last executing test programs: 9m32.954702169s ago: executing program 1 (id=1037): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000000)={0x1, {{0xa, 0xfffb, 0xc0000000, @mcast2}}, {{0xa, 0xfffe, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0xfbfffffe}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000000140)=0x28) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0xc0245720, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xb0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x40}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x83, 0x1, '#'}, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000002840), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) write$smackfs_ipv6host(r4, &(0x7f0000001680)=@l2={{0x40000000006, 0x3a, 0x8, 0x3a, 0x1, 0x3a, 0x1855, 0x3a, 0x6, 0x3a, 0x100000000006, 0x3a, 0x64, 0x3a, 0x80000000}, 0x2f, 0x0, 0x20, '\\'}, 0xaf) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) 9m27.00136649s ago: executing program 1 (id=1047): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000009c0)=0x80000) syz_emit_ethernet(0x9e, &(0x7f0000000100)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x2b, 0x0, 0x2}, @srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}]}]}}}}}}}, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r1, 0x2) shutdown(r1, 0x2) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@my=0x1, 0x10005}, @any, 0x0, 0x1, 0xa, 0xfffffffffffffffd, 0x0, 0x8, 0x1}) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0x3, 0x1) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x6316baf67e7bc23d}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x10c, 0x13, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0xbe, 0x8, "f52f13d7e8922402049c62ec8d8336a8b1f75e6e08e1e6731176c53bace7388020cd872c432f070104433b4e0159bc1c59f24941c693531aa5727c7d071a99630b5f2fe13e6bd83e9c923fc884da1774a53a31a00a35ba77f60cdfe82e5af4e2e658f00fdb07b038e46dd71b631b62b726bcb8bea3526688f91df16544132faf8f199cf26377c12132f9376049e7eb31eca61a6cf417deb5a1642eaef87e70d3acf23d52565ba2430f5f76de9f9856e9aedff609e720d2662fc6"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x10c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000180)={{@host, 0x7}, @host, 0xd, 0x3, 0x5, 0x6, 0x2804147e, 0x5, 0x10}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x74f9, @private1, 0x8001}}, 0x6, 0xb, 0x9, 0x7f, 0x8d, 0xb0, 0x1}, &(0x7f0000000340)=0x9c) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000640)={0x2d, "e9a18f5cb35c4912ab468c4ca1cf0a6639e690e51a8e895fdc0d898421000ea8539a07ada2e0ccc4829c5df1f2a5400a8b901abbe83b43bf0bbc8b1077b9bc8064e58a519fc7fd77c0cc69d87493dd34b33b42430c75468986ff56f126a9002b60e62b918cfea92273cc703ba53c712d58cc99c76783514bab5462c8a786dda7"}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000480)={r6, 0x5}, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r7 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) write$smackfs_cipso(r7, &(0x7f0000000080)={'-!\xd2){', 0x20, 0xa5, 0x20, 0x4, 0x20, [{0xa6}, {0x79}, {0x66}, {0x21}]}, 0x85) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) 9m24.76641542s ago: executing program 1 (id=1056): syz_usb_connect(0x5, 0x59, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e01000018240201020210e1"], 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x80) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r0, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000e2ffffffffffff1b00020018000180140002006e657464657673696d30"], 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="31032abd7000fbdbdf250b00000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 9m21.596398396s ago: executing program 1 (id=1064): syz_open_dev$dri(0x0, 0x0, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000004200), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x2, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x42, 0x5, 0x4, {0x6, 0x9, 0x0, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x59, 0x3, 0x8000, 0x3ff, r4, r5, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xd9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r6, &(0x7f0000000100)=""/134, 0x86) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x7, r8, 0x0, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r9, 0x3b88, &(0x7f00000044c0)={0xc, r10}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r9, 0x3b72, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000000000001"]) 9m20.518780827s ago: executing program 1 (id=1072): fcntl$addseals(0xffffffffffffffff, 0x409, 0xb1c25ce47c749b08) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2a4}, 0x1, 0x0, 0x0, 0x4044101}, 0x0) 9m19.479632914s ago: executing program 1 (id=1075): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040), 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000040)={0x0, [[0x8], [0x4, 0x0, 0x0, 0x400], [0xfb, 0x0, 0x0, 0x3]], '\x00', [{0xffffffff, 0x1}, {0x0, 0xffffffff}, {}, {0x0, 0x1, 0x0, 0x1}, {0x0, 0x3}, {}, {0x10001}, {}, {}, {0xfffffffd}, {0x0, 0x4000000}]}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x4c, r3, 0x10, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c091}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f000004b680)=""/102400, 0x19000) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 9m19.273117383s ago: executing program 32 (id=1075): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040), 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000040)={0x0, [[0x8], [0x4, 0x0, 0x0, 0x400], [0xfb, 0x0, 0x0, 0x3]], '\x00', [{0xffffffff, 0x1}, {0x0, 0xffffffff}, {}, {0x0, 0x1, 0x0, 0x1}, {0x0, 0x3}, {}, {0x10001}, {}, {}, {0xfffffffd}, {0x0, 0x4000000}]}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x4c, r3, 0x10, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c091}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f000004b680)=""/102400, 0x19000) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 8m48.355600408s ago: executing program 3 (id=1168): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) sendmmsg(r2, &(0x7f0000000040), 0x0, 0x20084000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) unshare(0x2040400) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000004000000d11200000400000010000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000361ae7c2d36bee8a0000"], 0x50) socket$inet6(0xa, 0x800000000000002, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$inet6(0xa, 0x805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c800) socket$inet6_tcp(0xa, 0x1, 0x0) 8m48.03673135s ago: executing program 3 (id=1171): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000300)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x34) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000140)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r3], 0x27) sendmmsg$inet6(r1, &(0x7f00000020c0)=[{{&(0x7f00000012c0)={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x20}, 0x2}, 0x1c, 0x0}}], 0x1, 0x20000000) fanotify_init(0x4, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, 0x0, 0x44004) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x1000) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x4000) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r7, &(0x7f0000002080)={0x2020}, 0x54) setsockopt$sock_int(r1, 0x1, 0x35, &(0x7f00000000c0)=0x1, 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_connect(0x1, 0xcdf, &(0x7f0000000bc0)={{0x12, 0x1, 0x250, 0x9b, 0x48, 0xd5, 0x8, 0x10c4, 0x89fb, 0xc9b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xccd, 0x4, 0xb, 0x8, 0x10, 0x9, [{{0x9, 0x4, 0xdb, 0x9, 0xa, 0xf, 0xc1, 0x98, 0x1, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "b060a4"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xb, 0xb, 0xb0, 0x6}, {0x6, 0x24, 0x1a, 0x80, 0x10}, [@mbim={0xc, 0x24, 0x1b, 0xff, 0x8000, 0x0, 0x6, 0x0, 0x33}, @dmm={0x7, 0x24, 0x14, 0xfff, 0xfffc}, @country_functional={0xe, 0x24, 0x7, 0x55, 0x2, [0xffff, 0x401, 0x9, 0x3]}, @dmm={0x7, 0x24, 0x14, 0x9, 0x7}, @dmm={0x7, 0x24, 0x14, 0x8, 0x9}, @country_functional={0xa, 0x24, 0x7, 0x9, 0xc4f, [0xfff, 0x4]}]}, @generic={0x3, 0x9, '^'}], [{{0x9, 0x5, 0xf, 0x0, 0x8, 0x3, 0xd, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x4}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x5, 0xf, 0x41, [@generic={0x91, 0x4, "64d25f9fb140ca3a62d8629add53aefa3cf34b6e230fc7856b6e81d8cd9b2494b07cde58b295f900f34cfb08321b74fbee6ec5dcd6c341c3853ff11b356d25afea4d7f95667c0093264b4f68a4524e7813c9544059a756d9c1aabe12b212541c511a530530cb9f19c1beb8f762854a9fea56abb5ad1fffa68865573d865f2d8795e3299e7525493abe5243b709db78"}, @generic={0xd6, 0x4d, "7e93b578032d836c3cec8ce44fde842e1a6b3599820d53f791c49ac2f6f36806ae75f05bbc44228061a47cdb30b091777fb8240403efe6610ed74d4280974dcdc282238822eb8123b315db8adcf0cb679ef4dae72c530ebe0b3b22a7aecf8e44b313498b1700c0186440a60c4ccba2080bc0ae69dfe751101b746945f1c43ce7516598b1e3724c327a2f988e30b8e245d286343758909ff364abbdcc996cce32eba5b4899982581b5786fa988bbb1b35d8d2b6a649e04482c0fbb00d156d54356e503db8920eb64d0ea467f36940fa07748de88d"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x8, 0x7, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x183, 0x3, 0x400}, @generic={0xf1, 0xc, "62c12d4712254fb0b16db5cc91dbe49f06f6ff3e1edc852337ea87e4d524e3bbda197ca50a561a68500675485686ab1c51c3b0b10a2783c4f38bf26166ed8f645edae59471da220492b6540360d16a2df59896d00aae79cd7549545ae11a4b69ed1b7e00ea8e24e9ca2a7d2f802c093fe5b2ae3a5501502cefcd19556621b6b4b1396d000b180142f26c28b1fdb9b9f3761e1f504ee23f2ef6b494617486c2298201af20ee947884f67084421de45ad904bc0faa4880dc744c80187a24cee6710218fdf077e5cc3f7e8724e55ae9dea5b48f9952286747c58bbadf90d34b1e5aac16cc2659f076c6ab1d1c70b48670"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x5, 0xc}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x2, 0xd, 0x7}}, {{0x9, 0x5, 0x4, 0x2, 0x10, 0x9, 0x4, 0xf6}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x6, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xfd70}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x0, 0x6, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xd73e42d48c4ebcf4, 0x7}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x8, 0x0, 0x9}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x0, 0x5, 0x4}}]}}, {{0x9, 0x4, 0x13, 0x4, 0xe, 0xff, 0xff, 0xff, 0x1, [@hid_hid={0x9, 0x21, 0xed0, 0xf, 0x1, {0x22, 0xc64}}, @hid_hid={0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x9d4}}], [{{0x9, 0x5, 0x2, 0x1c, 0x40, 0x2, 0x4a, 0x8, [@generic={0xeb, 0xa, "4156270a873b3fee768177988493ea5c4ddaff6c4ad153291751b90fe2d4fe3a1e304d96d282b5ce4f94af04ae5272e205e6cadc36e1847239fe8ec2293c6c9b2779c4722323271f7804a4d6bf109e41f9a04171401744b74b990b032f62026764e974cc0f702e0aa3809c1864403cb52a98df5a1c763576aec104859fc249dbb82766d1f93817b8127e2fa2149b5156c8121e1aeaf44e8f4750970e0ce10e42c267d1335278034ef84cd9085b7114336cac0918ae0fbb065bc43f0b70c0c024d204f91dca5e71acad7dfc1184f46f8781aa82c8b99588209677b09e8d94ce7f838c893b3a6c507b8c"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x3, 0x4, 0x81, [@generic={0x3, 0x9, "0e"}, @generic={0xfa, 0x31, "536299deec4722b6a0049fe3be22384b201e1cd44a656541778af95d95a40defab6a1669cd2a8ccd7b9e836ea290c58a97f9233014fb5d733d7a9e8541e4c3a5a0b84868f3ffed57e556d55bd68dd8c5133cda6c7ec1ebb1051b7208f7ff5e3b95475ea77f7c6439729fda09a40d94977b8ae454bf7d8c25a90edd0024548abafad59639b154b95c80700edd5f39b9b997e9ce32fa7985c81ebf4c9a3db291b052f500261e2428e3aaae1dae68ed9bbab3e45a064eadad51eca77d5dae659b6477c2760fda484208faa1363cad79f8175d4eb3cfda59147c4f2a2c11d12c530433644d28a526e6f5390a2a621820b2497e1db4c8df2dc511"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x4, 0x4, 0x45, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x5}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xb, 0x18, 0x9}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x8, 0x1c, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x8001}]}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0xb7, 0x0, 0x81, [@generic={0xeb, 0xa, "35683efda8e7ca8624360e09c202df5c9881c33688681f60d9b68ec30911f029931c0ad34c709ac75fa5c4805ed47c30d5f53f7c5dde595069485bc764ec65ed950366e865f68b91ec93e2057ecc07815d9902ae82580a6d77d66b31cec20485797807ea9e85d1ddc902316776c76c535a6d59971fa58fa975fef4c8d02cc474ebd9762497ec7d98c2c1d85577eb2ffab873c4f3a2cc55380bf9a876835bfd0e51f032ef6cc30fd4d7c1316da4bad680064603c8760da4d1651ba5816cbf627e6e1b1102422485e02463d1938ff7c735119e918bcf1b4aa99dcf47637d7d4b07cd641de451a7552fc3"}, @generic={0xa1, 0x21, "d8de40f4e54330ca773b873b18672a82419acbdff921d01d403bf7968c0ed7bab42929afad033c8e1b356d4457493d0418fe2770fb08fa697ec3235b859cd57e529997f8f67e78c784f94f3a58a912698749f9d8dd4e682ec9811580fbd6341f8f7cebb083b6d82c2a4673b6d1c208a87bbe2a912c07271ce0c406ec81a65f8bc726b53c8a2c4f3b7867cdccee8ae36235b69c9f1947c5e52278eddf2e7b78"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x6, 0xa, 0x8, [@generic={0x31, 0x24, "f70025ba0d0b216e99674a67c6dc8ce1b4e89701f84364323cbdc015c443f42569b15a63ba303fa051720e23a26bce"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x1, 0x1f, 0x2}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x7, 0xd7, 0x2, [@generic={0x9b, 0x3, "cce960ed3ddfe4a9074d36bbe0305b9c2ade1c51adbc3dff0698777360b860d3415f8a3bb5cf8c1a71fe1c72f7ad470f5dc3d29fb8164c9afbe67e490c9c5d8d25d37b09da0e3b330875952d5a8a6bb24793b18de0deaba3ce18ddab397b969a7225d7518cf4fff8c5a1481e5fd8a2b1137af96ab10e41eadcda451b107baaad99812c78033d8c996cf9612cac16260c1b03f2494e570655e7"}, @generic={0x20, 0x22, "7cd20384103d89e461d49dc2343523005a774076f7382d02698135009eb9"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x6, 0x1, 0x4}}, {{0x9, 0x5, 0x2, 0x4, 0x20, 0x0, 0x7, 0x7b, [@generic={0xf5, 0xb, "27482784993d89444e40eed1344c14f50ed60be207b7913897a1c726a3ba052c0b13568a6547f4394813ee56e5a2bcf951433188f55504c0c5873dd2d6b798f644a87860bfd33272889322439cacf65ea1ceff53b5b2298b152d9369a44f1910ee4f331e4b5a88e7229b8af0c861987a8f576bd7b1793aa0f8965e1d3704a42d83ff4f3dbb6ad428d5519d480a1a652e1c0d4269c32313b950945745a9213efd770a55d3ebb700f7ead1c31aa23d26996f250c30e4f979c6d144b9a36dd89cba6935edc28c202b39afdbaa544083cea4ab44ba559d20a68b2135abcf805dd5d546012c924c5c590912a7864e0317c15a4d07b5"}, @generic={0xec, 0xf, "6aa68d319fc9a27f212d0a50a9d631190b5dcc4b0fdcf0b9e78dab4a4482507fe2ad4b836c9939950758f3a766798b1b74b6a3e07defb39b7732fb3c560666600f92ab22357e64e4e0515759e50292719dbf13977da04bf6ae1ba0048d0fb3723f944a68345ea86776c6156a8a5f568d1da4591fa52b604d50904208d0f67f5f5d8f8177e5158b3ee921bd16982e1e69d9261213df618b75e56b16f440da1ce44fd5ebf810d1ea261f14fd9fa954c3ba2e9735163ef63dab9ef24b90a2a9fd4cbc85534b68844cff524cf57523746ac6e61b71152854d52e4fef39365245cbdf9d9d8edbd4fa93617edd"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x400, 0x7f, 0x2, 0x5}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x7, 0x88, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xc3}]}}, {{0x9, 0x5, 0x1, 0xd, 0x8, 0x5, 0xf8, 0xd}}]}}, {{0x9, 0x4, 0xb5, 0xa4, 0x9, 0xcd, 0x74, 0x3e, 0xfb, [@hid_hid={0x9, 0x21, 0x9, 0xc, 0x1, {0x22, 0x486}}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0x5, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x2, 0x25, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x5}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x50, 0x3, 0x5a, 0x1, "ee141d", "bfef24"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x7f, 0x4}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xb, 0x0, 0x84, "fe"}]}], [{{0x9, 0x5, 0x6, 0x0, 0x10, 0x8, 0x0, 0x0, [@generic={0x95, 0x24, "07d5bd2b9830453bf4cb6400a843454704f13cc8e80c6405d0b89e567165da7aec39014b29319d907e969504e366fdd9466ee21fc48c24abae0ffe9f00249e897e00ae043c288832e9d5b1148ee2095c1122429a9f5ed32dba92b54ff922c853f19a49d3ae78adadb3f7861e97ca1ee6ce4ba7c3b888a7c352a53123db489f7092a679a8899a3cb440697ae17d9edc45634394"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0x7a, 0x5, 0x7}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x2, 0x0, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xd7}]}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0x3, 0x0, 0x9c, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x3a13}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x7}]}}, {{0x9, 0x5, 0x80, 0x1c, 0x3ff, 0x13, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x608}]}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x3, 0x7, 0x3, [@generic={0x49, 0x18, "a53ceee622642632e947f3572096266a39dca32bb375f2c4bbbb7c728e51480ecb7fe6a52f3852d49abeb04e75abd144e79f18c9a3910b08b8e0ca6618b13848eb62ae853d3ab2"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x3ff, 0xfb, 0x81, 0x7}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x7, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x2, 0x3, 0x3}}]}}, {{0x9, 0x4, 0x4, 0x81, 0x1, 0x4d, 0xcb, 0x71, 0x1, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "d39f97fb1d58"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x901, 0xd2, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x82, 0x8, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xa, 0x3}, @dmm={0x7, 0x24, 0x14, 0x3, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x9, 0x7, 0x1, 0x100, 0xd0}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "02c6b0"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xb70, 0x3, 0xabd9, 0x6}, [@mdlm_detail={0x61, 0x24, 0x13, 0x6, "badffce4bd3b9efdfb4047a13dfed196fde4cf6beb08cb964a10952c973e6e9f38d8ff1808e9282b4cae336eb3d6c4631240b7110a3b1ce16dc1db5cee1c8215a80da38e6c6ad72a14d23e7045aeddaca1e505359002af6abf03d3420d"}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x13}, @country_functional={0xa, 0x24, 0x7, 0x2, 0x95, [0x7fff, 0x8]}, @acm={0x4, 0x24, 0x2, 0x1}]}], [{{0x9, 0x5, 0xd, 0x8, 0x430, 0x1f, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0xd6}]}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x7, 0x1, 0xc, 0x10, 0x9}, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="050f1300020309008b10010c0300db79433ff6c2552d590708010008"]}) 8m42.344444833s ago: executing program 3 (id=1182): r0 = socket$netlink(0x10, 0x3, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x81, 0x6b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2={0x1f, 0xea5c, @none, 0x7}, @can, @qipcrtr={0x2a, 0x2, 0x7fff}, 0xffff, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)='syzkaller1\x00', 0x9, 0x8, 0x7}) 8m42.046118843s ago: executing program 3 (id=1184): r0 = socket(0x21, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x6, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fanotify_init(0x200, 0x0) unshare(0x2c020400) fanotify_mark(r8, 0x1, 0x4800003e, r6, 0x0) vmsplice(r7, &(0x7f0000000240)=[{&(0x7f0000000040)='d', 0x1}], 0x1, 0xf) sendmmsg$unix(r5, &(0x7f000000e480)=[{{&(0x7f0000000300)=@abs={0x573998515c7c7991, 0x0, 0x4e22}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000380)="50ae4bd779069323824aebb0cd51bf12b6f23962573598f9cb844e5b08a67fbd73a91b4ec04f44414fa941111c065189d38b33b20bdf2ba627112ca9036232a0deaa0d10a98cf80ec810875946719a9785d0d4daccf1e702886a4e1a42d6218fb0c3c3e6e646e98332cae30b0e4fb50e72c8f4e84222aeb2795a1e32ed59a08f7c7dbfe9f94359d18f121f4c5471", 0x8e}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRESOCT=r4, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100030001000000", @ANYRES32=r5, @ANYRES32, @ANYRES32=r5, @ANYRES64=r5, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES32], 0x118, 0x10}}, {{&(0x7f0000002900)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000003ac0)=[{&(0x7f0000002980)="88f075772a2269609356a2fecbf24a435d", 0x11}, {&(0x7f00000029c0)="adb4dfb2cedaca92b2b63eaa5507d660303f6993573be86774c12ff03acb280a4a1193abaebcf99047fbd6ddf36c820e57e6f6c1d63b736a77eb7799487dbd2cc6609e038ef456fb058b26ab6d8506efd13efae5e892840be0e018327d4db5457921ca470ed338a87b888f7b005ea7df4d4f29c793ee669add5090bc7b3159e4adfdea8f2473466810e57f793a1a84c35eb2c388701b8b8a4162b13d5c5bbcdd2a6b4374cabd4056141cd9071a7238f8a951", 0xb2}, {&(0x7f0000002a80)="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", 0x1000}, {&(0x7f0000003a80)="3da2dceb2327d3c019996e6dd99b9ce9e1f6de6a75396e7861b0173273eafcca", 0x20}], 0x4, 0x0, 0x0, 0x4000900}}, {{&(0x7f0000003b00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000003b80)="de4e980b0b47be72c46ee4ea18cbae5d414e95888c3601e9a494d04d9d0891527bbccb6b0fba854ba92f53e6cc920e0756", 0x31}, {&(0x7f0000003bc0)="aa727b5cc00b2a2ea2bcdd7def1cc9aae1903b486408e515596b83b273a63b22cef4c65d74871afa1602d88763967c27312a2e4830e8d3cf7aa63b89dba2550388549b15792ea56ca80f159565af6ee42a73b910037483044283539e3cac46ec3a710eb86762e4552ad5da9e32d62aa2dfa90f471a454e7d0e9acdd783d3582a107a8f47626dec7d1b6a7ba177cb0fe344a486c8bddb2c1f07452d10464a5ef39e20077198582b757318c58715f4017edc54d1970fc1adf1fc60952e16713d909792b0f3f9f8c2d3ed", 0xc9}], 0x2, &(0x7f0000003ec0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002008bab", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x80804}}, {{&(0x7f0000008280)=@file={0x1, './file0/file1\x00'}, 0x6e, &(0x7f000000c340)=[{&(0x7f0000008300)="46ba361ca3b84170fe3afc49318cfe0b8379bc7139bc165b7be19ae4265f8e561f3e180c54535509f2b20eb9ab8f6301dcb9ec63dc35d4b4690b7f6096feee58537f6e7c09de51b3a30e754fde8bfd78018d745ebd1050f39e228fed7f30334c", 0x60}, {&(0x7f0000008380)="c0ce59d0f95dc0ecc2432dda26d3c1d200d1fa70c7751db91bf96d8dd6a761a638", 0x21}, {&(0x7f000000c280)="d47f8ef9e886692a8900178e8c39a7039e28c03a1b382afe5a4ebc28ee45072a76dce3d2be42a9329d35d545b3537306b056b254b88252c5915b9f3e1b82e489db68da8bf35520d97c9b98cda1e1c77b37737e695f2a13faf857df71668f690e7b4b69127d5d18b45d5e654797e5fc5b23ac4ba5be52bab162ee44f2b0f8716d0bf4aa1781ccadb6a67a95e475ef10bcfb39c51ec84d76b9061d02b748d9cca4242ef4f806d5f9e872fd593d", 0xac}], 0x3, &(0x7f000000c380)=ANY=[@ANYBLOB="18000100"/16, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x4044001}}, {{&(0x7f000000c400)=@file={0x0, './file0/file1\x00'}, 0x6e, &(0x7f000000c6c0)=[{&(0x7f000000c480)="2cc292ab4265d5db877796d29e474f676673bc972670115559c10b648d98336794d6765da717913a31e77be947ee690ace53cb6059519508308196b9c3102c50affe9850973dcf60d1806b97950dd2861198a3a0d8fd00924bb5f1c6e66877007f10ecfcdd03554968c60941760d516154dc9206814bc9376dc755e0189d36b203a1d57d287539bd443dfd9167dddd1d4ce00430cd0f057a83e57b499e6e35588c225254cd4ec5acf1b6e2e5f7493b0a2d0f2f237b8331b5096ddd9885c68ccfac3563226b645f9086a42097947b3848d76943425de77487070d809612a735ea3518c298ba6b8d455e180a", 0xeb}, {&(0x7f000000c580)="9bdcb179a237e14d441f5c43e248788889ddfbea2466303e99ea9645ec1ee6feff58bbd36c0da6e977de6e164192efc07efb3de4825669f949734783bfcd50e6a6667412918d04c1837933a84219a4d81a24a19aba7c4fa18f7d0f5c89102ff676cf88acc03a5b90c169447c315748017b763b69324a0855d01a69f138c8823d92178e98f294612e654ea1369919575878ba9046e049bc5375f3fd5ed61336fb1d898e730422245668aa2bcbe0f7482e2da0443808b49a8c04879eafce4ed73fd8421a339974a670", 0xc8}, {&(0x7f00000004c0)="593339ec77d1b1", 0x7}], 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r4, @ANYBLOB="e8a6ee000000001c00000000000000010000000200000057bdcd11737746872f17f860165f0a720ac5244ff45bcc3fb09399f8bbb1ebf8fdfb889ce75ea5ba6d56e464ddab81fff48bc2100313f05f8f7d54838617c51aa58ff4f2e4b523", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRESOCT=r4, @ANYRES32, @ANYRES32, @ANYRES32], 0xa0, 0x8008}}, {{&(0x7f000000d200)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f000000d580)=[{&(0x7f000000d280)="a3f22a4bf7c0a5ab96761d57151f7f054958d68a460d3c5bd1916f39f92adac2a490f34d6da935169d7229b4f4bae4cbe55dfe995a47833004f540fb1948e44ae7fc172cd27e153529078ca5862cc258e2b2fa2b8db200b1580dd9b93f1c551251647ddfb0e634ef59f3013221462110cad4e383228802a77cb3bfcdc3fb53dfda7f9d9c7814cae70d9d5207f74e537612f24852b1169e21649a22e651e478c65fe42e87c2bce64cbbcc1dafa0cffcc204e8f1df00bac86a1d6ac06771dd152d24f83951e11af733784b8d253ab3f90dadcff35b9d7753ac3a10d25e70c8eecc", 0xe0}, {&(0x7f000000d380)="0d729548e1b2b453e29d6ba97861884f926e3855d277d4534b2915f96fd0f9483c007ea9324112a01d36fa268d3467d7c90dfbe2bfecff12ea2dad8d631313f8196afca768628bce3b2554d62b000017c072e017b27910d9c5737284d97d74a0e8a5eb25e3192052f9e9923fa83a6bbac36b4ea9a1ea02e0f145fcba76816f0b9404766de9d481c5f2ae442dc3fd03d984a786b8838eac146cb7beded04d33d1ca561b8a8a21ff437088e1343271a3e222f5e84769f7e762d5effc83e1610ee31fb856231ea9674a8c5733a19e8318a8a3e5883d18265cf0430f", 0xda}, {&(0x7f000000d480)="b1ed78f8ea6d6482860c1ae1f2bbf7a0eebb5c883682958363245abab66951260eb8da48562e516364058a0aca2392c06f2aae95f87b836aec43c18aa1", 0x3d}, {&(0x7f000000d4c0)="a4dd683bfaa7f1", 0x7}, {&(0x7f000000d500)="3efe9c50d758f6b30acc333dd5a4141d00802edae16822eb76c5b8ef43d386b724d04d04d9f81454ba4460979230a1aee01515b5dd1e575125d5e69a4c8bdb3af594611980f35991584196b6980efb9069fa072b72e39a65b7b18311f93f17075af610c50204cf58fa51a241d23f7a44babf1d8907d154f151472edd9c55f6", 0x7f}], 0x5, &(0x7f000000d600)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}, {{&(0x7f000000d680)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f000000da00)=[{&(0x7f000000d700)="0a8b5ff54fb5fe86ebdcef43fcf1a49eb27051dec83e360af261599dd834f095bd69f5c2110f38fae7afdbb17dfc502f05ece62a704defa1433b3327e88e381547133d0c9c7ee3591695993cd17c36ef612cdaa87944e5", 0x57}, {&(0x7f000000d780)="81be2d3ea6a7e4930e3b6dc45f2e851fa95a8951eca2cd58c03fe9d9209bae9ff52db9a74a722ec4ad66d0e63f2af288a39e281517c772644e49aa35ca487fe013f4b407d26bb1c327458f1666cf7dd47bab750738cf34731737be65afd15ae4eff8156688e84c3b034aad08745175d2e5bc28d6d59ff03ee840a1dcfd", 0x7d}, {&(0x7f000000d800)="ced67044f6dc859fdf429c0744219446d16701b5a9e25fc7b60b7736e078b662bf12780c7602ae4ebde569618b838b1a4d8ceb4171fc76c3e18213f91c4913431090e1800a4c4197f98ff6ef9b274d02b905da8921698da7d65a44971b53dbd96bd3516cb7adb73c6f7caed4724a5cf9a4844ef647125e9d428e7000836e64e0cb2bfc40a7e48459a85d136688a6803293b1c6d21c0fe2df3a0009a7449d2c216f81b37f04f76e009695e4fdf7211bdc7ad696db92c037e7b4f139579e63fb408c7d963d69d20bd2fce07a4ce3ab5e", 0xcf}, {&(0x7f000000d900)="120b59f741985e74d06b505b64deeefc9ecf989010cb29af45b9f619cc620f61dbb0cc3f9ad04cfd8ac510ce478697e7c0f72ecff19280ba7f1c20b8b09458d5a8c4364723b37d7c9892bfa52abbe35c2a3001760e71a1019af698dbd56fcfeb2fa69645b74f59db56dae6176c8dcca2f2809cac6d497ce9fe3f7d3dd3bdf05683e48102a6cbb0722703172a39d733217bec1e92040e94ec3c7adcf631b81f06a671f81082543dd920ce8a9d9b650384e8674d519ebd9292446e876f4a5323c81da0de5955d637709b49707a08dad06ce6b768d978d8a14c0f41a12b4d08d3ed7d03ae0ae4552b06e3d49f3a5d4f046265", 0xf1}], 0x4, 0x0, 0x0, 0x1}}, {{&(0x7f000000da40)=@abs={0xe611fef98fde7629, 0x0, 0x4e24}, 0x6e, &(0x7f000000dd40)=[{&(0x7f0000000480)="5f417429df53c330b9b23e8a50d4cb382f99d67a0d39774d8b7166e9d10b12896654a4b9c1", 0x25}, {&(0x7f000000db00)="2622fa0348361ce3c9", 0x9}, {&(0x7f000000db40)="eb25bffdd8bea1343fdb2bf04a65a098c4880cdd7a30e80a4bf80c92fe623d7aa667586363ff36ea26a860674ac7f2c0c468e452b78fe380ba9a06e4ca2c5be95249f478c81f8cea56891dc6fb31f40ca194609a79c0", 0x56}, {&(0x7f000000dbc0)="0e4d796b24ac710b3e35d724ce7e59ba190b221cf29358f1ca98131c73a65e3f39a73bab5216b8e9f1eec65a63c415803fa68b61b89ab25ae3054927ed20f04f662e5f3770be7dc1dfabf50821f6814e33e6e32b947c05b8db245a35b0664653d1d9da551efc3302d35258ace14f7716046450f38b1594c5c0789fa1b2b124a7438edbad05c1", 0x86}, {&(0x7f000000dc80)="1a954cc8951dc550dd727cccc6f8ea8fecf75283e0667f66ef1080887081339826a49be75ae2b8397074822dea42e369bbfc67aaca7330205577d3f5c3352eb69a183671728069bfc877e359c61c68a30628fcf4100113d6ed195e639355cf2644941ef72ab4ccb824ccf49974e2813a0aeba798101e6b10083ae7b4e18864773c25d0c0e4ba1e02a6e038114f67546769", 0x91}], 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1c01008ae7bc58bd2a6d06876cd17482eb350002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r5, @ANYRES8=r5, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e34bd67f0c0000000000000035"], 0x98, 0x810}}, {{&(0x7f000000de80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f000000e400), 0x0, 0x0, 0x0, 0x4040}}], 0x9, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r10 = userfaultfd(0x801) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000008, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) getdents(r9, &(0x7f00000000c0)=""/156, 0x9c) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8m40.643982712s ago: executing program 3 (id=1194): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 8m40.269977158s ago: executing program 3 (id=1196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0xfffc, 0xf8, 0x89, 0x0, @loopback, @broadcast}}}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000", @ANYRESOCT=r3], 0x48}, 0x1, 0x0, 0x0, 0x2000800}, 0x0) 8m25.142105082s ago: executing program 33 (id=1196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0xfffc, 0xf8, 0x89, 0x0, @loopback, @broadcast}}}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000", @ANYRESOCT=r3], 0x48}, 0x1, 0x0, 0x0, 0x2000800}, 0x0) 18.651263614s ago: executing program 6 (id=2728): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000000)={0x1, {{0xa, 0xfffb, 0xc0000000, @mcast2}}, {{0xa, 0xfffe, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0xfbfffffe}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000000140)=0x28) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, 0x0, 0x0, 0x0}) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0xc0245720, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xb0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x40}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x83, 0x1, '#'}, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000002840), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r5, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) write$smackfs_ipv6host(r4, &(0x7f0000001680)=@l2={{0x40000000006, 0x3a, 0x8, 0x3a, 0x1, 0x3a, 0x1855, 0x3a, 0x6, 0x3a, 0x100000000006, 0x3a, 0x64, 0x3a, 0x80000000}, 0x2f, 0x0, 0x20, '\\'}, 0xaf) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) 13.066006608s ago: executing program 6 (id=2741): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000000, 0x31, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1e02) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'gretap0\x00', 0x0}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0xe, 0x9e, 0x0, 0x0, 0x1, 0xa41ef7c}) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x4b52, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x5, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="200103000000c282feda0e5d048a9e13f318114fe493a46f1525ab1ded0603710cd9f154f686880431"], 0x0}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) iopl(0x3) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=""/1, 0x1, 0x22, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x30}}}, 0x24) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7}) mq_timedreceive(r4, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) process_vm_writev(r3, &(0x7f0000000380)=[{&(0x7f00000005c0)=""/143, 0x8f}, {&(0x7f0000000800)=""/234, 0xea}, {&(0x7f0000000900)=""/213, 0xd5}, {&(0x7f0000000280)=""/104, 0x68}, {&(0x7f0000000a00)=""/159, 0x9f}, {&(0x7f0000000ac0)=""/221, 0xdd}], 0x6, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)=""/194, 0xc2}, {&(0x7f0000000cc0)=""/123, 0x7b}, {&(0x7f0000000d40)=""/100, 0x64}, {&(0x7f0000000680)=""/58, 0x3a}], 0x4, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x7, 0x0, 0x0, 0x0}], 0x1}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 11.627828032s ago: executing program 0 (id=2744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000002800)='./file0\x00', &(0x7f0000002840), 0x2000080, &(0x7f0000000180)={[{@none}, {@subsystem='pids'}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x2000000000, 0xb, 0x80006, 0x4000000000000e51, 0x101, 0x547a, 0x103d, 0x200000000006, 0x0, 0x3aa, 0x1, 0x1, 0x5, 0x40000000009, 0x40000000080a8c, 0x800000068], 0x6000, 0x4000}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x280002, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x2000, 0x3, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_cancel(0x0, 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f0000000200)={@my=0x0, 0x80000001}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x814) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x94) 10.935224667s ago: executing program 6 (id=2746): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000440)=ANY=[@ANYRESOCT], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x3100, 0x2e, &(0x7f0000000140), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 10.812321374s ago: executing program 0 (id=2747): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0x20}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x94) (async) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000001c0)={0x0, 0x5, 0x3, &(0x7f0000000180)={0x20, "03f7f6a8ddbd6c1493182692622b77d2d9748628edca75fbdd7d594414046cd3b6"}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000239fe516dbafd498802b7df0bbbab7f315093c6147a4d70bd73098aaaa9f5728fea2331347cb879df34e66fd7d1644fc929cd256030b4287d66c2ed82cd5d5b32d462b73c9fd3344d0e54dad208f6fac388f1aef5eb1783e073c108b80401aa662bd6052200be65fc70655eba092d6c166e8a7d4d85a85f2bc0f4adcf370c4686fecd0bf5e60b0036f466e95d24448f0fff09ded13dca8deb2bbe86314fd49963267de9b97b610ef1940ca16a68505"], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0x3}]}, &(0x7f0000000440)='syzkaller\x00', 0x80, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.775550661s ago: executing program 6 (id=2748): socket$xdp(0x2c, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000314010028bd7000fbdbdf250900020073797a320000000008005c0072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f00000000c0)=0xfffffffd) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0x6}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x22902, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040844) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r4, r3, 0x0, 0x558410e9) 10.515403458s ago: executing program 0 (id=2749): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="450a31e5b7c2000061117400000000001800000000000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xffffff56, 0x400}, 0x50) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$random(0xffffff9c, &(0x7f0000000840), 0x82000, 0x0) unshare(0x2020400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x5, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffffb, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xfb, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x1, 0x4, 0x8000, 0x809, 0x400, 0x5, 0x6, 0x7, 0xff, 0x400005, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x801, 0x6, 0x0, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x1, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x81df, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x1, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x0, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) open_by_handle_at(r0, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0xa2, 0x80, 0x4, 0x7}}, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 10.389903403s ago: executing program 2 (id=2750): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x1ec) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0xe8e80) fsopen(&(0x7f0000000100)='proc\x00', 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) connect$inet6(r4, 0x0, 0x0) syz_open_dev$vivid(0x0, 0x0, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) mincore(&(0x7f00001b5000/0x3000)=nil, 0x3000, 0xfffffffffffffffe) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) close_range(r6, 0xffffffffffffffff, 0x0) 7.017416149s ago: executing program 0 (id=2755): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/mem_sleep', 0xb883, 0xb2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xf, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f9858c1a7bedabd69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30d50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc20d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c09, r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f00000005c0)={0x14, &(0x7f0000000400)={0x20, 0x22, 0x63, {0x63, 0x8, "fa75c5a22ba3c1047367ef9f7561de8ca7a72ddb8d325d619d908f5be090cf5581e0a6219448c07e1c60bd1542816ae55e907579236ed3795ae4a1a19fcc2bc28f2a47b9637f9ff572361490c9e06d23eb8f9071e0cf592f7d349f850f43313e80"}}, &(0x7f0000000480)={0x0, 0x3, 0xf6, @string={0xf6, 0x3, "c5b9ab0b31e71d966e184e80dee6ae802597bdcdce270124dc783bcbe3e394a887779bcce539317c52bf4b787c20e5751bd3a3aa78fa0ed78c869ca66e79235a145e8eece78be54dfe186e90dcf0ecbefafe764f470b690b79db1db4e6a6cbbc949bdc07d6135e6b8d51409c7066ff77a3f91a29fb54693a88f06212c07fa4b75f0e2d9af93178ab5e5fe0ab56fa6e9c646d1b21441556ab62f0b29d4ed30a8c9b63b61d4be2eb2afdccdf8106bcb4b5296b338eb67e278106c0f69a7a5a9a9d3d1130951091b8f2fd5025b2a99254f7fa9883fe646f4921ad18bea5a7c041232586b507cbd60797437694708b47dcfe1282f9ee"}}}, &(0x7f0000000840)={0x34, &(0x7f0000000600)={0x40, 0x24, 0xcc, "06e08d11b8ba41dd0ad35e827831317358aed3b3d4404da175904ed01a53ea2e26dec30ec1e08f5dc0e0279cf7c05ef31c8a81cda7b133c901819d8270f197c39403b01a284fe161235d34bf56b3412bfdea7bc0c64c2ce1eac847ae081e43e9b8024ddc43bb58fa5ad989cdaed299ab4098850e018d55bf953a96c3a1db904a18f4b8fee35f8134c9fb3310c72472d6f49836a5b0796c07a6809b484cff4ebd5f4ae326dd9d836d8e2c156ada3bb09f508c9b41bc437998202ec5dac93f90b069ab60d3ba872dc67e411f56"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x8d}, &(0x7f0000000780)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f00000007c0)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000800)={0xc0, 0xa2, 0x2f, "3deb5912b7eb9d0285e9e88dcb3123a863e8b78d1fc146822517f601e697b5bfeb891685000103e324669ea3543a24"}}) syz_usb_control_io$rtl8150(r2, &(0x7f0000000980)={0x14, &(0x7f0000000180)={0x0, 0x10, 0x1f, {0x1f, 0x7, "9fde03a4914c66e68ca62a971ac4f97c92b026d0b6270a9939c93d9cbc"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000b00)={0x2c, &(0x7f00000009c0)={0x40, 0x16, 0xe, "6c14093613a067b54d37e39efd62"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000a80)={0xc0, 0x5, 0x3, "daf7fc"}, &(0x7f0000000ac0)}) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800, 0x0, 0x5], [0x0, 0x40, 0x4]}) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 6.707284116s ago: executing program 5 (id=2756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r1, 0x1, 0x8000000, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x4}}}}, 0x30}}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0x22}, 0x94) 5.640101664s ago: executing program 2 (id=2758): mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5.403239178s ago: executing program 5 (id=2759): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000001214010025bd7000fcdbdf2508"], 0x18}, 0x1, 0x0, 0x0, 0x20008011}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x84, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000000)="00a0bb4387fa", 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x4001fe, @empty, 0x8000b}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000b40)) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000001c0)=""/17, &(0x7f00000000c0)=0xa4) 5.357232283s ago: executing program 2 (id=2760): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000000)="9adb7d95eaf1a5616ad3491c63c26273d5b97f4facf76288d0b23fa12595ea23307c63fff279bec467fc30f59f844bfb1ec0affe6d3aed17c29779c2", 0x3c}, {&(0x7f0000000140)="879083fab1286dd502c478ed8ac165b3d45f6dcf264ae05af14ef46a13c002403b87d7a3e2cdbd0c6be93364f7dfb2c20548198638cd918493b0a20f325a2341072039e5db66368b10363b946b7fec077780227eaccc7c1279c027820c75230e20ac93894bc8262a8e8bb221e6ad0c404bc9e63d8f3cd1ce6d0e54000a436bebbe746a79f060f6014e78d44d8673b14dd264212ab24460631cec64378af1efad062d2ab66fbda1feb71a55c3545eec753ce3023cb1cc81f17aa3e434d900c23a19e4c298f043106e119a1444edde", 0xce}, {&(0x7f0000000240)="38eecb97ab85bac73fd09c2db7299a07aa63107bf8103d1b6b9b84a9d39a37af30714d27e30f97549fe5571062c907be998201", 0x33}, {&(0x7f0000000700)="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", 0x6b8}, {0x0}], 0x5}}], 0x1, 0x0) 5.201959001s ago: executing program 6 (id=2761): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 5.055917733s ago: executing program 5 (id=2762): syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') 3.833497592s ago: executing program 6 (id=2763): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="120000000c0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r2, &(0x7f00000000c0)}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xe, 0x1, 0x401, 0x1, 0x280, 0x0, 0x2, 0x8, 0x10000, 0x4, 0xe, 0x20, 0xe, 0x8, 0x1, 0xfffffffa}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040098}, 0x4040804) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32, @ANYBLOB="01000000010000001c0012"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe00000100000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.712383082s ago: executing program 4 (id=2764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c008128e00f80ecdb4cb9f207c804a01f000000050006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000537000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = semget$private(0x0, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) recvfrom(r1, &(0x7f0000000180)=""/20, 0x14, 0x2, &(0x7f0000000300)=@nl=@kern={0x10, 0x0, 0x0, 0x10000000}, 0x80) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000640)={0x0, 0x7}, &(0x7f0000000680)=0x8) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) semop(r5, &(0x7f00000000c0), 0x0) semop(r5, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) 3.712100006s ago: executing program 2 (id=2765): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') getdents64(r1, &(0x7f0000000140)=""/4096, 0x1000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001200)={'netpci0\x00', &(0x7f0000001140)=@ethtool_rx_ntuple={0x35, {0x6, @tcp_ip4_spec={@empty, @remote, 0x4e21, 0x4e22, 0x1}, @ether_spec={@random="fc85594aa6fa", @broadcast, 0x5}, 0x66d, 0x1, 0x3ff, 0x357c, 0xfffffffffffffffe}}}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x7, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x9, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6, 0x8, 0x9, 0x5, 0x9, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x5, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x810, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x3, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x81, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0x3, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x280801, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000002980)={0x100001, 0x0, 0x0, {r3}}, 0x20) r4 = dup2(r1, r1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getdents64(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') getdents(r5, &(0x7f0000001480)=""/4092, 0x3d3) getdents64(r5, &(0x7f0000000040)=""/74, 0x4a) 3.548293583s ago: executing program 4 (id=2766): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r1, 0x1, 0xffffff80}, 0x14}}, 0x20000000) 3.543933007s ago: executing program 5 (id=2767): clock_gettime(0x73d120d1a3af8f7f, 0x0) unshare(0x2c020400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg1\x00'}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x80) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r1, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x4080) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000193000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000240)="3e440f30c48251df5fd0bbfdffffffab40c81838003ef33e2e0f01f8c4c26d9aa9070000000fc71b440f784f0b0f20a3", 0x30}], 0x1, 0x4e, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x8, &(0x7f00000000c0)=[{0x9, 0xa, 0x4, 0x3ff}, {0x5, 0x0, 0xa, 0x6}, {0x3, 0x4b, 0x5, 0x8}, {0x800, 0x1, 0x2, 0x81}, {0x7f, 0x7, 0x1, 0x2}, {0x1, 0x8, 0x1, 0x9}, {0xfff8, 0x5, 0xb, 0x1}, {0x2, 0x1, 0xd1, 0x80000001}]}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r9 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r9, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) close_range(r7, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(r6, &(0x7f0000000240)=ANY=[], 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) mkdirat(r6, &(0x7f0000000080)='./file0\x00', 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r10}, 0x4) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f00000001c0)=0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r10}, 0x0, 0x0}, 0x20) 3.289754439s ago: executing program 4 (id=2768): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x4c001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES8, @ANYRESOCT, @ANYRESOCT], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x10000001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{0x0}], 0x1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x1}], 0x1, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000009b80)=""/102392, 0x18ff8) iopl(0x3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) io_submit(0x0, 0x4, &(0x7f0000000840)=[0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f0000000500)="ad2c", 0x2, 0xfeffffffffffffff}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0xffff, 0xffffffffffffffff, &(0x7f0000000580)="084ec9875a72009c3192542633cedba8c262c87819d946d923c199c931ace636e35cb6a4d7150e884137299c027a64f6e9e6ac43", 0x34, 0x8001000}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x8003, 0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x420000000, 0x0, 0x3}]) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) 2.862848482s ago: executing program 5 (id=2769): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x203f76, 0x100, 0xfffffffe, 0x1cd}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) r3 = socket(0x28, 0x5, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) clock_getres(0x17, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r5, &(0x7f0000000480)=""/154, 0x9a, 0xe4) io_uring_enter(r0, 0x3516, 0xf400, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xffff, 0x0, 0x4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004860) 2.255073957s ago: executing program 5 (id=2770): fanotify_init(0x202, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) io_uring_setup(0x1612, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0xa65c3000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000300)={0x4, 0x0, [{0x40000000, 0x3a5, 0x6, 0x2cf6, 0x80000001, 0x1, 0xa0e}, {0x40000000, 0x6, 0x7, 0x2fb3, 0xe, 0x7, 0x3}, {0xb, 0x0, 0x1, 0x4, 0x81, 0x1, 0xf}, {0xd, 0x8, 0x4, 0x1, 0x669, 0x3, 0x8}]}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000240)={0xc}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000800000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000004c0)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x3, @empty, 0xffff}, {0xa, 0x4000, 0x2, @loopback}, r7, 0x80}}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a0001032dbd7000fcffffff05"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 1.99341481s ago: executing program 4 (id=2771): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)) (async) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.946386699s ago: executing program 2 (id=2772): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000001214010025bd7000fcdbdf2508"], 0x18}, 0x1, 0x0, 0x0, 0x20008011}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x84, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000000)="00a0bb4387fa", 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x4001fe, @empty, 0x8000b}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000b40)) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000001c0)=""/17, &(0x7f00000000c0)=0xa4) 1.588110663s ago: executing program 4 (id=2773): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 1.585521251s ago: executing program 0 (id=2774): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x20010, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000002000000000003000000852000000300000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000002820e050500000095000000060000000249d851c3389c82c3852dabf6ec7194c036bb995bc32000027167c8cf303538ee23b8603276d1502d8492d96d0ab0bb98a92c3a92ba07d8b98067af95a389ae0b1f044188a4df25b2d40a9d2fa1c5e1d66d4e6e89795f6fc89feca314040785c5a1a02bcd3a809450ce63ae7e5b3a0045ec69a7dc49ce5450c4e2c44bd87278e4675c2fa59969559a2d025d91fa5afe5f4689ffa34b8f5466c05abe4acfe91884f282164532a4da3d745ff3992c075a0f978dadd274a56b630fc997b98336c15e8a7e6c390e1249a6329d96684ade7fed5b90d50c5bb22a6b4dabf2000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000780)=""/4096, 0x4824f3e0ad752454, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.39527376s ago: executing program 2 (id=2775): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x81, 0x10, 0x4}, 0x18, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xb6}]}}}]}]}], {0x14}}, 0x78}}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000080)={'veth0_to_bond\x00', {0x2, 0x0, @remote}}) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') 1.314813513s ago: executing program 0 (id=2776): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6, 0x0, 0x6c}]}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x6, 0x0, 0xffffffffffffffff, 0xfffffffdffffffff) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r5, 0x60}], 0x1, 0x0, 0x0, 0x0) r6 = memfd_create(0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8001a0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x200002, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff7ff3}]}) close_range(r7, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=2777): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, 0x0) r3 = memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') kernel console output (not intermixed with test programs): 567423][ T5874] usb 5-1: ucan: failed to retrieve device info [ 853.567446][ T5874] usb 5-1: ucan: probe failed; try to update the device firmware [ 853.601242][ T5874] usb 5-1: USB disconnect, device number 110 [ 853.704303][ T5957] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 853.836106][ T5957] usb 7-1: device descriptor read/64, error -71 [ 853.944592][ T5957] usb usb7-port1: attempt power cycle [ 853.950079][T13568] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2272'. [ 854.284297][ T5957] usb 7-1: new low-speed USB device number 33 using dummy_hcd [ 854.305019][ T5957] usb 7-1: device descriptor read/8, error -71 [ 854.325933][ T6217] hsr_slave_0: left promiscuous mode [ 854.371401][ T6217] hsr_slave_1: left promiscuous mode [ 854.372423][ T6217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 854.372452][ T6217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.431475][ T6217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 854.431506][ T6217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.545854][ T5957] usb 7-1: new low-speed USB device number 34 using dummy_hcd [ 854.568569][ T5957] usb 7-1: device descriptor read/8, error -71 [ 854.571163][ T6217] veth1_macvtap: left promiscuous mode [ 854.571268][ T6217] veth0_macvtap: left promiscuous mode [ 854.571555][ T6217] veth1_vlan: left promiscuous mode [ 854.571737][ T6217] veth0_vlan: left promiscuous mode [ 854.674526][ T5957] usb usb7-port1: unable to enumerate USB device [ 854.684292][T13584] genirq: Flags mismatch irq 4. 00202000 (aio_iiro_16) vs. 00202080 (ttyS0) [ 855.430286][ T5929] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 855.586768][ T5929] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 855.586794][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 855.586810][ T5929] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 855.589191][ T5929] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 855.589220][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.589240][ T5929] usb 3-1: Product: syz [ 855.589249][ T5929] usb 3-1: Manufacturer: syz [ 855.589258][ T5929] usb 3-1: SerialNumber: syz [ 855.593398][ T5929] usb 3-1: config 0 descriptor?? [ 855.634870][T13597] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 855.635061][T13597] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 855.637737][ T5929] usb 3-1: ucan: probing device on interface #0 [ 856.079487][ T5929] usb 3-1: ucan: failed to retrieve device info [ 856.079514][ T5929] usb 3-1: ucan: probe failed; try to update the device firmware [ 856.094601][ T5929] usb 3-1: USB disconnect, device number 99 [ 856.164093][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 856.164129][ C0] lec:lec_tx_timeout: lec0 [ 856.164281][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 856.454130][ T5929] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 856.613240][ T5929] usb 7-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 856.613272][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.613286][ T5929] usb 7-1: Product: syz [ 856.613294][ T5929] usb 7-1: Manufacturer: syz [ 856.613303][ T5929] usb 7-1: SerialNumber: syz [ 856.671765][ T5929] usb 7-1: config 0 descriptor?? [ 856.683739][ T5929] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 857.254506][T13610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.289136][T13610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.946812][ T5929] sonixb 7-1:0.0: Error writing register 01: -71 [ 857.946924][ T5929] sonixb 7-1:0.0: probe with driver sonixb failed with error -71 [ 857.991686][ T5929] usb 7-1: USB disconnect, device number 35 [ 858.392221][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2291'. [ 859.125066][T13631] loop7: detected capacity change from 0 to 6 [ 859.193881][T13631] Invalid logical block size (4) [ 859.200368][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 859.225287][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 859.225328][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 859.226291][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 859.226322][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 859.227125][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 859.227165][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 859.227914][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 859.227957][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 859.228841][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 859.228872][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 859.453929][ T5957] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 859.613186][ T5957] usb 7-1: Using ep0 maxpacket: 8 [ 859.622758][ T5957] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 859.622781][ T5957] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.622793][ T5957] usb 7-1: Product: syz [ 859.622803][ T5957] usb 7-1: Manufacturer: syz [ 859.622812][ T5957] usb 7-1: SerialNumber: syz [ 859.645844][ T5957] usb 7-1: config 0 descriptor?? [ 859.863578][ T5957] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 860.324845][ T6217] team0 (unregistering): Port device team_slave_1 removed [ 860.574638][ T6217] team0 (unregistering): Port device team_slave_0 removed [ 861.183606][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 861.183679][ C0] lec:lec_tx_timeout: lec0 [ 861.183831][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 861.386048][ T5957] gspca_sunplus: reg_r err -71 [ 861.386154][ T5957] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 861.412524][ T5957] usb 7-1: USB disconnect, device number 36 [ 862.263756][ T5957] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 862.448221][ T5957] usb 7-1: config 0 has an invalid interface number: 111 but max is 0 [ 862.448254][ T5957] usb 7-1: config 0 has no interface number 0 [ 862.448304][ T5957] usb 7-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 862.448324][ T5957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.451736][ T5957] usb 7-1: config 0 descriptor?? [ 862.501619][ T5957] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 863.444139][T13619] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2291'. [ 863.867132][T13642] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2300'. [ 864.720935][ T5957] gspca_ov534_9: reg_w failed -110 [ 864.767325][ T6158] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 864.913674][ T6158] usb 3-1: device descriptor read/64, error -71 [ 864.973564][ T5957] gspca_ov534_9: Unknown sensor 0000 [ 864.973672][ T5957] ov534_9 7-1:0.111: probe with driver ov534_9 failed with error -22 [ 865.186577][ T6158] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 865.323589][ T6158] usb 3-1: device descriptor read/64, error -71 [ 865.441509][ T6158] usb usb3-port1: attempt power cycle [ 865.773562][ T6158] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 865.800875][ T6158] usb 3-1: device descriptor read/8, error -71 [ 865.839360][T13665] geneve2: entered promiscuous mode [ 866.035331][ T6158] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 866.053694][T13219] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 866.070884][ T6158] usb 3-1: device descriptor read/8, error -71 [ 866.089281][T13219] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 866.183858][ T6158] usb usb3-port1: unable to enumerate USB device [ 866.193477][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 866.193516][ C0] lec:lec_tx_timeout: lec0 [ 866.193629][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 866.248546][ T9] usb 7-1: USB disconnect, device number 37 [ 866.264823][T13219] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 866.352185][T13219] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 866.363521][ T6158] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 866.514406][ T6158] usb 6-1: too many configurations: 83, using maximum allowed: 8 [ 866.519753][ T6158] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 866.519797][ T6158] usb 6-1: can't read configurations, error -61 [ 866.644560][ T6158] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 866.673511][ T9] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 866.796008][ T6158] usb 6-1: too many configurations: 83, using maximum allowed: 8 [ 866.800561][ T6158] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 866.800605][ T6158] usb 6-1: can't read configurations, error -61 [ 866.806357][ T6158] usb usb6-port1: attempt power cycle [ 866.839114][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 866.839152][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 866.839182][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 866.847042][ T9] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 866.847072][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.847091][ T9] usb 7-1: Product: syz [ 866.847105][ T9] usb 7-1: Manufacturer: syz [ 866.847119][ T9] usb 7-1: SerialNumber: syz [ 866.859282][T13219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.920501][T13219] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.925347][ T9] usb 7-1: config 0 descriptor?? [ 866.926397][T13675] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 866.926579][T13675] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 866.937831][ T9] usb 7-1: ucan: probing device on interface #0 [ 867.090787][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.092059][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.193506][ T6158] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 867.214953][ T6158] usb 6-1: too many configurations: 83, using maximum allowed: 8 [ 867.225538][ T6158] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 867.225579][ T6158] usb 6-1: can't read configurations, error -61 [ 867.337667][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.338947][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.363712][ T6158] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 867.397989][ T6158] usb 6-1: too many configurations: 83, using maximum allowed: 8 [ 867.401016][ T6158] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 867.401055][ T6158] usb 6-1: can't read configurations, error -61 [ 867.401937][ T6158] usb usb6-port1: unable to enumerate USB device [ 867.417947][ T9] usb 7-1: ucan: device reported invalid device info [ 867.418024][ T9] usb 7-1: ucan: probe failed; try to update the device firmware [ 867.651759][ T5874] usb 7-1: USB disconnect, device number 38 [ 868.486110][ T5957] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 868.717044][ T5957] usb 5-1: Using ep0 maxpacket: 8 [ 868.734754][ T5957] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 868.734820][ T5957] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 868.734844][ T5957] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 868.734870][ T5957] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 868.734893][ T5957] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 868.734938][ T5957] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 868.734962][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.903472][ T880] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 868.971897][T13219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.026845][ T5957] usb 5-1: GET_CAPABILITIES returned 0 [ 869.026878][ T5957] usbtmc 5-1:16.0: can't read capabilities [ 869.053367][ T880] usb 3-1: Using ep0 maxpacket: 32 [ 869.097642][ T880] usb 3-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 869.097678][ T880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.097701][ T880] usb 3-1: Product: syz [ 869.097717][ T880] usb 3-1: Manufacturer: syz [ 869.097732][ T880] usb 3-1: SerialNumber: syz [ 869.122450][ T880] usb 3-1: config 0 descriptor?? [ 869.220511][T13219] veth0_vlan: entered promiscuous mode [ 869.250856][T13219] veth1_vlan: entered promiscuous mode [ 869.415275][ T5957] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 869.419516][T13219] veth0_macvtap: entered promiscuous mode [ 869.447149][T13219] veth1_macvtap: entered promiscuous mode [ 869.482198][T13712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.504953][T13712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.508777][T13219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.559356][T13219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.570924][ T5957] usb 7-1: Using ep0 maxpacket: 16 [ 869.583987][ T5957] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 869.584023][ T5957] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 869.584045][ T5957] usb 7-1: Product: syz [ 869.584059][ T5957] usb 7-1: Manufacturer: syz [ 869.584074][ T5957] usb 7-1: SerialNumber: syz [ 869.592507][ T5957] usb 7-1: config 0 descriptor?? [ 869.635264][ T7215] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.635318][ T7215] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.635355][ T7215] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.635453][ T7215] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.714723][ T5874] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 869.884215][ T880] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 869.885143][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 869.912573][ T5874] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 869.912604][ T5874] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.912623][ T5874] usb 6-1: config 0 has no interface number 0 [ 869.912673][ T5874] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 869.912696][ T5874] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 869.912718][ T5874] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 869.912740][ T5874] usb 6-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 869.951789][ T5874] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 869.951822][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.951841][ T5874] usb 6-1: Product: syz [ 869.951855][ T5874] usb 6-1: Manufacturer: syz [ 869.951868][ T5874] usb 6-1: SerialNumber: syz [ 869.962546][ T880] usb 3-1: USB disconnect, device number 104 [ 870.024734][ T5874] usb 6-1: config 0 descriptor?? [ 870.190269][ T5804] Bluetooth: hci5: hcon ffff8880631f0000 sent 1 < count 256 [ 870.254627][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.254706][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.339213][T13720] dummy0: entered promiscuous mode [ 870.357048][T13720] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2312'. [ 870.357072][T13720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2312'. [ 870.414746][ T5957] usb 7-1: USB disconnect, device number 39 [ 870.599494][ T10] usb 5-1: USB disconnect, device number 111 [ 870.721447][T13721] dummy0: left promiscuous mode [ 870.830600][ T7576] udevd[7576]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 870.960319][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.960346][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.007735][ T5874] usb 6-1: NFC: intf ffff88801afa3000 id ffffffff8e54a8e0 [ 871.180175][ T5874] usb 6-1: USB disconnect, device number 48 [ 871.203195][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 871.203234][ C0] lec:lec_tx_timeout: lec0 [ 871.203346][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 871.319530][ T7214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.319553][ T7214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.512230][ T10] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 871.753307][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 871.798342][ T10] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 871.798434][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.781977][ T10] usb 5-1: config 0 descriptor?? [ 872.840621][ T10] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 872.933097][ T5957] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 873.001492][ T10] usb 5-1: Detected FT232B [ 873.108736][ T5957] usb 3-1: device descriptor read/64, error -71 [ 873.202865][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 873.203846][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 873.221768][ T10] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 873.234549][ T10] usb 5-1: USB disconnect, device number 112 [ 873.238449][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 873.238872][ T10] ftdi_sio 5-1:0.0: device disconnected [ 873.343272][ T5957] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 873.477235][ T5957] usb 3-1: device descriptor read/64, error -71 [ 873.583351][ T5957] usb usb3-port1: attempt power cycle [ 873.961114][ T5957] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 873.983957][ T5957] usb 3-1: device descriptor read/8, error -71 [ 874.325697][ T5957] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 874.581118][ T5957] usb 3-1: device descriptor read/8, error -71 [ 874.685774][ T5957] usb usb3-port1: unable to enumerate USB device [ 876.313194][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 876.313228][ C0] lec:lec_tx_timeout: lec0 [ 876.320998][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 877.602853][ T5957] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 877.603761][ T10] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 877.772806][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 877.776464][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 877.776560][ T10] usb 5-1: too many configurations: 68, using maximum allowed: 8 [ 877.780889][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 877.780929][ T10] usb 5-1: can't read configurations, error -61 [ 877.922969][ T10] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 878.025246][ T5957] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 878.025281][ T5957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.496637][ T5957] usb 7-1: config 0 descriptor?? [ 879.064265][ T5957] cp210x 7-1:0.0: cp210x converter detected [ 879.256693][ T5957] usb 7-1: cp210x converter now attached to ttyUSB0 [ 879.272429][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 879.280776][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 879.280870][ T10] usb 5-1: too many configurations: 68, using maximum allowed: 8 [ 879.335887][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 879.335932][ T10] usb 5-1: can't read configurations, error -61 [ 879.336682][ T10] usb usb5-port1: attempt power cycle [ 879.554978][ T9] usb 7-1: USB disconnect, device number 40 [ 879.575594][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 879.576432][ T9] cp210x 7-1:0.0: device disconnected [ 879.619630][T13829] FAULT_INJECTION: forcing a failure. [ 879.619630][T13829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 879.619671][T13829] CPU: 1 UID: 0 PID: 13829 Comm: syz.5.2345 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 879.619701][T13829] Tainted: [L]=SOFTLOCKUP [ 879.619710][T13829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 879.619723][T13829] Call Trace: [ 879.619732][T13829] [ 879.619743][T13829] dump_stack_lvl+0xe8/0x150 [ 879.619778][T13829] should_fail_ex+0x46b/0x600 [ 879.619810][T13829] _copy_to_user+0x31/0xb0 [ 879.619842][T13829] simple_read_from_buffer+0xe1/0x170 [ 879.619875][T13829] proc_fail_nth_read+0x1be/0x230 [ 879.619902][T13829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 879.619944][T13829] ? rw_verify_area+0x2ac/0x4e0 [ 879.619975][T13829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 879.620000][T13829] vfs_read+0x212/0xa70 [ 879.620031][T13829] ? __pfx_vfs_read+0x10/0x10 [ 879.620054][T13829] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 879.620082][T13829] ? lockdep_hardirqs_on+0x7a/0x110 [ 879.620110][T13829] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 879.620137][T13829] ? mutex_lock_nested+0x152/0x1d0 [ 879.620158][T13829] ? fdget_pos+0x252/0x320 [ 879.620194][T13829] ksys_read+0x156/0x270 [ 879.620216][T13829] ? __pfx_ksys_read+0x10/0x10 [ 879.620236][T13829] ? __pfx_media_ioctl+0x10/0x10 [ 879.620268][T13829] do_syscall_64+0x14d/0xf80 [ 879.620293][T13829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.620313][T13829] ? trace_irq_disable+0x37/0x100 [ 879.620332][T13829] ? clear_bhb_loop+0x40/0x90 [ 879.620355][T13829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.620374][T13829] RIP: 0033:0x7fd09ce0c84e [ 879.620394][T13829] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 879.620413][T13829] RSP: 002b:00007fd09b09dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 879.620437][T13829] RAX: ffffffffffffffda RBX: 00007fd09b09e6c0 RCX: 00007fd09ce0c84e [ 879.620452][T13829] RDX: 000000000000000f RSI: 00007fd09b09e0a0 RDI: 0000000000000004 [ 879.620467][T13829] RBP: 00007fd09b09e090 R08: 0000000000000000 R09: 0000000000000000 [ 879.620480][T13829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.620494][T13829] R13: 00007fd09d0c6038 R14: 00007fd09d0c5fa0 R15: 00007fffe25521e8 [ 879.620530][T13829] [ 879.819517][ T10] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 879.844093][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 879.875316][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 879.875407][ T10] usb 5-1: too many configurations: 68, using maximum allowed: 8 [ 879.895859][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 879.895901][ T10] usb 5-1: can't read configurations, error -61 [ 879.962749][ T5957] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 880.023290][ T10] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 880.043501][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 880.045983][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 880.046075][ T10] usb 5-1: too many configurations: 68, using maximum allowed: 8 [ 880.047866][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 880.047903][ T10] usb 5-1: can't read configurations, error -61 [ 880.048322][ T10] usb usb5-port1: unable to enumerate USB device [ 880.073972][T13838] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2349'. [ 880.124667][ T5957] usb 3-1: config 0 has an invalid interface number: 111 but max is 0 [ 880.124701][ T5957] usb 3-1: config 0 has no interface number 0 [ 880.124739][ T5957] usb 3-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 880.124754][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.129184][ T5957] usb 3-1: config 0 descriptor?? [ 880.212014][ T5957] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 880.267587][T13841] FAULT_INJECTION: forcing a failure. [ 880.267587][T13841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.267628][T13841] CPU: 0 UID: 0 PID: 13841 Comm: syz.6.2350 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 880.267659][T13841] Tainted: [L]=SOFTLOCKUP [ 880.267667][T13841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 880.267679][T13841] Call Trace: [ 880.267688][T13841] [ 880.267698][T13841] dump_stack_lvl+0xe8/0x150 [ 880.267734][T13841] should_fail_ex+0x46b/0x600 [ 880.267765][T13841] _copy_to_user+0x31/0xb0 [ 880.267793][T13841] simple_read_from_buffer+0xe1/0x170 [ 880.267826][T13841] proc_fail_nth_read+0x1be/0x230 [ 880.267852][T13841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 880.267882][T13841] ? rw_verify_area+0x2ac/0x4e0 [ 880.267913][T13841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 880.267936][T13841] vfs_read+0x212/0xa70 [ 880.267965][T13841] ? __pfx_vfs_read+0x10/0x10 [ 880.267988][T13841] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 880.268016][T13841] ? lockdep_hardirqs_on+0x7a/0x110 [ 880.268040][T13841] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 880.268067][T13841] ? mutex_lock_nested+0x152/0x1d0 [ 880.268086][T13841] ? fdget_pos+0x252/0x320 [ 880.268133][T13841] ksys_read+0x156/0x270 [ 880.268157][T13841] ? __pfx_ksys_read+0x10/0x10 [ 880.268190][T13841] do_syscall_64+0x14d/0xf80 [ 880.268217][T13841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.268238][T13841] ? trace_irq_disable+0x37/0x100 [ 880.268257][T13841] ? clear_bhb_loop+0x40/0x90 [ 880.268282][T13841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.268303][T13841] RIP: 0033:0x7f5c9514c84e [ 880.268323][T13841] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 880.268341][T13841] RSP: 002b:00007f5c933e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 880.268365][T13841] RAX: ffffffffffffffda RBX: 00007f5c933e66c0 RCX: 00007f5c9514c84e [ 880.268381][T13841] RDX: 000000000000000f RSI: 00007f5c933e60a0 RDI: 0000000000000003 [ 880.268394][T13841] RBP: 00007f5c933e6090 R08: 0000000000000000 R09: 0000000000000000 [ 880.268407][T13841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.268420][T13841] R13: 00007f5c95406038 R14: 00007f5c95405fa0 R15: 00007ffc32e4fa18 [ 880.268456][T13841] [ 881.043145][ T5813] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 881.195818][ T5813] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 881.195883][ T5813] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 881.195967][ T5813] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.273041][ T5813] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 881.637701][T13861] overlayfs: overlapping lowerdir path [ 881.970756][T13870] FAULT_INJECTION: forcing a failure. [ 881.970756][T13870] name failslab, interval 1, probability 0, space 0, times 0 [ 881.970799][T13870] CPU: 0 UID: 0 PID: 13870 Comm: syz.0.2359 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 881.970827][T13870] Tainted: [L]=SOFTLOCKUP [ 881.970835][T13870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 881.970848][T13870] Call Trace: [ 881.970856][T13870] [ 881.970865][T13870] dump_stack_lvl+0xe8/0x150 [ 881.970901][T13870] should_fail_ex+0x46b/0x600 [ 881.970929][T13870] should_failslab+0xa8/0x100 [ 881.970956][T13870] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 881.970980][T13870] ? __alloc_skb+0x1d7/0x390 [ 881.971008][T13870] ? lockdep_hardirqs_on+0x7a/0x110 [ 881.971039][T13870] ? __alloc_skb+0x193/0x390 [ 881.971077][T13870] __alloc_skb+0x1d7/0x390 [ 881.971111][T13870] alloc_skb_with_frags+0xca/0x890 [ 881.971146][T13870] ? __lock_acquire+0x6b5/0x2cf0 [ 881.971182][T13870] sock_alloc_send_pskb+0x884/0x9a0 [ 881.971225][T13870] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 881.971247][T13870] ? __local_bh_enable+0x1e1/0x2f0 [ 881.971278][T13870] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 881.971303][T13870] ? lockdep_hardirqs_on+0x7a/0x110 [ 881.971335][T13870] llc_ui_sendmsg+0x487/0xea0 [ 881.971381][T13870] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 881.971408][T13870] ? try_to_take_rt_mutex+0x840/0xb00 [ 881.971435][T13870] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 881.971459][T13870] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 881.971488][T13870] sock_sendmsg+0x4a4/0x500 [ 881.971518][T13870] ? __pfx_sock_sendmsg+0x10/0x10 [ 881.971541][T13870] ? __lock_acquire+0x6b5/0x2cf0 [ 881.971582][T13870] ? __asan_memset+0x22/0x50 [ 881.971611][T13870] ? iov_iter_bvec+0xb8/0x180 [ 881.971641][T13870] splice_to_socket+0xae5/0x11f0 [ 881.971691][T13870] ? __pfx_splice_to_socket+0x10/0x10 [ 881.971717][T13870] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 881.971762][T13870] ? touch_atime+0x379/0x6b0 [ 881.971792][T13870] ? shmem_file_splice_read+0xa6a/0xbd0 [ 881.971840][T13870] ? __pfx_splice_to_socket+0x10/0x10 [ 881.971869][T13870] direct_splice_actor+0x104/0x160 [ 881.971902][T13870] splice_direct_to_actor+0x545/0xc80 [ 881.971939][T13870] ? __pfx_direct_splice_actor+0x10/0x10 [ 881.971972][T13870] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 881.972007][T13870] do_splice_direct+0x19b/0x2a0 [ 881.972038][T13870] ? __pfx_do_splice_direct+0x10/0x10 [ 881.972074][T13870] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 881.972109][T13870] ? rw_verify_area+0x25b/0x4e0 [ 881.972146][T13870] do_sendfile+0x547/0x7e0 [ 881.972170][T13870] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 881.972204][T13870] ? __pfx_do_sendfile+0x10/0x10 [ 881.972244][T13870] __se_sys_sendfile64+0x144/0x1a0 [ 881.972273][T13870] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 881.972311][T13870] do_syscall_64+0x14d/0xf80 [ 881.972336][T13870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.972356][T13870] ? trace_irq_disable+0x37/0x100 [ 881.972375][T13870] ? clear_bhb_loop+0x40/0x90 [ 881.972399][T13870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.972417][T13870] RIP: 0033:0x7fe34ff1bf79 [ 881.972439][T13870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.972456][T13870] RSP: 002b:00007fe34e155028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 881.972479][T13870] RAX: ffffffffffffffda RBX: 00007fe350196090 RCX: 00007fe34ff1bf79 [ 881.972495][T13870] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 881.972508][T13870] RBP: 00007fe34e155090 R08: 0000000000000000 R09: 0000000000000000 [ 881.972520][T13870] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 881.972534][T13870] R13: 00007fe350196128 R14: 00007fe350196090 R15: 00007fffe8a42cb8 [ 881.972567][T13870] [ 882.150255][ T5957] gspca_ov534_9: reg_w failed -71 [ 882.360162][ T5813] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 882.360235][ T5813] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 882.368409][ T5813] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 882.368433][ T5813] stv0680 7-1:4.0: last error: 0, command = 0x0 [ 882.382628][ T5957] gspca_ov534_9: Unknown sensor 0000 [ 882.382725][ T5957] ov534_9 3-1:0.111: probe with driver ov534_9 failed with error -22 [ 882.397288][ T5957] usb 3-1: USB disconnect, device number 109 [ 882.402513][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6090 ms [ 882.402551][ C0] lec:lec_tx_timeout: lec0 [ 882.403715][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 882.515442][ T5813] usb 7-1: USB disconnect, device number 41 [ 884.524063][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 884.524089][ T36] audit: type=1326 audit(2000000300.950:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13886 comm="syz.2.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da3bdbf79 code=0x7ffc0000 [ 884.524472][ T36] audit: type=1326 audit(2000000300.950:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13886 comm="syz.2.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da3bdbf79 code=0x7ffc0000 [ 884.532710][ T36] audit: type=1326 audit(2000000300.950:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13886 comm="syz.2.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6da3bdbf79 code=0x7ffc0000 [ 884.532764][ T36] audit: type=1326 audit(2000000300.950:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13886 comm="syz.2.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da3bdbf79 code=0x7ffc0000 [ 884.532804][ T36] audit: type=1326 audit(2000000300.950:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13886 comm="syz.2.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da3bdbf79 code=0x7ffc0000 [ 884.546249][ T36] audit: type=1326 audit(2000000300.970:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13886 comm="syz.2.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6da3b9c84e code=0x7ffc0000 [ 884.546300][ T36] audit: type=1326 audit(2000000300.970:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13886 comm="syz.2.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da3bdbf79 code=0x7ffc0000 [ 884.561174][ T36] audit: type=1326 audit(2000000300.980:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13886 comm="syz.2.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6da3bdbf79 code=0x7ffc0000 [ 884.562935][ T36] audit: type=1326 audit(2000000300.980:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13886 comm="syz.2.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da3bdbf79 code=0x7ffc0000 [ 884.562981][ T36] audit: type=1326 audit(2000000300.980:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13886 comm="syz.2.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6da3bdbf79 code=0x7ffc0000 [ 885.032447][ T10] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 885.127445][T13907] tmpfs: Unknown parameter 'grpYlimitYâR ' [ 885.183934][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 885.186919][ T10] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.186954][ T10] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.239427][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 885.239462][ T10] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 885.239483][ T10] usb 6-1: Product: syz [ 885.239495][ T10] usb 6-1: Manufacturer: syz [ 885.295693][ T10] hub 6-1:4.0: USB hub found [ 885.499426][ T10] hub 6-1:4.0: 5 ports detected [ 885.499876][ T10] hub 6-1:4.0: insufficient power available to use all downstream ports [ 886.834935][ T807] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 886.986551][ T807] usb 7-1: config 0 has an invalid interface number: 111 but max is 0 [ 886.986582][ T807] usb 7-1: config 0 has no interface number 0 [ 886.986613][ T807] usb 7-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 886.986627][ T807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.996067][ T807] usb 7-1: config 0 descriptor?? [ 887.030669][ T807] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 887.073980][ T10] hub 6-1:4.0: hub_ext_port_status failed (err = -32) [ 887.250740][ T5813] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 887.346207][ T5804] Bluetooth: hci1: command 0x1003 tx timeout [ 887.346570][T13465] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 887.416026][ T5813] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.416119][ T5813] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 887.416148][ T5813] usb 5-1: config 0 interface 0 has no altsetting 0 [ 887.416183][ T5813] usb 5-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 887.416207][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.556748][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6150 ms [ 888.556788][ C0] lec:lec_tx_timeout: lec0 [ 888.762046][ T5813] usb 5-1: config 0 descriptor?? [ 888.933041][ T31] usb 6-1: USB disconnect, device number 49 [ 889.191235][ T5813] betop 0003:8380:1850.000E: reserved main item tag 0xd [ 889.191281][ T5813] betop 0003:8380:1850.000E: item fetching failed at offset 1/2 [ 889.195177][ T5813] betop 0003:8380:1850.000E: parse failed [ 889.195615][ T5813] betop 0003:8380:1850.000E: probe with driver betop failed with error -22 [ 889.378241][ T9] usb 5-1: USB disconnect, device number 117 [ 890.269750][ T880] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 890.490127][ T807] gspca_ov534_9: reg_r err -110 [ 890.533745][T13953] loop7: detected capacity change from 0 to 6 [ 890.585082][T13953] Invalid logical block size (4) [ 890.597029][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 890.601177][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 890.601209][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 890.605920][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 890.605952][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 890.606681][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 890.606707][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 890.607379][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 890.607404][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 890.611343][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 890.611376][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 890.652236][ T880] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 890.652273][ T880] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 890.652300][ T880] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 890.723684][ T880] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 890.723718][ T880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.723739][ T880] usb 6-1: Product: syz [ 890.723755][ T880] usb 6-1: Manufacturer: syz [ 890.723770][ T880] usb 6-1: SerialNumber: syz [ 890.742100][ T807] gspca_ov534_9: Unknown sensor 0000 [ 890.742205][ T807] ov534_9 7-1:0.111: probe with driver ov534_9 failed with error -22 [ 890.786469][ T880] usb 6-1: config 0 descriptor?? [ 890.789123][T13947] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 890.789258][T13947] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 890.817669][ T880] usb 6-1: ucan: probing device on interface #0 [ 890.834804][ T31] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 890.984529][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 890.992456][ T31] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 890.992487][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.992507][ T31] usb 3-1: Product: syz [ 890.992520][ T31] usb 3-1: Manufacturer: syz [ 890.992534][ T31] usb 3-1: SerialNumber: syz [ 891.028767][ T31] usb 3-1: config 0 descriptor?? [ 891.121894][T13961] mmap: syz.0.2382 (13961) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 891.154436][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2382'. [ 891.236730][ T880] usb 6-1: ucan: device reported invalid device info [ 891.236755][ T880] usb 6-1: ucan: probe failed; try to update the device firmware [ 891.258806][ T31] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 891.447062][ T5813] usb 6-1: USB disconnect, device number 50 [ 891.490828][T13965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2384'. [ 891.684102][ T807] usb 7-1: USB disconnect, device number 42 [ 891.827057][T13970] Bluetooth: MGMT ver 1.23 [ 891.982211][ T9] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 892.135774][ T9] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 892.135850][ T9] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 892.135882][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 892.205172][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 892.205208][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 892.205231][ T9] usb 5-1: Product: syz [ 892.205245][ T9] usb 5-1: Manufacturer: syz [ 892.205260][ T9] usb 5-1: SerialNumber: syz [ 892.257437][ T9] usb 5-1: config 0 descriptor?? [ 892.269268][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 892.269313][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 892.378752][ T9] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 892.498751][ T7655] udevd[7655]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 893.454990][ T31] gspca_sunplus: reg_r err -110 [ 893.455902][ T31] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 893.603441][ T31] usb 3-1: USB disconnect, device number 110 [ 893.828951][ T880] usb 5-1: USB disconnect, device number 118 [ 893.922496][ T5804] Bluetooth: hci2: command 0x0406 tx timeout [ 893.941889][T13465] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 894.762122][ T31] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 894.931918][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 894.949851][ T31] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 894.949876][ T31] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 894.949888][ T31] usb 3-1: Product: syz [ 894.949897][ T31] usb 3-1: Manufacturer: syz [ 894.949906][ T31] usb 3-1: SerialNumber: syz [ 894.997680][ T31] usb 3-1: config 0 descriptor?? [ 895.234216][ T31] usb 3-1: USB disconnect, device number 111 [ 895.505935][T14008] netlink: 'syz.4.2398': attribute type 4 has an invalid length. [ 895.505961][T14008] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2398'. [ 895.661930][ T9] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 895.814682][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 895.814719][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 895.814747][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 895.819523][ T9] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 895.819560][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.819582][ T9] usb 7-1: Product: syz [ 895.819693][ T9] usb 7-1: Manufacturer: syz [ 895.819710][ T9] usb 7-1: SerialNumber: syz [ 895.897554][ T9] usb 7-1: config 0 descriptor?? [ 895.900303][T14006] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 895.900439][T14006] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 895.925434][ T9] usb 7-1: ucan: probing device on interface #0 [ 895.930625][T14015] netlink: 'syz.2.2401': attribute type 10 has an invalid length. [ 895.945249][T14015] team0: Device vxcan1 is of different type [ 896.320972][ T9] usb 7-1: ucan: device reported invalid tx-fifo size [ 896.321008][ T9] usb 7-1: ucan: probe failed; try to update the device firmware [ 896.520012][ T31] usb 7-1: USB disconnect, device number 43 [ 897.831221][T14047] FAULT_INJECTION: forcing a failure. [ 897.831221][T14047] name failslab, interval 1, probability 0, space 0, times 0 [ 897.831259][T14047] CPU: 1 UID: 0 PID: 14047 Comm: syz.2.2412 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 897.831288][T14047] Tainted: [L]=SOFTLOCKUP [ 897.831296][T14047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 897.831308][T14047] Call Trace: [ 897.831317][T14047] [ 897.831327][T14047] dump_stack_lvl+0xe8/0x150 [ 897.831361][T14047] should_fail_ex+0x46b/0x600 [ 897.831391][T14047] should_failslab+0xa8/0x100 [ 897.831416][T14047] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 897.831438][T14047] ? alloc_unbound_pwq+0xac8/0xe00 [ 897.831469][T14047] alloc_unbound_pwq+0xac8/0xe00 [ 897.831504][T14047] apply_wqattrs_prepare+0x3c9/0xdf0 [ 897.831559][T14047] __alloc_workqueue+0xfc8/0x1e90 [ 897.831616][T14047] alloc_workqueue_noprof+0xe3/0x210 [ 897.831654][T14047] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 897.831689][T14047] ? __asan_memcpy+0x40/0x70 [ 897.831720][T14047] ? loop_set_status_from_info+0x185/0x250 [ 897.831760][T14047] loop_configure+0x72b/0xdf0 [ 897.831800][T14047] ? __pfx_loop_configure+0x10/0x10 [ 897.831861][T14047] lo_ioctl+0xaaf/0x1fc0 [ 897.831888][T14047] ? __lock_acquire+0x6b5/0x2cf0 [ 897.831921][T14047] ? __pfx_lo_ioctl+0x10/0x10 [ 897.831941][T14047] ? do_raw_spin_lock+0x12b/0x2f0 [ 897.831980][T14047] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 897.832013][T14047] ? __lock_acquire+0x6b5/0x2cf0 [ 897.832045][T14047] ? __lock_acquire+0x6b5/0x2cf0 [ 897.832081][T14047] ? __lock_acquire+0x6b5/0x2cf0 [ 897.832111][T14047] ? __lock_acquire+0x6b5/0x2cf0 [ 897.832146][T14047] ? __lock_acquire+0x6b5/0x2cf0 [ 897.832178][T14047] ? __lock_acquire+0x6b5/0x2cf0 [ 897.832218][T14047] ? unwind_next_frame+0xa5/0x23c0 [ 897.832256][T14047] ? unwind_next_frame+0xa5/0x23c0 [ 897.832288][T14047] ? is_bpf_text_address+0x26/0x2b0 [ 897.832324][T14047] ? is_bpf_text_address+0x26/0x2b0 [ 897.832352][T14047] ? is_bpf_text_address+0x292/0x2b0 [ 897.832372][T14047] ? is_bpf_text_address+0x26/0x2b0 [ 897.832397][T14047] ? kernel_text_address+0xa5/0xe0 [ 897.832419][T14047] ? __kernel_text_address+0xd/0x30 [ 897.832439][T14047] ? unwind_get_return_address+0x4d/0x90 [ 897.832467][T14047] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 897.832491][T14047] ? arch_stack_walk+0xfb/0x150 [ 897.832536][T14047] ? stack_trace_save+0xa9/0x100 [ 897.832558][T14047] ? __pfx_stack_trace_save+0x10/0x10 [ 897.832580][T14047] ? kasan_save_free_info+0x46/0x50 [ 897.832618][T14047] ? stack_depot_save_flags+0x33/0x810 [ 897.832643][T14047] ? format_decode+0x50/0xe10 [ 897.832668][T14047] ? kasan_save_track+0x4f/0x80 [ 897.832686][T14047] ? kasan_save_track+0x3e/0x80 [ 897.832704][T14047] ? kasan_save_free_info+0x46/0x50 [ 897.832736][T14047] ? __kasan_slab_free+0x5c/0x80 [ 897.832755][T14047] ? kfree+0x1c1/0x690 [ 897.832772][T14047] ? tomoyo_path_number_perm+0x501/0x630 [ 897.832802][T14047] ? security_file_ioctl+0xc3/0x2a0 [ 897.832831][T14047] ? __se_sys_ioctl+0x47/0x170 [ 897.832851][T14047] ? do_syscall_64+0x14d/0xf80 [ 897.832875][T14047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.832903][T14047] ? __asan_memset+0x22/0x50 [ 897.832934][T14047] ? blk_get_meta_cap+0x16d/0x7a0 [ 897.832964][T14047] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 897.832998][T14047] ? blkdev_common_ioctl+0x14b7/0x3250 [ 897.833032][T14047] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 897.833060][T14047] ? kasan_quarantine_put+0xbb/0x1f0 [ 897.833102][T14047] ? tomoyo_path_number_perm+0x219/0x630 [ 897.833146][T14047] ? tomoyo_path_number_perm+0x219/0x630 [ 897.833180][T14047] ? do_vfs_ioctl+0x117b/0x1540 [ 897.833236][T14047] ? __pfx_smack_file_ioctl+0x10/0x10 [ 897.833267][T14047] ? __pfx_lo_ioctl+0x10/0x10 [ 897.833290][T14047] blkdev_ioctl+0x5e6/0x750 [ 897.833318][T14047] ? __pfx_blkdev_ioctl+0x10/0x10 [ 897.833347][T14047] ? __fget_files+0x2a/0x420 [ 897.833377][T14047] ? bpf_lsm_file_ioctl+0x9/0x20 [ 897.833403][T14047] ? __pfx_blkdev_ioctl+0x10/0x10 [ 897.833427][T14047] __se_sys_ioctl+0xff/0x170 [ 897.833451][T14047] do_syscall_64+0x14d/0xf80 [ 897.833476][T14047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.833495][T14047] ? trace_irq_disable+0x37/0x100 [ 897.833512][T14047] ? clear_bhb_loop+0x40/0x90 [ 897.833537][T14047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.833557][T14047] RIP: 0033:0x7f6da3bdbf79 [ 897.833576][T14047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.833594][T14047] RSP: 002b:00007f6da1e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 897.833616][T14047] RAX: ffffffffffffffda RBX: 00007f6da3e55fa0 RCX: 00007f6da3bdbf79 [ 897.833632][T14047] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 897.833646][T14047] RBP: 00007f6da1e36090 R08: 0000000000000000 R09: 0000000000000000 [ 897.833659][T14047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 897.833671][T14047] R13: 00007f6da3e56038 R14: 00007f6da3e55fa0 R15: 00007ffd19580638 [ 897.833706][T14047] [ 900.621689][ T5813] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 900.811696][ T5813] usb 5-1: config 0 has an invalid interface number: 111 but max is 0 [ 900.811727][ T5813] usb 5-1: config 0 has no interface number 0 [ 900.811857][ T5813] usb 5-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 900.811890][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.871365][ T5813] usb 5-1: config 0 descriptor?? [ 900.884297][ T5813] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 900.901605][ T31] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 900.992037][T14076] FAULT_INJECTION: forcing a failure. [ 900.992037][T14076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.992078][T14076] CPU: 0 UID: 0 PID: 14076 Comm: syz.5.2420 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 900.992108][T14076] Tainted: [L]=SOFTLOCKUP [ 900.992116][T14076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 900.992128][T14076] Call Trace: [ 900.992137][T14076] [ 900.992146][T14076] dump_stack_lvl+0xe8/0x150 [ 900.992180][T14076] should_fail_ex+0x46b/0x600 [ 900.992211][T14076] _copy_from_user+0x2d/0xb0 [ 900.992242][T14076] core_sys_select+0x57a/0xc30 [ 900.992288][T14076] ? __pfx_core_sys_select+0x10/0x10 [ 900.992345][T14076] ? __pfx_set_user_sigmask+0x10/0x10 [ 900.992370][T14076] ? kmem_cache_free+0x185/0x690 [ 900.992394][T14076] ? do_sys_openat2+0x14c/0x200 [ 900.992431][T14076] __se_sys_pselect6+0x267/0x320 [ 900.992463][T14076] ? __pfx___se_sys_pselect6+0x10/0x10 [ 900.992489][T14076] ? __pfx_ksys_write+0x10/0x10 [ 900.992515][T14076] ? __x64_sys_pselect6+0x21/0xf0 [ 900.992545][T14076] do_syscall_64+0x14d/0xf80 [ 900.992573][T14076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.992594][T14076] ? trace_irq_disable+0x37/0x100 [ 900.992613][T14076] ? clear_bhb_loop+0x40/0x90 [ 900.992640][T14076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.992659][T14076] RIP: 0033:0x7fd09ce4bf79 [ 900.992679][T14076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.992697][T14076] RSP: 002b:00007fd09b09e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 900.992721][T14076] RAX: ffffffffffffffda RBX: 00007fd09d0c5fa0 RCX: 00007fd09ce4bf79 [ 900.992737][T14076] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 900.992752][T14076] RBP: 00007fd09b09e090 R08: 0000000000000000 R09: 0000000000000000 [ 900.992766][T14076] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 900.992780][T14076] R13: 00007fd09d0c6038 R14: 00007fd09d0c5fa0 R15: 00007fffe25521e8 [ 900.992813][T14076] [ 901.123880][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.123914][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.123950][ T31] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 901.124025][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.143790][ T31] usb 1-1: config 0 descriptor?? [ 901.625326][ T31] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 901.659948][ T31] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 901.801638][ T5929] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 901.805226][ T31] cp2112 0003:10C4:EA90.000F: Part Number: 0x82 Device Version: 0xFE [ 901.963450][ T5929] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 901.963689][ T5929] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 901.963706][ T5929] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 901.968154][ T5929] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 901.968176][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.968188][ T5929] usb 6-1: Product: syz [ 901.968197][ T5929] usb 6-1: Manufacturer: syz [ 901.968210][ T5929] usb 6-1: SerialNumber: syz [ 902.034097][ T5929] usb 6-1: config 0 descriptor?? [ 902.050041][T14080] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 902.050173][T14080] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 902.090641][ T5929] usb 6-1: ucan: probing device on interface #0 [ 902.463045][ T5929] usb 6-1: ucan: device reported invalid device info [ 902.463140][ T5929] usb 6-1: ucan: probe failed; try to update the device firmware [ 902.502692][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2419'. [ 902.534991][T14088] cp2112 0003:10C4:EA90.000F: Error starting transaction: -38 [ 902.575155][T14088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.584313][T14088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.670315][ T880] usb 6-1: USB disconnect, device number 51 [ 902.732313][ T31] cp2112 0003:10C4:EA90.000F: error reading lock byte: -71 [ 902.762581][ T5813] gspca_ov534_9: reg_w failed -71 [ 902.782175][ T31] usb 1-1: USB disconnect, device number 35 [ 903.011457][ T5813] gspca_ov534_9: Unknown sensor 0000 [ 903.011577][ T5813] ov534_9 5-1:0.111: probe with driver ov534_9 failed with error -22 [ 903.028738][ T5813] usb 5-1: USB disconnect, device number 119 [ 903.368175][ T5804] Bluetooth: hci5: unexpected event for opcode 0x0c20 [ 904.421417][ T31] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 904.484040][ T10] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 904.488161][ T880] IPVS: starting estimator thread 0... [ 904.501347][ T9] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 904.591396][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 904.595269][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 904.595303][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 904.595318][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 904.595334][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 904.600281][ T31] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 904.600311][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.600331][ T31] usb 1-1: Product: syz [ 904.600342][ T31] usb 1-1: Manufacturer: syz [ 904.600351][ T31] usb 1-1: SerialNumber: syz [ 904.604745][T14112] IPVS: using max 13 ests per chain, 31200 per kthread [ 904.683331][ T10] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 904.683390][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 904.683413][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.701296][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 904.725081][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.725119][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.728661][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 904.728689][ T9] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 904.728702][ T9] usb 5-1: Product: syz [ 904.728710][ T9] usb 5-1: Manufacturer: syz [ 904.782298][ T31] usb 1-1: config 0 descriptor?? [ 904.790044][ T10] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 904.811587][ T9] hub 5-1:4.0: USB hub found [ 905.973137][ T31] iforce 1-1:0.0: usb_submit_urb failed: -110 [ 905.974048][ T31] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 906.002532][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 906.002558][ T10] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 906.011738][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 906.011773][ T10] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 906.102406][ T31] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 906.104600][ T31] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 906.105308][ T31] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 906.105789][ T31] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 906.106286][ T31] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 906.106785][ T31] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 906.107292][ T31] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 906.107775][ T31] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 906.108806][ T31] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 906.109306][ T31] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 906.109797][ T31] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 906.110301][ T31] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 906.185531][ T31] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 906.186033][ T31] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 906.186541][ T31] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 906.187029][ T31] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 906.187523][ T31] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 906.187995][ T31] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 906.188044][ T31] input input34: Timeout waiting for response from device. [ 906.398929][ T9] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 906.481029][ T880] usb 1-1: USB disconnect, device number 36 [ 906.486783][ T9] usb 5-1: USB disconnect, device number 120 [ 906.534435][ T5874] usb 6-1: USB disconnect, device number 52 [ 906.808519][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2432'. [ 906.808550][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2432'. [ 907.181232][ T880] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 907.463242][ T880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.463280][ T880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 907.463304][ T880] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 907.463347][ T880] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 907.463370][ T880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.478902][ T880] usb 1-1: config 0 descriptor?? [ 908.033539][T11450] lec:lec_start_xmit: lec0:No lecd attached [ 908.081303][ T5874] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 909.219980][ T5874] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 909.220076][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 909.220105][ T5874] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 909.235719][ T5874] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 909.235802][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.235822][ T5874] usb 5-1: Product: syz [ 909.235836][ T5874] usb 5-1: Manufacturer: syz [ 909.235849][ T5874] usb 5-1: SerialNumber: syz [ 909.253866][ T5874] usb 5-1: config 0 descriptor?? [ 909.255807][T14141] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 909.255988][T14141] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 909.266969][ T5874] usb 5-1: ucan: probing device on interface #0 [ 909.351163][ T10] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 909.481021][ T10] usb 3-1: device descriptor read/64, error -71 [ 909.522069][ T880] usbhid 1-1:0.0: can't add hid device: -71 [ 909.522250][ T880] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 909.563738][ T880] usb 1-1: USB disconnect, device number 37 [ 909.733467][ T5874] usb 5-1: ucan: device reported invalid device info [ 909.733495][ T5874] usb 5-1: ucan: probe failed; try to update the device firmware [ 909.834890][ T10] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 909.963519][ T5874] usb 5-1: USB disconnect, device number 121 [ 909.971156][ T10] usb 3-1: device descriptor read/64, error -71 [ 910.083336][ T10] usb usb3-port1: attempt power cycle [ 910.100807][T14157] FAULT_INJECTION: forcing a failure. [ 910.100807][T14157] name failslab, interval 1, probability 0, space 0, times 0 [ 910.100850][T14157] CPU: 1 UID: 0 PID: 14157 Comm: syz.5.2442 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 910.100883][T14157] Tainted: [L]=SOFTLOCKUP [ 910.100892][T14157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 910.100904][T14157] Call Trace: [ 910.100912][T14157] [ 910.100922][T14157] dump_stack_lvl+0xe8/0x150 [ 910.100967][T14157] should_fail_ex+0x46b/0x600 [ 910.100999][T14157] should_failslab+0xa8/0x100 [ 910.101025][T14157] __kmalloc_cache_noprof+0x84/0x690 [ 910.101049][T14157] ? kernfs_fop_open+0x7bd/0xcb0 [ 910.101078][T14157] kernfs_fop_open+0x7bd/0xcb0 [ 910.101127][T14157] ? __pfx_kernfs_fop_open+0x10/0x10 [ 910.101155][T14157] do_dentry_open+0x83d/0x13e0 [ 910.101198][T14157] vfs_open+0x3b/0x350 [ 910.101221][T14157] ? path_openat+0x2e25/0x38a0 [ 910.101245][T14157] path_openat+0x2e3d/0x38a0 [ 910.101307][T14157] ? __pfx_path_openat+0x10/0x10 [ 910.101339][T14157] ? rcu_is_watching+0x15/0xb0 [ 910.101370][T14157] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 910.101389][T14157] ? kmem_cache_alloc_noprof+0x388/0x680 [ 910.101411][T14157] ? do_getname_kernel+0x97/0x230 [ 910.101439][T14157] ? __asan_memcpy+0x40/0x70 [ 910.101468][T14157] ? do_file_open_root+0x584/0x710 [ 910.101496][T14157] do_file_open_root+0x32f/0x710 [ 910.101525][T14157] ? __pfx_do_file_open_root+0x10/0x10 [ 910.101544][T14157] ? do_raw_spin_lock+0x12b/0x2f0 [ 910.101595][T14157] ? rt_spin_lock+0x1e0/0x400 [ 910.101622][T14157] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 910.101642][T14157] ? build_open_flags+0x44a/0x5b0 [ 910.101678][T14157] file_open_root+0x166/0x1c0 [ 910.101708][T14157] ? __pfx_file_open_root+0x10/0x10 [ 910.101753][T14157] do_handle_open+0x86c/0x970 [ 910.101788][T14157] ? __pfx_do_handle_open+0x10/0x10 [ 910.101819][T14157] ? ksys_write+0x248/0x270 [ 910.101843][T14157] ? __pfx_ksys_write+0x10/0x10 [ 910.101878][T14157] do_syscall_64+0x14d/0xf80 [ 910.101905][T14157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.101925][T14157] ? trace_irq_disable+0x37/0x100 [ 910.101944][T14157] ? clear_bhb_loop+0x40/0x90 [ 910.101980][T14157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.102002][T14157] RIP: 0033:0x7fd09ce4bf79 [ 910.102022][T14157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.102040][T14157] RSP: 002b:00007fd09b09e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 910.102064][T14157] RAX: ffffffffffffffda RBX: 00007fd09d0c5fa0 RCX: 00007fd09ce4bf79 [ 910.102080][T14157] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 910.102094][T14157] RBP: 00007fd09b09e090 R08: 0000000000000000 R09: 0000000000000000 [ 910.102108][T14157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 910.102122][T14157] R13: 00007fd09d0c6038 R14: 00007fd09d0c5fa0 R15: 00007fffe25521e8 [ 910.102159][T14157] [ 910.431097][ T10] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 910.465144][ T10] usb 3-1: device descriptor read/8, error -71 [ 910.721128][ T10] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 910.845065][ T10] usb 3-1: device descriptor read/8, error -71 [ 910.861036][ T5929] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 911.012810][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 911.063680][ T5929] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 911.063753][ T5929] usb 5-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 911.063785][ T5929] usb 5-1: config 1 interface 0 has no altsetting 0 [ 911.103608][ T5929] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 911.103644][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.103667][ T5929] usb 5-1: Product: syz [ 911.103681][ T5929] usb 5-1: Manufacturer: syz [ 911.103705][ T5929] usb 5-1: SerialNumber: syz [ 911.125853][ T5874] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 911.126919][ T10] usb usb3-port1: unable to enumerate USB device [ 911.297573][ T5874] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 911.297639][ T5874] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 911.297665][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.402713][ T5874] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 911.423799][ T31] usb 5-1: USB disconnect, device number 122 [ 911.842610][ T31] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 912.003273][ T31] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 912.003295][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.006596][ T31] usb 3-1: config 0 descriptor?? [ 912.009737][ T31] cp210x 3-1:0.0: cp210x converter detected [ 912.997037][ T5874] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 912.997067][ T5874] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 912.997495][ T5874] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 912.997514][ T5874] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 913.040907][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 913.040946][ C0] lec:lec_tx_timeout: lec0 [ 913.333168][ T5874] usb 6-1: USB disconnect, device number 53 [ 915.471050][T14225] overlayfs: overlapping lowerdir path [ 916.520720][ T5874] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 916.730736][ T5874] usb 5-1: Using ep0 maxpacket: 32 [ 916.734364][ T5874] usb 5-1: unable to get BOS descriptor or descriptor too short [ 916.735644][ T5874] usb 5-1: config 7 has an invalid interface number: 128 but max is 0 [ 916.735672][ T5874] usb 5-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 916.735691][ T5874] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 916.735721][ T5874] usb 5-1: config 7 has no interface number 0 [ 916.735767][ T5874] usb 5-1: config 7 interface 128 altsetting 2 endpoint 0x9 has invalid wMaxPacketSize 0 [ 916.735783][ T5874] usb 5-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 916.735799][ T5874] usb 5-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 916.735825][ T5874] usb 5-1: config 7 interface 128 has no altsetting 0 [ 916.738805][ T5874] usb 5-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 916.738838][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.738858][ T5874] usb 5-1: Product: syz [ 916.738873][ T5874] usb 5-1: Manufacturer: syz [ 916.738887][ T5874] usb 5-1: SerialNumber: syz [ 917.050986][ T31] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -110 [ 917.051022][ T31] cp210x 3-1:0.0: querying part number failed [ 917.059926][ T31] usb 3-1: cp210x converter now attached to ttyUSB0 [ 917.181756][ T10] usb 3-1: USB disconnect, device number 116 [ 917.279637][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 917.312691][ T10] cp210x 3-1:0.0: device disconnected [ 918.241407][ T5874] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 918.241457][ T5874] usb 5-1: MIDIStreaming interface descriptor not found [ 918.264221][T14242] kAFS: No cell specified [ 918.264925][T14242] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 918.752401][ T5874] usb 5-1: USB disconnect, device number 123 [ 919.300953][ T8174] udevd[8174]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 920.300503][ T31] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 920.469576][ T31] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 920.469652][ T31] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 920.469678][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.953219][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2466'. [ 920.953249][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2466'. [ 921.380633][ T31] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 921.500386][ T5874] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 921.663902][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.663938][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.663961][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 921.664002][ T5874] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 921.664026][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.730467][ T6158] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 921.811353][ T5874] usb 1-1: config 0 descriptor?? [ 921.866233][T14282] hub 8-0:1.0: USB hub found [ 921.876122][T14282] hub 8-0:1.0: 1 port detected [ 921.890383][ T6158] usb 6-1: Using ep0 maxpacket: 32 [ 921.895387][ T6158] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 921.895418][ T6158] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 921.895514][ T6158] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 921.895569][ T6158] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 921.895592][ T6158] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 921.895676][ T6158] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 921.895706][ T6158] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 921.895729][ T6158] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 921.895842][ T6158] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 921.895868][ T6158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.113864][ T6158] usb 6-1: config 0 descriptor?? [ 922.135542][T14276] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 922.348743][ T6158] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 922.377173][ T5874] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 922.401710][ T31] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 922.401737][ T31] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 922.403312][ T31] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 922.403334][ T31] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 922.464731][ T5874] usb 5-1: USB disconnect, device number 124 [ 922.613087][ T9] usb 6-1: USB disconnect, device number 54 [ 922.629079][ T9] usblp1: removed [ 923.083347][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2472'. [ 923.115816][T14299] bridge0: port 3(syz_tun) entered disabled state [ 923.123354][T14299] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.123593][T14299] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.662310][ T6158] usb 1-1: USB disconnect, device number 38 [ 923.915090][T14315] loop7: detected capacity change from 0 to 6 [ 923.978866][T14316] dummy0: entered promiscuous mode [ 923.980018][T14314] dummy0: left promiscuous mode [ 923.986669][T14315] Invalid logical block size (4) [ 924.007293][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 924.010303][ T5874] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 924.011443][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 924.011475][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 924.016235][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 924.016270][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 924.029855][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 924.029891][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 924.034209][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 924.034242][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 924.045291][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 924.045327][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 924.180225][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 924.181126][ T5874] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 924.182346][ T5874] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 924.182372][ T5874] usb 3-1: config 0 has no interface number 0 [ 924.182422][ T5874] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 924.182443][ T5874] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 924.183608][ T5874] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 924.183633][ T5874] usb 3-1: config 0 has no interface number 0 [ 924.183680][ T5874] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 924.186863][ T5874] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 924.189074][ T5874] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 924.189100][ T5874] usb 3-1: config 0 has no interface number 0 [ 924.189150][ T5874] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 924.189174][ T5874] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 924.190508][ T5874] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 924.190535][ T5874] usb 3-1: config 0 has no interface number 0 [ 924.190583][ T5874] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 924.190606][ T5874] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 924.192865][ T5874] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 924.192890][ T5874] usb 3-1: config 0 has no interface number 0 [ 924.192947][ T5874] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 924.192970][ T5874] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 924.204606][ T5874] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 924.204638][ T5874] usb 3-1: config 0 has no interface number 0 [ 924.205618][ T5874] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 924.205643][ T5874] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 924.220313][ T5782] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 924.380565][ T5782] usb 5-1: Using ep0 maxpacket: 8 [ 924.458884][ T5874] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 924.458931][ T5874] usb 3-1: config 0 has no interface number 0 [ 924.459041][ T5874] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 924.459090][ T5874] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 924.513415][ T5874] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 924.513465][ T5874] usb 3-1: config 0 has no interface number 0 [ 924.513577][ T5874] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 924.513619][ T5874] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 924.711962][ T5782] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 924.712049][ T5782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.712096][ T5782] usb 5-1: Product: syz [ 924.712137][ T5782] usb 5-1: Manufacturer: syz [ 924.712179][ T5782] usb 5-1: SerialNumber: syz [ 924.800015][ T5782] usb 5-1: config 0 descriptor?? [ 924.830236][ T5874] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 924.830271][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.830293][ T5874] usb 3-1: Product: syz [ 924.830308][ T5874] usb 3-1: Manufacturer: syz [ 924.830322][ T5874] usb 3-1: SerialNumber: syz [ 924.877852][ T5874] usb 3-1: config 0 descriptor?? [ 924.898478][ T5874] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 925.028152][ T5782] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 925.167953][ T5874] etas_es58x 3-1:0.2: could not parse product info: '424242424242' [ 925.370249][ T5813] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 925.425826][ T9] usb 3-1: USB disconnect, device number 118 [ 925.429479][ T9] etas_es58x 3-1:0.2: Disconnecting syz syz [ 925.522835][ T5813] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 925.522972][ T5813] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 925.523000][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.598417][ T5813] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 926.642266][ T5813] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 926.642294][ T5813] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 926.645160][ T5813] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 926.645586][ T5813] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 926.720801][ T5782] gspca_sunplus: reg_r err -71 [ 926.720907][ T5782] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 926.746910][ T5782] usb 5-1: USB disconnect, device number 125 [ 926.847098][ T5813] usb 1-1: USB disconnect, device number 39 [ 927.532695][T14368] netlink: 'syz.4.2490': attribute type 1 has an invalid length. [ 927.723246][T14371] dummy0: entered promiscuous mode [ 927.836671][T14372] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 927.836700][T14372] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 927.847097][T14372] bond2: (slave vxcan3): making interface the new active one [ 927.848318][T14372] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 927.893762][T14370] dummy0: left promiscuous mode [ 927.930058][ T880] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 928.092724][ T880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 928.092764][ T880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 205, setting to 64 [ 928.092793][ T880] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 928.092837][ T880] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 928.092861][ T880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.098733][ T880] usb 5-1: config 0 descriptor?? [ 928.160383][T14374] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 928.392474][ T880] usbhid 5-1:0.0: can't add hid device: -71 [ 928.392604][ T880] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 928.433496][ T880] usb 5-1: USB disconnect, device number 126 [ 931.299834][ T807] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 931.468490][ T807] usb 1-1: config 0 has an invalid interface number: 111 but max is 0 [ 931.468532][ T807] usb 1-1: config 0 has no interface number 0 [ 931.468585][ T807] usb 1-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 931.468611][ T807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.516567][ T807] usb 1-1: config 0 descriptor?? [ 931.545264][ T807] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 931.697613][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.697696][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.761767][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 932.663198][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2506'. [ 932.723732][T14439] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.753883][T14439] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.819462][T14442] dummy0: entered promiscuous mode [ 932.820579][T14440] dummy0: left promiscuous mode [ 933.930062][ T807] gspca_ov534_9: reg_w failed -71 [ 934.439662][ T807] gspca_ov534_9: Unknown sensor 0000 [ 934.439776][ T807] ov534_9 1-1:0.111: probe with driver ov534_9 failed with error -22 [ 934.468079][ T807] usb 1-1: USB disconnect, device number 40 [ 934.627329][T14465] FAULT_INJECTION: forcing a failure. [ 934.627329][T14465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.627359][T14465] CPU: 0 UID: 0 PID: 14465 Comm: syz.5.2514 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 934.627378][T14465] Tainted: [L]=SOFTLOCKUP [ 934.627383][T14465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 934.627391][T14465] Call Trace: [ 934.627396][T14465] [ 934.627402][T14465] dump_stack_lvl+0xe8/0x150 [ 934.627425][T14465] should_fail_ex+0x46b/0x600 [ 934.627445][T14465] _copy_from_user+0x2d/0xb0 [ 934.627462][T14465] ___sys_sendmsg+0x1c6/0x360 [ 934.627474][T14465] ? __lock_acquire+0x6b5/0x2cf0 [ 934.627499][T14465] ? __pfx____sys_sendmsg+0x10/0x10 [ 934.627510][T14465] ? __lock_acquire+0x6b5/0x2cf0 [ 934.627527][T14465] ? kstrtouint+0x6e/0xe0 [ 934.627564][T14465] __sys_sendmmsg+0x282/0x4e0 [ 934.627579][T14465] ? __pfx___sys_sendmmsg+0x10/0x10 [ 934.627596][T14465] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 934.627625][T14465] ? ksys_write+0x248/0x270 [ 934.627638][T14465] ? __pfx_ksys_write+0x10/0x10 [ 934.627660][T14465] __x64_sys_sendmmsg+0xa0/0xc0 [ 934.627683][T14465] do_syscall_64+0x14d/0xf80 [ 934.627710][T14465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.627730][T14465] ? trace_irq_disable+0x37/0x100 [ 934.627747][T14465] ? clear_bhb_loop+0x40/0x90 [ 934.627772][T14465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.627785][T14465] RIP: 0033:0x7fd09ce4bf79 [ 934.627797][T14465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.627808][T14465] RSP: 002b:00007fd09b09e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 934.627823][T14465] RAX: ffffffffffffffda RBX: 00007fd09d0c5fa0 RCX: 00007fd09ce4bf79 [ 934.627832][T14465] RDX: 0000000000000003 RSI: 0000200000007780 RDI: 0000000000000003 [ 934.627841][T14465] RBP: 00007fd09b09e090 R08: 0000000000000000 R09: 0000000000000000 [ 934.627848][T14465] R10: 0000000000008800 R11: 0000000000000246 R12: 0000000000000001 [ 934.627856][T14465] R13: 00007fd09d0c6038 R14: 00007fd09d0c5fa0 R15: 00007fffe25521e8 [ 934.627875][T14465] [ 935.880517][ T880] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 935.942542][T14481] dummy0: entered promiscuous mode [ 935.943120][T14479] dummy0: left promiscuous mode [ 936.032579][T14483] netlink: 'syz.2.2520': attribute type 1 has an invalid length. [ 936.032596][T14483] netlink: 'syz.2.2520': attribute type 2 has an invalid length. [ 936.203369][ T880] usb 7-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 936.203397][ T880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.217357][ T880] usb 7-1: config 0 descriptor?? [ 936.349809][T14485] sd 0:0:1:0: device reset [ 936.777576][ T880] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 937.039480][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5280 ms [ 937.039520][ C0] lec:lec_tx_timeout: lec0 [ 937.209244][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2521'. [ 937.210907][T14488] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.211185][T14488] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.280321][ T880] gspca_sunplus: reg_w_riv err -110 [ 938.280431][ T880] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 938.313123][ T807] usb 7-1: USB disconnect, device number 44 [ 939.140016][T14515] dummy0: entered promiscuous mode [ 939.141850][T14514] dummy0: left promiscuous mode [ 939.201107][T13465] Bluetooth: hci0: command 0x0405 tx timeout [ 940.432239][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2537'. [ 940.432275][T14533] openvswitch: netlink: Unknown nsh attribute 0 [ 940.789300][ T880] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 940.955886][ T880] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 940.955924][ T880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.018747][ T880] usb 5-1: config 0 descriptor?? [ 941.957731][ T880] usb 5-1: Cannot read MAC address [ 941.957950][ T880] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 942.009545][ T880] usb 5-1: USB disconnect, device number 127 [ 942.265253][T14562] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2548'. [ 945.109462][ T5874] usb 6-1: new low-speed USB device number 55 using dummy_hcd [ 945.259049][ T5874] usb 6-1: Invalid ep0 maxpacket: 64 [ 945.331032][T14601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2563'. [ 945.389449][ T5874] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 945.558983][ T5874] usb 6-1: Invalid ep0 maxpacket: 64 [ 945.559454][ T5874] usb usb6-port1: attempt power cycle [ 945.907409][ T5874] usb 6-1: new low-speed USB device number 57 using dummy_hcd [ 945.964513][ T5874] usb 6-1: Invalid ep0 maxpacket: 64 [ 946.698956][ T5813] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 946.788966][ T5874] usb 6-1: new low-speed USB device number 58 using dummy_hcd [ 946.846105][ T5874] usb 6-1: Invalid ep0 maxpacket: 64 [ 946.846456][ T5874] usb usb6-port1: unable to enumerate USB device [ 946.902968][ T5813] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 946.903033][ T5813] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 946.903056][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.972776][ T5813] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 947.999157][ T5782] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 948.010011][ T5813] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 948.010034][ T5813] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 948.061575][ T5813] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 948.061604][ T5813] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 948.170087][ T5782] usb 6-1: Using ep0 maxpacket: 8 [ 948.185294][ T5782] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 948.185346][ T5782] usb 6-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 948.185363][ T5782] usb 6-1: config 1 interface 0 has no altsetting 0 [ 948.189018][ T5782] usb 6-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 948.189050][ T5782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.189069][ T5782] usb 6-1: Product: syz [ 948.189083][ T5782] usb 6-1: Manufacturer: syz [ 948.189097][ T5782] usb 6-1: SerialNumber: syz [ 948.196376][T14632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2574'. [ 948.196400][T14632] openvswitch: netlink: Flow actions attr not present in new flow. [ 948.227857][ T5813] usb 3-1: USB disconnect, device number 119 [ 948.255691][T14634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2575'. [ 949.031588][T14623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.031939][T14623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.257639][ T5782] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input36 [ 950.308795][ T5782] usb 6-1: USB disconnect, device number 59 [ 950.315841][ T5146] bcm5974 6-1:1.0: could not read from device [ 952.780301][T14673] netlink: 'syz.0.2589': attribute type 1 has an invalid length. [ 952.780328][T14673] netlink: 'syz.0.2589': attribute type 2 has an invalid length. [ 952.828784][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 953.853835][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.853888][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 953.853914][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.913570][ T9] usb 5-1: config 0 descriptor?? [ 954.818537][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 954.846453][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 954.879742][ T9] usb 5-1: USB disconnect, device number 2 [ 955.458563][ T880] usb 7-1: new low-speed USB device number 45 using dummy_hcd [ 955.628477][ T880] usb 7-1: device descriptor read/64, error -71 [ 955.777987][ T5804] Bluetooth: hci3: Malformed LE Event: 0x0b [ 955.841373][T14697] Invalid argument reading file caps for ./file0 [ 955.878467][ T880] usb 7-1: new low-speed USB device number 46 using dummy_hcd [ 956.928375][ T880] usb 7-1: device descriptor read/64, error -71 [ 957.039033][ T880] usb usb7-port1: attempt power cycle [ 957.788259][ T880] usb 7-1: new low-speed USB device number 47 using dummy_hcd [ 957.809031][ T880] usb 7-1: device descriptor read/8, error -71 [ 958.058388][ T880] usb 7-1: new low-speed USB device number 48 using dummy_hcd [ 958.090027][ T880] usb 7-1: device descriptor read/8, error -71 [ 958.403306][ T880] usb usb7-port1: unable to enumerate USB device [ 959.608313][ T5874] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 959.786708][ T5874] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 959.786745][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.786767][ T5874] usb 6-1: Product: syz [ 959.786783][ T5874] usb 6-1: Manufacturer: syz [ 959.786799][ T5874] usb 6-1: SerialNumber: syz [ 960.272954][ T5874] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 960.273024][ T5874] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 962.852169][ T5874] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 962.857804][ T5874] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 962.858905][ T5874] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 962.858966][ T5874] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 962.860809][ T5874] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 962.925894][ T5874] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 962.970462][ T5874] usb 6-1: USB disconnect, device number 60 [ 965.267924][ T880] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 965.421167][ T880] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 965.421212][ T880] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 965.421227][ T880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.468097][ T880] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 967.352947][T14803] loop8: detected capacity change from 0 to 7 [ 967.353657][ T880] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 967.353681][ T880] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 967.372992][T14803] Dev loop8: unable to read RDB block 7 [ 967.373026][T14803] loop8: unable to read partition table [ 967.373148][T14803] loop8: partition table beyond EOD, truncated [ 967.373161][T14803] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 967.376006][ T880] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 967.376032][ T880] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 968.198137][ T5874] usb 1-1: USB disconnect, device number 41 [ 969.237752][ T5874] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 969.391051][ T5874] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 969.391118][ T5874] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 969.391145][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.438764][ T5874] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 969.657674][ T31] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 969.807766][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 969.865642][ T31] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 969.865675][ T31] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 969.865696][ T31] usb 1-1: config 0 has no interface number 0 [ 969.865729][ T31] usb 1-1: too many endpoints for config 0 interface 172 altsetting 118: 97, using maximum allowed: 30 [ 969.865780][ T31] usb 1-1: config 0 interface 172 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 969.865807][ T31] usb 1-1: config 0 interface 172 has no altsetting 0 [ 969.888533][ T31] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 969.888566][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.888585][ T31] usb 1-1: Product: syz [ 969.888598][ T31] usb 1-1: Manufacturer: syz [ 969.888612][ T31] usb 1-1: SerialNumber: syz [ 969.899869][ T31] usb 1-1: config 0 descriptor?? [ 970.352235][ T31] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 970.352297][ T31] usb 1-1: setting power ON [ 970.352319][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 970.367950][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 970.368720][ T31] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 970.368776][ T31] usb 1-1: media controller created [ 970.452031][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 970.498453][ T5874] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 970.498482][ T5874] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 970.501713][ T5874] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 970.501741][ T5874] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 970.952571][ T31] usb 1-1: digital interface selection failed (-22) [ 970.952599][ T31] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 970.978142][ T31] usb 1-1: setting power OFF [ 970.978161][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 970.978173][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 970.978181][ T31] (NULL device *): no alternate interface [ 971.030155][ T5782] usb 3-1: USB disconnect, device number 120 [ 971.099881][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 971.137771][ T31] usb 1-1: USB disconnect, device number 42 [ 972.950759][T11450] lec:lec_start_xmit: lec0:No lecd attached [ 977.897516][ T5874] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 977.997385][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5050 ms [ 977.997428][ C0] lec:lec_tx_timeout: lec0 [ 978.210990][ T5874] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 978.211022][ T5874] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 978.211044][ T5874] usb 1-1: config 1 has no interface number 0 [ 978.211094][ T5874] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 978.214150][ T5874] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 978.214182][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.214204][ T5874] usb 1-1: Product: syz [ 978.214221][ T5874] usb 1-1: Manufacturer: syz [ 978.214237][ T5874] usb 1-1: SerialNumber: syz [ 978.336011][ T5874] cdc_ncm 1-1:1.1: NCM or ECM functional descriptors missing [ 978.336069][ T5874] cdc_ncm 1-1:1.1: bind() failure [ 979.252386][T14913] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2656'. [ 979.252419][T14913] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2656'. [ 979.603303][ T5874] usb 1-1: USB disconnect, device number 43 [ 981.349254][T14932] netlink: 'syz.2.2670': attribute type 1 has an invalid length. [ 981.349278][T14932] netlink: 'syz.2.2670': attribute type 2 has an invalid length. [ 982.597510][ T9] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 982.808700][ T9] usb 7-1: device descriptor read/all, error -71 [ 984.327570][ T880] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 984.506752][ T880] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 984.506789][ T880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.506811][ T880] usb 5-1: Product: syz [ 984.506827][ T880] usb 5-1: Manufacturer: syz [ 984.506843][ T880] usb 5-1: SerialNumber: syz [ 984.699912][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2678'. [ 984.997251][ T880] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 984.997324][ T880] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 986.530021][ T880] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 986.530089][ T880] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 986.534737][ T880] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 986.649628][ T880] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 986.691895][ T880] usb 5-1: USB disconnect, device number 3 [ 986.852507][T14975] netlink: 'syz.5.2683': attribute type 1 has an invalid length. [ 986.852533][T14975] netlink: 'syz.5.2683': attribute type 2 has an invalid length. [ 990.072676][ T6158] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 990.135611][ T6158] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 990.277964][ T31] usb 7-1: new low-speed USB device number 51 using dummy_hcd [ 990.296787][T15012] netlink: 'syz.5.2692': attribute type 1 has an invalid length. [ 990.296810][T15012] netlink: 'syz.5.2692': attribute type 2 has an invalid length. [ 990.527516][ T31] usb 7-1: device descriptor read/64, error -71 [ 990.978637][T15017] netlink: 'syz.2.2694': attribute type 3 has an invalid length. [ 990.979842][T15017] netlink: 'syz.2.2694': attribute type 3 has an invalid length. [ 991.077638][ T31] usb 7-1: new low-speed USB device number 52 using dummy_hcd [ 991.181174][T15024] netlink: 'syz.4.2696': attribute type 1 has an invalid length. [ 991.181199][T15024] netlink: 'syz.4.2696': attribute type 2 has an invalid length. [ 991.286241][ T31] usb 7-1: device descriptor read/64, error -71 [ 991.389859][ T31] usb usb7-port1: attempt power cycle [ 992.447582][ T31] usb 7-1: new low-speed USB device number 53 using dummy_hcd [ 992.468473][ T31] usb 7-1: device descriptor read/8, error -71 [ 992.624448][T15038] netlink: 'syz.2.2700': attribute type 11 has an invalid length. [ 992.747646][ T31] usb 7-1: new low-speed USB device number 54 using dummy_hcd [ 992.768698][ T31] usb 7-1: device descriptor read/8, error -71 [ 992.843719][T15039] netlink: 'syz.2.2700': attribute type 11 has an invalid length. [ 992.878368][ T31] usb usb7-port1: unable to enumerate USB device [ 993.125404][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.125488][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.128608][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 995.933060][T15065] netlink: 'syz.0.2708': attribute type 1 has an invalid length. [ 995.933085][T15065] netlink: 'syz.0.2708': attribute type 2 has an invalid length. [ 997.051465][T15073] loop7: detected capacity change from 0 to 6 [ 997.280222][T15079] hub 8-0:1.0: USB hub found [ 997.290553][T15079] hub 8-0:1.0: 1 port detected [ 998.278764][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5150 ms [ 998.278804][ C0] lec:lec_tx_timeout: lec0 [ 998.347659][T15073] Invalid logical block size (4) [ 998.367572][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 998.369756][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 998.369794][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 998.374069][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 998.374104][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 998.374816][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 998.374846][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 998.375552][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 998.375582][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 998.376337][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 998.376367][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 998.550414][ T6158] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 998.717581][ T6158] usb 7-1: Using ep0 maxpacket: 8 [ 998.726095][ T6158] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 998.726127][ T6158] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.726147][ T6158] usb 7-1: Product: syz [ 998.726162][ T6158] usb 7-1: Manufacturer: syz [ 998.726178][ T6158] usb 7-1: SerialNumber: syz [ 998.767576][ T6158] usb 7-1: config 0 descriptor?? [ 998.981002][ T6158] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1001.753699][ T6158] gspca_sunplus: reg_w_riv err -110 [ 1001.753803][ T6158] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 1002.080444][T15102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2719'. [ 1002.080484][T15102] FAULT_INJECTION: forcing a failure. [ 1002.080484][T15102] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.080507][T15102] CPU: 0 UID: 0 PID: 15102 Comm: syz.5.2719 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1002.080525][T15102] Tainted: [L]=SOFTLOCKUP [ 1002.080529][T15102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1002.080537][T15102] Call Trace: [ 1002.080543][T15102] [ 1002.080549][T15102] dump_stack_lvl+0xe8/0x150 [ 1002.080573][T15102] should_fail_ex+0x46b/0x600 [ 1002.080592][T15102] should_failslab+0xa8/0x100 [ 1002.080607][T15102] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1002.080621][T15102] ? __alloc_skb+0x1d7/0x390 [ 1002.080637][T15102] ? lockdep_hardirqs_on+0x7a/0x110 [ 1002.080654][T15102] ? __alloc_skb+0x193/0x390 [ 1002.080670][T15102] __alloc_skb+0x1d7/0x390 [ 1002.080689][T15102] netlink_ack+0x146/0xa50 [ 1002.080703][T15102] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1002.080713][T15102] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1002.080731][T15102] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1002.080750][T15102] ? __pfx_ref_tracker_free+0x10/0x10 [ 1002.080769][T15102] netlink_rcv_skb+0x2b6/0x4b0 [ 1002.080784][T15102] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1002.080797][T15102] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1002.080820][T15102] ? netlink_deliver_tap+0x2e/0x1b0 [ 1002.080834][T15102] ? netlink_deliver_tap+0x2e/0x1b0 [ 1002.080851][T15102] genl_rcv+0x28/0x40 [ 1002.080861][T15102] netlink_unicast+0x831/0x9f0 [ 1002.080880][T15102] ? __pfx_netlink_unicast+0x10/0x10 [ 1002.080893][T15102] ? __alloc_skb+0x193/0x390 [ 1002.080910][T15102] ? netlink_sendmsg+0x650/0xb40 [ 1002.080923][T15102] ? skb_put+0x11b/0x210 [ 1002.080942][T15102] netlink_sendmsg+0x813/0xb40 [ 1002.080962][T15102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1002.080982][T15102] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1002.080998][T15102] ____sys_sendmsg+0xa4e/0xac0 [ 1002.081010][T15102] ? __might_fault+0xaf/0x130 [ 1002.081027][T15102] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1002.081045][T15102] ? import_iovec+0x73/0xa0 [ 1002.081063][T15102] ___sys_sendmsg+0x2a5/0x360 [ 1002.081074][T15102] ? __lock_acquire+0x6b5/0x2cf0 [ 1002.081093][T15102] ? __pfx____sys_sendmsg+0x10/0x10 [ 1002.081127][T15102] ? __fget_files+0x2a/0x420 [ 1002.081142][T15102] ? __fget_files+0x3a6/0x420 [ 1002.081163][T15102] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1002.081177][T15102] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1002.081203][T15102] ? __pfx_ksys_write+0x10/0x10 [ 1002.081223][T15102] do_syscall_64+0x14d/0xf80 [ 1002.081238][T15102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.081249][T15102] ? trace_irq_disable+0x37/0x100 [ 1002.081260][T15102] ? clear_bhb_loop+0x40/0x90 [ 1002.081275][T15102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.081287][T15102] RIP: 0033:0x7fd09ce4bf79 [ 1002.081299][T15102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.081310][T15102] RSP: 002b:00007fd09b09e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1002.081324][T15102] RAX: ffffffffffffffda RBX: 00007fd09d0c5fa0 RCX: 00007fd09ce4bf79 [ 1002.081334][T15102] RDX: 0000000020000810 RSI: 0000200000000180 RDI: 0000000000000003 [ 1002.081342][T15102] RBP: 00007fd09b09e090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.081350][T15102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.081358][T15102] R13: 00007fd09d0c6038 R14: 00007fd09d0c5fa0 R15: 00007fffe25521e8 [ 1002.081377][T15102] [ 1002.159512][ T9] usb 7-1: USB disconnect, device number 55 [ 1002.574787][T15110] netlink: 'syz.0.2722': attribute type 1 has an invalid length. [ 1002.574812][T15110] netlink: 'syz.0.2722': attribute type 2 has an invalid length. [ 1002.581569][T15105] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2720'. [ 1002.808328][ T31] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1002.909315][ T9] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 1003.048328][ T9] usb 6-1: device descriptor read/64, error -71 [ 1003.307972][ T9] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 1003.520076][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.520107][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1003.520130][ T31] usb 3-1: config 1 has no interface number 0 [ 1003.520180][ T31] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1003.523516][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1003.523545][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.523566][ T31] usb 3-1: Product: syz [ 1003.523582][ T31] usb 3-1: Manufacturer: syz [ 1003.523597][ T31] usb 3-1: SerialNumber: syz [ 1003.542708][ T31] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 1003.542764][ T31] cdc_ncm 3-1:1.1: bind() failure [ 1003.828041][ T9] usb 6-1: device descriptor read/64, error -71 [ 1003.949559][ T9] usb usb6-port1: attempt power cycle [ 1003.949771][ T5874] usb 3-1: USB disconnect, device number 121 [ 1004.297545][ T9] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 1004.328300][ T9] usb 6-1: device descriptor read/8, error -71 [ 1005.785239][T15130] use of bytesused == 0 is deprecated and will be removed in the future, [ 1005.785285][T15130] use the actual size instead. [ 1006.687517][ T5874] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1008.131015][T13714] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1008.739732][ T5874] usb 1-1: device descriptor read/all, error -71 [ 1008.763888][T13714] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.763948][T13714] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1008.763973][T13714] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.809633][T13714] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1009.588661][T15154] netlink: 'syz.5.2735': attribute type 1 has an invalid length. [ 1009.588685][T15154] netlink: 'syz.5.2735': attribute type 2 has an invalid length. [ 1009.897449][T13714] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1009.897475][T13714] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 1009.906136][T13714] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1009.906158][T13714] stv0680 7-1:4.0: last error: 0, command = 0x0 [ 1010.160534][ T10] usb 7-1: USB disconnect, device number 56 [ 1010.679857][T15166] FAULT_INJECTION: forcing a failure. [ 1010.679857][T15166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.679900][T15166] CPU: 0 UID: 0 PID: 15166 Comm: syz.5.2737 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1010.679931][T15166] Tainted: [L]=SOFTLOCKUP [ 1010.679939][T15166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1010.679952][T15166] Call Trace: [ 1010.679961][T15166] [ 1010.679972][T15166] dump_stack_lvl+0xe8/0x150 [ 1010.680008][T15166] should_fail_ex+0x46b/0x600 [ 1010.680041][T15166] _copy_to_user+0x31/0xb0 [ 1010.680075][T15166] simple_read_from_buffer+0xe1/0x170 [ 1010.680116][T15166] proc_fail_nth_read+0x1be/0x230 [ 1010.680144][T15166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1010.680172][T15166] ? rw_verify_area+0x2ac/0x4e0 [ 1010.680204][T15166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1010.680229][T15166] vfs_read+0x212/0xa70 [ 1010.680259][T15166] ? __pfx_vfs_read+0x10/0x10 [ 1010.680281][T15166] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1010.680311][T15166] ? lockdep_hardirqs_on+0x7a/0x110 [ 1010.680338][T15166] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1010.680364][T15166] ? mutex_lock_nested+0x152/0x1d0 [ 1010.680384][T15166] ? fdget_pos+0x252/0x320 [ 1010.680423][T15166] ksys_read+0x156/0x270 [ 1010.680446][T15166] ? __pfx_ksys_read+0x10/0x10 [ 1010.680481][T15166] do_syscall_64+0x14d/0xf80 [ 1010.680508][T15166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.680528][T15166] ? trace_irq_disable+0x37/0x100 [ 1010.680547][T15166] ? clear_bhb_loop+0x40/0x90 [ 1010.680573][T15166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.680593][T15166] RIP: 0033:0x7fd09ce0c84e [ 1010.680613][T15166] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1010.680632][T15166] RSP: 002b:00007fd09b07cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1010.680656][T15166] RAX: ffffffffffffffda RBX: 00007fd09b07d6c0 RCX: 00007fd09ce0c84e [ 1010.680672][T15166] RDX: 000000000000000f RSI: 00007fd09b07d0a0 RDI: 0000000000000003 [ 1010.680686][T15166] RBP: 00007fd09b07d090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.680701][T15166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.680714][T15166] R13: 00007fd09d0c6128 R14: 00007fd09d0c6090 R15: 00007fffe25521e8 [ 1010.680750][T15166] [ 1012.371218][T15182] FAULT_INJECTION: forcing a failure. [ 1012.371218][T15182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1012.371260][T15182] CPU: 1 UID: 0 PID: 15182 Comm: syz.5.2740 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1012.371302][T15182] Tainted: [L]=SOFTLOCKUP [ 1012.371311][T15182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1012.371323][T15182] Call Trace: [ 1012.371332][T15182] [ 1012.371341][T15182] dump_stack_lvl+0xe8/0x150 [ 1012.371374][T15182] should_fail_ex+0x46b/0x600 [ 1012.371405][T15182] _copy_to_user+0x31/0xb0 [ 1012.371436][T15182] simple_read_from_buffer+0xe1/0x170 [ 1012.371468][T15182] proc_fail_nth_read+0x1be/0x230 [ 1012.371496][T15182] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1012.371524][T15182] ? rw_verify_area+0x2ac/0x4e0 [ 1012.371553][T15182] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1012.371575][T15182] vfs_read+0x212/0xa70 [ 1012.371603][T15182] ? __pfx_vfs_read+0x10/0x10 [ 1012.371624][T15182] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1012.371649][T15182] ? lockdep_hardirqs_on+0x7a/0x110 [ 1012.371682][T15182] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1012.371705][T15182] ? mutex_lock_nested+0x152/0x1d0 [ 1012.371722][T15182] ? fdget_pos+0x252/0x320 [ 1012.371756][T15182] ksys_read+0x156/0x270 [ 1012.371778][T15182] ? __pfx_ksys_read+0x10/0x10 [ 1012.371812][T15182] do_syscall_64+0x14d/0xf80 [ 1012.371845][T15182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.371871][T15182] ? trace_irq_disable+0x37/0x100 [ 1012.371890][T15182] ? clear_bhb_loop+0x40/0x90 [ 1012.371915][T15182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.371936][T15182] RIP: 0033:0x7fd09ce0c84e [ 1012.371958][T15182] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1012.371977][T15182] RSP: 002b:00007fd09b09dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1012.372001][T15182] RAX: ffffffffffffffda RBX: 00007fd09b09e6c0 RCX: 00007fd09ce0c84e [ 1012.372018][T15182] RDX: 000000000000000f RSI: 00007fd09b09e0a0 RDI: 0000000000000005 [ 1012.372031][T15182] RBP: 00007fd09b09e090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.372046][T15182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1012.372060][T15182] R13: 00007fd09d0c6038 R14: 00007fd09d0c5fa0 R15: 00007fffe25521e8 [ 1012.372097][T15182] [ 1012.511531][T15184] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2742'. [ 1012.627815][T15188] cgroup: none used incorrectly [ 1012.841255][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 1012.841277][ T36] audit: type=1326 audit(2000000685.276:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15187 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34ff1bf79 code=0x7ffc0000 [ 1012.850714][ T36] audit: type=1326 audit(2000000685.286:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15187 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fe34ff1bf79 code=0x7ffc0000 [ 1012.850767][ T36] audit: type=1326 audit(2000000685.286:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15187 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34ff1bf79 code=0x7ffc0000 [ 1012.850808][ T36] audit: type=1326 audit(2000000685.286:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15187 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe34ff1bf79 code=0x7ffc0000 [ 1012.850846][ T36] audit: type=1326 audit(2000000685.286:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15187 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34ff1bf79 code=0x7ffc0000 [ 1012.850884][ T36] audit: type=1326 audit(2000000685.286:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15187 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe34ff1bf79 code=0x7ffc0000 [ 1012.850923][ T36] audit: type=1326 audit(2000000685.286:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15187 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34ff1bf79 code=0x7ffc0000 [ 1012.850960][ T36] audit: type=1326 audit(2000000685.286:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15187 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34ff1bf79 code=0x7ffc0000 [ 1012.851009][ T36] audit: type=1326 audit(2000000685.286:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15187 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe34ff1bf79 code=0x7ffc0000 [ 1012.851047][ T36] audit: type=1326 audit(2000000685.286:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15187 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34ff1bf79 code=0x7ffc0000 [ 1015.609468][T15217] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1018.438356][T15232] loop7: detected capacity change from 0 to 6 [ 1018.543069][T15232] Invalid logical block size (4) [ 1018.554334][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 1018.554653][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1018.554685][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1018.555588][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1018.555619][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1018.607516][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1018.607557][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1018.609814][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1018.609850][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1018.622853][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1018.622888][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1018.688143][T15239] overlay: ./file0 is not a directory [ 1018.827465][ T5813] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1018.979690][ T5813] usb 1-1: Using ep0 maxpacket: 8 [ 1018.987070][ T5813] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1018.987112][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.987134][ T5813] usb 1-1: Product: syz [ 1018.987148][ T5813] usb 1-1: Manufacturer: syz [ 1018.987164][ T5813] usb 1-1: SerialNumber: syz [ 1018.997120][ T5813] usb 1-1: config 0 descriptor?? [ 1020.335781][ T5813] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1020.510816][T15256] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2764'. [ 1020.510847][T15256] bridge: RTM_NEWNEIGH with invalid state 0x5 [ 1020.807288][T15264] input: syz0 as /devices/virtual/input/input37 [ 1021.858313][ T5813] gspca_sunplus: reg_r err -71 [ 1021.858418][ T5813] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 1021.928215][ T5813] usb 1-1: USB disconnect, device number 46 [ 1022.527479][ T5813] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1022.680763][ T5813] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1022.680804][ T5813] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1022.680832][ T5813] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1022.680874][ T5813] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1022.680899][ T5813] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.722222][T15278] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1022.744611][ T5813] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1023.420199][ T5813] usb 7-1: USB disconnect, device number 57 [ 1024.332293][ T5804] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1024.332315][ [ 1024.332315][ T5804] CPU: 1 UID: 0 PID: 5804 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1024.332334][ T5804] Tainted: [L]=SOFTLOCKUP [ 1024.332339][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1024.332348][ T5804] Workqueue: hci0 hci_rx_work [ 1024.332370][ T5804] Call Trace: [ 1024.332376][ T5804] [ 1024.332383][ T5804] dump_stack_lvl+0xe8/0x150 [ 1024.332404][ T5804] sysfs_create_dir_ns+0x271/0x2a0 [ 1024.332418][ T5804] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1024.332432][ T5804] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1024.332448][ T5804] ? rt_spin_unlock+0x160/0x200 [ 1024.332463][ T5804] kobject_add_internal+0x631/0xd10 [ 1024.332486][ T5804] kobject_add+0x163/0x240 [ 1024.332507][ T5804] ? __pfx_kobject_add+0x10/0x10 [ 1024.332529][ T5804] ? get_device_parent+0x370/0x3a0 [ 1024.332551][ T5804] device_add+0x408/0xb80 [ 1024.332571][ T5804] hci_conn_add_sysfs+0xd5/0x210 [ 1024.332591][ T5804] le_conn_complete_evt+0xf1d/0x1430 [ 1024.332613][ T5804] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1024.332627][ T5804] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1024.332642][ T5804] ? lockdep_hardirqs_on+0x7a/0x110 [ 1024.332661][ T5804] ? skb_pull_data+0xfb/0x200 [ 1024.332677][ T5804] hci_le_conn_complete_evt+0x187/0x470 [ 1024.332695][ T5804] hci_event_packet+0x7af/0x12c0 [ 1024.332716][ T5804] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1024.332729][ T5804] ? __pfx_hci_event_packet+0x10/0x10 [ 1024.332744][ T5804] ? rt_spin_unlock+0x14f/0x200 [ 1024.332763][ T5804] ? hci_send_to_monitor+0xe2/0x590 [ 1024.332783][ T5804] hci_rx_work+0x3ee/0x1030 [ 1024.332804][ T5804] ? process_scheduled_works+0xa0f/0x17a0 [ 1024.332819][ T5804] process_scheduled_works+0xaec/0x17a0 [ 1024.332851][ T5804] ? __pfx_process_scheduled_works+0x10/0x10 [ 1024.332869][ T5804] ? assign_work+0x3d5/0x5e0 [ 1024.332887][ T5804] worker_thread+0xa50/0xfc0 [ 1024.332917][ T5804] kthread+0x388/0x470 [ 1024.332934][ T5804] ? __pfx_worker_thread+0x10/0x10 [ 1024.332946][ T5804] ? __pfx_kthread+0x10/0x10 [ 1024.332963][ T5804] ret_from_fork+0x51e/0xb90 [ 1024.332983][ T5804] ? __pfx_ret_from_fork+0x10/0x10 [ 1024.332996][ T5804] ? __switch_to+0xc7d/0x1400 [ 1024.333013][ T5804] ? __pfx_kthread+0x10/0x10 [ 1024.333030][ T5804] ret_from_fork_asm+0x1a/0x30 [ 1024.333057][ T5804] [ 1024.333076][ T5804] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1024.333100][ T5804] Bluetooth: hci0: failed to register connection device [ 1024.376143][ T5804] ================================================================== [ 1024.376163][ T5804] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x87d/0x13e0 [ 1024.376196][ T5804] Read of size 8 at addr ffff8880318d7500 by task kworker/u9:5/5804 [ 1024.376213][ T5804] [ 1024.376229][ T5804] CPU: 1 UID: 0 PID: 5804 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1024.376258][ T5804] Tainted: [L]=SOFTLOCKUP [ 1024.376267][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1024.376280][ T5804] Workqueue: hci0 hci_rx_work [ 1024.376319][ T5804] Call Trace: [ 1024.376328][ T5804] [ 1024.376337][ T5804] dump_stack_lvl+0xe8/0x150 [ 1024.376366][ T5804] print_report+0xba/0x230 [ 1024.376389][ T5804] ? l2cap_connect_cfm+0x87d/0x13e0 [ 1024.376412][ T5804] kasan_report+0x117/0x150 [ 1024.376435][ T5804] ? l2cap_connect_cfm+0x87d/0x13e0 [ 1024.376462][ T5804] l2cap_connect_cfm+0x87d/0x13e0 [ 1024.376489][ T5804] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1024.376512][ T5804] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1024.376537][ T5804] ? lockdep_hardirqs_on+0x7a/0x110 [ 1024.376561][ T5804] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1024.376585][ T5804] ? mutex_lock_nested+0x152/0x1d0 [ 1024.376603][ T5804] ? hci_connect_cfm+0x2c/0x140 [ 1024.376622][ T5804] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1024.376645][ T5804] hci_connect_cfm+0x95/0x140 [ 1024.376666][ T5804] le_conn_complete_evt+0xf65/0x1430 [ 1024.376694][ T5804] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1024.376716][ T5804] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1024.376739][ T5804] ? lockdep_hardirqs_on+0x7a/0x110 [ 1024.376764][ T5804] ? skb_pull_data+0xfb/0x200 [ 1024.376787][ T5804] hci_le_conn_complete_evt+0x187/0x470 [ 1024.376811][ T5804] hci_event_packet+0x7af/0x12c0 [ 1024.376840][ T5804] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1024.376860][ T5804] ? __pfx_hci_event_packet+0x10/0x10 [ 1024.376887][ T5804] ? rt_spin_unlock+0x14f/0x200 [ 1024.376910][ T5804] ? hci_send_to_monitor+0xe2/0x590 [ 1024.376933][ T5804] hci_rx_work+0x3ee/0x1030 [ 1024.376970][ T5804] ? process_scheduled_works+0xa0f/0x17a0 [ 1024.376993][ T5804] process_scheduled_works+0xaec/0x17a0 [ 1024.377028][ T5804] ? __pfx_process_scheduled_works+0x10/0x10 [ 1024.377052][ T5804] ? assign_work+0x3d5/0x5e0 [ 1024.377075][ T5804] worker_thread+0xa50/0xfc0 [ 1024.377110][ T5804] kthread+0x388/0x470 [ 1024.377136][ T5804] ? __pfx_worker_thread+0x10/0x10 [ 1024.377158][ T5804] ? __pfx_kthread+0x10/0x10 [ 1024.377184][ T5804] ret_from_fork+0x51e/0xb90 [ 1024.377207][ T5804] ? __pfx_ret_from_fork+0x10/0x10 [ 1024.377229][ T5804] ? __switch_to+0xc7d/0x1400 [ 1024.377251][ T5804] ? __pfx_kthread+0x10/0x10 [ 1024.377276][ T5804] ret_from_fork_asm+0x1a/0x30 [ 1024.377316][ T5804] [ 1024.377324][ T5804] [ 1024.377329][ T5804] Allocated by task 5804: [ 1024.377340][ T5804] kasan_save_track+0x3e/0x80 [ 1024.377358][ T5804] __kasan_kmalloc+0x93/0xb0 [ 1024.377375][ T5804] __kmalloc_cache_noprof+0x3a6/0x690 [ 1024.377395][ T5804] l2cap_chan_create+0x51/0x7a0 [ 1024.377421][ T5804] l2cap_sock_new_connection_cb+0x182/0x2e0 [ 1024.377447][ T5804] l2cap_connect_cfm+0x368/0x13e0 [ 1024.377480][ T5804] hci_connect_cfm+0x95/0x140 [ 1024.377498][ T5804] le_conn_complete_evt+0xf65/0x1430 [ 1024.377520][ T5804] hci_le_conn_complete_evt+0x187/0x470 [ 1024.377540][ T5804] hci_event_packet+0x7af/0x12c0 [ 1024.377566][ T5804] hci_rx_work+0x3ee/0x1030 [ 1024.377594][ T5804] process_scheduled_works+0xaec/0x17a0 [ 1024.377616][ T5804] worker_thread+0xa50/0xfc0 [ 1024.377638][ T5804] kthread+0x388/0x470 [ 1024.377665][ T5804] ret_from_fork+0x51e/0xb90 [ 1024.377688][ T5804] ret_from_fork_asm+0x1a/0x30 [ 1024.377717][ T5804] [ 1024.377723][ T5804] Freed by task 15299: [ 1024.377734][ T5804] kasan_save_track+0x3e/0x80 [ 1024.377751][ T5804] kasan_save_free_info+0x46/0x50 [ 1024.377778][ T5804] __kasan_slab_free+0x5c/0x80 [ 1024.377796][ T5804] kfree+0x1c1/0x690 [ 1024.377812][ T5804] l2cap_sock_cleanup_listen+0xf0/0x440 [ 1024.377839][ T5804] l2cap_sock_release+0x6e/0x270 [ 1024.377863][ T5804] sock_close+0xc3/0x240 [ 1024.377884][ T5804] __fput+0x45e/0xa80 [ 1024.377910][ T5804] task_work_run+0x1d9/0x270 [ 1024.377926][ T5804] exit_to_user_mode_loop+0xed/0x480 [ 1024.377959][ T5804] do_syscall_64+0x32d/0xf80 [ 1024.377984][ T5804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.378004][ T5804] [ 1024.378010][ T5804] The buggy address belongs to the object at ffff8880318d7000 [ 1024.378010][ T5804] which belongs to the cache kmalloc-2k of size 2048 [ 1024.378029][ T5804] The buggy address is located 1280 bytes inside of [ 1024.378029][ T5804] freed 2048-byte region [ffff8880318d7000, ffff8880318d7800) [ 1024.378052][ T5804] [ 1024.378058][ T5804] The buggy address belongs to the physical page: [ 1024.378071][ T5804] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880318d0000 pfn:0x318d0 [ 1024.378104][ T5804] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1024.378124][ T5804] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 1024.378144][ T5804] page_type: f5(slab) [ 1024.378166][ T5804] raw: 0080000000000240 ffff88813fe0e000 ffffea000080f410 ffffea0000b56810 [ 1024.378185][ T5804] raw: ffff8880318d0000 0000000000080005 00000000f5000000 0000000000000000 [ 1024.378204][ T5804] head: 0080000000000240 ffff88813fe0e000 ffffea000080f410 ffffea0000b56810 [ 1024.378223][ T5804] head: ffff8880318d0000 0000000000080005 00000000f5000000 0000000000000000 [ 1024.378242][ T5804] head: 0080000000000003 ffffea0000c63401 00000000ffffffff 00000000ffffffff [ 1024.378261][ T5804] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1024.378273][ T5804] page dumped because: kasan: bad access detected [ 1024.378285][ T5804] page_owner tracks the page as allocated [ 1024.378293][ T5804] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5807, tgid 5807 (syz-executor), ts 92529516986, free_ts 92443055972 [ 1024.378331][ T5804] post_alloc_hook+0x228/0x280 [ 1024.378352][ T5804] get_page_from_freelist+0x28bb/0x2950 [ 1024.378377][ T5804] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1024.378402][ T5804] alloc_pages_mpol+0xd1/0x380 [ 1024.378423][ T5804] allocate_slab+0x83/0x660 [ 1024.378450][ T5804] ___slab_alloc+0x150/0x640 [ 1024.378476][ T5804] __kmalloc_node_track_caller_noprof+0x29d/0x7e0 [ 1024.378496][ T5804] kmalloc_reserve+0x136/0x290 [ 1024.378522][ T5804] pskb_expand_head+0x19d/0x1300 [ 1024.378543][ T5804] netlink_trim+0x1b3/0x2c0 [ 1024.378563][ T5804] netlink_broadcast_filtered+0xd6/0x1010 [ 1024.378586][ T5804] nlmsg_notify+0xf0/0x1a0 [ 1024.378609][ T5804] __dev_notify_flags+0xf2/0x310 [ 1024.378637][ T5804] netif_change_flags+0xe8/0x1a0 [ 1024.378667][ T5804] do_setlink+0xf82/0x4590 [ 1024.378696][ T5804] rtnl_newlink+0x15a9/0x1be0 [ 1024.378723][ T5804] page last free pid 5796 tgid 5796 stack trace: [ 1024.378735][ T5804] __free_frozen_pages+0xfd0/0x1160 [ 1024.378757][ T5804] __slab_free+0x24f/0x2a0 [ 1024.378777][ T5804] qlist_free_all+0x97/0x100 [ 1024.378807][ T5804] kasan_quarantine_reduce+0x148/0x160 [ 1024.378836][ T5804] __kasan_slab_alloc+0x22/0x80 [ 1024.378855][ T5804] kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1024.378876][ T5804] __alloc_skb+0x1d7/0x390 [ 1024.378903][ T5804] netlink_ack+0x146/0xa50 [ 1024.378926][ T5804] netlink_rcv_skb+0x2b6/0x4b0 [ 1024.378958][ T5804] netlink_unicast+0x831/0x9f0 [ 1024.378976][ T5804] netlink_sendmsg+0x813/0xb40 [ 1024.378999][ T5804] __sys_sendto+0x72a/0x7d0 [ 1024.379027][ T5804] __x64_sys_sendto+0xde/0x100 [ 1024.379054][ T5804] do_syscall_64+0x14d/0xf80 [ 1024.379080][ T5804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.379100][ T5804] [ 1024.379105][ T5804] Memory state around the buggy address: [ 1024.379116][ T5804] ffff8880318d7400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1024.379131][ T5804] ffff8880318d7480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1024.379145][ T5804] >ffff8880318d7500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1024.379156][ T5804] ^ [ 1024.379168][ T5804] ffff8880318d7580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1024.379182][ T5804] ffff8880318d7600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1024.379192][ T5804] ================================================================== [ 1024.379420][ T5804] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1024.379444][ T5804] CPU: 1 UID: 0 PID: 5804 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1024.379476][ T5804] Tainted: [L]=SOFTLOCKUP [ 1024.379485][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1024.379500][ T5804] Workqueue: hci0 hci_rx_work [ 1024.379535][ T5804] Call Trace: [ 1024.379544][ T5804] [ 1024.379555][ T5804] vpanic+0x1e0/0x670 [ 1024.379589][ T5804] panic+0xc5/0xd0 [ 1024.379618][ T5804] ? __pfx_panic+0x10/0x10 [ 1024.379649][ T5804] ? preempt_schedule_thunk+0x16/0x30 [ 1024.379680][ T5804] ? l2cap_connect_cfm+0x87d/0x13e0 [ 1024.379705][ T5804] check_panic_on_warn+0x89/0xb0 [ 1024.379727][ T5804] ? l2cap_connect_cfm+0x87d/0x13e0 [ 1024.379753][ T5804] end_report+0x6f/0x140 [ 1024.379776][ T5804] kasan_report+0x128/0x150 [ 1024.379801][ T5804] ? l2cap_connect_cfm+0x87d/0x13e0 [ 1024.379831][ T5804] l2cap_connect_cfm+0x87d/0x13e0 [ 1024.379862][ T5804] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1024.379887][ T5804] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1024.379915][ T5804] ? lockdep_hardirqs_on+0x7a/0x110 [ 1024.379954][ T5804] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1024.379982][ T5804] ? mutex_lock_nested+0x152/0x1d0 [ 1024.380002][ T5804] ? hci_connect_cfm+0x2c/0x140 [ 1024.380024][ T5804] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1024.380051][ T5804] hci_connect_cfm+0x95/0x140 [ 1024.380075][ T5804] le_conn_complete_evt+0xf65/0x1430 [ 1024.380106][ T5804] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1024.380131][ T5804] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1024.380159][ T5804] ? lockdep_hardirqs_on+0x7a/0x110 [ 1024.380188][ T5804] ? skb_pull_data+0xfb/0x200 [ 1024.380213][ T5804] hci_le_conn_complete_evt+0x187/0x470 [ 1024.380241][ T5804] hci_event_packet+0x7af/0x12c0 [ 1024.380276][ T5804] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1024.380298][ T5804] ? __pfx_hci_event_packet+0x10/0x10 [ 1024.380327][ T5804] ? rt_spin_unlock+0x14f/0x200 [ 1024.380354][ T5804] ? hci_send_to_monitor+0xe2/0x590 [ 1024.380381][ T5804] hci_rx_work+0x3ee/0x1030 [ 1024.380416][ T5804] ? process_scheduled_works+0xa0f/0x17a0 [ 1024.380444][ T5804] process_scheduled_works+0xaec/0x17a0 [ 1024.380483][ T5804] ? __pfx_process_scheduled_works+0x10/0x10 [ 1024.380512][ T5804] ? assign_work+0x3d5/0x5e0 [ 1024.380538][ T5804] worker_thread+0xa50/0xfc0 [ 1024.380577][ T5804] kthread+0x388/0x470 [ 1024.380605][ T5804] ? __pfx_worker_thread+0x10/0x10 [ 1024.380629][ T5804] ? __pfx_kthread+0x10/0x10 [ 1024.380660][ T5804] ret_from_fork+0x51e/0xb90 [ 1024.380688][ T5804] ? __pfx_ret_from_fork+0x10/0x10 [ 1024.380712][ T5804] ? __switch_to+0xc7d/0x1400 [ 1024.380736][ T5804] ? __pfx_kthread+0x10/0x10 [ 1024.380767][ T5804] ret_from_fork_asm+0x1a/0x30 [ 1024.380808][ T5804] [ 1024.381459][ T5804] Kernel Offset: disabled