last executing test programs: 14m56.992638249s ago: executing program 2 (id=1635): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(0xffffffffffffffff, r0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000000240)=0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x20000000000, 0xffffffffffffffff}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffff9}}, 0xe8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r2, &(0x7f0000000180), 0x400000000000077, 0x7600) r5 = openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r5, &(0x7f0000003340)={0x2020}, 0x2020) pselect6(0x2000, &(0x7f0000000040)={0xca, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) 14m54.555603787s ago: executing program 2 (id=1642): r0 = io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x93d2, 0x2, 0x45, 0x227}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x100, 0x4, 0x0, 0x0, 0x2) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) fchmod(r4, 0x60) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000000380), 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000000c0)=0x4) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x481, 0x0, 0x5}]}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x70c2, 0x4, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 14m53.416782037s ago: executing program 2 (id=1649): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000001c0)=""/58) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f00000000c0)="010000000600275eaea4ca5826d8f50ee7f9ff0000006bb57ae0fffc5aadff07000088d18ee9cb1a75d14ff5cf5ad0ca816f40a8333c3532a19673b6dab6301fd45fb0393b6c91a6449faf9de0d0f990dbac85a3b278a5463e299aabc5b97b20e57a6bcb82dfe970afdaab4a", 0x6c, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000180)={0x10, 0x0, "4ba986591b2f2a9107617f07ace0ee22"}) socket$nl_xfrm(0x10, 0x3, 0x6) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8937, &(0x7f0000000100)={'veth0_vlan\x00', @random="010000201000"}) 14m52.981489552s ago: executing program 2 (id=1651): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) fallocate(r1, 0x81, 0x7, 0x5) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x4}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x36) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x100000, &(0x7f0000000680)=ANY=[@ANYBLOB="f7ff3d70ee44ff129721c3367637f5ca0eed3c25e3d3733f09650aba91f372ad1e5e7730512767edbfbb56b92de4cd2ff4f176ca0e5da3ea28fd", @ANYRESHEX=r6, @ANYBLOB=',rbopmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYRESOCT=r6]) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0x358, 0xffff8880b870dfff) ptrace$getregset(0x4204, r9, 0x200, &(0x7f0000000140)={&(0x7f0000000380)=""/237, 0xed}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) 14m51.997773638s ago: executing program 2 (id=1660): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x6, @empty, 0x9}, {0xa, 0x4e20, 0xfffffffc, @mcast1}, r3, 0x20000}}, 0x48) r4 = getpgid(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) syz_open_procfs(r4, &(0x7f0000000000)='coredump_filter\x00') close_range(r1, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000f40)=""/243, 0xf3) 14m51.556726469s ago: executing program 2 (id=1663): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f00000001c0)=@gettaction={0xe0, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x80}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_INDEX}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x21, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14m50.569911716s ago: executing program 32 (id=1663): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f00000001c0)=@gettaction={0xe0, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x80}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_INDEX}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x21, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5m54.948094821s ago: executing program 5 (id=6067): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x110, 0x29, 0x4, {0x4, 0x1e, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x10, "e80ee304ecb784ec4655260cecea14e4"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x90, 0x29, 0x36, {0x5e, 0xf, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x250}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m54.242218026s ago: executing program 5 (id=6074): sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) socket(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000300)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) syz_usb_connect(0x3, 0x24, 0x0, 0x0) 5m51.263288456s ago: executing program 5 (id=6087): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050"], 0x3c}}, 0x10) 5m48.079783364s ago: executing program 5 (id=6091): memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) 5m47.899307247s ago: executing program 5 (id=6095): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000008000000000000000080000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000063a970a600000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m46.905645406s ago: executing program 5 (id=6100): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x401}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x24, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x24}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x9) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r4) 5m31.09999976s ago: executing program 33 (id=6100): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x401}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x24, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x24}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x9) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r4) 12.708314644s ago: executing program 4 (id=7464): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) r4 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) 11.065517079s ago: executing program 1 (id=7472): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a40), 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) r2 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x8, 0x3, 0x3, 0xfffffffe, 0x8b37]}, &(0x7f0000000200)=0x54) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x2, 0xfffffffc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x2000400c) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x2, 0x0) write$FUSE_INIT(r1, &(0x7f0000000580)={0x50, 0x0, r5, {0x7, 0x28, 0xffff, 0x200800, 0x0, 0x0, 0x1e0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x1, 0x0, 0xfffffffffffffffc, 0x600f, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x8000003, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r6, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x13, r0, 0x4b3fe000) 10.256424072s ago: executing program 6 (id=7475): r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={0x0, 0x0, 0x8}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/144, 0x90}, {&(0x7f0000000200)=""/16, 0x10}, {&(0x7f0000000b00)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f00000008c0)=""/226, 0xe2}], 0x6, &(0x7f0000000280)=""/7, 0x7}, 0x2040) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x807, 0x5) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000140)={0x1, 0x0, {0x4, 0x2, 0x201e, 0x4, 0x0, 0x0, 0x1, 0x4}}) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) unshare(0x40000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) timer_create(0x7, &(0x7f0000001880)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}, &(0x7f00000018c0)) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x208402, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643db56006d7d8ca0672b26adeb84aab07a35d1993a0197c75db86fa90005a05b01dba9072bb4e8968b03b665935faa3703640e9d6e8214154bc14ba9774ad2e88fab6bb0999dda29dff0045b1afc6847a16b115fe414a7bcc8c7b213dd2d69ccc5d204fbb6f6130715ed0b86f6f2ee27268d1b7519ef4f8b43a1adcdd557837565b3df423263af07b42ed8d93ba9c68c4b91cd432b344f2d69def185cc9269f8decf68931bdd8e7145003eec0a5f4e4ee34e8a541c13dca8040971711a7ae57b6fe26c880d0adcbe4", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000002080)=ANY=[@ANYBLOB="2900000004000007000000000000000001000000000000000100"/38], 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000002240)={0x30, 0x5, 0x0, {0x0, 0x1, 0x2, 0x101}}, 0x30) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) 9.431554978s ago: executing program 4 (id=7483): syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "dfa200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0xac9}}}}}}}, 0x0) 9.3836958s ago: executing program 4 (id=7484): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000300)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) syz_usb_connect(0x3, 0x24, 0x0, 0x0) 7.968462346s ago: executing program 1 (id=7486): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) syz_usb_connect$uac1(0x0, 0x9b, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902890003010000000904000000010100000a24010000000201020524040000090401000001020000090401010101020000072401000000000c24020100000005d5ae37460905010900000000000725010000000009e6010000010200000904020101010200000b2402011e0300019f8eca072401000000000905010910"], 0x0) 6.136349551s ago: executing program 6 (id=7493): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) r4 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000040)={&(0x7f0000000380), 0x7}) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) 6.037419545s ago: executing program 0 (id=7494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000008c0)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7c, 0x20, 0x8}}, @val={0x25, 0x3, {0x0, 0x2, 0x4}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x3d, 0xab, 0x5}}, @val={0x2d, 0x1a, {0x8, 0x3, 0x1, 0x0, {0x5, 0x9, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x6, 0x4, 0x5}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x21}}, @val={0x76, 0x6, {0x0, 0x9, 0x3d, 0x1}}}, 0x64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.828494071s ago: executing program 4 (id=7495): r0 = syz_usb_connect(0x3, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x49, 0x2a, 0xef, 0x40, 0x5c6, 0x9235, 0x90ab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x10}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="003216b8766b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20402, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20402, 0x0) syz_io_uring_setup(0x254c, &(0x7f0000000000)={0x0, 0xf19c, 0x800, 0x3, 0x39}, 0x0, 0x0) (async) syz_io_uring_setup(0x254c, &(0x7f0000000000)={0x0, 0xf19c, 0x800, 0x3, 0x39}, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, 0x0, 0x0, 0x6, 0x1006, &(0x7f0000002080)=""/4102, 0x0, 0x3}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r2, 0x0) syz_usbip_server_init(0x0) (async) syz_usbip_server_init(0x0) getsockname(r2, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000340)=0x80) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f00000000c0)={0x0, 0x3, [0x5, 0x5, 0x3e9b, 0x9, 0x6, 0x5]}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x5}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8003, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="1c03899fe1020000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x40, 0x13, 0x2, "fc98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x40, 0x13, 0x2, "fc98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r5, 0xff, 0x1, &(0x7f0000000000)='O', 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa8aaaaa310800450000300000000000019078ac1e0001ac1414aa030090780300000045000000000000f1ff280000ffffffff00000000"], 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {0x8000}, {0x0, 0xfffffffd, 0xfffffffc}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, 0x0, 0x0, 0x4}) 5.212392415s ago: executing program 3 (id=7496): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000280)={0x2}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{}, {0x4}, @broadcast, @device_a, @from_mac=@broadcast}, 0x3, @val={0x8c, 0x18, {0x0, "24e5ea3c21c3", @long="561875f04ef7062875d30600006d386c"}}}}]}, 0x54}}, 0x884) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x43) 5.042764669s ago: executing program 0 (id=7497): socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 4.957669827s ago: executing program 0 (id=7498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r4, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x40009, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000008c0)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7c, 0x20, 0x8}}, @val={0x25, 0x3, {0x0, 0x2, 0x4}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x3d, 0xab, 0x5}}, @val={0x2d, 0x1a, {0x8, 0x3, 0x1, 0x0, {0x5, 0x9, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x6, 0x4, 0x5}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x21}}, @val={0x76, 0x6, {0x0, 0x9, 0x3d, 0x1}}}, 0x64) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.815544334s ago: executing program 1 (id=7499): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x8000, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0x0, 0xfffffff8}, 0x10) r5 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000500)={0x3, 0x5, 0xd, 0x9}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 4.262789154s ago: executing program 4 (id=7500): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) r1 = syz_io_uring_setup(0x2e94, &(0x7f0000000180)={0x0, 0x100, 0x13090, 0x4, 0x1c7}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x497c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x497c, 0x0, 0x0, 0x0, 0x0) ioctl$TCFLSH(r0, 0x80047437, 0x10004000000006) syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902820003010000000904000000010100000a24010000000201020c24020000000000000000000904010000010200000904010101010200000724010000000009050109000000000007250101000000090402000001020000090402010101ff0f0009240202000000000007240100000110090582"], 0x0) (async) syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902820003010000000904000000010100000a24010000000201020c24020000000000000000000904010000010200000904010101010200000724010000000009050109000000000007250101000000090402000001020000090402010101ff0f0009240202000000000007240100000110090582"], 0x0) 4.039391389s ago: executing program 0 (id=7501): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) socket$inet(0x2, 0x0, 0x9) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x1, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 3.893194901s ago: executing program 6 (id=7502): keyctl$reject(0x13, 0x0, 0x1, 0xffffffffffffcecb, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c001480080006"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000340)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r2 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0xa}, @broadcast, 0xffffffff, 0xff, 'pimreg\x00', 'pim6reg\x00', {0xff}, {}, 0x6, 0x2, 0x4a}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@empty, @private=0xa010100, 0xffffffff, 0x0, 'veth1_to_bond\x00', 'veth1_to_batadv\x00', {}, {}, 0x2f, 0x4, 0xb}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x280}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000200)={0xc, 0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x4000000, 0xb6f, 0x7fff}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r3, 0x3b87, &(0x7f0000000240)={0x18, 0x1, 0x0, 0x0, r5, 0x7f}) write$binfmt_elf32(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003"], 0x58) r6 = fanotify_init(0x200, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r7, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) fanotify_mark(r6, 0x1, 0x40001004, r3, 0x0) ioctl$int_in(r6, 0x0, &(0x7f0000000280)=0x3) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f00000002c0), 0x2, 0x0) sendfile(r9, r9, 0x0, 0x8000002) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000000)={0xb, 0xfffffeff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) 3.720757121s ago: executing program 0 (id=7503): socket$l2tp6(0xa, 0x2, 0x73) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={0x0, 0x0, 0x8}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/144, 0x90}, {&(0x7f0000000200)=""/16, 0x10}, {&(0x7f0000000b00)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f00000008c0)=""/226, 0xe2}], 0x6, &(0x7f0000000280)=""/7, 0x7}, 0x2040) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x807, 0x5) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000140)={0x1, 0x0, {0x4, 0x2, 0x201e, 0x4, 0x0, 0x0, 0x1, 0x4}}) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) unshare(0x40000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) timer_create(0x7, &(0x7f0000001880)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}, &(0x7f00000018c0)) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x208402, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643db56006d7d8ca0672b26adeb84aab07a35d1993a0197c75db86fa90005a05b01dba9072bb4e8968b03b665935faa3703640e9d6e8214154bc14ba9774ad2e88fab6bb0999dda29dff0045b1afc6847a16b115fe414a7bcc8c7b213dd2d69ccc5d204fbb6f6130715ed0b86f6f2ee27268d1b7519ef4f8b43a1adcdd557837565b3df423263af07b42ed8d93ba9c68c4b91cd432b344f2d69def185cc9269f8decf68931bdd8e7145003eec0a5f4e4ee34e8a541c13dca8040971711a7ae57b6fe26c880d0adcbe4", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000002080)=ANY=[@ANYBLOB="2900000004000007000000000000000001000000000000000100"/38], 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000002240)={0x30, 0x5, 0x0, {0x0, 0x1, 0x2, 0x101}}, 0x30) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) 3.618963703s ago: executing program 6 (id=7504): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x22, 0x2, 0x3) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0x8800, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x5, 0xf, 0x0, 0x2, 0x8, 0x8, 0xfffffffa, 0x3}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) unshare(0x66000080) r4 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth1_vlan\x00', 0x0}) r6 = gettid() sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r5, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r6], 0x28}}, 0x0) 3.516776817s ago: executing program 3 (id=7505): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000c80), 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1401, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x80) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000180)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000480)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a4, &(0x7f0000000000)={{@any, 0xffff7dff}, @any, 0x0, 0xffffffffffffffff, 0x4000000f8, 0x8, 0x0, 0x4000002, 0x80000000}) 3.425642777s ago: executing program 3 (id=7506): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f00000011c0)='mountstats\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x4e24, @empty=0xe0000000}}, {{0x2, 0x4e25, @private=0xa010102}}}, 0x108) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 3.260333861s ago: executing program 3 (id=7507): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000580)={0x2, 0x0, 0x2, {0xc0020002, 0xe7ffffff, 0x5, 0x54ef}}) (fail_nth: 3) 2.841490891s ago: executing program 3 (id=7508): socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, 0x0}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 2.741716925s ago: executing program 3 (id=7509): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd2(0x9, 0x0) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) close_range(r2, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x7}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 2.139176186s ago: executing program 1 (id=7510): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe800000000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.20258583s ago: executing program 1 (id=7511): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xb}, {0xd, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x40000) r0 = socket(0x10, 0x1, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x44000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r3, 0x400000000000003a, 0x44000001, 0x0, &(0x7f0000000100)) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000000, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000000c0)={0x980901, 0x1001}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x2d, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000300)={0x2d, 0xffffffffffffffff, 0x4001}, 0xc) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r8, 0x0, 0x0) shutdown(r8, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x40000837, &(0x7f0000001200)={0x0, 0x679a, 0x80, 0x6, 0x1178}, 0x0, 0x0) 1.064555356s ago: executing program 4 (id=7512): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) r4 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000040)={&(0x7f0000000380), 0x7}) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) 305.587963ms ago: executing program 0 (id=7513): pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000001c0)=0x80) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2040400) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)=ANY=[], 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x100, 0x1, 0x2}) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) syz_io_uring_setup(0x2650, &(0x7f00000000c0)={0x0, 0xe00, 0x20, 0xffffffff, 0xc2}, &(0x7f0000000040)=0x0, &(0x7f0000000200)) epoll_create1(0x0) syz_open_dev$dri(0x0, 0xfffffffffffffffe, 0x104a40) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) pread64(r5, &(0x7f0000000200)=""/56, 0x38, 0x100000000) socket$kcm(0x2, 0xa, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000000)={&(0x7f00000000c0)=[{0x1, 0xda01, 0x0, 0x0}], 0x1}) syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x65c7, &(0x7f0000000300)={0x0, 0x5347, 0x80, 0x2, 0x166, 0x0, r3}, &(0x7f0000000280), &(0x7f0000000380)=0x0) syz_io_uring_submit(r4, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x59, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) 0s ago: executing program 1 (id=7514): keyctl$reject(0x13, 0x0, 0x1, 0xffffffffffffcecb, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c001480080006"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000340)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r2 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0xa}, @broadcast, 0xffffffff, 0xff, 'pimreg\x00', 'pim6reg\x00', {0xff}, {}, 0x6, 0x2, 0x4a}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@empty, @private=0xa010100, 0xffffffff, 0x0, 'veth1_to_bond\x00', 'veth1_to_batadv\x00', {}, {}, 0x2f, 0x4, 0xb}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x280}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000200)={0xc, 0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x4000000, 0xb6f, 0x7fff}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r3, 0x3b87, &(0x7f0000000240)={0x18, 0x1, 0x0, 0x0, r5, 0x7f}) write$binfmt_elf32(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003"], 0x58) r6 = fanotify_init(0x200, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r7, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) fanotify_mark(r6, 0x1, 0x40001004, r3, 0x0) ioctl$int_in(r6, 0x0, &(0x7f0000000280)=0x3) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f00000002c0), 0x2, 0x0) sendfile(r9, r9, 0x0, 0x8000002) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000000)={0xb, 0xfffffeff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 1614.904978][T29714] ? __pfx_handle_softirqs+0x10/0x10 [ 1614.904995][T29714] __x64_sys_sendmmsg+0xa0/0xc0 [ 1614.905006][T29714] do_syscall_64+0xfa/0xf80 [ 1614.905020][T29714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.905030][T29714] ? clear_bhb_loop+0x60/0xb0 [ 1614.905042][T29714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.905052][T29714] RIP: 0033:0x7f8a9d78f749 [ 1614.905063][T29714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1614.905073][T29714] RSP: 002b:00007f8a9e570038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1614.905085][T29714] RAX: ffffffffffffffda RBX: 00007f8a9d9e5fa0 RCX: 00007f8a9d78f749 [ 1614.905093][T29714] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000003 [ 1614.905099][T29714] RBP: 00007f8a9e570090 R08: 0000000000000000 R09: 0000000000000000 [ 1614.905106][T29714] R10: 0000000004000005 R11: 0000000000000246 R12: 0000000000000001 [ 1614.905112][T29714] R13: 00007f8a9d9e6038 R14: 00007f8a9d9e5fa0 R15: 00007f8a9db0fa28 [ 1614.905129][T29714] [ 1615.761261][T29723] FAULT_INJECTION: forcing a failure. [ 1615.761261][T29723] name failslab, interval 1, probability 0, space 0, times 0 [ 1615.812314][T29723] CPU: 1 UID: 0 PID: 29723 Comm: syz.3.7147 Tainted: G L syzkaller #0 PREEMPT(full) [ 1615.812346][T29723] Tainted: [L]=SOFTLOCKUP [ 1615.812353][T29723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1615.812368][T29723] Call Trace: [ 1615.812376][T29723] [ 1615.812385][T29723] dump_stack_lvl+0x189/0x250 [ 1615.812412][T29723] ? __pfx____ratelimit+0x10/0x10 [ 1615.812436][T29723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1615.812457][T29723] ? __pfx__printk+0x10/0x10 [ 1615.812486][T29723] ? __pfx___might_resched+0x10/0x10 [ 1615.812505][T29723] ? fs_reclaim_acquire+0x7d/0x100 [ 1615.812528][T29723] should_fail_ex+0x414/0x560 [ 1615.812558][T29723] should_failslab+0xa8/0x100 [ 1615.812581][T29723] __kmalloc_noprof+0xdf/0x800 [ 1615.812598][T29723] ? tomoyo_encode+0x28b/0x550 [ 1615.812623][T29723] tomoyo_encode+0x28b/0x550 [ 1615.812649][T29723] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1615.812680][T29723] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1615.812706][T29723] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1615.812734][T29723] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1615.812775][T29723] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1615.812819][T29723] ? __fget_files+0x2a/0x420 [ 1615.812846][T29723] ? __fget_files+0x3a0/0x420 [ 1615.812865][T29723] ? __fget_files+0x2a/0x420 [ 1615.812891][T29723] security_file_ioctl+0xcb/0x2d0 [ 1615.812918][T29723] __se_sys_ioctl+0x47/0x170 [ 1615.812937][T29723] do_syscall_64+0xfa/0xf80 [ 1615.812961][T29723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.812979][T29723] ? clear_bhb_loop+0x60/0xb0 [ 1615.813001][T29723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.813019][T29723] RIP: 0033:0x7fe2e4b8f749 [ 1615.813034][T29723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1615.813048][T29723] RSP: 002b:00007fe2e5ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1615.813067][T29723] RAX: ffffffffffffffda RBX: 00007fe2e4de5fa0 RCX: 00007fe2e4b8f749 [ 1615.813080][T29723] RDX: 0000200000002dc0 RSI: 00000000c058565d RDI: 0000000000000003 [ 1615.813090][T29723] RBP: 00007fe2e5ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 1615.813101][T29723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1615.813111][T29723] R13: 00007fe2e4de6038 R14: 00007fe2e4de5fa0 R15: 00007fe2e4f0fa28 [ 1615.813140][T29723] [ 1615.814512][T29723] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1616.100010][T29724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1616.422622][T29734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1616.456891][T29734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1616.487242][T29734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1616.499448][T29734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1616.857303][ T5899] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1617.027471][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 1617.054459][ T5899] usb 4-1: config 0 has an invalid interface number: 115 but max is 0 [ 1617.083159][ T5899] usb 4-1: config 0 has no interface number 0 [ 1617.103447][ T5899] usb 4-1: config 0 interface 115 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1617.128642][ T5899] usb 4-1: config 0 interface 115 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 1617.169130][ T5899] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 1617.181476][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.190142][ T5899] usb 4-1: Product: syz [ 1617.195484][ T5899] usb 4-1: Manufacturer: syz [ 1617.201171][ T5899] usb 4-1: SerialNumber: syz [ 1617.228028][ T5899] usb 4-1: config 0 descriptor?? [ 1617.333495][T29752] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(15) [ 1617.340122][T29752] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1617.380260][T29752] vhci_hcd vhci_hcd.0: Device attached [ 1617.395609][T29755] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(18) [ 1617.402228][T29755] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1617.431445][T29755] vhci_hcd vhci_hcd.0: Device attached [ 1617.458217][T29752] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(17) [ 1617.464950][T29752] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1617.477536][T29752] vhci_hcd vhci_hcd.0: Device attached [ 1617.478913][ T5915] usb 4-1: USB disconnect, device number 123 [ 1617.486024][T29752] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1617.516472][T29752] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(24) [ 1617.523117][T29752] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1617.538465][T29752] vhci_hcd vhci_hcd.0: Device attached [ 1617.559944][T29752] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(26) [ 1617.566581][T29752] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1617.585550][T29752] vhci_hcd vhci_hcd.0: Device attached [ 1617.612382][T29752] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1617.629608][T29752] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(30) [ 1617.636251][T29752] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1617.647216][T29752] vhci_hcd vhci_hcd.0: Device attached [ 1617.652383][T13215] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1617.669429][T29752] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1618.031791][T29762] vhci_hcd: connection closed [ 1618.047264][T29760] vhci_hcd: connection closed [ 1618.053124][T29756] vhci_hcd: connection closed [ 1618.054307][T29753] vhci_hcd: connection reset by peer [ 1618.070807][T29758] vhci_hcd: connection closed [ 1618.073427][ T3533] vhci_hcd vhci_hcd.4: stop threads [ 1618.098971][ T3533] vhci_hcd vhci_hcd.4: release socket [ 1618.130864][ T3533] vhci_hcd vhci_hcd.4: disconnect device [ 1618.157228][ T3533] vhci_hcd vhci_hcd.4: stop threads [ 1618.187224][ T3533] vhci_hcd vhci_hcd.4: release socket [ 1618.212020][ T3533] vhci_hcd vhci_hcd.4: disconnect device [ 1618.242491][ T3533] vhci_hcd vhci_hcd.4: stop threads [ 1618.257192][ T3533] vhci_hcd vhci_hcd.4: release socket [ 1618.285498][ T3533] vhci_hcd vhci_hcd.4: disconnect device [ 1618.307439][ T3533] vhci_hcd vhci_hcd.4: stop threads [ 1618.312680][ T3533] vhci_hcd vhci_hcd.4: release socket [ 1618.356174][ T3533] vhci_hcd vhci_hcd.4: disconnect device [ 1618.376380][ T3533] vhci_hcd vhci_hcd.4: stop threads [ 1618.403936][ T3533] vhci_hcd vhci_hcd.4: release socket [ 1618.430565][ T3533] vhci_hcd vhci_hcd.4: disconnect device [ 1618.480598][T29769] program syz.3.7158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1618.703962][T29764] vhci_hcd: connection closed [ 1618.704635][ T1136] vhci_hcd vhci_hcd.4: stop threads [ 1618.734234][ T1136] vhci_hcd vhci_hcd.4: release socket [ 1618.743079][ T1136] vhci_hcd vhci_hcd.4: disconnect device [ 1618.818694][T29777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7161'. [ 1618.874436][T29777] bond1: entered promiscuous mode [ 1618.883670][T29777] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1619.362106][T29791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1619.567685][T29794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1619.584995][T29794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1619.597587][T29794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1619.611579][T29794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1619.638247][T29782] FAULT_INJECTION: forcing a failure. [ 1619.638247][T29782] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1619.670878][T29782] CPU: 0 UID: 0 PID: 29782 Comm: syz.4.7160 Tainted: G L syzkaller #0 PREEMPT(full) [ 1619.670910][T29782] Tainted: [L]=SOFTLOCKUP [ 1619.670916][T29782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1619.670925][T29782] Call Trace: [ 1619.670934][T29782] [ 1619.670942][T29782] dump_stack_lvl+0x189/0x250 [ 1619.670967][T29782] ? __pfx____ratelimit+0x10/0x10 [ 1619.670988][T29782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1619.671007][T29782] ? __pfx__printk+0x10/0x10 [ 1619.671036][T29782] ? tcp_rate_check_app_limited+0x203/0x350 [ 1619.671057][T29782] ? look_up_lock_class+0x74/0x150 [ 1619.671083][T29782] should_fail_ex+0x414/0x560 [ 1619.671109][T29782] get_futex_key+0x1a8/0x1660 [ 1619.671138][T29782] ? __pfx_get_futex_key+0x10/0x10 [ 1619.671166][T29782] futex_wake+0xf8/0x560 [ 1619.671200][T29782] ? __pfx_futex_wake+0x10/0x10 [ 1619.671233][T29782] do_futex+0x395/0x420 [ 1619.671253][T29782] ? __pfx_do_futex+0x10/0x10 [ 1619.671272][T29782] ? __might_fault+0xb0/0x130 [ 1619.671298][T29782] mm_release+0x188/0x390 [ 1619.671316][T29782] ? __pfx_mm_release+0x10/0x10 [ 1619.671333][T29782] ? lockdep_hardirqs_on+0x98/0x140 [ 1619.671364][T29782] exit_mm+0xa8/0x2c0 [ 1619.671388][T29782] ? __pfx_exit_mm+0x10/0x10 [ 1619.671417][T29782] do_exit+0x658/0x2310 [ 1619.671445][T29782] ? cgroup1_freezing+0x20/0x350 [ 1619.671467][T29782] ? __pfx_do_exit+0x10/0x10 [ 1619.671491][T29782] ? cgroup1_freezing+0x20/0x350 [ 1619.671509][T29782] ? cgroup1_freezing+0x20/0x350 [ 1619.671537][T29782] do_group_exit+0x21c/0x2d0 [ 1619.671560][T29782] ? lockdep_hardirqs_on+0x98/0x140 [ 1619.671586][T29782] get_signal+0x1285/0x1340 [ 1619.671624][T29782] arch_do_signal_or_restart+0x9a/0x7a0 [ 1619.671651][T29782] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1619.671687][T29782] ? exit_to_user_mode_loop+0x55/0x4f0 [ 1619.671710][T29782] exit_to_user_mode_loop+0x87/0x4f0 [ 1619.671727][T29782] ? rcu_is_watching+0x15/0xb0 [ 1619.671752][T29782] do_syscall_64+0x2e3/0xf80 [ 1619.671776][T29782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.671793][T29782] ? clear_bhb_loop+0x60/0xb0 [ 1619.671814][T29782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.671830][T29782] RIP: 0033:0x7f32a978f749 [ 1619.671848][T29782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1619.671864][T29782] RSP: 002b:00007f32a79b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1619.671883][T29782] RAX: fffffffffffffe00 RBX: 00007f32a99e6180 RCX: 00007f32a978f749 [ 1619.671897][T29782] RDX: 0000000000000002 RSI: 0000200000002d00 RDI: 0000000000000004 [ 1619.671909][T29782] RBP: 00007f32a79b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1619.671920][T29782] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1619.671931][T29782] R13: 00007f32a99e6218 R14: 00007f32a99e6180 R15: 00007f32a9b0fa28 [ 1619.671961][T29782] [ 1620.102204][T29802] program syz.4.7169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1620.280561][T29808] kvm: Disabled LAPIC found during irq injection [ 1620.291726][T29808] tipc: Enabling of bearer rejected, failed to enable media [ 1620.313772][T29808] tipc: Enabling of bearer rejected, already enabled [ 1620.897285][ T5899] usb 4-1: new low-speed USB device number 124 using dummy_hcd [ 1621.077001][ T5899] usb 4-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1621.126116][ T5899] usb 4-1: config 1 interface 0 altsetting 207 endpoint 0x82 is Bulk; changing to Interrupt [ 1621.167448][ T5899] usb 4-1: config 1 interface 0 altsetting 207 endpoint 0x3 is Bulk; changing to Interrupt [ 1621.179737][ T5899] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1621.683373][T29845] program syz.6.7181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1621.868479][T29854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1621.901711][T29854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1621.930642][T29854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1621.946777][T29854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1622.171094][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1622.171131][ T30] audit: type=1800 audit(1765343814.369:5225): pid=29835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7179" name="freezer.state" dev="fuse" ino=5 res=0 errno=0 [ 1622.227319][ T9623] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1622.407415][ T9623] usb 7-1: Using ep0 maxpacket: 32 [ 1622.415216][ T9623] usb 7-1: config 0 has an invalid interface number: 225 but max is 0 [ 1622.424063][ T9623] usb 7-1: config 0 has no interface number 0 [ 1622.435196][ T9623] usb 7-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 1622.444874][ T9623] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.457268][ T9623] usb 7-1: Product: syz [ 1622.461801][ T9623] usb 7-1: Manufacturer: syz [ 1622.466778][ T9623] usb 7-1: SerialNumber: syz [ 1622.495465][ T9623] usb 7-1: config 0 descriptor?? [ 1622.960481][T13215] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1623.811961][ T5899] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1623.849093][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.954141][ T5899] usb 4-1: can't set config #1, error -71 [ 1623.995043][ T5899] usb 4-1: USB disconnect, device number 124 [ 1624.328953][ T5915] usb usb42-port1: attempt power cycle [ 1624.942640][T29884] input: syz0 as /devices/virtual/input/input30 [ 1624.960794][ T5915] usb usb42-port1: unable to enumerate USB device [ 1625.237368][ T9623] mos7840 7-1:0.225: required endpoints missing [ 1625.275050][ T9623] usb 7-1: USB disconnect, device number 26 [ 1625.576605][T29900] FAULT_INJECTION: forcing a failure. [ 1625.576605][T29900] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.650139][T29900] CPU: 1 UID: 0 PID: 29900 Comm: syz.3.7199 Tainted: G L syzkaller #0 PREEMPT(full) [ 1625.650169][T29900] Tainted: [L]=SOFTLOCKUP [ 1625.650177][T29900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1625.650191][T29900] Call Trace: [ 1625.650200][T29900] [ 1625.650213][T29900] dump_stack_lvl+0x189/0x250 [ 1625.650240][T29900] ? __pfx____ratelimit+0x10/0x10 [ 1625.650264][T29900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1625.650284][T29900] ? __pfx__printk+0x10/0x10 [ 1625.650314][T29900] ? __pfx___might_resched+0x10/0x10 [ 1625.650333][T29900] ? fs_reclaim_acquire+0x7d/0x100 [ 1625.650357][T29900] should_fail_ex+0x414/0x560 [ 1625.650385][T29900] should_failslab+0xa8/0x100 [ 1625.650408][T29900] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 1625.650434][T29900] ? __alloc_skb+0x255/0x430 [ 1625.650457][T29900] ? napi_skb_cache_get+0x4a5/0x780 [ 1625.650485][T29900] ? napi_skb_cache_get+0x151/0x780 [ 1625.650513][T29900] __alloc_skb+0x255/0x430 [ 1625.650539][T29900] ? __pfx___alloc_skb+0x10/0x10 [ 1625.650566][T29900] ? netlink_autobind+0xdb/0x300 [ 1625.650584][T29900] ? netlink_autobind+0x2c2/0x300 [ 1625.650608][T29900] netlink_sendmsg+0x5c6/0xb30 [ 1625.650638][T29900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1625.650661][T29900] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1625.650683][T29900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1625.650700][T29900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1625.650720][T29900] __sock_sendmsg+0x21c/0x270 [ 1625.650745][T29900] ____sys_sendmsg+0x505/0x820 [ 1625.650771][T29900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1625.650797][T29900] ? import_iovec+0x74/0xa0 [ 1625.650820][T29900] ___sys_sendmsg+0x21f/0x2a0 [ 1625.650841][T29900] ? __pfx____sys_sendmsg+0x10/0x10 [ 1625.650866][T29900] ? rcu_read_lock_any_held+0xb3/0x120 [ 1625.650915][T29900] ? __fget_files+0x2a/0x420 [ 1625.650935][T29900] ? __fget_files+0x3a0/0x420 [ 1625.650966][T29900] __x64_sys_sendmsg+0x19b/0x260 [ 1625.650988][T29900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1625.651015][T29900] ? __pfx_ksys_write+0x10/0x10 [ 1625.651038][T29900] ? do_syscall_64+0xbe/0xf80 [ 1625.651064][T29900] do_syscall_64+0xfa/0xf80 [ 1625.651088][T29900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.651105][T29900] ? clear_bhb_loop+0x60/0xb0 [ 1625.651124][T29900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.651141][T29900] RIP: 0033:0x7fe2e4b8f749 [ 1625.651157][T29900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1625.651172][T29900] RSP: 002b:00007fe2e5ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1625.651193][T29900] RAX: ffffffffffffffda RBX: 00007fe2e4de5fa0 RCX: 00007fe2e4b8f749 [ 1625.651207][T29900] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1625.651219][T29900] RBP: 00007fe2e5ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 1625.651231][T29900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1625.651242][T29900] R13: 00007fe2e4de6038 R14: 00007fe2e4de5fa0 R15: 00007fe2e4f0fa28 [ 1625.651273][T29900] [ 1626.310871][T29903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1626.343046][T29903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1626.393340][T29904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1626.744693][T29911] fuse: Unknown parameter 'ÿŒñ¢ þß‹G#LBÇÎRÞº¨äœÍžw€îtF)ºŽÕrFXµ ô„CiUñR_t/«fÏÞLF¬!ûq½ì' [ 1626.880348][T29911] binder: 29909:29911 unknown command 527554 [ 1626.886382][T29911] binder: 29909:29911 ioctl c0306201 200000000080 returned -22 [ 1627.814427][T29926] FAULT_INJECTION: forcing a failure. [ 1627.814427][T29926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1627.948596][T29926] CPU: 0 UID: 0 PID: 29926 Comm: syz.0.7205 Tainted: G L syzkaller #0 PREEMPT(full) [ 1627.948619][T29926] Tainted: [L]=SOFTLOCKUP [ 1627.948623][T29926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1627.948630][T29926] Call Trace: [ 1627.948635][T29926] [ 1627.948641][T29926] dump_stack_lvl+0x189/0x250 [ 1627.948658][T29926] ? __pfx____ratelimit+0x10/0x10 [ 1627.948673][T29926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1627.948685][T29926] ? __pfx__printk+0x10/0x10 [ 1627.948705][T29926] should_fail_ex+0x414/0x560 [ 1627.948721][T29926] _copy_from_user+0x2d/0xb0 [ 1627.948733][T29926] sctp_setsockopt+0x1c4/0x12c0 [ 1627.948747][T29926] ? sock_common_setsockopt+0x36/0xc0 [ 1627.948761][T29926] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1627.948774][T29926] do_sock_setsockopt+0x17c/0x1b0 [ 1627.948787][T29926] __x64_sys_setsockopt+0x13f/0x1b0 [ 1627.948799][T29926] do_syscall_64+0xfa/0xf80 [ 1627.948814][T29926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.948824][T29926] ? clear_bhb_loop+0x60/0xb0 [ 1627.948836][T29926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.948846][T29926] RIP: 0033:0x7fafa418f749 [ 1627.948856][T29926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1627.948866][T29926] RSP: 002b:00007fafa4fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1627.948878][T29926] RAX: ffffffffffffffda RBX: 00007fafa43e6090 RCX: 00007fafa418f749 [ 1627.948886][T29926] RDX: 0000000000000076 RSI: 0000000000000084 RDI: 0000000000000004 [ 1627.948892][T29926] RBP: 00007fafa4fb4090 R08: 0000000000000008 R09: 0000000000000000 [ 1627.948898][T29926] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 1627.948905][T29926] R13: 00007fafa43e6128 R14: 00007fafa43e6090 R15: 00007fafa450fa28 [ 1627.948922][T29926] [ 1628.682262][T29931] netlink: 'syz.4.7206': attribute type 5 has an invalid length. [ 1628.837272][ T5899] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1629.007191][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 1629.027750][ T5899] usb 4-1: config 0 has an invalid interface number: 225 but max is 0 [ 1629.056422][ T5899] usb 4-1: config 0 has no interface number 0 [ 1629.164056][ T5899] usb 4-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 1629.192006][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.227553][ T5899] usb 4-1: Product: syz [ 1629.239218][ T5899] usb 4-1: Manufacturer: syz [ 1629.256773][ T5899] usb 4-1: SerialNumber: syz [ 1629.299707][ T5899] usb 4-1: config 0 descriptor?? [ 1629.364315][T29939] program syz.1.7209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1629.891671][T29952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1630.657869][ T5915] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1630.827397][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 1630.843265][ T5915] usb 5-1: descriptor type invalid, skip [ 1630.852968][ T5915] usb 5-1: config 5 has an invalid interface number: 250 but max is 3 [ 1630.863582][ T5915] usb 5-1: config 5 has an invalid interface number: 6 but max is 3 [ 1630.875877][ T5915] usb 5-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config [ 1630.887224][ T5915] usb 5-1: config 5 has 2 interfaces, different from the descriptor's value: 4 [ 1630.896934][ T5915] usb 5-1: config 5 has no interface number 0 [ 1630.904019][ T5915] usb 5-1: config 5 has no interface number 1 [ 1630.913555][ T5915] usb 5-1: config 5 interface 250 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 1630.929420][ T5915] usb 5-1: too many endpoints for config 5 interface 6 altsetting 8: 118, using maximum allowed: 30 [ 1630.981773][ T5915] usb 5-1: config 5 interface 6 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 118 [ 1630.998566][ T5915] usb 5-1: config 5 interface 250 has no altsetting 0 [ 1631.006179][ T5915] usb 5-1: config 5 interface 6 has no altsetting 0 [ 1631.030744][ T5915] usb 5-1: New USB device found, idVendor=066b, idProduct=2204, bcdDevice=94.b0 [ 1631.040778][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.050928][ T5915] usb 5-1: Product: 㓮댑黧⺢鯴툂븨ጆ꽤꿓ᤀ肅몂䢢캓⥚䵲渴㬅퀹ꆕæ¢æ‹˜á©€ë¥Ÿè¿‡â¡–诱ᚒ俨财ê²çœ—Ⰷ㙬㿑â¨é”䢕뉘贈ሒæ³æ°½é…ºã©‘謆숚짖䰀ؑ៳⒡꬯ çšê¿Šì·½Ý¸æ¦ã ¦Ë–ë­œã¹è‰šâ†›í‚»è• [ 1631.078021][ T5915] usb 5-1: Manufacturer: 阾ꢶ첣㔵⻅é”ᙻ晢Ⓑ躺çœã¸»ã±ä‘ã â—ì´å†½í‘昙懂⊮î¶è£°á›«ï¯¿Ü›è…ªç£œÝ¶â¹‘⩮ꮞ஺낟⋰핀ꎫ횢曗뙿ꪄì¦á¶Œï³¦ïªºç¼µå¦ºé‚½ì“茼ꃫ㯛郲貮疜䵗冑⹗쟯࿈ᡗ쩦â’ä…¨ [ 1631.103886][ T5915] usb 5-1: SerialNumber: syz [ 1631.167340][T27958] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1631.337595][T27958] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1631.361591][T27958] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.371561][ T5915] pegasus 5-1:5.250: probe with driver pegasus failed with error -71 [ 1631.387076][T27958] usb 7-1: config 0 descriptor?? [ 1631.399228][ T5915] pegasus 5-1:5.6: probe with driver pegasus failed with error -71 [ 1631.451556][ T5915] usb 5-1: USB disconnect, device number 120 [ 1631.606053][ T5899] mos7840 4-1:0.225: required endpoints missing [ 1631.636585][ T5899] usb 4-1: USB disconnect, device number 125 [ 1631.717564][T29975] program syz.3.7221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1631.828209][T29979] FAULT_INJECTION: forcing a failure. [ 1631.828209][T29979] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.841594][T29979] CPU: 0 UID: 0 PID: 29979 Comm: syz.3.7223 Tainted: G L syzkaller #0 PREEMPT(full) [ 1631.841621][T29979] Tainted: [L]=SOFTLOCKUP [ 1631.841628][T29979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1631.841639][T29979] Call Trace: [ 1631.841646][T29979] [ 1631.841654][T29979] dump_stack_lvl+0x189/0x250 [ 1631.841680][T29979] ? __pfx____ratelimit+0x10/0x10 [ 1631.841703][T29979] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1631.841718][T29979] ? __pfx__printk+0x10/0x10 [ 1631.841734][T29979] ? __pfx___might_resched+0x10/0x10 [ 1631.841745][T29979] ? fs_reclaim_acquire+0x7d/0x100 [ 1631.841760][T29979] should_fail_ex+0x414/0x560 [ 1631.841776][T29979] should_failslab+0xa8/0x100 [ 1631.841789][T29979] __kvmalloc_node_noprof+0x175/0x920 [ 1631.841801][T29979] ? xt_alloc_table_info+0x40/0xb0 [ 1631.841819][T29979] xt_alloc_table_info+0x40/0xb0 [ 1631.841833][T29979] do_ipt_set_ctl+0x881/0xcd0 [ 1631.841849][T29979] ? rcu_is_watching+0x15/0xb0 [ 1631.841862][T29979] ? trace_contention_end+0x39/0x100 [ 1631.841875][T29979] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1631.841899][T29979] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1631.841919][T29979] ? __pfx_aa_sk_perm+0x10/0x10 [ 1631.841932][T29979] nf_setsockopt+0x26f/0x290 [ 1631.841947][T29979] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1631.841962][T29979] do_sock_setsockopt+0x17c/0x1b0 [ 1631.841974][T29979] __x64_sys_setsockopt+0x13f/0x1b0 [ 1631.841987][T29979] do_syscall_64+0xfa/0xf80 [ 1631.842001][T29979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.842011][T29979] ? clear_bhb_loop+0x60/0xb0 [ 1631.842023][T29979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.842033][T29979] RIP: 0033:0x7fe2e4b8f749 [ 1631.842044][T29979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1631.842053][T29979] RSP: 002b:00007fe2e5ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1631.842066][T29979] RAX: ffffffffffffffda RBX: 00007fe2e4de5fa0 RCX: 00007fe2e4b8f749 [ 1631.842075][T29979] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1631.842081][T29979] RBP: 00007fe2e5ad7090 R08: 0000000000000408 R09: 0000000000000000 [ 1631.842087][T29979] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1631.842094][T29979] R13: 00007fe2e4de6038 R14: 00007fe2e4de5fa0 R15: 00007fe2e4f0fa28 [ 1631.842110][T29979] [ 1632.360927][T29990] FAULT_INJECTION: forcing a failure. [ 1632.360927][T29990] name failslab, interval 1, probability 0, space 0, times 0 [ 1632.395068][T29973] netlink: 'syz.6.7220': attribute type 8 has an invalid length. [ 1632.404735][T29973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7220'. [ 1632.425123][T29990] CPU: 1 UID: 0 PID: 29990 Comm: syz.4.7227 Tainted: G L syzkaller #0 PREEMPT(full) [ 1632.425156][T29990] Tainted: [L]=SOFTLOCKUP [ 1632.425163][T29990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1632.425175][T29990] Call Trace: [ 1632.425183][T29990] [ 1632.425192][T29990] dump_stack_lvl+0x189/0x250 [ 1632.425219][T29990] ? __pfx____ratelimit+0x10/0x10 [ 1632.425244][T29990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1632.425264][T29990] ? __pfx__printk+0x10/0x10 [ 1632.425295][T29990] ? __pfx___might_resched+0x10/0x10 [ 1632.425314][T29990] ? fs_reclaim_acquire+0x7d/0x100 [ 1632.425339][T29990] should_fail_ex+0x414/0x560 [ 1632.425368][T29990] should_failslab+0xa8/0x100 [ 1632.425391][T29990] __kmalloc_noprof+0xdf/0x800 [ 1632.425409][T29990] ? io_alloc_file_tables+0x49/0xa0 [ 1632.425433][T29990] io_alloc_file_tables+0x49/0xa0 [ 1632.425454][T29990] io_sqe_files_register+0x1ee/0x7c0 [ 1632.425488][T29990] ? __pfx_io_sqe_files_register+0x10/0x10 [ 1632.425511][T29990] ? __fget_files+0x2a/0x420 [ 1632.425532][T29990] ? __fget_files+0x3a0/0x420 [ 1632.425553][T29990] ? __fget_files+0x2a/0x420 [ 1632.425576][T29990] ? io_is_uring_fops+0xd/0x50 [ 1632.425597][T29990] __se_sys_io_uring_register+0xaf5/0x1200 [ 1632.425628][T29990] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1632.425649][T29990] ? ksys_write+0x22a/0x250 [ 1632.425671][T29990] ? __pfx_ksys_write+0x10/0x10 [ 1632.425692][T29990] ? do_syscall_64+0xbe/0xf80 [ 1632.425719][T29990] do_syscall_64+0xfa/0xf80 [ 1632.425745][T29990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.425762][T29990] ? clear_bhb_loop+0x60/0xb0 [ 1632.425783][T29990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.425801][T29990] RIP: 0033:0x7f32a978f749 [ 1632.425817][T29990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1632.425833][T29990] RSP: 002b:00007f32a79f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1632.425853][T29990] RAX: ffffffffffffffda RBX: 00007f32a99e5fa0 RCX: 00007f32a978f749 [ 1632.425867][T29990] RDX: 00002000000000c0 RSI: 0000000000000002 RDI: 0000000000000003 [ 1632.425878][T29990] RBP: 00007f32a79f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1632.425890][T29990] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1632.425901][T29990] R13: 00007f32a99e6038 R14: 00007f32a99e5fa0 R15: 00007f32a9b0fa28 [ 1632.425933][T29990] [ 1632.678269][T29973] bond0: entered promiscuous mode [ 1632.683345][T29973] bond_slave_0: entered promiscuous mode [ 1632.689331][T29973] bond_slave_1: entered promiscuous mode [ 1632.697007][T29973] gretap0: entered promiscuous mode [ 1632.761059][T29973] bond0: left promiscuous mode [ 1632.765938][T29973] bond_slave_0: left promiscuous mode [ 1632.773599][T29973] bond_slave_1: left promiscuous mode [ 1632.790751][T29973] gretap0: left promiscuous mode [ 1632.875339][T27958] pegasus 7-1:0.0: probe with driver pegasus failed with error -71 [ 1632.934488][T27958] usb 7-1: USB disconnect, device number 27 [ 1633.993936][T30021] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7237'. [ 1634.069928][T30023] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7238'. [ 1634.611689][T13215] usb 5-1: new low-speed USB device number 121 using dummy_hcd [ 1634.732161][T30031] netlink: 'syz.6.7241': attribute type 7 has an invalid length. [ 1634.759557][T30033] FAULT_INJECTION: forcing a failure. [ 1634.759557][T30033] name failslab, interval 1, probability 0, space 0, times 0 [ 1634.773356][T30033] CPU: 0 UID: 0 PID: 30033 Comm: syz.0.7242 Tainted: G L syzkaller #0 PREEMPT(full) [ 1634.773375][T30033] Tainted: [L]=SOFTLOCKUP [ 1634.773379][T30033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1634.773386][T30033] Call Trace: [ 1634.773391][T30033] [ 1634.773396][T30033] dump_stack_lvl+0x189/0x250 [ 1634.773416][T30033] ? __pfx____ratelimit+0x10/0x10 [ 1634.773430][T30033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1634.773442][T30033] ? __pfx__printk+0x10/0x10 [ 1634.773457][T30033] ? __pfx___might_resched+0x10/0x10 [ 1634.773468][T30033] ? fs_reclaim_acquire+0x7d/0x100 [ 1634.773482][T30033] should_fail_ex+0x414/0x560 [ 1634.773499][T30033] should_failslab+0xa8/0x100 [ 1634.773512][T30033] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 1634.773527][T30033] ? __alloc_skb+0x255/0x430 [ 1634.773541][T30033] ? napi_skb_cache_get+0x4a5/0x780 [ 1634.773554][T30033] ? napi_skb_cache_get+0x151/0x780 [ 1634.773569][T30033] __alloc_skb+0x255/0x430 [ 1634.773584][T30033] ? __pfx___alloc_skb+0x10/0x10 [ 1634.773599][T30033] ? netlink_autobind+0xdb/0x300 [ 1634.773610][T30033] ? netlink_autobind+0x2c2/0x300 [ 1634.773623][T30033] netlink_sendmsg+0x5c6/0xb30 [ 1634.773638][T30033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1634.773651][T30033] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1634.773663][T30033] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1634.773672][T30033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1634.773684][T30033] __sock_sendmsg+0x21c/0x270 [ 1634.773698][T30033] ____sys_sendmsg+0x505/0x820 [ 1634.773711][T30033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1634.773726][T30033] ? import_iovec+0x74/0xa0 [ 1634.773738][T30033] ___sys_sendmsg+0x21f/0x2a0 [ 1634.773750][T30033] ? __pfx____sys_sendmsg+0x10/0x10 [ 1634.773763][T30033] ? rcu_read_lock_any_held+0xb3/0x120 [ 1634.773789][T30033] ? __fget_files+0x2a/0x420 [ 1634.773801][T30033] ? __fget_files+0x3a0/0x420 [ 1634.773818][T30033] __x64_sys_sendmsg+0x19b/0x260 [ 1634.773830][T30033] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1634.773845][T30033] ? __pfx_ksys_write+0x10/0x10 [ 1634.773857][T30033] ? do_syscall_64+0xbe/0xf80 [ 1634.773873][T30033] do_syscall_64+0xfa/0xf80 [ 1634.773893][T30033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.773903][T30033] ? clear_bhb_loop+0x60/0xb0 [ 1634.773915][T30033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.773924][T30033] RIP: 0033:0x7fafa418f749 [ 1634.773935][T30033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1634.773944][T30033] RSP: 002b:00007fafa4fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1634.773956][T30033] RAX: ffffffffffffffda RBX: 00007fafa43e5fa0 RCX: 00007fafa418f749 [ 1634.773964][T30033] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1634.773970][T30033] RBP: 00007fafa4fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1634.773977][T30033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1634.773982][T30033] R13: 00007fafa43e6038 R14: 00007fafa43e5fa0 R15: 00007fafa450fa28 [ 1634.773998][T30033] [ 1635.087399][T13215] usb 5-1: Invalid ep0 maxpacket: 64 [ 1635.247248][T13215] usb 5-1: new low-speed USB device number 122 using dummy_hcd [ 1635.397934][T30035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7244'. [ 1635.407416][T13215] usb 5-1: Invalid ep0 maxpacket: 64 [ 1635.413926][T13215] usb usb5-port1: attempt power cycle [ 1635.464536][T30039] FAULT_INJECTION: forcing a failure. [ 1635.464536][T30039] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.514998][T30035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1635.534963][T30039] CPU: 0 UID: 0 PID: 30039 Comm: syz.0.7244 Tainted: G L syzkaller #0 PREEMPT(full) [ 1635.534982][T30039] Tainted: [L]=SOFTLOCKUP [ 1635.534986][T30039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1635.534996][T30039] Call Trace: [ 1635.535001][T30039] [ 1635.535006][T30039] dump_stack_lvl+0x189/0x250 [ 1635.535024][T30039] ? __pfx____ratelimit+0x10/0x10 [ 1635.535038][T30039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1635.535052][T30039] ? __pfx__printk+0x10/0x10 [ 1635.535067][T30039] ? __pfx___might_resched+0x10/0x10 [ 1635.535079][T30039] ? fs_reclaim_acquire+0x7d/0x100 [ 1635.535093][T30039] should_fail_ex+0x414/0x560 [ 1635.535109][T30039] should_failslab+0xa8/0x100 [ 1635.535122][T30039] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 1635.535139][T30039] ? __alloc_skb+0x255/0x430 [ 1635.535153][T30039] ? napi_skb_cache_get+0x4a5/0x780 [ 1635.535166][T30039] ? napi_skb_cache_get+0x151/0x780 [ 1635.535181][T30039] __alloc_skb+0x255/0x430 [ 1635.535196][T30039] ? __pfx___alloc_skb+0x10/0x10 [ 1635.535211][T30039] ? netlink_autobind+0xdb/0x300 [ 1635.535222][T30039] ? netlink_autobind+0x2c2/0x300 [ 1635.535235][T30039] netlink_sendmsg+0x5c6/0xb30 [ 1635.535251][T30039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1635.535264][T30039] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1635.535277][T30039] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1635.535286][T30039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1635.535297][T30039] __sock_sendmsg+0x21c/0x270 [ 1635.535312][T30039] ____sys_sendmsg+0x505/0x820 [ 1635.535326][T30039] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1635.535341][T30039] ? import_iovec+0x74/0xa0 [ 1635.535353][T30039] ___sys_sendmsg+0x21f/0x2a0 [ 1635.535365][T30039] ? __pfx____sys_sendmsg+0x10/0x10 [ 1635.535378][T30039] ? rcu_read_lock_any_held+0xb3/0x120 [ 1635.535405][T30039] ? __fget_files+0x2a/0x420 [ 1635.535417][T30039] ? __fget_files+0x3a0/0x420 [ 1635.535434][T30039] __x64_sys_sendmsg+0x19b/0x260 [ 1635.535445][T30039] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1635.535460][T30039] ? __pfx_ksys_write+0x10/0x10 [ 1635.535472][T30039] ? do_syscall_64+0xbe/0xf80 [ 1635.535488][T30039] do_syscall_64+0xfa/0xf80 [ 1635.535503][T30039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.535513][T30039] ? clear_bhb_loop+0x60/0xb0 [ 1635.535524][T30039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.535537][T30039] RIP: 0033:0x7fafa418f749 [ 1635.535547][T30039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1635.535556][T30039] RSP: 002b:00007fafa4fb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1635.535567][T30039] RAX: ffffffffffffffda RBX: 00007fafa43e6090 RCX: 00007fafa418f749 [ 1635.535575][T30039] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 1635.535581][T30039] RBP: 00007fafa4fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1635.535588][T30039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1635.535594][T30039] R13: 00007fafa43e6128 R14: 00007fafa43e6090 R15: 00007fafa450fa28 [ 1635.535610][T30039] [ 1635.950346][T13215] usb 5-1: new low-speed USB device number 123 using dummy_hcd [ 1635.952326][T30042] tipc: Enabled bearer , priority 0 [ 1635.978006][T13215] usb 5-1: Invalid ep0 maxpacket: 64 [ 1635.981745][T30042] syzkaller0: entered promiscuous mode [ 1635.995967][T30043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1636.010968][T30042] syzkaller0: entered allmulticast mode [ 1636.064133][T30043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1636.074389][T30041] tipc: Resetting bearer [ 1636.107239][T13215] usb 5-1: new low-speed USB device number 124 using dummy_hcd [ 1636.129861][T13215] usb 5-1: Invalid ep0 maxpacket: 64 [ 1636.136065][T13215] usb usb5-port1: unable to enumerate USB device [ 1636.166191][T30041] tipc: Disabling bearer [ 1636.541804][T30063] program syz.6.7251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1638.169028][ T5899] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1638.343756][ T5899] usb 7-1: Using ep0 maxpacket: 8 [ 1638.355835][ T5899] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 198, setting to 64 [ 1638.418745][ T5899] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1638.485613][ T5899] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1638.527203][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.560519][ T5899] usb 7-1: Product: syz [ 1638.582208][ T5899] usb 7-1: Manufacturer: syz [ 1638.608666][ T5899] usb 7-1: SerialNumber: syz [ 1638.652554][ T5899] usb 7-1: config 0 descriptor?? [ 1638.716245][ T5899] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 1638.830355][T30105] netlink: 'syz.4.7265': attribute type 10 has an invalid length. [ 1638.886189][T30105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1638.919851][T30105] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1639.000370][T30105] netlink: 'syz.4.7265': attribute type 10 has an invalid length. [ 1639.052760][T30105] netlink: 'syz.4.7265': attribute type 10 has an invalid length. [ 1639.101317][T30105] netlink: 'syz.4.7265': attribute type 10 has an invalid length. [ 1639.146378][T30105] netlink: 'syz.4.7265': attribute type 10 has an invalid length. [ 1639.181105][T30105] netlink: 'syz.4.7265': attribute type 10 has an invalid length. [ 1639.237047][T30105] netlink: 'syz.4.7265': attribute type 10 has an invalid length. [ 1639.280733][T30105] netlink: 'syz.4.7265': attribute type 10 has an invalid length. [ 1639.306157][ T5899] snd_usb_toneport 7-1:0.0: set_interface failed [ 1639.331545][ T5899] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 1639.344170][T30105] netlink: 'syz.4.7265': attribute type 10 has an invalid length. [ 1639.390354][ T5899] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 1639.455943][ T5899] usb 7-1: USB disconnect, device number 28 [ 1639.727641][T30112] FAULT_INJECTION: forcing a failure. [ 1639.727641][T30112] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.758429][T30112] CPU: 1 UID: 0 PID: 30112 Comm: syz.4.7267 Tainted: G L syzkaller #0 PREEMPT(full) [ 1639.758461][T30112] Tainted: [L]=SOFTLOCKUP [ 1639.758468][T30112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1639.758480][T30112] Call Trace: [ 1639.758488][T30112] [ 1639.758497][T30112] dump_stack_lvl+0x189/0x250 [ 1639.758531][T30112] ? __pfx____ratelimit+0x10/0x10 [ 1639.758556][T30112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1639.758577][T30112] ? __pfx__printk+0x10/0x10 [ 1639.758606][T30112] ? __pfx___might_resched+0x10/0x10 [ 1639.758626][T30112] ? fs_reclaim_acquire+0x7d/0x100 [ 1639.758650][T30112] should_fail_ex+0x414/0x560 [ 1639.758678][T30112] should_failslab+0xa8/0x100 [ 1639.758701][T30112] __kmalloc_noprof+0xdf/0x800 [ 1639.758719][T30112] ? alloc_pipe_info+0x1fd/0x4d0 [ 1639.758743][T30112] alloc_pipe_info+0x1fd/0x4d0 [ 1639.758765][T30112] splice_direct_to_actor+0xa5d/0xcc0 [ 1639.758802][T30112] ? __pfx_aa_file_perm+0x10/0x10 [ 1639.758825][T30112] ? __pfx_direct_splice_actor+0x10/0x10 [ 1639.758847][T30112] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1639.758879][T30112] do_splice_direct+0x181/0x270 [ 1639.758904][T30112] ? __pfx_do_splice_direct+0x10/0x10 [ 1639.758923][T30112] ? common_file_perm+0x1b5/0x220 [ 1639.758943][T30112] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1639.758968][T30112] ? bpf_lsm_file_permission+0x9/0x20 [ 1639.758986][T30112] ? security_file_permission+0x75/0x290 [ 1639.759013][T30112] ? rw_verify_area+0x255/0x4d0 [ 1639.759034][T30112] do_sendfile+0x4da/0x7e0 [ 1639.759055][T30112] ? __pfx_vfs_write+0x10/0x10 [ 1639.759080][T30112] ? __pfx_do_sendfile+0x10/0x10 [ 1639.759101][T30112] ? __fget_files+0x3a0/0x420 [ 1639.759132][T30112] __se_sys_sendfile64+0x13e/0x190 [ 1639.759157][T30112] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1639.759181][T30112] ? do_syscall_64+0xbe/0xf80 [ 1639.759210][T30112] do_syscall_64+0xfa/0xf80 [ 1639.759234][T30112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.759251][T30112] ? clear_bhb_loop+0x60/0xb0 [ 1639.759273][T30112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.759290][T30112] RIP: 0033:0x7f32a978f749 [ 1639.759307][T30112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1639.759323][T30112] RSP: 002b:00007f32a79f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1639.759344][T30112] RAX: ffffffffffffffda RBX: 00007f32a99e5fa0 RCX: 00007f32a978f749 [ 1639.759358][T30112] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1639.759369][T30112] RBP: 00007f32a79f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1639.759381][T30112] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001 [ 1639.759392][T30112] R13: 00007f32a99e6038 R14: 00007f32a99e5fa0 R15: 00007f32a9b0fa28 [ 1639.759423][T30112] [ 1640.108489][T30113] FAULT_INJECTION: forcing a failure. [ 1640.108489][T30113] name failslab, interval 1, probability 0, space 0, times 0 [ 1640.121477][T30113] CPU: 1 UID: 0 PID: 30113 Comm: syz.0.7266 Tainted: G L syzkaller #0 PREEMPT(full) [ 1640.121506][T30113] Tainted: [L]=SOFTLOCKUP [ 1640.121514][T30113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1640.121532][T30113] Call Trace: [ 1640.121540][T30113] [ 1640.121548][T30113] dump_stack_lvl+0x189/0x250 [ 1640.121575][T30113] ? __pfx____ratelimit+0x10/0x10 [ 1640.121598][T30113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1640.121619][T30113] ? __pfx__printk+0x10/0x10 [ 1640.121649][T30113] ? __pfx___might_resched+0x10/0x10 [ 1640.121667][T30113] ? fs_reclaim_acquire+0x7d/0x100 [ 1640.121692][T30113] should_fail_ex+0x414/0x560 [ 1640.121721][T30113] should_failslab+0xa8/0x100 [ 1640.121743][T30113] __kmalloc_noprof+0xdf/0x800 [ 1640.121761][T30113] ? tomoyo_encode+0x28b/0x550 [ 1640.121787][T30113] tomoyo_encode+0x28b/0x550 [ 1640.121813][T30113] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1640.121844][T30113] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1640.121870][T30113] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1640.121898][T30113] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1640.121939][T30113] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1640.121985][T30113] ? __fget_files+0x2a/0x420 [ 1640.122011][T30113] ? __fget_files+0x3a0/0x420 [ 1640.122031][T30113] ? __fget_files+0x2a/0x420 [ 1640.122056][T30113] security_file_ioctl+0xcb/0x2d0 [ 1640.122082][T30113] __se_sys_ioctl+0x47/0x170 [ 1640.122103][T30113] do_syscall_64+0xfa/0xf80 [ 1640.122128][T30113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.122146][T30113] ? clear_bhb_loop+0x60/0xb0 [ 1640.122168][T30113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.122185][T30113] RIP: 0033:0x7fafa418f749 [ 1640.122203][T30113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1640.122219][T30113] RSP: 002b:00007fafa4fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1640.122239][T30113] RAX: ffffffffffffffda RBX: 00007fafa43e5fa0 RCX: 00007fafa418f749 [ 1640.122252][T30113] RDX: 0000200000000140 RSI: 00000000c04064a0 RDI: 0000000000000004 [ 1640.122265][T30113] RBP: 00007fafa4fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1640.122276][T30113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1640.122288][T30113] R13: 00007fafa43e6038 R14: 00007fafa43e5fa0 R15: 00007fafa450fa28 [ 1640.122321][T30113] [ 1640.122342][T30113] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1641.655128][T30136] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7274'. [ 1641.817780][T30140] netlink: 276 bytes leftover after parsing attributes in process `syz.1.7274'. [ 1641.848869][T30140] netlink: 276 bytes leftover after parsing attributes in process `syz.1.7274'. [ 1643.827669][ T5915] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1643.847557][T13215] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1643.948090][T30172] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7287'. [ 1644.037207][ T5915] usb 7-1: Using ep0 maxpacket: 8 [ 1644.044629][ T5915] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 198, setting to 64 [ 1644.097693][T13215] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1644.117635][ T5915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1644.124614][T13215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.141237][T13215] usb 4-1: Product: syz [ 1644.161391][ T5915] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1644.172620][T13215] usb 4-1: Manufacturer: syz [ 1644.180746][T13215] usb 4-1: SerialNumber: syz [ 1644.185920][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.209895][ T5915] usb 7-1: Product: syz [ 1644.220638][ T5915] usb 7-1: Manufacturer: syz [ 1644.225453][ T5915] usb 7-1: SerialNumber: syz [ 1644.267812][T30175] netlink: 276 bytes leftover after parsing attributes in process `syz.1.7287'. [ 1644.298980][T30175] netlink: 276 bytes leftover after parsing attributes in process `syz.1.7287'. [ 1644.308051][ T5915] usb 7-1: config 0 descriptor?? [ 1644.364152][ T5915] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 1644.578905][T30186] xt_policy: output policy not valid in PREROUTING and INPUT [ 1644.659270][T13215] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1644.683899][T13215] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1644.977825][ T5915] snd_usb_toneport 7-1:0.0: set_interface failed [ 1644.990106][ T5915] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 1645.127914][ T5915] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 1645.210716][ T5915] usb 7-1: USB disconnect, device number 29 [ 1645.957589][T13215] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1645.977400][T13215] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1645.997189][T13215] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1646.009920][T13215] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1646.089368][ T5955] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 1646.129366][T30200] FAULT_INJECTION: forcing a failure. [ 1646.129366][T30200] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.142507][T30200] CPU: 0 UID: 0 PID: 30200 Comm: syz.1.7294 Tainted: G L syzkaller #0 PREEMPT(full) [ 1646.142537][T30200] Tainted: [L]=SOFTLOCKUP [ 1646.142543][T30200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1646.142551][T30200] Call Trace: [ 1646.142559][T30200] [ 1646.142567][T30200] dump_stack_lvl+0x189/0x250 [ 1646.142591][T30200] ? __pfx____ratelimit+0x10/0x10 [ 1646.142612][T30200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1646.142629][T30200] ? __pfx__printk+0x10/0x10 [ 1646.142654][T30200] ? __pfx___might_resched+0x10/0x10 [ 1646.142670][T30200] ? fs_reclaim_acquire+0x7d/0x100 [ 1646.142691][T30200] should_fail_ex+0x414/0x560 [ 1646.142720][T30200] should_failslab+0xa8/0x100 [ 1646.142743][T30200] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 1646.142769][T30200] ? __alloc_skb+0x255/0x430 [ 1646.142790][T30200] ? napi_skb_cache_get+0x4a5/0x780 [ 1646.142811][T30200] ? napi_skb_cache_get+0x151/0x780 [ 1646.142835][T30200] __alloc_skb+0x255/0x430 [ 1646.142860][T30200] ? __pfx___alloc_skb+0x10/0x10 [ 1646.142885][T30200] ? netlink_autobind+0xdb/0x300 [ 1646.142904][T30200] ? netlink_autobind+0x2c2/0x300 [ 1646.142928][T30200] netlink_sendmsg+0x5c6/0xb30 [ 1646.142953][T30200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1646.142975][T30200] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1646.142994][T30200] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1646.143010][T30200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1646.143029][T30200] __sock_sendmsg+0x21c/0x270 [ 1646.143052][T30200] ____sys_sendmsg+0x505/0x820 [ 1646.143072][T30200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1646.143097][T30200] ? import_iovec+0x74/0xa0 [ 1646.143117][T30200] ___sys_sendmsg+0x21f/0x2a0 [ 1646.143136][T30200] ? __pfx____sys_sendmsg+0x10/0x10 [ 1646.143158][T30200] ? rcu_read_lock_any_held+0xb3/0x120 [ 1646.143200][T30200] ? __fget_files+0x2a/0x420 [ 1646.143218][T30200] ? __fget_files+0x3a0/0x420 [ 1646.143254][T30200] __x64_sys_sendmsg+0x19b/0x260 [ 1646.143275][T30200] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1646.143301][T30200] ? __pfx_ksys_write+0x10/0x10 [ 1646.143322][T30200] ? do_syscall_64+0xbe/0xf80 [ 1646.143348][T30200] do_syscall_64+0xfa/0xf80 [ 1646.143373][T30200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.143391][T30200] ? clear_bhb_loop+0x60/0xb0 [ 1646.143412][T30200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.143428][T30200] RIP: 0033:0x7f1a2ab8f749 [ 1646.143445][T30200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1646.143462][T30200] RSP: 002b:00007f1a2baae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1646.143481][T30200] RAX: ffffffffffffffda RBX: 00007f1a2ade5fa0 RCX: 00007f1a2ab8f749 [ 1646.143494][T30200] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 1646.143506][T30200] RBP: 00007f1a2baae090 R08: 0000000000000000 R09: 0000000000000000 [ 1646.143518][T30200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1646.143527][T30200] R13: 00007f1a2ade6038 R14: 00007f1a2ade5fa0 R15: 00007f1a2af0fa28 [ 1646.143555][T30200] [ 1646.561995][ T5955] usb 5-1: not running at top speed; connect to a high speed hub [ 1646.575757][ T5955] usb 5-1: config 1 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1646.603103][ T5955] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1646.633988][ T5955] usb 5-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.40 [ 1646.675284][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.716223][ T5955] usb 5-1: Product: 䒰烨æªé¥¸â­¯åš¼í˜³ä¨‚죰í¹å¿µ [ 1646.748198][ T5955] usb 5-1: Manufacturer: ç´ëˆé¤‰â¿‹ä­šì³­æ¬äš›é²¢ã°Ÿã±¾ïšºå•¥à£Žï¾¡êŒ˜ç˜¦ë±—鳴ﰅ앤ᡯ嗼㼊ì¬à³œç£¶ê±‰î……兽ﻱ➆ꬮ둷悄瞙è˜ï™…ו侺䣠톜能ῃ硧樊꫺⣄碊잴ꢛख़ೱῡੲè–á¾è¦‰å‡–ã·Žâ³Õ½ã•ã†¾èšµé½…멛넥핰í³ã½°êº©êŠä¡ƒ之羔ã–逮畑鶺뮥ë‰ã‹‘城佚￲㳾䦈麎у椶 [ 1646.914152][ T5955] usb 5-1: SerialNumber: â ‰ [ 1646.962106][T30196] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1647.046814][ T5915] usb 4-1: USB disconnect, device number 126 [ 1647.231448][ T5955] usbhid 5-1:1.0: can't add hid device: -71 [ 1647.274261][ T5955] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1647.348567][ T5955] usb 5-1: USB disconnect, device number 125 [ 1647.545854][T30223] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7301'. [ 1647.800172][T30225] netlink: 276 bytes leftover after parsing attributes in process `syz.3.7301'. [ 1647.837426][T30225] netlink: 276 bytes leftover after parsing attributes in process `syz.3.7301'. [ 1648.321021][ T30] audit: type=1326 audit(1765343840.509:5226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30228 comm="syz.6.7303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9d78f749 code=0x7ffc0000 [ 1648.442735][ T30] audit: type=1326 audit(1765343840.519:5227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30228 comm="syz.6.7303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a9d78f749 code=0x7ffc0000 [ 1648.608581][ T30] audit: type=1326 audit(1765343840.519:5228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30228 comm="syz.6.7303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9d78f749 code=0x7ffc0000 [ 1648.786950][ T30] audit: type=1326 audit(1765343840.539:5229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30228 comm="syz.6.7303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a9d78f749 code=0x7ffc0000 [ 1648.963261][ T30] audit: type=1326 audit(1765343840.539:5230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30228 comm="syz.6.7303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9d78f749 code=0x7ffc0000 [ 1649.162137][ T30] audit: type=1326 audit(1765343840.559:5231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30228 comm="syz.6.7303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9d78f749 code=0x7ffc0000 [ 1649.370090][ T30] audit: type=1326 audit(1765343840.559:5232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30228 comm="syz.6.7303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8a9d78f749 code=0x7ffc0000 [ 1649.596111][ T30] audit: type=1326 audit(1765343840.559:5233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30228 comm="syz.6.7303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9d78f749 code=0x7ffc0000 [ 1649.697289][ T30] audit: type=1326 audit(1765343840.559:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30228 comm="syz.6.7303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9d78f749 code=0x7ffc0000 [ 1649.987199][ T30] audit: type=1326 audit(1765343840.559:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30228 comm="syz.6.7303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a9d78f749 code=0x7ffc0000 [ 1650.957301][ T5915] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1651.162870][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1651.343367][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1651.392074][ T5915] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1651.517639][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.689433][ T5915] usb 7-1: config 0 descriptor?? [ 1652.175082][ T5915] isku 0003:1E7D:319C.0014: item fetching failed at offset 5/7 [ 1652.214088][ T5915] isku 0003:1E7D:319C.0014: parse failed [ 1652.237276][ T5915] isku 0003:1E7D:319C.0014: probe with driver isku failed with error -22 [ 1652.472152][ T5912] usb 7-1: USB disconnect, device number 30 [ 1653.416855][T30282] FAULT_INJECTION: forcing a failure. [ 1653.416855][T30282] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.447521][T30282] CPU: 0 UID: 0 PID: 30282 Comm: syz.4.7314 Tainted: G L syzkaller #0 PREEMPT(full) [ 1653.447540][T30282] Tainted: [L]=SOFTLOCKUP [ 1653.447562][T30282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1653.447569][T30282] Call Trace: [ 1653.447575][T30282] [ 1653.447580][T30282] dump_stack_lvl+0x189/0x250 [ 1653.447598][T30282] ? __pfx____ratelimit+0x10/0x10 [ 1653.447613][T30282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1653.447624][T30282] ? __pfx__printk+0x10/0x10 [ 1653.447641][T30282] ? __pfx___might_resched+0x10/0x10 [ 1653.447655][T30282] should_fail_ex+0x414/0x560 [ 1653.447679][T30282] should_failslab+0xa8/0x100 [ 1653.447703][T30282] __kmalloc_noprof+0xdf/0x800 [ 1653.447720][T30282] ? kfree+0x4d/0x660 [ 1653.447740][T30282] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1653.447767][T30282] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1653.447782][T30282] ? tomoyo_domain+0xd8/0x130 [ 1653.447803][T30282] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1653.447818][T30282] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1653.447833][T30282] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1653.447857][T30282] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1653.447881][T30282] ? __fget_files+0x2a/0x420 [ 1653.447896][T30282] ? __fget_files+0x3a0/0x420 [ 1653.447907][T30282] ? __fget_files+0x2a/0x420 [ 1653.447921][T30282] security_file_ioctl+0xcb/0x2d0 [ 1653.447937][T30282] __se_sys_ioctl+0x47/0x170 [ 1653.447948][T30282] do_syscall_64+0xfa/0xf80 [ 1653.447963][T30282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.447972][T30282] ? clear_bhb_loop+0x60/0xb0 [ 1653.447984][T30282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.447994][T30282] RIP: 0033:0x7f32a978f749 [ 1653.448005][T30282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1653.448014][T30282] RSP: 002b:00007f32a79f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1653.448026][T30282] RAX: ffffffffffffffda RBX: 00007f32a99e5fa0 RCX: 00007f32a978f749 [ 1653.448033][T30282] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 1653.448040][T30282] RBP: 00007f32a79f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1653.448047][T30282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1653.448053][T30282] R13: 00007f32a99e6038 R14: 00007f32a99e5fa0 R15: 00007f32a9b0fa28 [ 1653.448069][T30282] [ 1653.449938][T30282] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1653.954611][T30282] loop8: detected capacity change from 0 to 8 [ 1653.983689][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1653.983708][ T30] audit: type=1326 audit(1765343846.179:5262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30274 comm="syz.1.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ab8f749 code=0x7ffc0000 [ 1654.042076][T30282] Dev loop8: unable to read RDB block 8 [ 1654.062736][T30282] loop8: unable to read partition table [ 1654.075729][T30282] loop8: partition table beyond EOD, truncated [ 1654.094220][T30282] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1654.150255][ T30] audit: type=1326 audit(1765343846.219:5263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30274 comm="syz.1.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a2ab8f749 code=0x7ffc0000 [ 1654.178644][ T30] audit: type=1326 audit(1765343846.219:5264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30274 comm="syz.1.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ab8f749 code=0x7ffc0000 [ 1654.297383][ T30] audit: type=1326 audit(1765343846.229:5265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30274 comm="syz.1.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ab8f749 code=0x7ffc0000 [ 1654.471998][ T30] audit: type=1326 audit(1765343846.239:5266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30274 comm="syz.1.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a2ab8f749 code=0x7ffc0000 [ 1654.570909][ T30] audit: type=1326 audit(1765343846.239:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30274 comm="syz.1.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ab8f749 code=0x7ffc0000 [ 1654.790834][ T30] audit: type=1326 audit(1765343846.239:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30274 comm="syz.1.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ab8f749 code=0x7ffc0000 [ 1654.928777][ T30] audit: type=1326 audit(1765343846.239:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30274 comm="syz.1.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1a2ab8f749 code=0x7ffc0000 [ 1655.058063][ T30] audit: type=1326 audit(1765343846.239:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30274 comm="syz.1.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ab8f749 code=0x7ffc0000 [ 1655.151936][ T30] audit: type=1326 audit(1765343846.239:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30274 comm="syz.1.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ab8f749 code=0x7ffc0000 [ 1655.198645][T30310] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1655.244154][ T5912] IPVS: starting estimator thread 0... [ 1655.264298][T30310] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1655.347297][T30311] IPVS: using max 33 ests per chain, 79200 per kthread [ 1656.708595][ T5915] IPVS: starting estimator thread 0... [ 1656.817325][T30320] IPVS: using max 51 ests per chain, 122400 per kthread [ 1661.145173][T30370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7336'. [ 1661.384236][T30376] fuse: Unknown parameter 'fdB0x0000000000000003' [ 1661.458047][T30376] tipc: Enabled bearer , priority 0 [ 1661.498436][T30376] syzkaller0: entered promiscuous mode [ 1661.504369][T30376] syzkaller0: entered allmulticast mode [ 1661.724206][T30375] tipc: Resetting bearer [ 1661.886140][T30375] tipc: Disabling bearer [ 1664.633073][T30393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1665.007364][ T5915] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1665.159499][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.176877][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1665.194325][ T5915] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1665.204976][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.229784][ T5915] usb 4-1: config 0 descriptor?? [ 1665.253454][ T5915] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1665.622569][T30418] tipc: Enabled bearer , priority 0 [ 1665.630247][T30418] syzkaller0: entered promiscuous mode [ 1665.648820][T30418] syzkaller0: entered allmulticast mode [ 1665.760951][T30417] tipc: Resetting bearer [ 1665.861315][T30417] tipc: Disabling bearer [ 1666.229445][T30429] fuse: Unknown parameter 'fdB0x0000000000000003' [ 1666.284550][T30429] tipc: Enabled bearer , priority 0 [ 1666.294797][T30429] syzkaller0: entered promiscuous mode [ 1666.303392][T30429] syzkaller0: entered allmulticast mode [ 1666.382225][T30427] tipc: Resetting bearer [ 1666.441394][T30427] tipc: Disabling bearer [ 1666.487538][ T5912] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1666.504189][ T5955] IPVS: starting estimator thread 0... [ 1666.659146][T30435] IPVS: using max 30 ests per chain, 72000 per kthread [ 1666.666194][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 1666.682391][ T5912] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 198, setting to 64 [ 1666.704110][ T5912] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1666.723321][ T5912] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1666.742991][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.761180][ T5912] usb 7-1: Product: syz [ 1666.771498][ T5912] usb 7-1: Manufacturer: syz [ 1666.780832][ T5912] usb 7-1: SerialNumber: syz [ 1666.813399][ T5912] usb 7-1: config 0 descriptor?? [ 1666.836862][ T5912] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 1667.360458][ T5912] snd_usb_toneport 7-1:0.0: set_interface failed [ 1667.507335][ T5912] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 1667.521319][ T5912] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 1667.544786][ T5912] usb 7-1: USB disconnect, device number 31 [ 1667.735289][ T5915] usb 4-1: USB disconnect, device number 127 [ 1668.102671][T30460] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 1668.891766][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.905901][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.999821][T30471] FAULT_INJECTION: forcing a failure. [ 1668.999821][T30471] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.022770][T30471] CPU: 1 UID: 0 PID: 30471 Comm: syz.3.7364 Tainted: G L syzkaller #0 PREEMPT(full) [ 1669.022801][T30471] Tainted: [L]=SOFTLOCKUP [ 1669.022808][T30471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1669.022819][T30471] Call Trace: [ 1669.022828][T30471] [ 1669.022837][T30471] dump_stack_lvl+0x189/0x250 [ 1669.022866][T30471] ? __pfx____ratelimit+0x10/0x10 [ 1669.022889][T30471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1669.022911][T30471] ? __pfx__printk+0x10/0x10 [ 1669.022941][T30471] ? __pfx___might_resched+0x10/0x10 [ 1669.022965][T30471] should_fail_ex+0x414/0x560 [ 1669.022994][T30471] should_failslab+0xa8/0x100 [ 1669.023017][T30471] __kmalloc_noprof+0xdf/0x800 [ 1669.023035][T30471] ? video_usercopy+0x18e/0x13f0 [ 1669.023065][T30471] video_usercopy+0x18e/0x13f0 [ 1669.023097][T30471] ? __pfx___video_do_ioctl+0x10/0x10 [ 1669.023121][T30471] ? __pfx_video_usercopy+0x10/0x10 [ 1669.023159][T30471] ? __fget_files+0x3a0/0x420 [ 1669.023186][T30471] v4l2_ioctl+0x18d/0x1e0 [ 1669.023208][T30471] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1669.023230][T30471] __se_sys_ioctl+0xfc/0x170 [ 1669.023251][T30471] do_syscall_64+0xfa/0xf80 [ 1669.023276][T30471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.023294][T30471] ? clear_bhb_loop+0x60/0xb0 [ 1669.023331][T30471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.023349][T30471] RIP: 0033:0x7fe2e4b8f749 [ 1669.023366][T30471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1669.023383][T30471] RSP: 002b:00007fe2e5ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1669.023402][T30471] RAX: ffffffffffffffda RBX: 00007fe2e4de5fa0 RCX: 00007fe2e4b8f749 [ 1669.023416][T30471] RDX: 0000200000000380 RSI: 00000000c0845657 RDI: 0000000000000003 [ 1669.023429][T30471] RBP: 00007fe2e5ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 1669.023442][T30471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1669.023453][T30471] R13: 00007fe2e4de6038 R14: 00007fe2e4de5fa0 R15: 00007fe2e4f0fa28 [ 1669.023483][T30471] [ 1669.477228][ T5955] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1669.644929][ T5955] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1669.657495][ T5955] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1669.674156][ T5955] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1669.683885][ T5955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.721027][ T5955] usb 7-1: Product: syz [ 1669.735966][ T5955] usb 7-1: Manufacturer: syz [ 1669.749122][ T5955] usb 7-1: SerialNumber: syz [ 1669.988672][T30469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1670.011305][T30469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1670.030080][ T5955] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1670.079720][ T5955] usb 7-1: USB disconnect, device number 32 [ 1670.577308][ T5955] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1670.744916][T30044] batadv2: left promiscuous mode [ 1670.767765][T30044] bridge0: port 3(batadv2) entered disabled state [ 1670.775797][ T5955] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.791687][T30044] bridge_slave_1: left allmulticast mode [ 1670.797612][ T5955] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1670.808359][ T5955] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1670.815270][T30044] bridge_slave_1: left promiscuous mode [ 1670.829843][T30044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.840767][ T5955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.842328][T30044] bridge_slave_0: left allmulticast mode [ 1670.855768][T30044] bridge_slave_0: left promiscuous mode [ 1670.857588][ T5955] usb 7-1: Product: syz [ 1670.862127][T30044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.865496][ T5955] usb 7-1: Manufacturer: syz [ 1670.865521][ T5955] usb 7-1: SerialNumber: syz [ 1671.588493][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1671.588511][ T30] audit: type=1326 audit(1765343863.769:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30491 comm="syz.3.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4b8f749 code=0x7ffc0000 [ 1671.757224][ T30] audit: type=1326 audit(1765343863.819:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30491 comm="syz.3.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe2e4b8f749 code=0x7ffc0000 [ 1671.908956][ T30] audit: type=1326 audit(1765343863.819:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30491 comm="syz.3.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4b8f749 code=0x7ffc0000 [ 1671.954220][ T30] audit: type=1326 audit(1765343863.819:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30491 comm="syz.3.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fe2e4b8f749 code=0x7ffc0000 [ 1671.982667][ T30] audit: type=1326 audit(1765343863.819:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30491 comm="syz.3.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4b8f749 code=0x7ffc0000 [ 1672.014832][ T30] audit: type=1326 audit(1765343863.819:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30491 comm="syz.3.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fe2e4b8f749 code=0x7ffc0000 [ 1672.048274][ T30] audit: type=1326 audit(1765343863.829:5290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30491 comm="syz.3.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4b8f749 code=0x7ffc0000 [ 1672.074999][ T30] audit: type=1326 audit(1765343863.829:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30491 comm="syz.3.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2e4b8f749 code=0x7ffc0000 [ 1672.120993][T30044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1672.136035][T30044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1672.148811][ T30] audit: type=1326 audit(1765343863.829:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30491 comm="syz.3.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4b8f749 code=0x7ffc0000 [ 1672.203990][T30044] bond0 (unregistering): Released all slaves [ 1672.247387][ T30] audit: type=1326 audit(1765343863.839:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30491 comm="syz.3.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe2e4b8f749 code=0x7ffc0000 [ 1672.336440][T30044] tipc: Disabling bearer [ 1672.342607][T30044] tipc: Left network mode [ 1672.458991][T30500] validate_nla: 56 callbacks suppressed [ 1672.459021][T30500] netlink: 'syz.4.7372': attribute type 10 has an invalid length. [ 1672.511977][T30500] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7372'. [ 1672.541415][T30500] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1672.555956][T30500] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1672.573092][T30500] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1672.651997][ T5955] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1672.703058][T30044] hsr_slave_0: left promiscuous mode [ 1672.747477][ T5955] usb 7-1: USB disconnect, device number 33 [ 1672.764727][T30044] hsr_slave_1: left promiscuous mode [ 1672.798129][T30044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1672.815840][T30044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1672.835574][T30044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1672.876931][T30044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1672.953516][T30044] veth1_macvtap: left promiscuous mode [ 1672.986842][T30044] veth0_macvtap: left promiscuous mode [ 1673.006502][T30044] veth1_vlan: left promiscuous mode [ 1673.022446][T30044] veth0_vlan: left promiscuous mode [ 1673.217494][ T9623] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1673.388431][ T9623] usb 5-1: Using ep0 maxpacket: 16 [ 1673.407404][ T9623] usb 5-1: config 0 has an invalid interface number: 115 but max is 0 [ 1673.462790][ T9623] usb 5-1: config 0 has no interface number 0 [ 1673.503240][ T9623] usb 5-1: config 0 interface 115 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1673.543656][ T9623] usb 5-1: config 0 interface 115 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 1673.629393][ T9623] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 1673.644074][ T9623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.652935][ T9623] usb 5-1: Product: syz [ 1673.657554][ T9623] usb 5-1: Manufacturer: syz [ 1673.662480][ T9623] usb 5-1: SerialNumber: syz [ 1673.692374][ T9623] usb 5-1: config 0 descriptor?? [ 1673.724600][T30044] team0 (unregistering): Port device batadv1 removed [ 1673.912287][ T9623] usb 5-1: USB disconnect, device number 126 [ 1674.705212][T30526] FAULT_INJECTION: forcing a failure. [ 1674.705212][T30526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1674.752388][T30526] CPU: 1 UID: 0 PID: 30526 Comm: syz.3.7378 Tainted: G L syzkaller #0 PREEMPT(full) [ 1674.752420][T30526] Tainted: [L]=SOFTLOCKUP [ 1674.752428][T30526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1674.752438][T30526] Call Trace: [ 1674.752447][T30526] [ 1674.752456][T30526] dump_stack_lvl+0x189/0x250 [ 1674.752483][T30526] ? __pfx____ratelimit+0x10/0x10 [ 1674.752506][T30526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1674.752528][T30526] ? __pfx__printk+0x10/0x10 [ 1674.752552][T30526] ? __might_fault+0xb0/0x130 [ 1674.752587][T30526] should_fail_ex+0x414/0x560 [ 1674.752616][T30526] _copy_from_user+0x2d/0xb0 [ 1674.752636][T30526] ___sys_sendmsg+0x158/0x2a0 [ 1674.752659][T30526] ? __pfx____sys_sendmsg+0x10/0x10 [ 1674.752684][T30526] ? rcu_read_lock_any_held+0xb3/0x120 [ 1674.752732][T30526] ? __fget_files+0x2a/0x420 [ 1674.752753][T30526] ? __fget_files+0x3a0/0x420 [ 1674.752783][T30526] __x64_sys_sendmsg+0x19b/0x260 [ 1674.752805][T30526] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1674.752833][T30526] ? __pfx_ksys_write+0x10/0x10 [ 1674.752855][T30526] ? do_syscall_64+0xbe/0xf80 [ 1674.752883][T30526] do_syscall_64+0xfa/0xf80 [ 1674.752907][T30526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.752933][T30526] ? clear_bhb_loop+0x60/0xb0 [ 1674.752955][T30526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.752972][T30526] RIP: 0033:0x7fe2e4b8f749 [ 1674.752989][T30526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1674.753005][T30526] RSP: 002b:00007fe2e5ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1674.753025][T30526] RAX: ffffffffffffffda RBX: 00007fe2e4de5fa0 RCX: 00007fe2e4b8f749 [ 1674.753039][T30526] RDX: 000000002004c080 RSI: 0000200000001240 RDI: 0000000000000003 [ 1674.753052][T30526] RBP: 00007fe2e5ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 1674.753064][T30526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1674.753076][T30526] R13: 00007fe2e4de6038 R14: 00007fe2e4de5fa0 R15: 00007fe2e4f0fa28 [ 1674.753106][T30526] [ 1675.074793][T30044] team0 (unregistering): Port device team_slave_1 removed [ 1675.135427][T30044] team0 (unregistering): Port device team_slave_0 removed [ 1676.075022][T30044] team0 (unregistering): Port device dummy0 removed [ 1676.221032][T30534] ip6gre1: entered promiscuous mode [ 1676.236568][T30534] ip6gre1: entered allmulticast mode [ 1676.434072][T30542] program syz.6.7383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1676.770829][T30548] program syz.6.7385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1676.988158][T30550] program syz.6.7387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1677.339187][T30559] fuse: Bad value for 'user_id' [ 1677.345528][T30559] fuse: Bad value for 'user_id' [ 1677.717442][ T5912] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1677.952906][ T5912] usb 5-1: config 0 has no interfaces? [ 1677.976147][ T5912] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1678.001707][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.076927][ T5912] usb 5-1: config 0 descriptor?? [ 1679.073608][T30580] fuse: Bad value for 'user_id' [ 1679.081621][T30580] fuse: Bad value for 'user_id' [ 1679.348660][ T5912] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1679.553795][ T5912] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 1679.562591][ T5912] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1679.582215][ T5912] usb 7-1: config 0 has no interfaces? [ 1679.595675][ T5912] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1679.616347][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.648358][ T5912] usb 7-1: config 0 descriptor?? [ 1680.096071][T30575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1680.189362][T13215] usb 5-1: USB disconnect, device number 127 [ 1680.312065][T30582] FAULT_INJECTION: forcing a failure. [ 1680.312065][T30582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1680.349326][T30582] CPU: 1 UID: 0 PID: 30582 Comm: syz.4.7393 Tainted: G L syzkaller #0 PREEMPT(full) [ 1680.349358][T30582] Tainted: [L]=SOFTLOCKUP [ 1680.349366][T30582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1680.349377][T30582] Call Trace: [ 1680.349385][T30582] [ 1680.349394][T30582] dump_stack_lvl+0x189/0x250 [ 1680.349420][T30582] ? __pfx____ratelimit+0x10/0x10 [ 1680.349445][T30582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1680.349466][T30582] ? __pfx__printk+0x10/0x10 [ 1680.349503][T30582] should_fail_ex+0x414/0x560 [ 1680.349547][T30582] _copy_to_user+0x31/0xb0 [ 1680.349568][T30582] simple_read_from_buffer+0xe1/0x170 [ 1680.349594][T30582] proc_fail_nth_read+0x1b3/0x220 [ 1680.349617][T30582] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1680.349640][T30582] ? rw_verify_area+0x2a6/0x4d0 [ 1680.349657][T30582] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1680.349678][T30582] vfs_read+0x200/0xa30 [ 1680.349695][T30582] ? fdget_pos+0x247/0x320 [ 1680.349720][T30582] ? __pfx___mutex_lock+0x10/0x10 [ 1680.349737][T30582] ? __pfx_vfs_read+0x10/0x10 [ 1680.349757][T30582] ? __fget_files+0x2a/0x420 [ 1680.349782][T30582] ? __fget_files+0x3a0/0x420 [ 1680.349802][T30582] ? __fget_files+0x2a/0x420 [ 1680.349832][T30582] ksys_read+0x145/0x250 [ 1680.349853][T30582] ? __pfx_ksys_read+0x10/0x10 [ 1680.349874][T30582] ? do_syscall_64+0xbe/0xf80 [ 1680.349902][T30582] do_syscall_64+0xfa/0xf80 [ 1680.349926][T30582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.349944][T30582] ? clear_bhb_loop+0x60/0xb0 [ 1680.349973][T30582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.349991][T30582] RIP: 0033:0x7f32a978e15c [ 1680.350008][T30582] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1680.350024][T30582] RSP: 002b:00007f32a79f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1680.350044][T30582] RAX: ffffffffffffffda RBX: 00007f32a99e5fa0 RCX: 00007f32a978e15c [ 1680.350057][T30582] RDX: 000000000000000f RSI: 00007f32a79f60a0 RDI: 0000000000000005 [ 1680.350069][T30582] RBP: 00007f32a79f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1680.350081][T30582] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000001 [ 1680.350093][T30582] R13: 00007f32a99e6038 R14: 00007f32a99e5fa0 R15: 00007f32a9b0fa28 [ 1680.350125][T30582] [ 1681.128582][T30585] program syz.0.7395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1681.330182][T30589] geneve2: entered promiscuous mode [ 1682.314259][ T5955] usb 7-1: USB disconnect, device number 34 [ 1682.527900][ T5912] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1682.703359][T30621] program syz.3.7407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1682.731575][ T5912] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1682.771675][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.828422][ T5912] usb 5-1: config 0 descriptor?? [ 1683.513587][T30619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1685.084565][T30645] ucma_write: process 735 (syz.1.7413) changed security contexts after opening file descriptor, this is not allowed. [ 1685.306373][ T5912] usb 5-1: Cannot set autoneg [ 1685.311841][ T5912] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1685.364450][ T5912] usb 5-1: USB disconnect, device number 2 [ 1685.731547][T30654] fuse: Bad value for 'user_id' [ 1685.736602][T30654] fuse: Bad value for 'user_id' [ 1685.983558][ T5912] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1686.063993][T30661] program syz.4.7418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1686.174947][ T5912] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 1686.246773][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1686.468109][ T5912] usb 4-1: config 0 has no interfaces? [ 1686.550715][ T5912] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1686.594001][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.634154][ T5912] usb 4-1: config 0 descriptor?? [ 1687.178628][T30681] FAULT_INJECTION: forcing a failure. [ 1687.178628][T30681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1687.267921][T30681] CPU: 1 UID: 0 PID: 30681 Comm: syz.0.7423 Tainted: G L syzkaller #0 PREEMPT(full) [ 1687.267952][T30681] Tainted: [L]=SOFTLOCKUP [ 1687.267960][T30681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1687.267971][T30681] Call Trace: [ 1687.267979][T30681] [ 1687.267988][T30681] dump_stack_lvl+0x189/0x250 [ 1687.268015][T30681] ? __pfx____ratelimit+0x10/0x10 [ 1687.268042][T30681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1687.268064][T30681] ? __pfx__printk+0x10/0x10 [ 1687.268101][T30681] should_fail_ex+0x414/0x560 [ 1687.268129][T30681] _copy_to_user+0x31/0xb0 [ 1687.268151][T30681] simple_read_from_buffer+0xe1/0x170 [ 1687.268177][T30681] proc_fail_nth_read+0x1b3/0x220 [ 1687.268202][T30681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1687.268224][T30681] ? rw_verify_area+0x2a6/0x4d0 [ 1687.268241][T30681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1687.268262][T30681] vfs_read+0x200/0xa30 [ 1687.268280][T30681] ? fdget_pos+0x247/0x320 [ 1687.268305][T30681] ? __pfx___mutex_lock+0x10/0x10 [ 1687.268323][T30681] ? __pfx_vfs_read+0x10/0x10 [ 1687.268342][T30681] ? __fget_files+0x2a/0x420 [ 1687.268374][T30681] ? __fget_files+0x3a0/0x420 [ 1687.268394][T30681] ? __fget_files+0x2a/0x420 [ 1687.268424][T30681] ksys_read+0x145/0x250 [ 1687.268441][T30681] ? __pfx_ptp_ioctl+0x10/0x10 [ 1687.268465][T30681] ? __pfx_ksys_read+0x10/0x10 [ 1687.268487][T30681] ? do_syscall_64+0xbe/0xf80 [ 1687.268515][T30681] do_syscall_64+0xfa/0xf80 [ 1687.268539][T30681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.268557][T30681] ? clear_bhb_loop+0x60/0xb0 [ 1687.268579][T30681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.268597][T30681] RIP: 0033:0x7fafa418e15c [ 1687.268613][T30681] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1687.268629][T30681] RSP: 002b:00007fafa4fd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1687.268649][T30681] RAX: ffffffffffffffda RBX: 00007fafa43e5fa0 RCX: 00007fafa418e15c [ 1687.268663][T30681] RDX: 000000000000000f RSI: 00007fafa4fd50a0 RDI: 0000000000000004 [ 1687.268675][T30681] RBP: 00007fafa4fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1687.268687][T30681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1687.268698][T30681] R13: 00007fafa43e6038 R14: 00007fafa43e5fa0 R15: 00007fafa450fa28 [ 1687.268729][T30681] [ 1687.269317][T30678] vivid-003: disconnect [ 1687.898056][ T9623] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1688.121360][ T9623] usb 7-1: config 0 has no interfaces? [ 1688.137322][ T9623] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1688.146871][ T9623] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.165462][ T9623] usb 7-1: config 0 descriptor?? [ 1689.965236][ T5912] usb 4-1: USB disconnect, device number 2 [ 1690.067698][T30703] program syz.1.7428 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1690.346550][T30710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1690.954907][ T9623] usb 7-1: USB disconnect, device number 35 [ 1691.348007][T30676] vivid-003: reconnect [ 1691.608294][ T5912] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1691.637152][T30728] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1691.657923][T30728] ALSA: mixer_oss: invalid index 1374389 [ 1691.805112][ T9623] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1691.817423][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 1691.862252][ T9623] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1691.911617][ T5912] usb 5-1: config 2 has an invalid interface number: 231 but max is 0 [ 1691.933553][ T36] wlan0: Trigger new scan to find an IBSS to join [ 1691.965938][ T5912] usb 5-1: config 2 has no interface number 0 [ 1692.023259][ T5912] usb 5-1: config 2 interface 231 altsetting 239 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1692.087316][ T5912] usb 5-1: config 2 interface 231 altsetting 239 endpoint 0xE has invalid wMaxPacketSize 0 [ 1692.153165][ T5912] usb 5-1: config 2 interface 231 altsetting 239 has an invalid descriptor for endpoint zero, skipping [ 1692.219267][ T5912] usb 5-1: config 2 interface 231 altsetting 239 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1692.276399][ T5912] usb 5-1: config 2 interface 231 altsetting 239 endpoint 0x87 has invalid maxpacket 512, setting to 64 [ 1692.351490][ T5912] usb 5-1: config 2 interface 231 altsetting 239 has an endpoint descriptor with address 0x1C, changing to 0xC [ 1692.450229][ T5912] usb 5-1: config 2 interface 231 altsetting 239 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1692.499857][ T5912] usb 5-1: config 2 interface 231 altsetting 239 has an invalid descriptor for endpoint zero, skipping [ 1692.572580][ T5912] usb 5-1: config 2 interface 231 altsetting 239 has a duplicate endpoint with address 0x9, skipping [ 1692.649757][ T5912] usb 5-1: config 2 interface 231 altsetting 239 has a duplicate endpoint with address 0xC, skipping [ 1692.760603][T30741] fuse: Bad value for 'user_id' [ 1692.774424][T30741] fuse: Bad value for 'user_id' [ 1692.775975][ T5912] usb 5-1: config 2 interface 231 has no altsetting 0 [ 1692.839407][T30743] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7442'. [ 1692.942026][ T5912] usb 5-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice=d2.f0 [ 1693.141981][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.202308][T30750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7442'. [ 1693.235056][ T5912] usb 5-1: Product: syz [ 1693.240204][ T5912] usb 5-1: Manufacturer: syz [ 1693.251896][ T5912] usb 5-1: SerialNumber: syz [ 1693.569936][T30722] netlink: 'syz.4.7434': attribute type 27 has an invalid length. [ 1694.247754][ T5955] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1694.269888][ T9623] IPVS: starting estimator thread 0... [ 1694.463390][T30767] IPVS: using max 30 ests per chain, 72000 per kthread [ 1694.488339][ T5955] usb 7-1: Using ep0 maxpacket: 8 [ 1694.501906][ T5955] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 198, setting to 64 [ 1694.586698][ T5955] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1694.600777][T30722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.608931][T30722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.620730][ T5955] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1694.679323][ T5955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.701603][ T5955] usb 7-1: Product: syz [ 1694.710628][ T5955] usb 7-1: Manufacturer: syz [ 1694.722555][ T5955] usb 7-1: SerialNumber: syz [ 1694.763638][ T5955] usb 7-1: config 0 descriptor?? [ 1694.831727][ T5955] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 1695.458490][ T5955] snd_usb_toneport 7-1:0.0: set_interface failed [ 1695.481318][ T5955] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 1695.507365][ T5955] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 1695.552848][ T5955] usb 7-1: USB disconnect, device number 36 [ 1696.355980][T30722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1696.420769][T30722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1696.784484][T30722] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 1696.793348][T30722] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 1696.891998][T24841] wlan0: Trigger new scan to find an IBSS to join [ 1696.955262][T30722] vlan1: left allmulticast mode [ 1696.975176][T30722] veth0_vlan: left allmulticast mode [ 1697.374783][T30722] ip6gre1: left promiscuous mode [ 1697.389566][T30722] ip6gre1: left allmulticast mode [ 1697.479545][T30044] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.660427][T30795] FAULT_INJECTION: forcing a failure. [ 1697.660427][T30795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1697.663046][T30044] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.687036][T30044] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.700746][T30044] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.701537][T30795] CPU: 1 UID: 0 PID: 30795 Comm: syz.6.7453 Tainted: G L syzkaller #0 PREEMPT(full) [ 1697.701575][T30795] Tainted: [L]=SOFTLOCKUP [ 1697.701582][T30795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1697.701593][T30795] Call Trace: [ 1697.701602][T30795] [ 1697.701611][T30795] dump_stack_lvl+0x189/0x250 [ 1697.701637][T30795] ? __pfx____ratelimit+0x10/0x10 [ 1697.701661][T30795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1697.701682][T30795] ? __pfx__printk+0x10/0x10 [ 1697.701706][T30795] ? __might_fault+0xb0/0x130 [ 1697.701741][T30795] should_fail_ex+0x414/0x560 [ 1697.701769][T30795] _copy_from_iter+0x1cd/0x1630 [ 1697.701797][T30795] ? __build_skb_around+0x22d/0x3c0 [ 1697.701827][T30795] ? __pfx__copy_from_iter+0x10/0x10 [ 1697.701849][T30795] ? __alloc_skb+0x2f1/0x430 [ 1697.701874][T30795] ? __pfx___alloc_skb+0x10/0x10 [ 1697.701900][T30795] ? netlink_sendmsg+0x642/0xb30 [ 1697.701917][T30795] ? skb_put+0x11b/0x210 [ 1697.701937][T30795] netlink_sendmsg+0x6b2/0xb30 [ 1697.701964][T30795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1697.701987][T30795] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1697.702009][T30795] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1697.702027][T30795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1697.702047][T30795] __sock_sendmsg+0x21c/0x270 [ 1697.702072][T30795] ____sys_sendmsg+0x505/0x820 [ 1697.702096][T30795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1697.702122][T30795] ? import_iovec+0x74/0xa0 [ 1697.702143][T30795] ___sys_sendmsg+0x21f/0x2a0 [ 1697.702163][T30795] ? __pfx____sys_sendmsg+0x10/0x10 [ 1697.702187][T30795] ? rcu_read_lock_any_held+0xb3/0x120 [ 1697.702255][T30795] ? __fget_files+0x2a/0x420 [ 1697.702279][T30795] ? __fget_files+0x3a0/0x420 [ 1697.702313][T30795] __x64_sys_sendmsg+0x19b/0x260 [ 1697.702334][T30795] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1697.702364][T30795] ? __pfx_ksys_write+0x10/0x10 [ 1697.702386][T30795] ? do_syscall_64+0xbe/0xf80 [ 1697.702413][T30795] do_syscall_64+0xfa/0xf80 [ 1697.702438][T30795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.702455][T30795] ? clear_bhb_loop+0x60/0xb0 [ 1697.702475][T30795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.702493][T30795] RIP: 0033:0x7f8a9d78f749 [ 1697.702511][T30795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1697.702527][T30795] RSP: 002b:00007f8a9e570038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1697.702547][T30795] RAX: ffffffffffffffda RBX: 00007f8a9d9e5fa0 RCX: 00007f8a9d78f749 [ 1697.702560][T30795] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1697.702577][T30795] RBP: 00007f8a9e570090 R08: 0000000000000000 R09: 0000000000000000 [ 1697.702589][T30795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1697.702600][T30795] R13: 00007f8a9d9e6038 R14: 00007f8a9d9e5fa0 R15: 00007f8a9db0fa28 [ 1697.702638][T30795] [ 1698.015696][T30796] ALSA: mixer_oss: invalid OSS volume '' [ 1698.015722][T13182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1698.021816][T30796] ALSA: mixer_oss: invalid OSS volume ' aü=!ÿšê˹=·+LKWà„MšñŒëÓ:§~' [ 1698.029932][ T5912] cp210x 5-1:2.231: cp210x converter detected [ 1698.038126][T30796] ALSA: mixer_oss: invalid OSS volume 'ƒ%wÀ¹¼Ñº§ˆMò#i¥6[…ìNVLéúÃKK-' [ 1698.053118][T30796] ALSA: mixer_oss: invalid OSS volume 'Ú¶ÿÌêZù•ç:Ñ 3.âôF?ºYùð¹Š^x1b' [ 1698.062091][T30796] ALSA: mixer_oss: invalid OSS volume ' ”—$i.A<­”g—Õmo鱌‚éÜ)ã&:/“¢Œ' [ 1698.072737][ T5912] cp210x 5-1:2.231: failed to get vendor val 0x370b size 1: -71 [ 1698.081189][ T5912] cp210x 5-1:2.231: querying part number failed [ 1698.093673][ T5912] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1698.103859][T30796] ALSA: mixer_oss: invalid OSS volume 'Ü~)~×ó·Š´¤‹ì}Úìk/FJ°¶éƒ—†]j' [ 1698.115114][ T5912] usb 5-1: USB disconnect, device number 3 [ 1698.172385][T30796] ALSA: mixer_oss: invalid OSS volume '§‹' [ 1698.194238][T30796] ALSA: mixer_oss: invalid OSS volume 'FµµÈq(ã2÷Äž¾?åsÒï È[œ'|¾' [ 1698.214275][T30796] ALSA: mixer_oss: invalid OSS volume '³§Û}`K’ƈãZ>_|¯#X³d#>zž^a¨' [ 1698.223604][T30796] ALSA: mixer_oss: invalid OSS volume '*‹Ümo‹É×G%BuZkÂÄ@¤ª–m¸Iv¯Ó [ 1699.115490][T30814] dump_stack_lvl+0x189/0x250 [ 1699.115516][T30814] ? __pfx____ratelimit+0x10/0x10 [ 1699.115541][T30814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1699.115561][T30814] ? __pfx__printk+0x10/0x10 [ 1699.115588][T30814] ? __pfx___might_resched+0x10/0x10 [ 1699.115608][T30814] ? fs_reclaim_acquire+0x7d/0x100 [ 1699.115631][T30814] should_fail_ex+0x414/0x560 [ 1699.115660][T30814] should_failslab+0xa8/0x100 [ 1699.115682][T30814] kmem_cache_alloc_noprof+0x88/0x710 [ 1699.115708][T30814] ? alloc_empty_file+0x55/0x1d0 [ 1699.115735][T30814] alloc_empty_file+0x55/0x1d0 [ 1699.115758][T30814] path_openat+0x108/0x3dd0 [ 1699.115795][T30814] ? is_bpf_text_address+0x292/0x2b0 [ 1699.115810][T30814] ? is_bpf_text_address+0x26/0x2b0 [ 1699.115827][T30814] ? kernel_text_address+0xa5/0xe0 [ 1699.115850][T30814] ? __kernel_text_address+0xd/0x40 [ 1699.115872][T30814] ? __pfx_path_openat+0x10/0x10 [ 1699.115889][T30814] ? arch_stack_walk+0xfc/0x150 [ 1699.115924][T30814] do_filp_open+0x1fa/0x410 [ 1699.115941][T30814] ? stack_depot_save_flags+0x40/0x850 [ 1699.115965][T30814] ? __pfx_do_filp_open+0x10/0x10 [ 1699.116012][T30814] ? do_open_execat+0x93/0x560 [ 1699.116042][T30814] do_open_execat+0x135/0x560 [ 1699.116065][T30814] ? __pfx_do_open_execat+0x10/0x10 [ 1699.116098][T30814] alloc_bprm+0x28/0x5c0 [ 1699.116117][T30814] do_execveat_common+0x1b3/0x6a0 [ 1699.116141][T30814] __x64_sys_execveat+0xc4/0xe0 [ 1699.116161][T30814] do_syscall_64+0xfa/0xf80 [ 1699.116185][T30814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.116201][T30814] ? clear_bhb_loop+0x60/0xb0 [ 1699.116223][T30814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.116239][T30814] RIP: 0033:0x7f32a978f749 [ 1699.116256][T30814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1699.116271][T30814] RSP: 002b:00007f32a79f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1699.116289][T30814] RAX: ffffffffffffffda RBX: 00007f32a99e5fa0 RCX: 00007f32a978f749 [ 1699.116302][T30814] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1699.116312][T30814] RBP: 00007f32a79f6090 R08: 0000000000001000 R09: 0000000000000000 [ 1699.116415][T30814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1699.116422][T30814] R13: 00007f32a99e6038 R14: 00007f32a99e5fa0 R15: 00007f32a9b0fa28 [ 1699.116441][T30814] [ 1699.546420][ T5836] Bluetooth: hci1: SCO packet for unknown connection handle 2026 [ 1699.546503][ T5836] Bluetooth: hci1: SCO packet for unknown connection handle 2026 [ 1699.626280][T30820] batadv1: entered promiscuous mode [ 1699.924974][T30829] FAULT_INJECTION: forcing a failure. [ 1699.924974][T30829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1699.942473][T30829] CPU: 1 UID: 0 PID: 30829 Comm: syz.3.7465 Tainted: G L syzkaller #0 PREEMPT(full) [ 1699.942504][T30829] Tainted: [L]=SOFTLOCKUP [ 1699.942511][T30829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1699.942523][T30829] Call Trace: [ 1699.942531][T30829] [ 1699.942539][T30829] dump_stack_lvl+0x189/0x250 [ 1699.942566][T30829] ? __pfx____ratelimit+0x10/0x10 [ 1699.942591][T30829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1699.942612][T30829] ? __pfx__printk+0x10/0x10 [ 1699.942648][T30829] should_fail_ex+0x414/0x560 [ 1699.942676][T30829] _copy_from_user+0x2d/0xb0 [ 1699.942695][T30829] copy_from_sockptr_offset+0x66/0xa0 [ 1699.942724][T30829] do_ipt_set_ctl+0x8ae/0xcd0 [ 1699.942750][T30829] ? rcu_is_watching+0x15/0xb0 [ 1699.942772][T30829] ? trace_contention_end+0x39/0x100 [ 1699.942795][T30829] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1699.942839][T30829] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1699.942874][T30829] ? __pfx_aa_sk_perm+0x10/0x10 [ 1699.942898][T30829] nf_setsockopt+0x26f/0x290 [ 1699.942927][T30829] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1699.942953][T30829] do_sock_setsockopt+0x17c/0x1b0 [ 1699.942975][T30829] __x64_sys_setsockopt+0x13f/0x1b0 [ 1699.942998][T30829] do_syscall_64+0xfa/0xf80 [ 1699.943023][T30829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.943041][T30829] ? clear_bhb_loop+0x60/0xb0 [ 1699.943063][T30829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.943080][T30829] RIP: 0033:0x7fe2e4b8f749 [ 1699.943102][T30829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1699.943118][T30829] RSP: 002b:00007fe2e5ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1699.943138][T30829] RAX: ffffffffffffffda RBX: 00007fe2e4de5fa0 RCX: 00007fe2e4b8f749 [ 1699.943152][T30829] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1699.943163][T30829] RBP: 00007fe2e5ad7090 R08: 0000000000000408 R09: 0000000000000000 [ 1699.943175][T30829] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1699.943187][T30829] R13: 00007fe2e4de6038 R14: 00007fe2e4de5fa0 R15: 00007fe2e4f0fa28 [ 1699.943218][T30829] [ 1700.317276][T30771] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1700.371094][T30835] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7467'. [ 1700.419558][T30837] FAULT_INJECTION: forcing a failure. [ 1700.419558][T30837] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.432995][T30837] CPU: 0 UID: 0 PID: 30837 Comm: syz.1.7468 Tainted: G L syzkaller #0 PREEMPT(full) [ 1700.433024][T30837] Tainted: [L]=SOFTLOCKUP [ 1700.433031][T30837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1700.433046][T30837] Call Trace: [ 1700.433055][T30837] [ 1700.433064][T30837] dump_stack_lvl+0x189/0x250 [ 1700.433099][T30837] ? __pfx____ratelimit+0x10/0x10 [ 1700.433124][T30837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1700.433144][T30837] ? __pfx__printk+0x10/0x10 [ 1700.433173][T30837] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 1700.433202][T30837] should_fail_ex+0x414/0x560 [ 1700.433231][T30837] should_failslab+0xa8/0x100 [ 1700.433252][T30837] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1700.433274][T30837] kmem_cache_alloc_noprof+0x88/0x710 [ 1700.433298][T30837] ? ip6_pol_route+0x162/0x1180 [ 1700.433323][T30837] ? dst_alloc+0x105/0x170 [ 1700.433344][T30837] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1700.433367][T30837] dst_alloc+0x105/0x170 [ 1700.433391][T30837] ip6_pol_route+0xa21/0x1180 [ 1700.433415][T30837] ? ip6_pol_route+0x162/0x1180 [ 1700.433444][T30837] ? __pfx_ip6_pol_route+0x10/0x10 [ 1700.433467][T30837] ? __lock_acquire+0x6b6/0x2cf0 [ 1700.433495][T30837] ? __pfx_ip6_addr_string+0x10/0x10 [ 1700.433522][T30837] fib6_rule_lookup+0x348/0x6f0 [ 1700.433542][T30837] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1700.433566][T30837] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1700.433607][T30837] ip6_route_output_flags+0x364/0x5d0 [ 1700.433631][T30837] ? ip6_route_output_flags+0x2e/0x5d0 [ 1700.433659][T30837] ip6_dst_lookup_tail+0x1ae/0x1510 [ 1700.433685][T30837] ? txopt_get+0x7a/0x3f0 [ 1700.433710][T30837] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 1700.433730][T30837] ? txopt_get+0x7a/0x3f0 [ 1700.433751][T30837] ? txopt_get+0x7a/0x3f0 [ 1700.433769][T30837] ? txopt_get+0x7a/0x3f0 [ 1700.433792][T30837] ? txopt_get+0x335/0x3f0 [ 1700.433812][T30837] ? aa_label_sk_perm+0x4c4/0x610 [ 1700.433832][T30837] ? __pfx_txopt_get+0x10/0x10 [ 1700.433857][T30837] ip6_dst_lookup_flow+0x47/0xe0 [ 1700.433880][T30837] rawv6_sendmsg+0xdbf/0x1830 [ 1700.433918][T30837] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1700.433966][T30837] ? __pfx_aa_sk_perm+0x10/0x10 [ 1700.433987][T30837] ? sock_rps_record_flow+0x19/0x410 [ 1700.434015][T30837] ? inet_sendmsg+0x2f4/0x370 [ 1700.434031][T30837] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1700.434053][T30837] __sock_sendmsg+0x19c/0x270 [ 1700.434085][T30837] ____sys_sendmsg+0x52d/0x820 [ 1700.434109][T30837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1700.434137][T30837] ? import_iovec+0x74/0xa0 [ 1700.434161][T30837] ___sys_sendmsg+0x21f/0x2a0 [ 1700.434182][T30837] ? __pfx____sys_sendmsg+0x10/0x10 [ 1700.434237][T30837] ? __fget_files+0x2a/0x420 [ 1700.434258][T30837] ? __fget_files+0x3a0/0x420 [ 1700.434290][T30837] __sys_sendmmsg+0x227/0x430 [ 1700.434315][T30837] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1700.434342][T30837] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1700.434384][T30837] ? ksys_write+0x22a/0x250 [ 1700.434404][T30837] ? __pfx_ksys_write+0x10/0x10 [ 1700.434428][T30837] __x64_sys_sendmmsg+0xa0/0xc0 [ 1700.434448][T30837] do_syscall_64+0xfa/0xf80 [ 1700.434473][T30837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1700.434491][T30837] ? clear_bhb_loop+0x60/0xb0 [ 1700.434513][T30837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1700.434531][T30837] RIP: 0033:0x7f1a2ab8f749 [ 1700.434549][T30837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1700.434565][T30837] RSP: 002b:00007f1a2baae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1700.434586][T30837] RAX: ffffffffffffffda RBX: 00007f1a2ade5fa0 RCX: 00007f1a2ab8f749 [ 1700.434601][T30837] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000003 [ 1700.434613][T30837] RBP: 00007f1a2baae090 R08: 0000000000000000 R09: 0000000000000000 [ 1700.434625][T30837] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 1700.434637][T30837] R13: 00007f1a2ade6038 R14: 00007f1a2ade5fa0 R15: 00007f1a2af0fa28 [ 1700.434669][T30837] [ 1700.974665][T30771] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.998831][T30771] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1701.008288][T30771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.016526][T30771] usb 5-1: Product: syz [ 1701.021080][T30771] usb 5-1: Manufacturer: syz [ 1701.025860][T30771] usb 5-1: SerialNumber: syz [ 1701.031696][T30842] FAULT_INJECTION: forcing a failure. [ 1701.031696][T30842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1701.061038][T30771] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1701.143596][T30842] CPU: 1 UID: 0 PID: 30842 Comm: syz.1.7470 Tainted: G L syzkaller #0 PREEMPT(full) [ 1701.143627][T30842] Tainted: [L]=SOFTLOCKUP [ 1701.143635][T30842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1701.143646][T30842] Call Trace: [ 1701.143654][T30842] [ 1701.143663][T30842] dump_stack_lvl+0x189/0x250 [ 1701.143690][T30842] ? __pfx____ratelimit+0x10/0x10 [ 1701.143714][T30842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1701.143736][T30842] ? __pfx__printk+0x10/0x10 [ 1701.143761][T30842] ? __might_fault+0xb0/0x130 [ 1701.143796][T30842] should_fail_ex+0x414/0x560 [ 1701.143825][T30842] _copy_from_user+0x2d/0xb0 [ 1701.143844][T30842] get_timespec64+0x8e/0x1a0 [ 1701.143866][T30842] ? __pfx_get_timespec64+0x10/0x10 [ 1701.143896][T30842] __x64_sys_mq_timedsend+0x133/0x210 [ 1701.143922][T30842] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 1701.143950][T30842] ? do_syscall_64+0xbe/0xf80 [ 1701.143977][T30842] do_syscall_64+0xfa/0xf80 [ 1701.144007][T30842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.144025][T30842] ? clear_bhb_loop+0x60/0xb0 [ 1701.144046][T30842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.144064][T30842] RIP: 0033:0x7f1a2ab8f749 [ 1701.144081][T30842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1701.144097][T30842] RSP: 002b:00007f1a2baae038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 1701.144118][T30842] RAX: ffffffffffffffda RBX: 00007f1a2ade5fa0 RCX: 00007f1a2ab8f749 [ 1701.144132][T30842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1701.144143][T30842] RBP: 00007f1a2baae090 R08: 0000200000000140 R09: 0000000000000000 [ 1701.144155][T30842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1701.144166][T30842] R13: 00007f1a2ade6038 R14: 00007f1a2ade5fa0 R15: 00007f1a2af0fa28 [ 1701.144201][T30842] [ 1701.779443][T30771] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1701.807807][T30771] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1701.847541][T30771] usb 5-1: media controller created [ 1701.963359][T30853] FAULT_INJECTION: forcing a failure. [ 1701.963359][T30853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1701.984248][T30771] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1702.045263][T30853] CPU: 0 UID: 0 PID: 30853 Comm: syz.0.7473 Tainted: G L syzkaller #0 PREEMPT(full) [ 1702.045296][T30853] Tainted: [L]=SOFTLOCKUP [ 1702.045303][T30853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1702.045314][T30853] Call Trace: [ 1702.045322][T30853] [ 1702.045330][T30853] dump_stack_lvl+0x189/0x250 [ 1702.045355][T30853] ? __pfx____ratelimit+0x10/0x10 [ 1702.045378][T30853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1702.045399][T30853] ? __pfx__printk+0x10/0x10 [ 1702.045422][T30853] ? __might_fault+0xb0/0x130 [ 1702.045454][T30853] should_fail_ex+0x414/0x560 [ 1702.045482][T30853] _copy_from_user+0x2d/0xb0 [ 1702.045501][T30853] ___sys_sendmsg+0x158/0x2a0 [ 1702.045522][T30853] ? __pfx____sys_sendmsg+0x10/0x10 [ 1702.045545][T30853] ? rcu_read_lock_any_held+0xb3/0x120 [ 1702.045588][T30853] ? __fget_files+0x2a/0x420 [ 1702.045609][T30853] ? __fget_files+0x3a0/0x420 [ 1702.045637][T30853] __x64_sys_sendmsg+0x19b/0x260 [ 1702.045658][T30853] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1702.045686][T30853] ? __pfx_ksys_write+0x10/0x10 [ 1702.045708][T30853] ? do_syscall_64+0xbe/0xf80 [ 1702.045735][T30853] do_syscall_64+0xfa/0xf80 [ 1702.045757][T30853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.045773][T30853] ? clear_bhb_loop+0x60/0xb0 [ 1702.045792][T30853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.045808][T30853] RIP: 0033:0x7fafa418f749 [ 1702.045824][T30853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1702.045838][T30853] RSP: 002b:00007fafa4fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1702.045856][T30853] RAX: ffffffffffffffda RBX: 00007fafa43e5fa0 RCX: 00007fafa418f749 [ 1702.045869][T30853] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1702.045880][T30853] RBP: 00007fafa4fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1702.045890][T30853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1702.045901][T30853] R13: 00007fafa43e6038 R14: 00007fafa43e5fa0 R15: 00007fafa450fa28 [ 1702.045932][T30853] [ 1702.523461][ T8906] usb 5-1: USB disconnect, device number 4 [ 1702.534727][T30863] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1702.777288][T30772] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1702.954737][T30772] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1702.986017][T30772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.035250][T30772] usb 4-1: Product: syz [ 1703.051311][T30879] fuse: Bad value for 'user_id' [ 1703.056420][T30772] usb 4-1: Manufacturer: syz [ 1703.061703][T30879] fuse: Bad value for 'user_id' [ 1703.068027][T30772] usb 4-1: SerialNumber: syz [ 1703.094968][T30772] usb 4-1: config 0 descriptor?? [ 1703.317192][ T5912] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1703.328990][T30772] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1703.407617][T30772] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1703.488416][T30772] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1703.532174][ T5912] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 1703.540961][ T5912] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1703.562119][ T5912] usb 7-1: config 0 has no interfaces? [ 1703.572368][ T5912] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1703.584935][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.600511][ T5912] usb 7-1: config 0 descriptor?? [ 1703.623817][T30860] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 1703.645698][T30772] usb 4-1: media controller created [ 1703.738067][T30772] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1703.845321][T30772] DVB: Unable to find symbol mt352_attach() [ 1703.929830][T30772] DVB: Unable to find symbol nxt6000_attach() [ 1703.938065][T30772] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1703.965977][T30772] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input31 [ 1704.000120][T30772] dvb-usb: schedule remote query interval to 1000 msecs. [ 1704.025749][T30772] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1704.051115][T30772] dvb-usb: bulk message failed: -22 (7/0) [ 1704.065188][T30772] dvb-usb: bulk message failed: -22 (7/0) [ 1704.086750][T30772] usb 4-1: USB disconnect, device number 3 [ 1704.207530][T30772] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1704.664588][T30894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7486'. [ 1706.053290][T30908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1706.375328][T30772] usb 7-1: USB disconnect, device number 37 [ 1706.692087][T30919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1706.721284][T30919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1706.738814][T30919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1706.751452][T30919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1706.927274][T30772] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1706.956537][T30910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1707.027459][ T5912] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1707.128710][T30772] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.180062][T30772] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1707.200925][T30772] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.205153][ T5912] usb 5-1: config 0 has no interfaces? [ 1707.227373][T30772] usb 7-1: Product: syz [ 1707.229730][ T5912] usb 5-1: New USB device found, idVendor=05c6, idProduct=9235, bcdDevice=90.ab [ 1707.231822][T30772] usb 7-1: Manufacturer: syz [ 1707.241667][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.254451][ T5912] usb 5-1: Product: syz [ 1707.267282][T30772] usb 7-1: SerialNumber: syz [ 1707.267435][ T5912] usb 5-1: Manufacturer: syz [ 1707.287281][ T5912] usb 5-1: SerialNumber: syz [ 1707.310512][ T5912] usb 5-1: config 0 descriptor?? [ 1707.312856][T30772] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1707.607247][ T5912] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1707.673263][T30928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1707.711228][T30928] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 1707.721555][T30928] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1707.729838][T30772] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1707.730364][ T1136] wlan1: authenticated [ 1707.748547][T30928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1707.757980][T30772] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1707.777514][T30857] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 1707.787446][T30772] usb 7-1: media controller created [ 1707.799804][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1707.817584][T30772] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1707.839897][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1707.879346][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1707.879360][T30857] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 1707.897573][T30933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1707.952802][T30857] wlan1: associated [ 1707.957181][ T5912] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1707.998050][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.031014][ T5912] usb 4-1: config 0 descriptor?? [ 1708.269999][ T48] usb 5-1: USB disconnect, device number 5 [ 1708.276273][T30772] usb 7-1: USB disconnect, device number 38 [ 1708.420376][T30938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1708.446057][ T5912] usbhid 4-1:0.0: can't add hid device: -71 [ 1708.456885][T30938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1708.468397][ T5912] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1708.485130][ T5912] usb 4-1: USB disconnect, device number 4 [ 1708.727386][ T48] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1708.776936][T30947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1708.897206][ T48] usb 5-1: device descriptor read/64, error -71 [ 1709.147258][ T48] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1709.204772][T30960] binder: BINDER_SET_CONTEXT_MGR already set [ 1709.212356][T30960] binder: 30959:30960 ioctl 4018620d 200000000040 returned -16 [ 1709.308119][ T48] usb 5-1: device descriptor read/64, error -71 [ 1709.383650][T30963] FAULT_INJECTION: forcing a failure. [ 1709.383650][T30963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1709.399560][T30958] fuse: Bad value for 'user_id' [ 1709.404773][T30958] fuse: Bad value for 'user_id' [ 1709.428880][ T48] usb usb5-port1: attempt power cycle [ 1709.442273][T30963] CPU: 1 UID: 0 PID: 30963 Comm: syz.3.7507 Tainted: G L syzkaller #0 PREEMPT(full) [ 1709.442315][T30963] Tainted: [L]=SOFTLOCKUP [ 1709.442323][T30963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1709.442334][T30963] Call Trace: [ 1709.442342][T30963] [ 1709.442350][T30963] dump_stack_lvl+0x189/0x250 [ 1709.442377][T30963] ? __pfx____ratelimit+0x10/0x10 [ 1709.442401][T30963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1709.442422][T30963] ? __pfx__printk+0x10/0x10 [ 1709.442447][T30963] ? __might_fault+0xb0/0x130 [ 1709.442488][T30963] should_fail_ex+0x414/0x560 [ 1709.442516][T30963] _copy_from_user+0x2d/0xb0 [ 1709.442536][T30963] video_usercopy+0x349/0x13f0 [ 1709.442571][T30963] ? __pfx___video_do_ioctl+0x10/0x10 [ 1709.442593][T30963] ? __pfx_video_usercopy+0x10/0x10 [ 1709.442633][T30963] ? __fget_files+0x3a0/0x420 [ 1709.442658][T30963] v4l2_ioctl+0x18d/0x1e0 [ 1709.442681][T30963] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1709.442703][T30963] __se_sys_ioctl+0xfc/0x170 [ 1709.442723][T30963] do_syscall_64+0xfa/0xf80 [ 1709.442749][T30963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.442767][T30963] ? clear_bhb_loop+0x60/0xb0 [ 1709.442788][T30963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.442805][T30963] RIP: 0033:0x7fe2e4b8f749 [ 1709.442822][T30963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1709.442837][T30963] RSP: 002b:00007fe2e5ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1709.442856][T30963] RAX: ffffffffffffffda RBX: 00007fe2e4de5fa0 RCX: 00007fe2e4b8f749 [ 1709.442870][T30963] RDX: 0000200000000580 RSI: 00000000c040565f RDI: 0000000000000003 [ 1709.442883][T30963] RBP: 00007fe2e5ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 1709.442895][T30963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1709.442907][T30963] R13: 00007fe2e4de6038 R14: 00007fe2e4de5fa0 R15: 00007fe2e4f0fa28 [ 1709.442937][T30963] [ 1709.697207][ T5912] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1709.852819][ T5912] usb 7-1: config 0 has no interfaces? [ 1709.860866][ T5912] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1709.871305][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.879631][ T5912] usb 7-1: Product: syz [ 1709.884020][ T5912] usb 7-1: Manufacturer: syz [ 1709.889648][ T5912] usb 7-1: SerialNumber: syz [ 1709.897622][ T5912] usb 7-1: config 0 descriptor?? [ 1709.927233][ T48] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1709.947844][ T48] usb 5-1: device descriptor read/8, error -71 [ 1710.187377][ T48] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1710.217874][ T48] usb 5-1: device descriptor read/8, error -71 [ 1710.358704][ T48] usb usb5-port1: unable to enumerate USB device [ 1711.787262][ T48] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1711.959517][ T48] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1712.001394][ T48] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1712.023548][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.046899][ T48] usb 5-1: Product: syz [ 1712.057045][ T48] usb 5-1: Manufacturer: syz [ 1712.068258][ T48] usb 5-1: SerialNumber: syz [ 1712.094690][ T48] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1712.500944][ T48] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1712.535986][ T48] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1712.544874][ T48] usb 5-1: media controller created [ 1712.566841][T30985] ------------[ cut here ]------------ [ 1712.572779][T30985] usb 5-1: BOGUS control dir, pipe 80000a80 doesn't match bRequestType c0 [ 1712.582064][T30985] WARNING: drivers/usb/core/urb.c:414 at 0x0, CPU#0: syz.0.7513/30985 [ 1712.590640][T30985] Modules linked in: [ 1712.595095][T30985] CPU: 0 UID: 0 PID: 30985 Comm: syz.0.7513 Tainted: G L syzkaller #0 PREEMPT(full) [ 1712.606627][T30985] Tainted: [L]=SOFTLOCKUP [ 1712.611149][T30985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1712.621874][T30985] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 1712.626473][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1712.627919][T30985] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 1712.657494][T30985] RSP: 0018:ffffc9000c187780 EFLAGS: 00010246 [ 1712.663766][T30985] RAX: 0000000000000000 RBX: ffff888052965900 RCX: 0000000080000a80 [ 1712.672108][T30985] RDX: ffff888078b56900 RSI: ffffffff8c13ff40 RDI: ffffffff8f8eb820 [ 1712.680448][T30985] RBP: 1ffff110052356fc R08: 00000000000000c0 R09: 0000000000000000 [ 1712.688748][T30985] R10: ffffc9000c187880 R11: fffff52001830f1c R12: ffff8880276d5100 [ 1712.696947][T30985] R13: ffff8880291ab7e0 R14: 0000000080000a80 R15: ffff888078b56900 [ 1712.705296][T30985] FS: 00007fafa4fb46c0(0000) GS:ffff888125e3a000(0000) knlGS:0000000000000000 [ 1712.714523][T30985] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1712.721350][T30985] CR2: 00002000003f1030 CR3: 0000000027236000 CR4: 00000000003526f0 [ 1712.729595][T30985] Call Trace: [ 1712.732972][T30985] [ 1712.735994][T30985] ? __init_swait_queue_head+0xa9/0x150 [ 1712.741756][T30985] usb_start_wait_urb+0x115/0x4f0 [ 1712.746933][T30985] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1712.752669][T30985] usb_control_msg+0x232/0x3e0 [ 1712.757613][T30985] gl861_ctrl_msg+0x207/0x420 [ 1712.762422][T30985] ? register_lock_class+0x51/0x320 [ 1712.767797][T30985] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 1712.773148][T30985] ? irqentry_exit+0x5dd/0x660 [ 1712.778097][T30985] ? exc_page_fault+0xf0/0x100 [ 1712.783002][T30985] ? irqentry_exit+0x5dd/0x660 [ 1712.787935][T30985] gl861_i2c_master_xfer+0x439/0x6a0 [ 1712.793466][T30985] __i2c_transfer+0x871/0x2110 [ 1712.798391][T30985] ? lockdep_hardirqs_on+0x98/0x140 [ 1712.803768][T30985] ? __pfx___i2c_transfer+0x10/0x10 [ 1712.809252][T30985] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1712.814785][T30985] ? i2c_transfer+0x120/0x3a0 [ 1712.819655][T30985] i2c_transfer+0x25b/0x3a0 [ 1712.824329][T30985] ? __pfx_i2c_transfer+0x10/0x10 [ 1712.829513][T30985] ? _copy_from_user+0x94/0xb0 [ 1712.834429][T30985] i2cdev_ioctl_rdwr+0x460/0x740 [ 1712.839674][T30985] i2cdev_ioctl+0x64b/0x820 [ 1712.844325][T30985] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1712.849531][T30985] ? __fget_files+0x3a0/0x420 [ 1712.854359][T30985] ? __fget_files+0x2a/0x420 [ 1712.859131][T30985] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1712.864211][T30985] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1712.869441][T30985] __se_sys_ioctl+0xfc/0x170 [ 1712.874166][T30985] do_syscall_64+0xfa/0xf80 [ 1712.878854][T30985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.885101][T30985] ? clear_bhb_loop+0x60/0xb0 [ 1712.890040][T30985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.896110][T30985] RIP: 0033:0x7fafa418f749 [ 1712.900709][T30985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1712.920964][T30985] RSP: 002b:00007fafa4fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1712.929666][T30985] RAX: ffffffffffffffda RBX: 00007fafa43e6090 RCX: 00007fafa418f749 [ 1712.937920][T30985] RDX: 0000200000000000 RSI: 0000000000000707 RDI: 0000000000000007 [ 1712.946124][T30985] RBP: 00007fafa4213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1712.954420][T30985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1712.962646][T30985] R13: 00007fafa43e6128 R14: 00007fafa43e6090 R15: 00007fafa450fa28 [ 1712.971036][T30985] [ 1712.974149][T30985] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1712.981409][T30985] CPU: 0 UID: 0 PID: 30985 Comm: syz.0.7513 Tainted: G L syzkaller #0 PREEMPT(full) [ 1712.992338][T30985] Tainted: [L]=SOFTLOCKUP [ 1712.996659][T30985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1713.006707][T30985] Call Trace: [ 1713.009984][T30985] [ 1713.012903][T30985] dump_stack_lvl+0x99/0x250 [ 1713.017503][T30985] ? __asan_memcpy+0x40/0x70 [ 1713.022081][T30985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1713.027289][T30985] ? __pfx__printk+0x10/0x10 [ 1713.031887][T30985] vpanic+0x237/0x6d0 [ 1713.035864][T30985] ? __pfx_vpanic+0x10/0x10 [ 1713.040365][T30985] ? is_bpf_text_address+0x292/0x2b0 [ 1713.045630][T30985] ? is_bpf_text_address+0x26/0x2b0 [ 1713.050812][T30985] panic+0xb9/0xc0 [ 1713.054544][T30985] ? __pfx_panic+0x10/0x10 [ 1713.058951][T30985] __warn+0x317/0x4b0 [ 1713.062926][T30985] __report_bug+0x288/0x500 [ 1713.067420][T30985] ? __pfx___report_bug+0x10/0x10 [ 1713.072435][T30985] ? usb_submit_urb+0x1121/0x18d0 [ 1713.077446][T30985] ? usb_submit_urb+0x111c/0x18d0 [ 1713.082467][T30985] report_bug_entry+0x16a/0x220 [ 1713.087329][T30985] ? usb_submit_urb+0x111c/0x18d0 [ 1713.092343][T30985] ? usb_submit_urb+0x1121/0x18d0 [ 1713.097352][T30985] handle_bug+0xca/0x200 [ 1713.101582][T30985] exc_invalid_op+0x1a/0x50 [ 1713.106088][T30985] asm_exc_invalid_op+0x1a/0x20 [ 1713.110921][T30985] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 1713.116559][T30985] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 1713.136150][T30985] RSP: 0018:ffffc9000c187780 EFLAGS: 00010246 [ 1713.142206][T30985] RAX: 0000000000000000 RBX: ffff888052965900 RCX: 0000000080000a80 [ 1713.150160][T30985] RDX: ffff888078b56900 RSI: ffffffff8c13ff40 RDI: ffffffff8f8eb820 [ 1713.158136][T30985] RBP: 1ffff110052356fc R08: 00000000000000c0 R09: 0000000000000000 [ 1713.166090][T30985] R10: ffffc9000c187880 R11: fffff52001830f1c R12: ffff8880276d5100 [ 1713.174045][T30985] R13: ffff8880291ab7e0 R14: 0000000080000a80 R15: ffff888078b56900 [ 1713.182014][T30985] ? __init_swait_queue_head+0xa9/0x150 [ 1713.187550][T30985] usb_start_wait_urb+0x115/0x4f0 [ 1713.192563][T30985] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1713.198100][T30985] usb_control_msg+0x232/0x3e0 [ 1713.202867][T30985] gl861_ctrl_msg+0x207/0x420 [ 1713.207533][T30985] ? register_lock_class+0x51/0x320 [ 1713.212719][T30985] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 1713.217902][T30985] ? irqentry_exit+0x5dd/0x660 [ 1713.222649][T30985] ? exc_page_fault+0xf0/0x100 [ 1713.227398][T30985] ? irqentry_exit+0x5dd/0x660 [ 1713.232148][T30985] gl861_i2c_master_xfer+0x439/0x6a0 [ 1713.237421][T30985] __i2c_transfer+0x871/0x2110 [ 1713.242180][T30985] ? lockdep_hardirqs_on+0x98/0x140 [ 1713.247473][T30985] ? __pfx___i2c_transfer+0x10/0x10 [ 1713.252657][T30985] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1713.258012][T30985] ? i2c_transfer+0x120/0x3a0 [ 1713.262675][T30985] i2c_transfer+0x25b/0x3a0 [ 1713.267161][T30985] ? __pfx_i2c_transfer+0x10/0x10 [ 1713.272192][T30985] ? _copy_from_user+0x94/0xb0 [ 1713.276935][T30985] i2cdev_ioctl_rdwr+0x460/0x740 [ 1713.281861][T30985] i2cdev_ioctl+0x64b/0x820 [ 1713.286351][T30985] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1713.291446][T30985] ? __fget_files+0x3a0/0x420 [ 1713.296102][T30985] ? __fget_files+0x2a/0x420 [ 1713.300673][T30985] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1713.305591][T30985] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1713.310599][T30985] __se_sys_ioctl+0xfc/0x170 [ 1713.315172][T30985] do_syscall_64+0xfa/0xf80 [ 1713.319682][T30985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1713.325749][T30985] ? clear_bhb_loop+0x60/0xb0 [ 1713.330425][T30985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1713.336304][T30985] RIP: 0033:0x7fafa418f749 [ 1713.340710][T30985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1713.360305][T30985] RSP: 002b:00007fafa4fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1713.368707][T30985] RAX: ffffffffffffffda RBX: 00007fafa43e6090 RCX: 00007fafa418f749 [ 1713.377012][T30985] RDX: 0000200000000000 RSI: 0000000000000707 RDI: 0000000000000007 [ 1713.384972][T30985] RBP: 00007fafa4213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1713.392930][T30985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1713.400885][T30985] R13: 00007fafa43e6128 R14: 00007fafa43e6090 R15: 00007fafa450fa28 [ 1713.408851][T30985] [ 1713.412303][T30985] Kernel Offset: disabled [ 1713.416625][T30985] Rebooting in 86400 seconds..