.220159][ T931] usb 6-1: config 0 descriptor?? [ 1400.260445][ T931] pwc: Askey VC010 type 2 USB webcam detected. [ 1400.313800][ T5881] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1400.313834][ T5881] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1400.492980][ T931] pwc: send_video_command error -71 [ 1400.492999][ T931] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1400.493126][ T931] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1400.530357][ T931] usb 6-1: USB disconnect, device number 27 [ 1400.674264][ T5881] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1400.674298][ T5881] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1400.674318][ T5881] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1400.674338][ T5881] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1400.674827][ T5881] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1400.789844][ T5881] usb 5-1: USB disconnect, device number 108 [ 1400.992133][T18306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3784'. [ 1400.992390][T18306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3784'. [ 1401.095002][ T931] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1401.183950][T18306] syz_tun: entered promiscuous mode [ 1401.330187][ T931] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.330377][ T931] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1401.330439][ T931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.871504][ T931] usb 6-1: config 0 descriptor?? [ 1401.886086][ T931] pwc: Askey VC010 type 2 USB webcam detected. [ 1401.936312][T18306] syz_tun: left promiscuous mode [ 1402.321311][ T931] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1402.322292][ T931] pwc: recv_control_msg error -32 req 02 val 2700 [ 1402.322967][ T931] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1402.324082][ T931] pwc: recv_control_msg error -32 req 04 val 1000 [ 1402.550292][ T931] pwc: recv_control_msg error -32 req 04 val 1300 [ 1402.637788][ T931] pwc: recv_control_msg error -32 req 04 val 1400 [ 1402.681724][ T931] pwc: recv_control_msg error -32 req 02 val 2000 [ 1402.682481][ T931] pwc: recv_control_msg error -32 req 02 val 2100 [ 1402.683180][ T931] pwc: recv_control_msg error -32 req 04 val 1500 [ 1402.683901][ T931] pwc: recv_control_msg error -32 req 02 val 2500 [ 1402.686705][ T931] pwc: recv_control_msg error -32 req 02 val 2400 [ 1402.688693][ T931] pwc: recv_control_msg error -32 req 02 val 2600 [ 1402.805067][T18316] binder: 18310:18316 ioctl c0306201 0 returned -14 [ 1402.843845][T18315] kAFS: unparsable volume name [ 1402.851541][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3787'. [ 1402.851574][T18315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3787'. [ 1402.979060][ T931] pwc: recv_control_msg error -71 req 02 val 2800 [ 1402.998326][ T931] pwc: recv_control_msg error -71 req 04 val 1100 [ 1402.999146][ T931] pwc: recv_control_msg error -71 req 04 val 1200 [ 1403.093358][ T931] pwc: Registered as video103. [ 1403.103176][ T931] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input39 [ 1403.136416][ T931] usb 6-1: USB disconnect, device number 28 [ 1403.720607][T18324] kAFS: unparsable volume name [ 1403.727731][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3790'. [ 1403.727763][T18324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3790'. [ 1405.021835][ T931] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1405.184669][ T931] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.184700][ T931] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1405.184741][ T931] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1405.184767][ T931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.236067][ T931] usb 6-1: config 0 descriptor?? [ 1405.240951][T10207] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1405.488558][T10207] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1405.488603][T10207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.488673][T10207] usb 3-1: Product: syz [ 1405.488738][T10207] usb 3-1: Manufacturer: syz [ 1405.488900][T10207] usb 3-1: SerialNumber: syz [ 1405.614716][T10207] usb 3-1: config 0 descriptor?? [ 1405.810284][T10207] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1406.136087][T10207] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1406.175345][T10207] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1406.175509][T10207] usb 3-1: media controller created [ 1406.264644][T18339] netlink: 'syz.2.3794': attribute type 1 has an invalid length. [ 1406.264710][T18339] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3794'. [ 1406.407873][T10207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1406.604622][T10207] DVB: Unable to find symbol mt352_attach() [ 1406.711143][T10207] DVB: Unable to find symbol nxt6000_attach() [ 1406.711160][T10207] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1406.745265][T10207] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40 [ 1406.751684][T10207] dvb-usb: schedule remote query interval to 1000 msecs. [ 1406.751708][T10207] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1406.751728][T10207] dvb-usb: bulk message failed: -22 (7/0) [ 1406.751746][T10207] dvb-usb: bulk message failed: -22 (7/0) [ 1406.914171][ T5889] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1407.063024][T18353] kAFS: No cell specified [ 1407.075842][T18353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3799'. [ 1407.075973][T18353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3799'. [ 1407.085083][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 1407.093564][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1407.093598][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1407.093641][ T5889] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1407.093666][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.949646][T10207] dvb-usb: bulk message failed: -22 (7/0) [ 1407.949756][T10207] dvb-usb: error while querying for an remote control event. [ 1408.082515][T10207] usb 6-1: USB disconnect, device number 29 [ 1408.117025][ T5889] usb 2-1: config 0 descriptor?? [ 1408.139090][ T5889] hub 2-1:0.0: USB hub found [ 1408.285483][ T10] usb 3-1: USB disconnect, device number 117 [ 1408.345015][ T37] kauditd_printk_skb: 73 callbacks suppressed [ 1408.345036][ T37] audit: type=1326 audit(2000000101.182:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18342 comm="syz.1.3796" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa367dac819 code=0x0 [ 1408.659378][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1408.777346][ T5889] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1409.012944][ T10] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1409.014996][ T5889] hid-generic 0003:046D:C31C.000C: item fetching failed at offset 0/1 [ 1409.026920][ T5889] hid-generic 0003:046D:C31C.000C: probe with driver hid-generic failed with error -22 [ 1409.195085][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.195145][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1409.195170][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.207926][ T10] usb 3-1: config 0 descriptor?? [ 1409.240343][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1409.459275][ T10] pwc: send_video_command error -71 [ 1409.459298][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1409.459428][ T10] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1409.463976][ T10] usb 3-1: USB disconnect, device number 118 [ 1409.758103][T18383] binder: 18378:18383 ioctl c0306201 0 returned -14 [ 1409.928816][T10207] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1410.125706][T10207] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.125767][T10207] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1410.125793][T10207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.231844][T18387] binder: 18384:18387 ioctl c0306201 0 returned -14 [ 1410.245497][T18387] binder: BINDER_SET_CONTEXT_MGR already set [ 1410.245540][T18387] binder: 18384:18387 ioctl 4018620d 200000004a80 returned -16 [ 1410.255217][T18387] binder: 18384:18387 ioctl c0306201 0 returned -14 [ 1410.361347][T10207] usb 3-1: config 0 descriptor?? [ 1410.736684][T10207] pwc: Askey VC010 type 2 USB webcam detected. [ 1411.162339][T10207] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1411.168996][T10207] pwc: recv_control_msg error -32 req 02 val 2700 [ 1411.184402][T10207] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1411.190335][T10207] pwc: recv_control_msg error -32 req 04 val 1000 [ 1411.208139][ T931] usb 2-1: USB disconnect, device number 69 [ 1411.247283][T18391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3811'. [ 1411.484486][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3811'. [ 1411.484722][T18395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3811'. [ 1411.545201][T10207] pwc: recv_control_msg error -32 req 04 val 1300 [ 1411.585361][T10207] pwc: recv_control_msg error -32 req 04 val 1400 [ 1411.823530][T10207] pwc: recv_control_msg error -32 req 02 val 2000 [ 1411.835682][T10207] pwc: recv_control_msg error -32 req 02 val 2100 [ 1411.998727][T10207] pwc: recv_control_msg error -32 req 04 val 1500 [ 1412.011137][T10207] pwc: recv_control_msg error -32 req 02 val 2500 [ 1412.066550][T10207] pwc: recv_control_msg error -32 req 02 val 2400 [ 1412.118147][T10207] pwc: recv_control_msg error -32 req 02 val 2600 [ 1412.292658][ T3603] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.322335][ T3603] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.322450][ T3603] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.322492][ T3603] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.409107][T10207] pwc: recv_control_msg error -71 req 02 val 2800 [ 1412.409871][T10207] pwc: recv_control_msg error -71 req 04 val 1100 [ 1412.410797][T10207] pwc: recv_control_msg error -71 req 04 val 1200 [ 1412.476400][T10207] pwc: Registered as video103. [ 1412.487003][T10207] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input41 [ 1412.526857][T10207] usb 3-1: USB disconnect, device number 119 [ 1412.769215][T18406] kAFS: No cell specified [ 1412.769949][T18406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3813'. [ 1412.769972][T18406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3813'. [ 1413.136004][T16213] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 1413.253544][ T10] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1413.298548][T16213] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1413.301009][T16213] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1413.301040][T16213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.301055][T16213] usb 5-1: Product: syz [ 1413.301066][T16213] usb 5-1: Manufacturer: syz [ 1413.301077][T16213] usb 5-1: SerialNumber: syz [ 1413.322106][T16213] usb 5-1: config 0 descriptor?? [ 1413.360492][T10207] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1413.417548][ T10] usb 2-1: config 0 has an invalid interface number: 96 but max is 0 [ 1413.417578][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.417600][ T10] usb 2-1: config 0 has no interface number 0 [ 1413.417631][ T10] usb 2-1: config 0 interface 96 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1413.417650][ T10] usb 2-1: config 0 interface 96 has no altsetting 0 [ 1413.422447][ T10] usb 2-1: New USB device found, idVendor=0b57, idProduct=6a8d, bcdDevice=33.74 [ 1413.422480][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.422502][ T10] usb 2-1: Product: syz [ 1413.422526][ T10] usb 2-1: Manufacturer: syz [ 1413.422543][ T10] usb 2-1: SerialNumber: syz [ 1413.456730][ T10] usb 2-1: config 0 descriptor?? [ 1413.508369][ T10] usbhid 2-1:0.96: couldn't find an input interrupt endpoint [ 1413.563791][T10207] usb 3-1: Using ep0 maxpacket: 32 [ 1413.565706][T10207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1413.565739][T10207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1413.565780][T10207] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1413.565805][T10207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.596468][T10207] usb 3-1: config 0 descriptor?? [ 1413.630503][T10207] hub 3-1:0.0: USB hub found [ 1413.752127][T18410] binder: 18409:18410 ioctl c0306201 0 returned -14 [ 1414.412870][T10207] hub 3-1:0.0: 1 port detected [ 1414.899915][ T6232] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1414.979835][ T5889] usb 2-1: USB disconnect, device number 70 [ 1415.067959][T17208] hub 3-1:0.0: activate --> -90 [ 1415.081631][ T6232] usb 6-1: Using ep0 maxpacket: 8 [ 1415.126595][ T6232] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1415.126642][ T6232] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1415.126660][ T6232] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1415.126728][ T6232] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1415.126747][ T6232] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1415.126779][ T6232] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1415.126796][ T6232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.470290][ T6232] usb 6-1: usb_control_msg returned -32 [ 1415.470328][ T6232] usbtmc 6-1:16.0: can't read capabilities [ 1415.503151][T17208] usb 3-1-port1: config error [ 1415.503897][ T5889] usb 3-1: USB disconnect, device number 120 [ 1415.504073][T17208] usb 3-1-port1: cannot disable (err = -71) [ 1415.504529][T17208] usb 3-1-port1: attempt power cycle [ 1415.717038][ T10] usb 6-1: USB disconnect, device number 30 [ 1416.073904][T17208] usb 5-1: USB disconnect, device number 109 [ 1416.553782][T18439] binder: 18435:18439 ioctl c0306201 0 returned -14 [ 1416.571158][T18439] binder: BINDER_SET_CONTEXT_MGR already set [ 1416.571200][T18439] binder: 18435:18439 ioctl 4018620d 200000004a80 returned -16 [ 1416.580633][T18439] binder: 18435:18439 ioctl c0306201 0 returned -14 [ 1417.316035][T17208] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1417.497703][T17208] usb 5-1: Using ep0 maxpacket: 32 [ 1417.499629][T17208] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1417.499657][T17208] usb 5-1: config 0 has no interface number 0 [ 1417.499705][T17208] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1417.502213][T17208] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1417.502246][T17208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.502262][T17208] usb 5-1: Product: syz [ 1417.502275][T17208] usb 5-1: Manufacturer: syz [ 1417.502287][T17208] usb 5-1: SerialNumber: syz [ 1417.506840][T17208] usb 5-1: config 0 descriptor?? [ 1417.711556][ T10] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1417.914938][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1417.917527][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.917586][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1417.917617][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1417.917641][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1417.917666][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1417.919352][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1417.919380][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1417.919401][ T10] usb 3-1: Manufacturer: syz [ 1418.015943][ T10] usb 3-1: config 0 descriptor?? [ 1418.470563][ T10] rc_core: IR keymap rc-hauppauge not found [ 1418.470586][ T10] Registered IR keymap rc-empty [ 1418.470751][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1418.502994][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1418.548522][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1418.553648][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input42 [ 1418.588660][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1418.609922][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1418.637863][T17208] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1418.637897][T17208] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1418.660486][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1418.684564][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1418.716490][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1418.738018][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1418.759459][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1418.780938][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1418.802028][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1418.823624][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1418.870736][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1418.870764][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1418.911209][ T10] usb 3-1: USB disconnect, device number 125 [ 1419.171905][T17208] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1419.171939][T17208] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1419.171961][T17208] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1419.171981][T17208] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1419.172299][T17208] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1419.281391][T17208] usb 5-1: USB disconnect, device number 110 [ 1419.953281][T18464] binder: 18457:18464 ioctl c0306201 0 returned -14 [ 1420.651561][ T5889] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1420.829742][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1420.829779][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1420.829819][ T5889] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1420.829844][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.878849][ T5889] usb 5-1: config 0 descriptor?? [ 1421.090382][ T10] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 1421.207364][T17208] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1421.264796][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1421.270709][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1421.270980][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.271013][ T10] usb 3-1: Product: syz [ 1421.271028][ T10] usb 3-1: Manufacturer: syz [ 1421.271044][ T10] usb 3-1: SerialNumber: syz [ 1421.330375][ T10] usb 3-1: config 0 descriptor?? [ 1421.340933][ T5889] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1421.383878][ T5889] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1421.385434][T17208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1421.385469][T17208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1421.385526][T17208] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1421.385552][T17208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.464263][T17208] usb 2-1: config 0 descriptor?? [ 1421.538514][ T5889] cp2112 0003:10C4:EA90.000D: error requesting version [ 1421.620461][ T5889] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -32 [ 1421.763443][ T6232] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1421.905776][T17208] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1421.913927][T17208] cp2112 0003:10C4:EA90.000E: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1421.931496][ T6232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1421.931530][ T6232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1421.931572][ T6232] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1421.931597][ T6232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.965817][ T6232] usb 6-1: config 0 descriptor?? [ 1422.119181][T17208] cp2112 0003:10C4:EA90.000E: error requesting version [ 1422.144336][T17208] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -32 [ 1422.173755][T17208] usb 2-1: USB disconnect, device number 71 [ 1422.424950][ T6232] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 1422.435038][ T6232] cp2112 0003:10C4:EA90.000F: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1422.635331][ T6232] cp2112 0003:10C4:EA90.000F: error requesting version [ 1422.637712][ T6232] cp2112 0003:10C4:EA90.000F: probe with driver cp2112 failed with error -32 [ 1422.638354][T18472] FAULT_INJECTION: forcing a failure. [ 1422.638354][T18472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1422.638390][T18472] CPU: 1 UID: 0 PID: 18472 Comm: syz.5.3835 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1422.638420][T18472] Tainted: [L]=SOFTLOCKUP [ 1422.638428][T18472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1422.638442][T18472] Call Trace: [ 1422.638451][T18472] [ 1422.638461][T18472] dump_stack_lvl+0xe8/0x150 [ 1422.638504][T18472] should_fail_ex+0x46b/0x600 [ 1422.638533][T18472] strncpy_from_user+0x36/0x2b0 [ 1422.638557][T18472] do_getname+0x77/0x250 [ 1422.638579][T18472] do_sys_openat2+0xca/0x200 [ 1422.638602][T18472] ? __pfx_do_sys_openat2+0x10/0x10 [ 1422.638624][T18472] ? ksys_write+0x248/0x270 [ 1422.638650][T18472] ? __pfx_ksys_write+0x10/0x10 [ 1422.638678][T18472] __x64_sys_openat+0x138/0x170 [ 1422.638703][T18472] do_syscall_64+0x14d/0xf80 [ 1422.638722][T18472] ? trace_irq_disable+0x3b/0x150 [ 1422.638742][T18472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.638759][T18472] ? clear_bhb_loop+0x40/0x90 [ 1422.638785][T18472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.638801][T18472] RIP: 0033:0x7f82f27ed04e [ 1422.638816][T18472] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1422.638830][T18472] RSP: 002b:00007f82f0a85b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1422.638847][T18472] RAX: ffffffffffffffda RBX: 00007f82f0a866c0 RCX: 00007f82f27ed04e [ 1422.638859][T18472] RDX: 0000000000000002 RSI: 00007f82f0a85c00 RDI: ffffffffffffff9c [ 1422.638871][T18472] RBP: 00007f82f0a85c00 R08: 0000000000000000 R09: 0000000000000000 [ 1422.638881][T18472] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1422.638892][T18472] R13: 00007f82f2aa6038 R14: 00007f82f2aa5fa0 R15: 00007ffedf2358f8 [ 1422.638917][T18472] [ 1424.094938][ T5889] usb 5-1: USB disconnect, device number 111 [ 1424.258070][ T931] usb 3-1: USB disconnect, device number 126 [ 1424.384860][T18500] FAULT_INJECTION: forcing a failure. [ 1424.384860][T18500] name failslab, interval 1, probability 0, space 0, times 0 [ 1424.384908][T18500] CPU: 1 UID: 0 PID: 18500 Comm: syz.4.3840 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1424.384942][T18500] Tainted: [L]=SOFTLOCKUP [ 1424.384951][T18500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1424.384965][T18500] Call Trace: [ 1424.384975][T18500] [ 1424.384985][T18500] dump_stack_lvl+0xe8/0x150 [ 1424.385024][T18500] should_fail_ex+0x46b/0x600 [ 1424.385061][T18500] should_failslab+0xa8/0x100 [ 1424.385088][T18500] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1424.385125][T18500] ? __alloc_skb+0x1d0/0x7d0 [ 1424.385147][T18500] ? lockdep_hardirqs_on+0x7a/0x110 [ 1424.385179][T18500] __alloc_skb+0x1d0/0x7d0 [ 1424.385208][T18500] netlink_sendmsg+0x5d4/0xb40 [ 1424.385274][T18500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1424.385311][T18500] ? unwind_get_return_address+0x4d/0x90 [ 1424.385340][T18500] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1424.385377][T18500] ____sys_sendmsg+0x94c/0x9c0 [ 1424.385411][T18500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1424.385449][T18500] ? import_iovec+0x73/0xa0 [ 1424.385475][T18500] ___sys_sendmsg+0x2a5/0x360 [ 1424.385510][T18500] ? __pfx____sys_sendmsg+0x10/0x10 [ 1424.385575][T18500] ? __fget_files+0x2a/0x420 [ 1424.385605][T18500] ? __fget_files+0x3a6/0x420 [ 1424.385644][T18500] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1424.385675][T18500] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1424.385721][T18500] ? __pfx_ksys_write+0x10/0x10 [ 1424.385770][T18500] do_syscall_64+0x14d/0xf80 [ 1424.385797][T18500] ? trace_irq_disable+0x3b/0x150 [ 1424.385823][T18500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.385847][T18500] ? clear_bhb_loop+0x40/0x90 [ 1424.385876][T18500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.385900][T18500] RIP: 0033:0x7f4279cbc819 [ 1424.385921][T18500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1424.385941][T18500] RSP: 002b:00007f4277ecc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1424.385965][T18500] RAX: ffffffffffffffda RBX: 00007f4279f36180 RCX: 00007f4279cbc819 [ 1424.385982][T18500] RDX: 0000000004008840 RSI: 0000200000000000 RDI: 0000000000000006 [ 1424.385997][T18500] RBP: 00007f4277ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 1424.386011][T18500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1424.386024][T18500] R13: 00007f4279f36218 R14: 00007f4279f36180 R15: 00007ffc1e8a6818 [ 1424.386060][T18500] [ 1425.224082][T15296] usb 6-1: USB disconnect, device number 31 [ 1425.768601][T18519] binder: 18507:18519 ioctl c0306201 0 returned -14 [ 1425.781719][T18519] binder: BINDER_SET_CONTEXT_MGR already set [ 1425.781761][T18519] binder: 18507:18519 ioctl 4018620d 200000004a80 returned -16 [ 1425.791885][T18519] binder: 18507:18519 ioctl c0306201 0 returned -14 [ 1425.852765][ T6232] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1426.556221][T18516] kAFS: unparsable volume name [ 1426.578472][T18516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3846'. [ 1426.578596][T18516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3846'. [ 1426.972074][T18517] kAFS: unparsable volume name [ 1427.034427][ T6232] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.034702][ T6232] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1427.034772][ T6232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.180642][T18515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3845'. [ 1427.180666][T18515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3845'. [ 1427.239872][ T6232] usb 3-1: config 0 descriptor?? [ 1427.354698][ T6232] pwc: Askey VC010 type 2 USB webcam detected. [ 1427.584544][ T6232] pwc: send_video_command error -71 [ 1427.584566][ T6232] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1427.584685][ T6232] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1427.707611][ T6232] usb 3-1: USB disconnect, device number 127 [ 1428.709737][T18523] kAFS: unparsable volume name [ 1428.751367][T18523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3848'. [ 1428.751392][T18523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3848'. [ 1429.046083][T18533] kAFS: unparsable volume name [ 1429.078134][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3850'. [ 1429.078261][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3850'. [ 1429.284651][T17208] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1429.447981][T17208] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1429.543388][T17208] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1429.543461][T17208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.543520][T17208] usb 6-1: Product: syz [ 1429.543575][T17208] usb 6-1: Manufacturer: syz [ 1429.543592][T17208] usb 6-1: SerialNumber: syz [ 1429.710200][T17208] usb 6-1: config 0 descriptor?? [ 1430.256162][T18551] FAULT_INJECTION: forcing a failure. [ 1430.256162][T18551] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1430.256192][T18551] CPU: 0 UID: 0 PID: 18551 Comm: syz.1.3859 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1430.256224][T18551] Tainted: [L]=SOFTLOCKUP [ 1430.256230][T18551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1430.256241][T18551] Call Trace: [ 1430.256247][T18551] [ 1430.256254][T18551] dump_stack_lvl+0xe8/0x150 [ 1430.256283][T18551] should_fail_ex+0x46b/0x600 [ 1430.256310][T18551] prepare_alloc_pages+0x22a/0x6b0 [ 1430.256334][T18551] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1430.256356][T18551] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1430.256378][T18551] ? __pfx_policy_nodemask+0x10/0x10 [ 1430.256398][T18551] ? mtree_range_walk+0x6aa/0x840 [ 1430.256424][T18551] alloc_pages_mpol+0xd1/0x380 [ 1430.256444][T18551] alloc_pages_noprof+0xce/0x1e0 [ 1430.256463][T18551] __pud_alloc+0x3a/0x460 [ 1430.256492][T18551] handle_mm_fault+0xe36/0x13c0 [ 1430.256520][T18551] ? handle_mm_fault+0xe7/0x13c0 [ 1430.256547][T18551] ? __pfx_handle_mm_fault+0x10/0x10 [ 1430.256586][T18551] ? lock_mm_and_find_vma+0xa7/0x340 [ 1430.256607][T18551] do_user_addr_fault+0x75b/0x1340 [ 1430.256642][T18551] exc_page_fault+0x6a/0xc0 [ 1430.256660][T18551] asm_exc_page_fault+0x26/0x30 [ 1430.256676][T18551] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1430.256699][T18551] Code: c4 10 e9 14 21 05 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 1430.256713][T18551] RSP: 0018:ffffc900076c7d78 EFLAGS: 00050202 [ 1430.256728][T18551] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 1430.256739][T18551] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: ffffc900076c7e00 [ 1430.256750][T18551] RBP: ffffc900076c7e68 R08: 0000000000000003 R09: 0000000000000004 [ 1430.256761][T18551] R10: dffffc0000000000 R11: fffff52000ed8fc0 R12: ffff88805ff6e180 [ 1430.256773][T18551] R13: ffffc900076c7de0 R14: ffffc900076c7e00 R15: 00002000000002c0 [ 1430.256799][T18551] _copy_from_user+0x7a/0xb0 [ 1430.256816][T18551] do_sock_getsockopt+0x165/0x3f0 [ 1430.256837][T18551] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1430.256859][T18551] ? ksys_write+0x202/0x270 [ 1430.256888][T18551] __x64_sys_getsockopt+0x1aa/0x250 [ 1430.256914][T18551] do_syscall_64+0x14d/0xf80 [ 1430.256932][T18551] ? trace_irq_disable+0x3b/0x150 [ 1430.256952][T18551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.256969][T18551] ? clear_bhb_loop+0x40/0x90 [ 1430.256989][T18551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.257005][T18551] RIP: 0033:0x7fa367dac819 [ 1430.257020][T18551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.257034][T18551] RSP: 002b:00007fa366006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1430.257049][T18551] RAX: ffffffffffffffda RBX: 00007fa368025fa0 RCX: 00007fa367dac819 [ 1430.257061][T18551] RDX: 0000000000000001 RSI: 00000000000000ff RDI: 0000000000000003 [ 1430.257071][T18551] RBP: 00007fa366006090 R08: 00002000000002c0 R09: 0000000000000000 [ 1430.257081][T18551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1430.257091][T18551] R13: 00007fa368026038 R14: 00007fa368025fa0 R15: 00007ffd40524368 [ 1430.257116][T18551] [ 1430.358529][ T5889] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1430.358594][T17208] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1430.463838][T18554] FAULT_INJECTION: forcing a failure. [ 1430.463838][T18554] name failslab, interval 1, probability 0, space 0, times 0 [ 1430.463952][T18554] CPU: 0 UID: 0 PID: 18554 Comm: syz.1.3860 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1430.464040][T18554] Tainted: [L]=SOFTLOCKUP [ 1430.464062][T18554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1430.464144][T18554] Call Trace: [ 1430.464175][T18554] [ 1430.464208][T18554] dump_stack_lvl+0xe8/0x150 [ 1430.464320][T18554] should_fail_ex+0x46b/0x600 [ 1430.464426][T18554] should_failslab+0xa8/0x100 [ 1430.464502][T18554] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1430.464593][T18554] ? __alloc_skb+0x1d0/0x7d0 [ 1430.464644][T18554] ? lockdep_hardirqs_on+0x7a/0x110 [ 1430.464733][T18554] __alloc_skb+0x1d0/0x7d0 [ 1430.464836][T18554] netlink_sendmsg+0x5d4/0xb40 [ 1430.464966][T18554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1430.465066][T18554] ? unwind_get_return_address+0x4d/0x90 [ 1430.465144][T18554] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1430.465241][T18554] ____sys_sendmsg+0x94c/0x9c0 [ 1430.465294][T18554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1430.465330][T18554] ? import_iovec+0x73/0xa0 [ 1430.465356][T18554] ___sys_sendmsg+0x2a5/0x360 [ 1430.465387][T18554] ? __pfx____sys_sendmsg+0x10/0x10 [ 1430.465548][T18554] ? __fget_files+0x2a/0x420 [ 1430.465635][T18554] ? __fget_files+0x3a6/0x420 [ 1430.465737][T18554] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1430.465826][T18554] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1430.465950][T18554] ? __pfx_ksys_write+0x10/0x10 [ 1430.466082][T18554] do_syscall_64+0x14d/0xf80 [ 1430.466150][T18554] ? trace_irq_disable+0x3b/0x150 [ 1430.466231][T18554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.466309][T18554] ? clear_bhb_loop+0x40/0x90 [ 1430.466383][T18554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.466446][T18554] RIP: 0033:0x7fa367dac819 [ 1430.466500][T18554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.466553][T18554] RSP: 002b:00007fa366006028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1430.466643][T18554] RAX: ffffffffffffffda RBX: 00007fa368025fa0 RCX: 00007fa367dac819 [ 1430.466688][T18554] RDX: 0000000004008800 RSI: 0000200000000240 RDI: 0000000000000004 [ 1430.466723][T18554] RBP: 00007fa366006090 R08: 0000000000000000 R09: 0000000000000000 [ 1430.466767][T18554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1430.466803][T18554] R13: 00007fa368026038 R14: 00007fa368025fa0 R15: 00007ffd40524368 [ 1430.466912][T18554] [ 1430.518858][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 1430.518864][T17208] usb 3-1: Using ep0 maxpacket: 32 [ 1430.526690][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1430.526725][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1430.526838][ T5889] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1430.526864][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.555061][T17208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1430.555096][T17208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1430.555120][T17208] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1430.555164][T17208] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1430.555188][T17208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.556278][ T5889] usb 5-1: config 0 descriptor?? [ 1430.637070][ T5889] hub 5-1:0.0: USB hub found [ 1430.848078][T17208] usb 3-1: config 0 descriptor?? [ 1431.050493][ T37] audit: type=1326 audit(2000000122.425:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18541 comm="syz.4.3853" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4279cbc819 code=0x0 [ 1431.360484][T17208] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0010/input/input43 [ 1431.474703][ T5889] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1431.507711][T17208] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0010/input/input44 [ 1431.600510][T17208] kye 0003:0458:5011.0010: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 1431.727829][T18565] FAULT_INJECTION: forcing a failure. [ 1431.727829][T18565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1431.727871][T18565] CPU: 1 UID: 0 PID: 18565 Comm: syz.1.3863 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1431.727902][T18565] Tainted: [L]=SOFTLOCKUP [ 1431.727910][T18565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1431.727924][T18565] Call Trace: [ 1431.727934][T18565] [ 1431.727944][T18565] dump_stack_lvl+0xe8/0x150 [ 1431.727983][T18565] should_fail_ex+0x46b/0x600 [ 1431.728021][T18565] _copy_to_user+0x31/0xb0 [ 1431.728047][T18565] copy_siginfo_to_user+0x22/0xc0 [ 1431.728082][T18565] x64_setup_rt_frame+0x77c/0xcb0 [ 1431.728143][T18565] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1431.728183][T18565] arch_do_signal_or_restart+0x429/0x830 [ 1431.728216][T18565] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1431.728254][T18565] ? ksys_write+0x248/0x270 [ 1431.728300][T18565] exit_to_user_mode_loop+0x86/0x480 [ 1431.728337][T18565] ? rcu_is_watching+0x15/0xb0 [ 1431.728368][T18565] do_syscall_64+0x32d/0xf80 [ 1431.728393][T18565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.728416][T18565] ? clear_bhb_loop+0x40/0x90 [ 1431.728443][T18565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.728466][T18565] RIP: 0033:0x7fa367dac817 [ 1431.728488][T18565] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 1431.728508][T18565] RSP: 002b:00007fa365fe5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1431.728532][T18565] RAX: 000000000000002d RBX: 00007fa368026090 RCX: 00007fa367dac819 [ 1431.728547][T18565] RDX: 0000000000000003 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1431.728562][T18565] RBP: 00007fa365fe5090 R08: 0000000000000000 R09: 0000000000000000 [ 1431.728576][T18565] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 1431.728590][T18565] R13: 00007fa368026128 R14: 00007fa368026090 R15: 00007ffd40524368 [ 1431.728624][T18565] [ 1431.736518][ T5889] hid-generic 0003:046D:C31C.0011: item fetching failed at offset 0/1 [ 1431.771430][ T5889] hid-generic 0003:046D:C31C.0011: probe with driver hid-generic failed with error -22 [ 1432.341221][ T10] usb 6-1: USB disconnect, device number 32 [ 1432.563700][ C0] kye 0003:0458:5011.0010: usb_submit_urb(ctrl) failed: -1 [ 1433.544323][ T931] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1433.982666][ T931] usb 2-1: Using ep0 maxpacket: 32 [ 1433.986453][ T931] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1433.986500][ T931] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1433.986550][ T931] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1433.986576][ T931] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1433.986605][ T931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1434.005941][ T931] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1434.005973][ T931] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1434.005996][ T931] usb 2-1: Product: syz [ 1434.006011][ T931] usb 2-1: Manufacturer: syz [ 1434.006026][ T931] usb 2-1: SerialNumber: syz [ 1434.006092][ T10] usb 3-1: USB disconnect, device number 2 [ 1434.090000][ T5881] usb 5-1: USB disconnect, device number 112 [ 1434.327194][ T931] usb 2-1: config 0 descriptor?? [ 1434.345094][ T931] ldusb 2-1:0.0: Interrupt in endpoint not found [ 1434.355922][T18581] pim6reg: entered allmulticast mode [ 1434.617638][T18590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3871'. [ 1435.866061][ T5881] usb 2-1: USB disconnect, device number 72 [ 1436.234234][T18606] FAULT_INJECTION: forcing a failure. [ 1436.234234][T18606] name failslab, interval 1, probability 0, space 0, times 0 [ 1436.234263][T18606] CPU: 1 UID: 0 PID: 18606 Comm: syz.4.3877 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1436.234311][T18606] Tainted: [L]=SOFTLOCKUP [ 1436.234320][T18606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1436.234339][T18606] Call Trace: [ 1436.234347][T18606] [ 1436.234370][T18606] dump_stack_lvl+0xe8/0x150 [ 1436.234409][T18606] should_fail_ex+0x46b/0x600 [ 1436.234447][T18606] should_failslab+0xa8/0x100 [ 1436.234474][T18606] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1436.234509][T18606] ? __alloc_skb+0x1d0/0x7d0 [ 1436.234558][T18606] ? lockdep_hardirqs_on+0x7a/0x110 [ 1436.234591][T18606] __alloc_skb+0x1d0/0x7d0 [ 1436.234618][T18606] netlink_sendmsg+0x5d4/0xb40 [ 1436.234670][T18606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1436.234708][T18606] ? unwind_get_return_address+0x4d/0x90 [ 1436.234738][T18606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1436.234765][T18606] ____sys_sendmsg+0x94c/0x9c0 [ 1436.234788][T18606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1436.234813][T18606] ? import_iovec+0x73/0xa0 [ 1436.234831][T18606] ___sys_sendmsg+0x2a5/0x360 [ 1436.234853][T18606] ? __pfx____sys_sendmsg+0x10/0x10 [ 1436.234897][T18606] ? __fget_files+0x2a/0x420 [ 1436.234916][T18606] ? __fget_files+0x3a6/0x420 [ 1436.234944][T18606] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1436.234964][T18606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1436.234990][T18606] ? __pfx_ksys_write+0x10/0x10 [ 1436.235022][T18606] do_syscall_64+0x14d/0xf80 [ 1436.235039][T18606] ? trace_irq_disable+0x3b/0x150 [ 1436.235058][T18606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.235074][T18606] ? clear_bhb_loop+0x40/0x90 [ 1436.235093][T18606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.235109][T18606] RIP: 0033:0x7f4279cbc819 [ 1436.235124][T18606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1436.235138][T18606] RSP: 002b:00007f4277f0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1436.235154][T18606] RAX: ffffffffffffffda RBX: 00007f4279f35fa0 RCX: 00007f4279cbc819 [ 1436.235166][T18606] RDX: 0000000000040000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1436.235177][T18606] RBP: 00007f4277f0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1436.235186][T18606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1436.235196][T18606] R13: 00007f4279f36038 R14: 00007f4279f35fa0 R15: 00007ffc1e8a6818 [ 1436.235220][T18606] [ 1436.604169][T18609] FAULT_INJECTION: forcing a failure. [ 1436.604169][T18609] name failslab, interval 1, probability 0, space 0, times 0 [ 1436.604210][T18609] CPU: 1 UID: 0 PID: 18609 Comm: syz.1.3878 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1436.604240][T18609] Tainted: [L]=SOFTLOCKUP [ 1436.604263][T18609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1436.604278][T18609] Call Trace: [ 1436.604287][T18609] [ 1436.604297][T18609] dump_stack_lvl+0xe8/0x150 [ 1436.604337][T18609] should_fail_ex+0x46b/0x600 [ 1436.604374][T18609] should_failslab+0xa8/0x100 [ 1436.604409][T18609] __kmalloc_noprof+0xdf/0x7b0 [ 1436.604432][T18609] ? tomoyo_encode+0x28b/0x550 [ 1436.604468][T18609] tomoyo_encode+0x28b/0x550 [ 1436.604503][T18609] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1436.604543][T18609] ? tomoyo_path_number_perm+0x219/0x630 [ 1436.604570][T18609] tomoyo_path_number_perm+0x246/0x630 [ 1436.604597][T18609] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1436.604625][T18609] ? __lock_acquire+0x6b5/0x2cf0 [ 1436.604685][T18609] ? __fget_files+0x2a/0x420 [ 1436.604718][T18609] ? __fget_files+0x2a/0x420 [ 1436.604747][T18609] ? __fget_files+0x3a6/0x420 [ 1436.604775][T18609] ? __fget_files+0x2a/0x420 [ 1436.604810][T18609] security_file_ioctl+0xc3/0x2a0 [ 1436.604838][T18609] __se_sys_ioctl+0x47/0x170 [ 1436.604865][T18609] do_syscall_64+0x14d/0xf80 [ 1436.604890][T18609] ? trace_irq_disable+0x3b/0x150 [ 1436.604918][T18609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.604942][T18609] ? clear_bhb_loop+0x40/0x90 [ 1436.604970][T18609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.604993][T18609] RIP: 0033:0x7fa367dac819 [ 1436.605014][T18609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1436.605034][T18609] RSP: 002b:00007fa366006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1436.605058][T18609] RAX: ffffffffffffffda RBX: 00007fa368025fa0 RCX: 00007fa367dac819 [ 1436.605075][T18609] RDX: 0000200000000000 RSI: 00000000c008551b RDI: 0000000000000003 [ 1436.605089][T18609] RBP: 00007fa366006090 R08: 0000000000000000 R09: 0000000000000000 [ 1436.605103][T18609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1436.605116][T18609] R13: 00007fa368026038 R14: 00007fa368025fa0 R15: 00007ffd40524368 [ 1436.605151][T18609] [ 1436.605172][T18609] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1437.147208][T16213] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1437.200585][T17208] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1437.307408][ T5881] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1437.312593][T16213] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1437.312623][T16213] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1437.317099][T16213] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1437.317131][T16213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1437.317153][T16213] usb 3-1: SerialNumber: syz [ 1437.364746][T17208] usb 5-1: Using ep0 maxpacket: 32 [ 1437.379752][T17208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1437.379777][T17208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.379806][T17208] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1437.379823][T17208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.431274][T18619] m1Ie5nè‹Ò: entered promiscuous mode [ 1437.433647][T17208] usb 5-1: config 0 descriptor?? [ 1437.465549][T17208] hub 5-1:0.0: USB hub found [ 1437.467826][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 1437.472281][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1437.472313][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.472354][ T5881] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1437.472380][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.522534][ T5881] usb 2-1: config 0 descriptor?? [ 1437.538728][ T5881] hub 2-1:0.0: USB hub found [ 1437.636381][T16213] usb 3-1: 0:2 : does not exist [ 1437.636754][T16213] usb 3-1: unit 255 not found! [ 1437.674704][ T37] audit: type=1326 audit(2000000128.617:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18612 comm="syz.4.3880" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4279cbc819 code=0x0 [ 1437.745122][ T5881] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1437.808793][T16213] usb 3-1: USB disconnect, device number 3 [ 1437.820183][T18621] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3884'. [ 1437.843223][T18621] netlink: 'syz.5.3884': attribute type 1 has an invalid length. [ 1437.843246][T18621] netlink: 236 bytes leftover after parsing attributes in process `syz.5.3884'. [ 1437.972299][T11160] udevd[11160]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1438.004486][ T5881] hid-generic 0003:046D:C31C.0012: item fetching failed at offset 0/1 [ 1438.005328][ T5881] hid-generic 0003:046D:C31C.0012: probe with driver hid-generic failed with error -22 [ 1438.103312][T17208] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1439.128885][ T5881] usb 2-1: USB disconnect, device number 73 [ 1439.167319][T17208] hid-generic 0003:046D:C31C.0013: item fetching failed at offset 0/1 [ 1439.176723][T17208] hid-generic 0003:046D:C31C.0013: probe with driver hid-generic failed with error -22 [ 1439.547625][T18637] FAULT_INJECTION: forcing a failure. [ 1439.547625][T18637] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.547655][T18637] CPU: 1 UID: 0 PID: 18637 Comm: syz.5.3890 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1439.547678][T18637] Tainted: [L]=SOFTLOCKUP [ 1439.547684][T18637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1439.547694][T18637] Call Trace: [ 1439.547701][T18637] [ 1439.547707][T18637] dump_stack_lvl+0xe8/0x150 [ 1439.547737][T18637] should_fail_ex+0x46b/0x600 [ 1439.547764][T18637] should_failslab+0xa8/0x100 [ 1439.547783][T18637] __kmalloc_noprof+0xdf/0x7b0 [ 1439.547799][T18637] ? tomoyo_encode+0x28b/0x550 [ 1439.547824][T18637] tomoyo_encode+0x28b/0x550 [ 1439.547849][T18637] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1439.547878][T18637] ? tomoyo_path_number_perm+0x219/0x630 [ 1439.547896][T18637] tomoyo_path_number_perm+0x246/0x630 [ 1439.547915][T18637] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1439.547934][T18637] ? __lock_acquire+0x6b5/0x2cf0 [ 1439.547975][T18637] ? __fget_files+0x2a/0x420 [ 1439.547999][T18637] ? __fget_files+0x2a/0x420 [ 1439.548020][T18637] ? __fget_files+0x3a6/0x420 [ 1439.548040][T18637] ? __fget_files+0x2a/0x420 [ 1439.548064][T18637] security_file_ioctl+0xc3/0x2a0 [ 1439.548107][T18637] __se_sys_ioctl+0x47/0x170 [ 1439.548134][T18637] do_syscall_64+0x14d/0xf80 [ 1439.548169][T18637] ? trace_irq_disable+0x3b/0x150 [ 1439.548195][T18637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.548219][T18637] ? clear_bhb_loop+0x40/0x90 [ 1439.548253][T18637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.548280][T18637] RIP: 0033:0x7f82f282c819 [ 1439.548297][T18637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1439.548311][T18637] RSP: 002b:00007f82f0a86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1439.548327][T18637] RAX: ffffffffffffffda RBX: 00007f82f2aa5fa0 RCX: 00007f82f282c819 [ 1439.548339][T18637] RDX: 0000000000000000 RSI: 0000000000009201 RDI: 0000000000000003 [ 1439.548349][T18637] RBP: 00007f82f0a86090 R08: 0000000000000000 R09: 0000000000000000 [ 1439.548359][T18637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1439.548368][T18637] R13: 00007f82f2aa6038 R14: 00007f82f2aa5fa0 R15: 00007ffedf2358f8 [ 1439.548393][T18637] [ 1439.548423][T18637] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1439.555248][T18639] FAULT_INJECTION: forcing a failure. [ 1439.555248][T18639] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1439.555351][T18639] CPU: 0 UID: 0 PID: 18639 Comm: syz.0.3891 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1439.555431][T18639] Tainted: [L]=SOFTLOCKUP [ 1439.555461][T18639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1439.555508][T18639] Call Trace: [ 1439.555531][T18639] [ 1439.555562][T18639] dump_stack_lvl+0xe8/0x150 [ 1439.555688][T18639] should_fail_ex+0x46b/0x600 [ 1439.555784][T18639] prepare_alloc_pages+0x22a/0x6b0 [ 1439.555871][T18639] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1439.555957][T18639] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1439.556044][T18639] ? __pfx_policy_nodemask+0x10/0x10 [ 1439.556125][T18639] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1439.556241][T18639] alloc_pages_mpol+0xd1/0x380 [ 1439.556343][T18639] vma_alloc_folio_noprof+0xea/0x290 [ 1439.556431][T18639] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1439.556531][T18639] do_wp_page+0x127a/0x49d0 [ 1439.556659][T18639] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1439.556734][T18639] ? preempt_count_add+0x91/0x190 [ 1439.556810][T18639] ? __pfx_do_wp_page+0x10/0x10 [ 1439.556913][T18639] ? rt_spin_lock+0x2ce/0x400 [ 1439.557005][T18639] ? __pfx_rt_spin_lock+0x10/0x10 [ 1439.557114][T18639] ? pte_offset_map_rw_nolock+0xea/0x160 [ 1439.557209][T18639] handle_mm_fault+0x9f5/0x13c0 [ 1439.557332][T18639] ? handle_mm_fault+0xe7/0x13c0 [ 1439.557433][T18639] ? __pfx_handle_mm_fault+0x10/0x10 [ 1439.557621][T18639] ? lock_mm_and_find_vma+0xa7/0x340 [ 1439.557715][T18639] do_user_addr_fault+0x75b/0x1340 [ 1439.557872][T18639] exc_page_fault+0x6a/0xc0 [ 1439.557939][T18639] asm_exc_page_fault+0x26/0x30 [ 1439.558003][T18639] RIP: 0010:__put_user_4+0xd/0x20 [ 1439.558069][T18639] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1439.558115][T18639] RSP: 0018:ffffc900055b7c98 EFLAGS: 00050202 [ 1439.558171][T18639] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000007ff8 [ 1439.558214][T18639] RDX: 0000000000000000 RSI: ffffffff8d7c2005 RDI: ffffffff8ba67a80 [ 1439.558250][T18639] RBP: ffffc900055b7eb0 R08: ffffffff82125c4f R09: ffff8880331bc4b0 [ 1439.558294][T18639] R10: 0000000000000100 R11: 00000000ffffff97 R12: 1ffff92000ab6f9c [ 1439.558336][T18639] R13: 0000000000040a1a R14: 0000200000007fc0 R15: 00000000000003ff [ 1439.558391][T18639] ? __might_fault+0xaf/0x130 [ 1439.558473][T18639] __sys_sendmmsg+0x2b6/0x4e0 [ 1439.558572][T18639] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1439.558669][T18639] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1439.558790][T18639] ? ksys_write+0x248/0x270 [ 1439.558889][T18639] ? __pfx_ksys_write+0x10/0x10 [ 1439.559026][T18639] __x64_sys_sendmmsg+0xa0/0xc0 [ 1439.559116][T18639] do_syscall_64+0x14d/0xf80 [ 1439.559175][T18639] ? trace_irq_disable+0x3b/0x150 [ 1439.559253][T18639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.559310][T18639] ? clear_bhb_loop+0x40/0x90 [ 1439.559385][T18639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.559440][T18639] RIP: 0033:0x7f4d8693c819 [ 1439.559503][T18639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1439.559548][T18639] RSP: 002b:00007f4d84b96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1439.559603][T18639] RAX: ffffffffffffffda RBX: 00007f4d86bb5fa0 RCX: 00007f4d8693c819 [ 1439.559638][T18639] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 1439.559680][T18639] RBP: 00007f4d84b96090 R08: 0000000000000000 R09: 0000000000000000 [ 1439.559721][T18639] R10: 0000000000000a1a R11: 0000000000000246 R12: 0000000000000001 [ 1439.559754][T18639] R13: 00007f4d86bb6038 R14: 00007f4d86bb5fa0 R15: 00007ffcf9538838 [ 1439.559860][T18639] [ 1440.311040][T18647] input: syz0 as /devices/virtual/input/input45 [ 1440.674991][ T931] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1440.855087][ T10] usb 5-1: reset high-speed USB device number 113 using dummy_hcd [ 1440.872941][ T931] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1440.872971][ T931] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1440.874523][ T931] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1440.874553][ T931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1440.874577][ T931] usb 3-1: SerialNumber: syz [ 1440.910077][ T10] usb 5-1: device reset changed ep0 maxpacket size! [ 1441.113834][ T10] usb 5-1: USB disconnect, device number 113 [ 1441.193072][ T931] usb 3-1: 0:2 : does not exist [ 1441.193164][ T931] usb 3-1: unit 255 not found! [ 1441.259011][ T931] usb 3-1: USB disconnect, device number 4 [ 1441.347801][T11160] udevd[11160]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1441.476760][ T5881] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1441.477382][ T10] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1441.652791][ T5881] usb 6-1: config 0 has an invalid interface number: 96 but max is 0 [ 1441.652823][ T5881] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.652843][ T5881] usb 6-1: config 0 has no interface number 0 [ 1441.652891][ T5881] usb 6-1: config 0 interface 96 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1441.652920][ T5881] usb 6-1: config 0 interface 96 has no altsetting 0 [ 1441.668415][ T5881] usb 6-1: New USB device found, idVendor=0b57, idProduct=6a8d, bcdDevice=33.74 [ 1441.668504][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.668813][ T5881] usb 6-1: Product: syz [ 1441.668887][ T5881] usb 6-1: Manufacturer: syz [ 1441.668934][ T5881] usb 6-1: SerialNumber: syz [ 1441.710779][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.710878][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1441.710945][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.783021][ T5881] usb 6-1: config 0 descriptor?? [ 1441.784285][ T10] usb 5-1: config 0 descriptor?? [ 1441.840376][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1441.853196][ T5881] usbhid 6-1:0.96: couldn't find an input interrupt endpoint [ 1442.033951][ T10] pwc: send_video_command error -71 [ 1442.033971][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1442.034105][ T10] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1442.069542][ T10] usb 5-1: USB disconnect, device number 114 [ 1442.302331][T16213] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1442.738377][ T5865] usb 6-1: USB disconnect, device number 33 [ 1442.773343][T16213] usb 3-1: Using ep0 maxpacket: 32 [ 1442.775740][T16213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.775774][T16213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1442.775815][T16213] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1442.775841][T16213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.836155][T16213] usb 3-1: config 0 descriptor?? [ 1442.841855][T16213] hub 3-1:0.0: USB hub found [ 1442.973532][ T5881] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1443.005486][ T10] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1443.063609][ T37] audit: type=1326 audit(2000000133.659:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18695 comm="syz.2.3908" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa09915c819 code=0x0 [ 1443.155148][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 1443.157782][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1443.157817][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1443.157859][ T5881] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1443.157883][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.165501][ T5881] usb 2-1: config 0 descriptor?? [ 1443.213845][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.213929][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1443.213954][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.260291][ T5881] hub 2-1:0.0: USB hub found [ 1443.291470][ T10] usb 5-1: config 0 descriptor?? [ 1443.351463][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1443.516514][T16213] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1443.535690][ T5881] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1443.784755][T16213] hid-generic 0003:046D:C31C.0014: item fetching failed at offset 0/1 [ 1443.785684][T16213] hid-generic 0003:046D:C31C.0014: probe with driver hid-generic failed with error -22 [ 1443.804349][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1443.805581][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 1443.828006][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1443.829496][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 1443.954828][ T5881] hid-generic 0003:046D:C31C.0015: item fetching failed at offset 0/1 [ 1443.968662][ T5881] hid-generic 0003:046D:C31C.0015: probe with driver hid-generic failed with error -22 [ 1444.199427][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 1444.208270][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 1444.209154][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 1444.210035][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 1444.218896][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 1444.245511][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 1444.248662][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 1444.250344][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 1444.268176][ T6232] usb 2-1: USB disconnect, device number 74 [ 1444.466510][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 1444.468381][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 1444.469907][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 1444.547882][ T10] pwc: Registered as video103. [ 1444.558019][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input46 [ 1444.622230][ T10] usb 5-1: USB disconnect, device number 115 [ 1445.455216][ T6232] usb 3-1: USB disconnect, device number 5 [ 1445.568731][ T37] audit: type=1326 audit(2000000135.997:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18738 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09915c819 code=0x7ffc0000 [ 1445.568790][ T37] audit: type=1326 audit(2000000135.997:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18738 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09915c819 code=0x7ffc0000 [ 1445.574330][ T37] audit: type=1326 audit(2000000135.997:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18738 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa09915c819 code=0x7ffc0000 [ 1445.576018][ T37] audit: type=1326 audit(2000000136.007:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18738 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09915c819 code=0x7ffc0000 [ 1445.576205][ T37] audit: type=1326 audit(2000000136.007:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18738 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09915c819 code=0x7ffc0000 [ 1445.613782][ T37] audit: type=1326 audit(2000000136.044:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18738 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa09915c819 code=0x7ffc0000 [ 1445.614038][ T37] audit: type=1326 audit(2000000136.044:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18738 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09915c819 code=0x7ffc0000 [ 1445.614174][ T37] audit: type=1326 audit(2000000136.044:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18738 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09915c819 code=0x7ffc0000 [ 1445.614304][ T37] audit: type=1326 audit(2000000136.044:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18738 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa09915c819 code=0x7ffc0000 [ 1446.552136][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.767451][T18762] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1447.790174][T18762] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1447.792329][T18762] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1447.811422][T18762] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1447.879058][T18762] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1447.928096][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.194085][T18778] FAULT_INJECTION: forcing a failure. [ 1448.194085][T18778] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.194125][T18778] CPU: 0 UID: 0 PID: 18778 Comm: syz.5.3927 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1448.194156][T18778] Tainted: [L]=SOFTLOCKUP [ 1448.194165][T18778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1448.194179][T18778] Call Trace: [ 1448.194188][T18778] [ 1448.194198][T18778] dump_stack_lvl+0xe8/0x150 [ 1448.194236][T18778] should_fail_ex+0x46b/0x600 [ 1448.194273][T18778] should_failslab+0xa8/0x100 [ 1448.194300][T18778] __kmalloc_noprof+0xdf/0x7b0 [ 1448.194322][T18778] ? tomoyo_encode+0x28b/0x550 [ 1448.194358][T18778] tomoyo_encode+0x28b/0x550 [ 1448.194394][T18778] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1448.194436][T18778] ? tomoyo_path_number_perm+0x219/0x630 [ 1448.194461][T18778] tomoyo_path_number_perm+0x246/0x630 [ 1448.194490][T18778] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1448.194517][T18778] ? __lock_acquire+0x6b5/0x2cf0 [ 1448.194579][T18778] ? __fget_files+0x2a/0x420 [ 1448.194612][T18778] ? __fget_files+0x2a/0x420 [ 1448.194640][T18778] ? __fget_files+0x3a6/0x420 [ 1448.194668][T18778] ? __fget_files+0x2a/0x420 [ 1448.194701][T18778] security_file_ioctl+0xc3/0x2a0 [ 1448.194729][T18778] __se_sys_ioctl+0x47/0x170 [ 1448.194756][T18778] do_syscall_64+0x14d/0xf80 [ 1448.194791][T18778] ? trace_irq_disable+0x3b/0x150 [ 1448.194819][T18778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.194844][T18778] ? clear_bhb_loop+0x40/0x90 [ 1448.194872][T18778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.194895][T18778] RIP: 0033:0x7f82f282c819 [ 1448.194916][T18778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.194935][T18778] RSP: 002b:00007f82f0a86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1448.194958][T18778] RAX: ffffffffffffffda RBX: 00007f82f2aa5fa0 RCX: 00007f82f282c819 [ 1448.194974][T18778] RDX: 0000200000000340 RSI: 00000000c040565f RDI: 0000000000000003 [ 1448.194988][T18778] RBP: 00007f82f0a86090 R08: 0000000000000000 R09: 0000000000000000 [ 1448.195002][T18778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1448.195015][T18778] R13: 00007f82f2aa6038 R14: 00007f82f2aa5fa0 R15: 00007ffedf2358f8 [ 1448.195048][T18778] [ 1448.195069][T18778] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1448.201254][ T6232] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1448.326183][T15296] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1448.375193][ T6232] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1448.379956][ T6232] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 1448.379988][ T6232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.380011][ T6232] usb 2-1: Product: syz [ 1448.380028][ T6232] usb 2-1: Manufacturer: syz [ 1448.380043][ T6232] usb 2-1: SerialNumber: syz [ 1448.757063][T15296] usb 5-1: Using ep0 maxpacket: 32 [ 1448.759617][T15296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1448.759652][T15296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1448.759695][T15296] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1448.759720][T15296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.765240][T15296] usb 5-1: config 0 descriptor?? [ 1448.894505][T18782] binder: 18779:18782 ioctl c0306201 0 returned -14 [ 1448.905233][T18782] binder: BINDER_SET_CONTEXT_MGR already set [ 1448.905275][T18782] binder: 18779:18782 ioctl 4018620d 200000004a80 returned -16 [ 1449.325898][T15296] hub 5-1:0.0: USB hub found [ 1449.442473][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.939147][T15296] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1450.094802][T17208] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1450.182051][ T6232] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1450.243572][ T6232] usb 2-1: USB disconnect, device number 75 [ 1450.263150][T17208] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1450.263184][T17208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.293757][T17208] usb 6-1: config 0 descriptor?? [ 1450.320339][T18762] Bluetooth: hci3: command tx timeout [ 1450.361025][T17208] cp210x 6-1:0.0: cp210x converter detected [ 1450.488012][T18791] binder: 18787:18791 ioctl c0306201 0 returned -14 [ 1450.501810][T18791] binder: BINDER_SET_CONTEXT_MGR already set [ 1450.501852][T18791] binder: 18787:18791 ioctl 4018620d 200000004a80 returned -16 [ 1451.039451][T11160] udevd[11160]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1451.288014][T15296] hid-generic 0003:046D:C31C.0016: item fetching failed at offset 0/1 [ 1451.288877][T15296] hid-generic 0003:046D:C31C.0016: probe with driver hid-generic failed with error -22 [ 1451.377244][T15296] usb 5-1: USB disconnect, device number 116 [ 1451.430406][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.471951][T17208] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1451.504189][T17208] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1451.630104][T18798] kAFS: unparsable volume name [ 1451.644581][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3932'. [ 1451.644711][T18798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3932'. [ 1451.784440][T15296] usb 6-1: USB disconnect, device number 34 [ 1452.001009][T15296] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1452.195834][T15296] cp210x 6-1:0.0: device disconnected [ 1452.572502][T18762] Bluetooth: hci3: command tx timeout [ 1453.108515][T18762] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 1453.445492][ T41] bridge_slave_1: left allmulticast mode [ 1453.445524][ T41] bridge_slave_1: left promiscuous mode [ 1453.445790][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.549966][ T41] bridge_slave_0: left allmulticast mode [ 1453.549999][ T41] bridge_slave_0: left promiscuous mode [ 1453.550200][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.621430][T17208] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1453.784090][T17208] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.784121][T17208] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1453.785365][T17208] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1453.785392][T17208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1453.785419][T17208] usb 3-1: SerialNumber: syz [ 1454.681209][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1454.765236][T18762] Bluetooth: hci3: command tx timeout [ 1454.767829][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1454.795428][ T41] bond0 (unregistering): Released all slaves [ 1454.916578][T17208] usb 3-1: 0:2 : does not exist [ 1454.971410][T17208] usb 3-1: USB disconnect, device number 6 [ 1455.078044][T11160] udevd[11160]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1455.562383][T18760] chnl_net:caif_netlink_parms(): no params data found [ 1457.020578][T18762] Bluetooth: hci3: command tx timeout [ 1457.159618][T18870] FAULT_INJECTION: forcing a failure. [ 1457.159618][T18870] name failslab, interval 1, probability 0, space 0, times 0 [ 1457.159658][T18870] CPU: 0 UID: 0 PID: 18870 Comm: syz.5.3956 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1457.159694][T18870] Tainted: [L]=SOFTLOCKUP [ 1457.159703][T18870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1457.159717][T18870] Call Trace: [ 1457.159727][T18870] [ 1457.159737][T18870] dump_stack_lvl+0xe8/0x150 [ 1457.159774][T18870] should_fail_ex+0x46b/0x600 [ 1457.159812][T18870] should_failslab+0xa8/0x100 [ 1457.159837][T18870] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1457.159872][T18870] ? __alloc_skb+0x1d0/0x7d0 [ 1457.159893][T18870] ? lockdep_hardirqs_on+0x7a/0x110 [ 1457.159925][T18870] __alloc_skb+0x1d0/0x7d0 [ 1457.159953][T18870] sock_wmalloc+0xb2/0x130 [ 1457.159994][T18870] pppoe_sendmsg+0x2b4/0x7c0 [ 1457.160035][T18870] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 1457.160073][T18870] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1457.160110][T18870] ____sys_sendmsg+0x94c/0x9c0 [ 1457.160143][T18870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1457.160179][T18870] ? import_iovec+0x73/0xa0 [ 1457.160206][T18870] ___sys_sendmsg+0x2a5/0x360 [ 1457.160238][T18870] ? __pfx____sys_sendmsg+0x10/0x10 [ 1457.160272][T18870] ? kstrtouint+0x6e/0xe0 [ 1457.160331][T18870] ? __fget_files+0x2a/0x420 [ 1457.160360][T18870] ? __fget_files+0x3a6/0x420 [ 1457.160400][T18870] __sys_sendmmsg+0x282/0x4e0 [ 1457.160433][T18870] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1457.160470][T18870] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1457.160519][T18870] ? ksys_write+0x248/0x270 [ 1457.160557][T18870] ? __pfx_ksys_write+0x10/0x10 [ 1457.160599][T18870] __x64_sys_sendmmsg+0xa0/0xc0 [ 1457.160628][T18870] do_syscall_64+0x14d/0xf80 [ 1457.160653][T18870] ? trace_irq_disable+0x3b/0x150 [ 1457.160680][T18870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.160703][T18870] ? clear_bhb_loop+0x40/0x90 [ 1457.160732][T18870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.160755][T18870] RIP: 0033:0x7f82f282c819 [ 1457.160777][T18870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1457.160797][T18870] RSP: 002b:00007f82f0a86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1457.160822][T18870] RAX: ffffffffffffffda RBX: 00007f82f2aa5fa0 RCX: 00007f82f282c819 [ 1457.160840][T18870] RDX: 0000000000000002 RSI: 0000200000004840 RDI: 0000000000000003 [ 1457.160855][T18870] RBP: 00007f82f0a86090 R08: 0000000000000000 R09: 0000000000000000 [ 1457.160869][T18870] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 1457.160882][T18870] R13: 00007f82f2aa6038 R14: 00007f82f2aa5fa0 R15: 00007ffedf2358f8 [ 1457.160918][T18870] [ 1457.893987][ T41] hsr_slave_0: left promiscuous mode [ 1457.940531][ T41] hsr_slave_1: left promiscuous mode [ 1457.941613][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1457.941642][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1458.073352][T18887] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3960'. [ 1458.073527][T18887] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3960'. [ 1458.117227][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1458.117298][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1458.979739][ T41] veth1_macvtap: left promiscuous mode [ 1458.979816][ T41] veth0_macvtap: left promiscuous mode [ 1458.979991][ T41] veth1_vlan: left promiscuous mode [ 1458.980112][ T41] veth0_vlan: left promiscuous mode [ 1459.133725][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1459.133803][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1459.225776][ T931] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1459.384038][ T931] usb 3-1: Using ep0 maxpacket: 32 [ 1459.392171][ T931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1459.392206][ T931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1459.392247][ T931] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1459.392272][ T931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.443586][ T931] usb 3-1: config 0 descriptor?? [ 1459.455944][ T931] hub 3-1:0.0: USB hub found [ 1459.675106][ T41] pim6reg (unregistering): left allmulticast mode [ 1459.878165][ T931] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1460.101284][ T931] hid-generic 0003:046D:C31C.0017: item fetching failed at offset 0/1 [ 1460.102156][ T931] hid-generic 0003:046D:C31C.0017: probe with driver hid-generic failed with error -22 [ 1460.252435][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1460.316333][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1460.431496][T15296] usb 3-1: USB disconnect, device number 7 [ 1460.574574][T18760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.574803][T18760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.575012][T18760] bridge_slave_0: entered allmulticast mode [ 1460.577038][T18760] bridge_slave_0: entered promiscuous mode [ 1460.616916][T18887] syz_tun: entered promiscuous mode [ 1460.624660][ T931] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1460.647557][T18887] syz_tun: left promiscuous mode [ 1460.739255][T18760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.739381][T18760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.739578][T18760] bridge_slave_1: entered allmulticast mode [ 1460.774286][T18760] bridge_slave_1: entered promiscuous mode [ 1460.793189][ T931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.793247][ T931] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1460.793276][ T931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.830028][ T931] usb 2-1: config 0 descriptor?? [ 1460.849963][ T931] pwc: Askey VC010 type 2 USB webcam detected. [ 1461.056839][ T931] pwc: send_video_command error -71 [ 1461.056858][ T931] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1461.057764][ T931] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1461.106801][ T931] usb 2-1: USB disconnect, device number 76 [ 1461.168856][ T6232] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1461.257393][T18760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1461.264241][T18760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1461.332275][ T6232] usb 6-1: config 0 has an invalid interface number: 96 but max is 0 [ 1461.332306][ T6232] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.332327][ T6232] usb 6-1: config 0 has no interface number 0 [ 1461.332373][ T6232] usb 6-1: config 0 interface 96 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1461.332402][ T6232] usb 6-1: config 0 interface 96 has no altsetting 0 [ 1461.338574][ T6232] usb 6-1: New USB device found, idVendor=0b57, idProduct=6a8d, bcdDevice=33.74 [ 1461.338620][ T6232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.338640][ T6232] usb 6-1: Product: syz [ 1461.338656][ T6232] usb 6-1: Manufacturer: syz [ 1461.338680][ T6232] usb 6-1: SerialNumber: syz [ 1461.425529][ T6232] usb 6-1: config 0 descriptor?? [ 1461.451619][ T6232] usbhid 6-1:0.96: couldn't find an input interrupt endpoint [ 1461.495474][T18760] team0: Port device team_slave_0 added [ 1461.499236][T18760] team0: Port device team_slave_1 added [ 1461.624986][T18760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1461.625006][T18760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1461.625035][T18760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1461.627920][T18760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1461.627936][T18760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1461.627965][T18760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1461.660651][ T931] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1461.731595][T18914] binder: 18913:18914 ioctl c0306201 0 returned -14 [ 1461.861746][ T931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.861800][ T931] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1461.861826][ T931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.000913][ T931] usb 2-1: config 0 descriptor?? [ 1462.179556][ T931] pwc: Askey VC010 type 2 USB webcam detected. [ 1462.402316][T18924] FAULT_INJECTION: forcing a failure. [ 1462.402316][T18924] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.402355][T18924] CPU: 0 UID: 0 PID: 18924 Comm: syz.4.3968 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1462.402401][T18924] Tainted: [L]=SOFTLOCKUP [ 1462.402409][T18924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1462.402424][T18924] Call Trace: [ 1462.402433][T18924] [ 1462.402444][T18924] dump_stack_lvl+0xe8/0x150 [ 1462.402482][T18924] should_fail_ex+0x46b/0x600 [ 1462.402521][T18924] should_failslab+0xa8/0x100 [ 1462.402540][T18924] __kvmalloc_node_noprof+0x170/0x8e0 [ 1462.402580][T18924] ? seq_read_iter+0x203/0xe20 [ 1462.402611][T18924] ? mutex_lock_nested+0x152/0x1d0 [ 1462.402644][T18924] ? seq_read_iter+0xb8/0xe20 [ 1462.402671][T18924] seq_read_iter+0x203/0xe20 [ 1462.402700][T18924] ? kstrtoull+0x12f/0x1d0 [ 1462.402725][T18924] ? __asan_memset+0x22/0x50 [ 1462.402776][T18924] seq_read+0x36a/0x490 [ 1462.402811][T18924] ? __pfx_seq_read+0x10/0x10 [ 1462.402848][T18924] ? rw_verify_area+0x2ac/0x4e0 [ 1462.402884][T18924] ? __pfx_seq_read+0x10/0x10 [ 1462.402901][T18924] vfs_read+0x212/0xa80 [ 1462.402953][T18924] ? __pfx_vfs_read+0x10/0x10 [ 1462.402993][T18924] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1462.403019][T18924] ? lockdep_hardirqs_on+0x7a/0x110 [ 1462.403043][T18924] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1462.403070][T18924] ? mutex_lock_nested+0x152/0x1d0 [ 1462.403092][T18924] ? fdget_pos+0x252/0x320 [ 1462.403147][T18924] ksys_read+0x156/0x270 [ 1462.403184][T18924] ? __pfx_ksys_read+0x10/0x10 [ 1462.403234][T18924] do_syscall_64+0x14d/0xf80 [ 1462.403251][T18924] ? trace_irq_disable+0x3b/0x150 [ 1462.403271][T18924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.403309][T18924] ? clear_bhb_loop+0x40/0x90 [ 1462.403338][T18924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.403362][T18924] RIP: 0033:0x7f4279cbc819 [ 1462.403382][T18924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1462.403400][T18924] RSP: 002b:00007f4277eed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1462.403425][T18924] RAX: ffffffffffffffda RBX: 00007f4279f36090 RCX: 00007f4279cbc819 [ 1462.403437][T18924] RDX: 0000000000002020 RSI: 0000200000002840 RDI: 0000000000000004 [ 1462.403448][T18924] RBP: 00007f4277eed090 R08: 0000000000000000 R09: 0000000000000000 [ 1462.403477][T18924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1462.403491][T18924] R13: 00007f4279f36128 R14: 00007f4279f36090 R15: 00007ffc1e8a6818 [ 1462.403528][T18924] [ 1462.773658][ T931] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1462.814178][ T931] pwc: recv_control_msg error -32 req 02 val 2700 [ 1462.830862][ T931] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1462.831632][ T931] pwc: recv_control_msg error -32 req 04 val 1000 [ 1462.832377][ T931] pwc: recv_control_msg error -32 req 04 val 1300 [ 1462.833174][ T931] pwc: recv_control_msg error -32 req 04 val 1400 [ 1462.833900][ T931] pwc: recv_control_msg error -32 req 02 val 2000 [ 1462.834645][ T931] pwc: recv_control_msg error -32 req 02 val 2100 [ 1462.835489][ T931] pwc: recv_control_msg error -32 req 04 val 1500 [ 1462.836224][ T931] pwc: recv_control_msg error -32 req 02 val 2500 [ 1462.838434][ T931] pwc: recv_control_msg error -32 req 02 val 2400 [ 1463.056102][ T931] pwc: recv_control_msg error -71 req 02 val 2900 [ 1463.056624][ T931] pwc: recv_control_msg error -71 req 02 val 2800 [ 1463.057409][ T931] pwc: recv_control_msg error -71 req 04 val 1100 [ 1463.057887][ T931] pwc: recv_control_msg error -71 req 04 val 1200 [ 1463.151297][ T931] pwc: Registered as video103. [ 1463.155858][ T931] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input47 [ 1463.237324][ T931] usb 2-1: USB disconnect, device number 77 [ 1463.262214][T18760] hsr_slave_0: entered promiscuous mode [ 1463.263122][T18760] hsr_slave_1: entered promiscuous mode [ 1463.263842][T18760] debugfs: 'hsr0' already exists in 'hsr' [ 1463.263861][T18760] Cannot create hsr debugfs directory [ 1463.715859][T15296] usb 6-1: USB disconnect, device number 35 [ 1465.177801][ T10] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1466.493669][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1466.502756][ T10] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 1466.502789][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.502811][ T10] usb 2-1: Product: syz [ 1466.502827][ T10] usb 2-1: Manufacturer: syz [ 1466.502842][ T10] usb 2-1: SerialNumber: syz [ 1467.020600][T18958] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3976'. [ 1467.020674][T18958] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3976'. [ 1467.155757][ T931] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1467.202813][ T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1467.344592][ T931] usb 3-1: config 0 has an invalid interface number: 96 but max is 0 [ 1467.344623][ T931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.344643][ T931] usb 3-1: config 0 has no interface number 0 [ 1467.344691][ T931] usb 3-1: config 0 interface 96 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1467.344721][ T931] usb 3-1: config 0 interface 96 has no altsetting 0 [ 1467.352615][ T931] usb 3-1: New USB device found, idVendor=0b57, idProduct=6a8d, bcdDevice=33.74 [ 1467.352703][ T931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.352768][ T931] usb 3-1: Product: syz [ 1467.352798][ T931] usb 3-1: Manufacturer: syz [ 1467.352820][ T931] usb 3-1: SerialNumber: syz [ 1467.401681][T15296] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1467.583678][T15296] usb 5-1: Using ep0 maxpacket: 32 [ 1467.613229][T15296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1467.613300][T15296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1467.613378][T15296] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1467.613447][T15296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.886584][ T931] usb 3-1: config 0 descriptor?? [ 1467.900310][T15296] usb 5-1: config 0 descriptor?? [ 1467.910403][ T931] usbhid 3-1:0.96: couldn't find an input interrupt endpoint [ 1468.222754][T18958] syz_tun: entered promiscuous mode [ 1468.232959][T18952] binder: 18951:18952 ioctl c0306201 0 returned -14 [ 1468.252354][T15296] hub 5-1:0.0: USB hub found [ 1468.287452][T18958] syz_tun: left promiscuous mode [ 1468.764488][T15296] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1469.020141][T15296] hid-generic 0003:046D:C31C.0018: item fetching failed at offset 0/1 [ 1469.020709][T15296] hid-generic 0003:046D:C31C.0018: probe with driver hid-generic failed with error -22 [ 1469.100759][ T10] usb 2-1: USB disconnect, device number 78 [ 1469.317904][T11160] udevd[11160]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1469.375665][ T931] usb 5-1: USB disconnect, device number 117 [ 1469.846327][T18975] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3981'. [ 1469.846586][T18975] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3981'. [ 1470.778539][T18975] syz_tun: entered promiscuous mode [ 1470.957183][ T931] usb 3-1: USB disconnect, device number 8 [ 1470.985678][T18975] syz_tun: left promiscuous mode [ 1471.186041][ T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1471.203871][T18760] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1471.249556][T18760] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1471.309254][T18760] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1471.328640][T18988] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3987'. [ 1471.371264][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.371323][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1471.371349][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.376930][ T10] usb 2-1: config 0 descriptor?? [ 1471.390115][ T5881] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1471.404963][T18760] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1471.462754][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1471.574193][ T5881] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1471.574290][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.753013][ T10] pwc: send_video_command error -71 [ 1471.753097][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1472.591777][ T10] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1473.764089][ T5881] usb 5-1: config 0 descriptor?? [ 1473.778137][ T10] usb 2-1: USB disconnect, device number 79 [ 1475.441893][ T5881] cp210x 5-1:0.0: cp210x converter detected [ 1475.444612][ T5881] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1475.444646][ T5881] cp210x 5-1:0.0: querying part number failed [ 1475.473976][ T5881] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1475.497569][ T5881] usb 5-1: USB disconnect, device number 118 [ 1475.516742][ T5881] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1475.517506][ T5881] cp210x 5-1:0.0: device disconnected [ 1475.821374][T19022] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3993'. [ 1475.933954][T15296] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1475.953553][T18760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1476.097313][T18760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1476.103670][T15296] usb 6-1: Using ep0 maxpacket: 32 [ 1476.106064][T15296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.106097][T15296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1476.106138][T15296] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1476.106164][T15296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.171223][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.171362][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1476.176006][T15296] usb 6-1: config 0 descriptor?? [ 1476.220674][T15296] hub 6-1:0.0: USB hub found [ 1476.359143][T17893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.359288][T17893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1476.630986][T15296] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1476.742501][ T931] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1476.859517][T15296] hid-generic 0003:046D:C31C.0019: item fetching failed at offset 0/1 [ 1476.860363][T15296] hid-generic 0003:046D:C31C.0019: probe with driver hid-generic failed with error -22 [ 1476.916246][ T931] usb 5-1: Using ep0 maxpacket: 16 [ 1476.919001][ T931] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.919056][ T931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1476.919084][ T931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1476.919108][ T931] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1476.919132][ T931] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1476.920682][ T931] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1476.920710][ T931] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1476.920733][ T931] usb 5-1: Manufacturer: syz [ 1477.009872][ T931] usb 5-1: config 0 descriptor?? [ 1477.195184][T15296] usb 6-1: USB disconnect, device number 36 [ 1477.365243][ T931] rc_core: IR keymap rc-hauppauge not found [ 1477.365266][ T931] Registered IR keymap rc-empty [ 1477.365429][ T931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1477.388095][ T931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1477.410707][ T931] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1477.414234][ T931] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input48 [ 1477.448140][ T931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1477.461863][ T931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1477.483265][ T931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1477.504464][ T931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1477.525546][ T931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1477.549275][ T931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1477.568535][ T931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1477.589869][ T931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1477.611059][ T931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1477.632477][ T931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1477.667473][ T931] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1477.667501][ T931] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1477.675156][T15296] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1477.760013][T18760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1477.770460][ T5865] usb 5-1: USB disconnect, device number 119 [ 1477.849139][T15296] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.849169][T15296] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1477.852272][T15296] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1477.852302][T15296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1477.852317][T15296] usb 2-1: SerialNumber: syz [ 1479.203023][T15296] usb 2-1: 0:2 : does not exist [ 1479.300649][T15296] usb 2-1: USB disconnect, device number 80 [ 1479.393388][T11160] udevd[11160]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1480.161025][T19083] kAFS: unparsable volume name [ 1480.162424][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4006'. [ 1480.162446][T19083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4006'. [ 1481.163656][T18760] veth0_vlan: entered promiscuous mode [ 1481.354896][T18760] veth1_vlan: entered promiscuous mode [ 1481.448992][ T931] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1481.548631][T18760] veth0_macvtap: entered promiscuous mode [ 1481.572222][T18760] veth1_macvtap: entered promiscuous mode [ 1481.609738][T18760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1481.610442][ T931] usb 2-1: Using ep0 maxpacket: 32 [ 1481.615534][ T931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1481.615568][ T931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1481.615610][ T931] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1481.615636][ T931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.679430][ T931] usb 2-1: config 0 descriptor?? [ 1481.699758][ T931] hub 2-1:0.0: USB hub found [ 1481.719514][T18760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1481.798741][ T1031] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.808303][ T1031] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.808809][ T1031] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.809939][ T1031] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.939695][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 1481.939717][ T37] audit: type=1326 audit(2000000170.008:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19093 comm="syz.1.4008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa367dac819 code=0x0 [ 1482.015617][T16213] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1482.082592][ T10] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1482.196276][T16213] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1482.196409][T16213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.196431][T16213] usb 3-1: Product: syz [ 1482.196445][T16213] usb 3-1: Manufacturer: syz [ 1482.196460][T16213] usb 3-1: SerialNumber: syz [ 1482.318530][T16213] usb 3-1: config 0 descriptor?? [ 1482.335475][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.335502][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1482.335537][ T10] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 1482.335559][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1482.338627][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1482.338662][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1482.338704][ T10] usb 5-1: SerialNumber: syz [ 1482.551055][T16213] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1482.605758][ T931] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1482.624078][ T931] usbhid 2-1:0.0: can't add hid device: -71 [ 1482.624383][ T931] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1482.742757][ T10] usb 5-1: 0:2 : does not exist [ 1482.742844][ T10] usb 5-1: unit 5 not found! [ 1482.755623][ T2235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1482.755690][ T2235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1482.794629][ T931] usb 2-1: USB disconnect, device number 81 [ 1482.967059][ T37] audit: type=1800 audit(2000000170.981:314): pid=19112 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.1.4014" name="/newroot/304/file0" dev="tmpfs" ino=1595 res=0 errno=0 [ 1482.967206][ T5881] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1483.135118][ T5881] usb 6-1: config 0 has an invalid interface number: 96 but max is 0 [ 1483.135150][ T5881] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.135171][ T5881] usb 6-1: config 0 has no interface number 0 [ 1483.135218][ T5881] usb 6-1: config 0 interface 96 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1483.135246][ T5881] usb 6-1: config 0 interface 96 has no altsetting 0 [ 1483.168629][ T10] usb 5-1: USB disconnect, device number 120 [ 1483.192000][ T5881] usb 6-1: New USB device found, idVendor=0b57, idProduct=6a8d, bcdDevice=33.74 [ 1483.192032][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.192053][ T5881] usb 6-1: Product: syz [ 1483.192069][ T5881] usb 6-1: Manufacturer: syz [ 1483.192085][ T5881] usb 6-1: SerialNumber: syz [ 1483.198266][T11628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1483.198289][T11628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.257968][T16213] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1483.312387][ T5881] usb 6-1: config 0 descriptor?? [ 1483.383690][ T5881] usbhid 6-1:0.96: couldn't find an input interrupt endpoint [ 1483.469524][T11160] udevd[11160]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1484.095446][ T5865] usb 6-1: USB disconnect, device number 37 [ 1484.157352][T19137] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4019'. [ 1484.273359][ T5881] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1484.421003][T10097] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1484.442818][ T5881] usb 7-1: Using ep0 maxpacket: 32 [ 1484.448318][ T5881] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1484.448362][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.448377][ T5881] usb 7-1: Product: syz [ 1484.448406][ T5881] usb 7-1: Manufacturer: syz [ 1484.448421][ T5881] usb 7-1: SerialNumber: syz [ 1484.452754][ T5881] usb 7-1: config 0 descriptor?? [ 1484.500134][ T5881] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1484.500226][ T5881] dvb-usb: bulk message failed: -22 (4/0) [ 1484.500240][ T5881] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1484.500342][ T5881] dvb-usb: bulk message failed: -22 (5/0) [ 1484.500368][ T5881] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1484.504287][ T5881] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1484.504926][ T5881] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1484.504976][ T5881] usb 7-1: media controller created [ 1484.569472][ T10] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1484.589801][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1484.604510][T10097] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1484.604543][T10097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.615415][T10097] usb 2-1: config 0 descriptor?? [ 1484.648057][T10097] cp210x 2-1:0.0: cp210x converter detected [ 1484.666365][ T5881] usb 7-1: selecting invalid altsetting 3 [ 1484.666380][ T5881] ttusb2: set interface to alts=3 failed [ 1484.760697][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1484.783282][T19143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.783867][T19143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.811857][ T10] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 1484.811953][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.811976][ T10] usb 5-1: Product: syz [ 1484.811992][ T10] usb 5-1: Manufacturer: syz [ 1484.812008][ T10] usb 5-1: SerialNumber: syz [ 1484.814504][T19143] dvb-usb: bulk message failed: -22 (7/0) [ 1484.814526][T19143] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1484.814596][T19143] ttusb2: i2c transfer failed. [ 1484.945839][ T5881] DVB: Unable to find symbol tda10086_attach() [ 1484.945857][ T5881] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1484.947285][ T5881] dvb-usb: bulk message failed: -22 (4/0) [ 1484.947304][ T5881] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1484.947664][ T5881] dvb-usb: bulk message failed: -22 (5/0) [ 1484.947757][ T5881] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1484.947829][ T5881] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1485.037698][T19148] FAULT_INJECTION: forcing a failure. [ 1485.037698][T19148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1485.037740][T19148] CPU: 1 UID: 0 PID: 19148 Comm: syz.5.4022 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1485.037770][T19148] Tainted: [L]=SOFTLOCKUP [ 1485.037779][T19148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1485.037793][T19148] Call Trace: [ 1485.037803][T19148] [ 1485.037813][T19148] dump_stack_lvl+0xe8/0x150 [ 1485.037854][T19148] should_fail_ex+0x46b/0x600 [ 1485.037892][T19148] _copy_to_user+0x31/0xb0 [ 1485.037918][T19148] simple_read_from_buffer+0xe1/0x170 [ 1485.037952][T19148] proc_fail_nth_read+0x1be/0x230 [ 1485.037985][T19148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1485.038019][T19148] ? rw_verify_area+0x2ac/0x4e0 [ 1485.038053][T19148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1485.038085][T19148] vfs_read+0x212/0xa80 [ 1485.038129][T19148] ? __pfx_vfs_read+0x10/0x10 [ 1485.038165][T19148] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1485.038193][T19148] ? lockdep_hardirqs_on+0x7a/0x110 [ 1485.038220][T19148] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1485.038248][T19148] ? mutex_lock_nested+0x152/0x1d0 [ 1485.038280][T19148] ? fdget_pos+0x252/0x320 [ 1485.038318][T19148] ksys_read+0x156/0x270 [ 1485.038355][T19148] ? __pfx_ksys_read+0x10/0x10 [ 1485.038402][T19148] do_syscall_64+0x14d/0xf80 [ 1485.038428][T19148] ? trace_irq_disable+0x3b/0x150 [ 1485.038466][T19148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.038489][T19148] ? clear_bhb_loop+0x40/0x90 [ 1485.038517][T19148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.038540][T19148] RIP: 0033:0x7f82f27ed04e [ 1485.038562][T19148] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1485.038583][T19148] RSP: 002b:00007f82f0a85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1485.038607][T19148] RAX: ffffffffffffffda RBX: 00007f82f0a866c0 RCX: 00007f82f27ed04e [ 1485.038624][T19148] RDX: 000000000000000f RSI: 00007f82f0a860a0 RDI: 0000000000000004 [ 1485.038638][T19148] RBP: 00007f82f0a86090 R08: 0000000000000000 R09: 0000000000000000 [ 1485.038652][T19148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1485.038665][T19148] R13: 00007f82f2aa6038 R14: 00007f82f2aa5fa0 R15: 00007ffedf2358f8 [ 1485.038701][T19148] [ 1485.276198][T10097] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1485.398282][T10097] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1485.421326][T17208] usb 3-1: USB disconnect, device number 9 [ 1485.514617][ T5874] usb 2-1: USB disconnect, device number 82 [ 1485.556328][ T6232] usb 7-1: USB disconnect, device number 2 [ 1485.629609][ T5874] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1485.654970][ T10] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1485.798275][ T6232] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1485.799155][ T10] usb 5-1: USB disconnect, device number 121 [ 1485.837160][ T5874] cp210x 2-1:0.0: device disconnected [ 1485.998389][T19161] FAULT_INJECTION: forcing a failure. [ 1485.998389][T19161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1485.998645][T19161] CPU: 1 UID: 0 PID: 19161 Comm: syz.5.4028 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1485.998676][T19161] Tainted: [L]=SOFTLOCKUP [ 1485.998685][T19161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1485.998699][T19161] Call Trace: [ 1485.998708][T19161] [ 1485.998719][T19161] dump_stack_lvl+0xe8/0x150 [ 1485.998757][T19161] should_fail_ex+0x46b/0x600 [ 1485.998793][T19161] _copy_from_user+0x2d/0xb0 [ 1485.998816][T19161] ___sys_sendmsg+0x1c6/0x360 [ 1485.998849][T19161] ? __pfx____sys_sendmsg+0x10/0x10 [ 1485.998912][T19161] ? __fget_files+0x2a/0x420 [ 1485.998940][T19161] ? __fget_files+0x3a6/0x420 [ 1485.998979][T19161] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1485.999009][T19161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1485.999046][T19161] ? __pfx_ksys_write+0x10/0x10 [ 1485.999091][T19161] do_syscall_64+0x14d/0xf80 [ 1485.999146][T19161] ? trace_irq_disable+0x3b/0x150 [ 1485.999174][T19161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.999199][T19161] ? clear_bhb_loop+0x40/0x90 [ 1485.999228][T19161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.999251][T19161] RIP: 0033:0x7f82f282c819 [ 1485.999273][T19161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1485.999304][T19161] RSP: 002b:00007f82f0a86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1485.999328][T19161] RAX: ffffffffffffffda RBX: 00007f82f2aa5fa0 RCX: 00007f82f282c819 [ 1485.999343][T19161] RDX: 0000000024000013 RSI: 0000200000000000 RDI: 0000000000000003 [ 1485.999372][T19161] RBP: 00007f82f0a86090 R08: 0000000000000000 R09: 0000000000000000 [ 1485.999387][T19161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1485.999400][T19161] R13: 00007f82f2aa6038 R14: 00007f82f2aa5fa0 R15: 00007ffedf2358f8 [ 1485.999435][T19161] [ 1486.370641][T19165] binder: 19156:19165 ioctl c0306201 0 returned -14 [ 1487.233114][T19168] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4031'. [ 1487.261036][ T37] audit: type=1326 audit(2000000175.003:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19167 comm="syz.6.4031" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf5ee9c819 code=0x0 [ 1487.302787][T11160] udevd[11160]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1487.435752][ T5874] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1487.489242][ T6232] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1487.553268][T10097] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 1487.585393][ T10] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 1487.603943][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 1487.606081][ T5874] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1487.606111][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.635350][ T5874] usb 2-1: config 0 descriptor?? [ 1487.651865][ T6232] usb 6-1: Using ep0 maxpacket: 16 [ 1487.657237][ T6232] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1487.657265][ T6232] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1487.657301][ T6232] usb 6-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 1487.657326][ T6232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.699722][ T5874] as10x_usb: device has been detected [ 1487.701770][ T5874] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1487.723336][T10097] usb 3-1: config 0 has an invalid interface number: 96 but max is 0 [ 1487.723367][T10097] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.723387][T10097] usb 3-1: config 0 has no interface number 0 [ 1487.723432][T10097] usb 3-1: config 0 interface 96 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1487.723461][T10097] usb 3-1: config 0 interface 96 has no altsetting 0 [ 1487.778428][ T6232] usb 6-1: config 0 descriptor?? [ 1487.779192][T10097] usb 3-1: New USB device found, idVendor=0b57, idProduct=6a8d, bcdDevice=33.74 [ 1487.779221][T10097] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.779243][T10097] usb 3-1: Product: syz [ 1487.779259][T10097] usb 3-1: Manufacturer: syz [ 1487.779275][T10097] usb 3-1: SerialNumber: syz [ 1487.848999][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1487.849023][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.849038][ T10] usb 5-1: Product: syz [ 1487.849049][ T10] usb 5-1: Manufacturer: syz [ 1487.849061][ T10] usb 5-1: SerialNumber: syz [ 1487.895802][T19169] INFO: trying to register non-static key. [ 1487.895817][T19169] The code is fine but needs lockdep annotation, or maybe [ 1487.895826][T19169] you didn't initialize this object before use? [ 1487.895834][T19169] turning off the locking correctness validator. [ 1487.895851][T19169] CPU: 0 UID: 0 PID: 19169 Comm: syz.1.4030 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1487.895878][T19169] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1487.895886][T19169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1487.895898][T19169] Call Trace: [ 1487.895905][T19169] [ 1487.895914][T19169] dump_stack_lvl+0xe8/0x150 [ 1487.895948][T19169] assign_lock_key+0x133/0x150 [ 1487.895973][T19169] register_lock_class+0xcc/0x2e0 [ 1487.895993][T19169] __lock_acquire+0xad/0x2cf0 [ 1487.896012][T19169] ? __lock_acquire+0x6b5/0x2cf0 [ 1487.896035][T19169] ? do_raw_spin_lock+0x12b/0x2f0 [ 1487.896067][T19169] lock_acquire+0xf0/0x2e0 [ 1487.896085][T19169] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 1487.896112][T19169] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 1487.896139][T19169] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 1487.896162][T19169] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 1487.896194][T19169] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 1487.896269][T19169] ? lockdep_hardirqs_on+0x7a/0x110 [ 1487.896294][T19169] as102_dvb_dmx_start_feed+0x70/0x290 [ 1487.896323][T19169] dmx_section_feed_start_filtering+0x518/0x6c0 [ 1487.896350][T19169] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 1487.896395][T19169] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 1487.896425][T19169] dvb_demux_do_ioctl+0x473/0x540 [ 1487.896456][T19169] dvb_usercopy+0x199/0x2e0 [ 1487.896572][T19169] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1487.896604][T19169] ? __pfx_dvb_usercopy+0x10/0x10 [ 1487.896635][T19169] ? __fget_files+0x3a6/0x420 [ 1487.896661][T19169] ? __fget_files+0x2a/0x420 [ 1487.896687][T19169] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1487.896714][T19169] dvb_demux_ioctl+0x29/0x40 [ 1487.896743][T19169] __se_sys_ioctl+0xff/0x170 [ 1487.896765][T19169] do_syscall_64+0x14d/0xf80 [ 1487.896789][T19169] ? trace_irq_disable+0x3b/0x150 [ 1487.896814][T19169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.896836][T19169] ? clear_bhb_loop+0x40/0x90 [ 1487.896861][T19169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.896882][T19169] RIP: 0033:0x7fa367dac819 [ 1487.896901][T19169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.896922][T19169] RSP: 002b:00007fa366006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1487.896946][T19169] RAX: ffffffffffffffda RBX: 00007fa368025fa0 RCX: 00007fa367dac819 [ 1487.896980][T19169] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 1487.896995][T19169] RBP: 00007fa367e42c91 R08: 0000000000000000 R09: 0000000000000000 [ 1487.897010][T19169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1487.897024][T19169] R13: 00007fa368026038 R14: 00007fa368025fa0 R15: 00007ffd40524368 [ 1487.897051][T19169] [ 1487.900086][ T5874] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1487.904675][ T10] usb 5-1: config 0 descriptor?? [ 1487.936684][T10097] usb 3-1: config 0 descriptor?? [ 1487.977103][T10097] usbhid 3-1:0.96: couldn't find an input interrupt endpoint [ 1488.245297][ T5874] as10x_usb: error during firmware upload part1 [ 1488.246573][ T5874] Registered device nBox DVB-T Dongle [ 1488.260917][ T5874] usb 2-1: USB disconnect, device number 83 [ 1488.287808][ T5874] Unregistered device nBox DVB-T Dongle [ 1488.291020][ T5874] as10x_usb: device has been disconnected [ 1488.295871][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1488.400900][ T6232] logitech 0003:046D:CA04.001A: unknown main item tag 0x0 [ 1488.400940][ T6232] logitech 0003:046D:CA04.001A: unknown main item tag 0x0 [ 1488.400968][ T6232] logitech 0003:046D:CA04.001A: unknown main item tag 0x0 [ 1488.400995][ T6232] logitech 0003:046D:CA04.001A: unknown main item tag 0x0 [ 1488.401024][ T6232] logitech 0003:046D:CA04.001A: unknown main item tag 0x0 [ 1488.401052][ T6232] logitech 0003:046D:CA04.001A: unknown main item tag 0x0 [ 1488.401081][ T6232] logitech 0003:046D:CA04.001A: unknown main item tag 0x0 [ 1488.401108][ T6232] logitech 0003:046D:CA04.001A: unknown main item tag 0x0 [ 1488.401135][ T6232] logitech 0003:046D:CA04.001A: unknown main item tag 0x0 [ 1488.401163][ T6232] logitech 0003:046D:CA04.001A: unknown main item tag 0x0 [ 1488.485566][ T6232] logitech 0003:046D:CA04.001A: hidraw0: USB HID v10.09 Device [HID 046d:ca04] on usb-dummy_hcd.5-1/input0 [ 1488.485824][ T6232] logitech 0003:046D:CA04.001A: no inputs found [ 1488.700960][ T5874] usb 6-1: USB disconnect, device number 38 [ 1488.876055][T19179] fido_id[19179]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1489.928210][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1490.121585][ T10] usb 5-1: USB disconnect, device number 122 [ 1490.751094][ T1449] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.094218][ T5874] usb 3-1: USB disconnect, device number 10 [ 1491.221680][ T1449] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.458540][ T1449] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.660314][ T1449] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.851460][ T1449] bridge_slave_1: left allmulticast mode [ 1491.851486][ T1449] bridge_slave_1: left promiscuous mode [ 1491.851657][ T1449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.938809][ T1449] bridge_slave_0: left allmulticast mode [ 1491.938836][ T1449] bridge_slave_0: left promiscuous mode [ 1491.938998][ T1449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.599823][ T1449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1492.685483][ T1449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1492.707561][ T1449] bond0 (unregistering): Released all slaves [ 1493.828681][ T1449] hsr_slave_0: left promiscuous mode [ 1493.871393][ T1449] hsr_slave_1: left promiscuous mode [ 1493.872118][ T1449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1493.872141][ T1449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1493.927530][ T1449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1493.927557][ T1449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1494.000178][ T1449] veth1_macvtap: left promiscuous mode [ 1494.000225][ T1449] veth0_macvtap: left promiscuous mode [ 1494.000317][ T1449] veth1_vlan: left promiscuous mode [ 1494.000381][ T1449] veth0_vlan: left promiscuous mode [ 1494.598853][ T1449] team0 (unregistering): Port device team_slave_1 removed [ 1494.641562][ T1449] team0 (unregistering): Port device team_slave_0 removed [ 1497.059261][ T1449] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.304755][ T1449] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.539918][ T1449] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.775130][ T1449] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0