last executing test programs: 3m55.86060908s ago: executing program 3 (id=221): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 3m54.641683531s ago: executing program 3 (id=229): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) syz_io_uring_setup(0x23a, &(0x7f00000004c0)={0x0, 0xcfc3, 0x10100, 0x3, 0xe0}, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) eventfd2(0x8, 0x80001) epoll_create(0xa) socket$kcm(0xa, 0x2, 0x73) socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000", @ANYRES16=r1], 0xc4}}, 0x0) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000200)="1ec8", 0x2}], 0x1}}], 0x1, 0x200400a0) 3m54.387144892s ago: executing program 3 (id=233): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x241, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000040000000000000700000000030000000000000f0100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x800038, 0x7, 0x3, 0x180, 0x6, 0x10, 0xf1, 0x100000001, 0x1, 0xca0, 0x0, 0x2000000002d, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x100008000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x9, 0x75, 0x6, 0x36, 0x0, 0x2, 0xb4}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x1, 0x1, 0xa4, 0x5, 0x5}, {0x8000000, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe, 0x4}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0x6, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m52.226455133s ago: executing program 3 (id=240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x4}) r2 = socket(0x400000000010, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000300)=0xc) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0xd35, 0x1000, 0x4000}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0x5, 0x1000, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000040)={0x2, 0xb70, 0x0, &(0x7f00000000c0)}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000001100)=ANY=[@ANYBLOB="540000001200479a27bd7000fbdbdf25116801024e000000020000000700000002000000f9ffffff00"/56, @ANYRES32=0x0, @ANYBLOB="d50900008000000006000000c50d0000080001"], 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x4010) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd28, 0x25dfdbfa, {0x0, 0x0, 0x0, r7, {0xfff2, 0x4}, {0x0, 0xfff1}, {0x10, 0x6}}, [{0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 3m50.061258629s ago: executing program 3 (id=248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1, 0x0, 0xffff}, 0x18) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) symlinkat(&(0x7f00000000c0)='./file1/file4\x00', r3, &(0x7f0000000100)='./file0\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x20000010) r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9, 0x404}, 0x50) recvmsg$unix(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x1588, 0x1280, 0x11e8, 0x1280, 0x1380, 0x14f0, 0x14f0, 0x14f0, 0x14f0, 0x14f0, 0x14f0, 0x6, &(0x7f0000000040), {[{{@uncond, 0x0, 0x11c0, 0x11e8, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x1, './cgroup/syz1\x00', 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x40}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x4, 0x4, 0x3, 0x2, 0x0, 0x7], 0x3}}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x3}}}, {{@ip={@remote, @private=0xa010100, 0xffffff00, 0x0, 'ip6gretap0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x8, 0x2, 0xf}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "ccb5"}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1f}}}, {{@ip={@private=0xa010101, @local, 0xffffff00, 0xff, 'batadv0\x00', 'tunl0\x00', {0xff}, {}, 0xff, 0x5, 0x60}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x5, @ipv6=@local, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x15e8) 3m49.902722353s ago: executing program 3 (id=251): sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="010029bd7000fedb"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x408, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x10}}, 0x50) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000540)={0x9a0000, 0x4, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x980918, 0x81, '\x00', @p_u16=0x0}}) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) write$FUSE_IOCTL(r1, &(0x7f0000000100)={0x20, 0x0, r3, {0x5, 0x4, 0x7, 0x5f0}}, 0x20) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010001704000200000200000074b10000", @ANYRES32=0x0, @ANYBLOB="830409ead70f9078a07712800e00010069703672657461700000000c0002800600020040000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x404a000) 3m34.656725444s ago: executing program 32 (id=251): sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="010029bd7000fedb"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x408, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x10}}, 0x50) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000540)={0x9a0000, 0x4, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x980918, 0x81, '\x00', @p_u16=0x0}}) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) write$FUSE_IOCTL(r1, &(0x7f0000000100)={0x20, 0x0, r3, {0x5, 0x4, 0x7, 0x5f0}}, 0x20) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010001704000200000200000074b10000", @ANYRES32=0x0, @ANYBLOB="830409ead70f9078a07712800e00010069703672657461700000000c0002800600020040000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x404a000) 1m8.115188158s ago: executing program 0 (id=652): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000fb0000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000007010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480080001"], 0xd4}}, 0x20000040) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000040)=0xdddd1000) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fcntl$notify(r4, 0x402, 0x6) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60e", 0x22) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc840) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m7.868904228s ago: executing program 0 (id=653): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x760d9a75}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004802}, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r1, 0x821, 0x70bd28, 0xc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r3, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xc0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x64) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000500)=0x4, 0xfffffffffffffffa, 0x4) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000580), r2) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r6, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r2) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000800)={&(0x7f0000000680), 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa4, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x573, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x2, &(0x7f0000000840)=""/235, &(0x7f0000000940)=0xeb) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) read$FUSE(r9, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x60, 0x140c, 0x4, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0xb386138d66daf9c6}, 0x90) ptrace$setregs(0xf, r10, 0xc, &(0x7f0000002b40)="c2a937df18d8cbccfaf9a9cd58c562c87fe4f302b0c8f416f65adb7eb7a4290ebc740bbc3100e58a5172698e2d3800e9a589bd618696427469821cf3513e15940cd789ffa99770cfefb5db502ca1a63bece711692a96346710373a8af5e53851cbf8") syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002bc0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002c00), r2) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002c40), 0x40100, 0x0) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002cc0), r2) sendmsg$IPVS_CMD_FLUSH(r11, &(0x7f0000002dc0)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d00)={0x50, r12, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0xc000) ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f0000002e00)) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000003740)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003700)={&(0x7f0000002e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x148, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0x82, 0x8, "99fa438626d261f99e7efca8b4aee5cbd72f9dad0cdef50079935ce7e23ccea1b468ed0b782073f405939e661aee398627c60febc5e0b2c4ebc0aa7b0d997690c5e5bb27d8f287badf70e69c9ec3e02a2f33d88962897c9c64d49eed5004cbc33f7b9f4c3a727569553c74511b3d68bffca64a8c03693f587e2be1546698"}, @NFTA_OBJ_USERDATA={0x6, 0x8, "20be"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x91, 0x8, "308cb24a0ad22e891508ead90a2e47b52f641ba845a1366272159987af1af1c026b92fe7cea703a9fc32fd7c526ee273ac4760c0e460616d1faeb3d1ebf15f03d064cea3cf7cbf91a3516768d3da0a89ce8cc3a9dd6b622453bfefdf9e2c423f5179dd1ccaf35acbcf23904d37a50838666464e7d50cdfa5c8863c69e9f96176ff029fd96be3ba1ed97bff3f40"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0xd8, 0x18, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x68}]}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x110, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xa3, 0x6, "ffeebe57822f4b6194ec00e11526bdf957564233bfc4af41e891257c36b8eaf5f4330aadf3ef100e7a7ac5861a116313b68dce77341e207001e2da5237a5fad742902b597e6d4becd0316efb2f22c5766ca655daa357eb494762aa42827311c2e3e7a35b7ef6c6e0254a6f53c27266af80c55564e6a019e31dc7ea98f4cd80a1e5ceba3d02c7215c9ba2daa84bc92b70ed7bc2161ae2e9198f57f4961f9ee1"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0x250, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xb8, 0x6, "b93d12d8c7d8308436f17920d5cf3ba1c9ebff934892dc9bf108d89761b0770191f907a826b75c206b6cefcae3d9b66f67a2c00d4addbb94f1263186ff62d284bac2da856a7b72d03365409f63267d234165b07e22b3648b7a94f7932c5878d4bb5cf517d89a85e9ca2b953578d09a2b9ac040c60c75cedc920778f09324feff4789ae5629cf520b780701bf4edf028fe22067c403d8879e7a61cef97dd7afb82f76dba507a077c8707b65405140e87090ad70cb"}, @NFTA_TABLE_USERDATA={0xbb, 0x6, "3dcfd7f120cebb02473f0b8b5ad2b692cb96b2d797371959a8c904579f318e28c6fd81466e8f1455eeb34642a9a60d1c3f545b0e05f177e33117bfae88f572261f841a8dc17118f8bd24053c513fa45c3ca69fdb77724668cdd65377c901ea1c908a7b52054a5f5e3512dc2508c459cb7d00f0b070a7a436e550d23bc83be86b71d7acf483300b4ad3970346578304923644ac5c9d460c8967e9c0635843d6888c21b9bedc708aa46f2c3490647939eb79c378ba0cc0bb"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x8c, 0x6, "b46be0a43279790c10c9688ce20898467e36dd6e500371bd739e69fdafca2fa5ba4d66c9c47fea9e710bc8cc17e36ec65508983c892fd23aeff33f4f5bd9626ba1263496b8166b3d0ec5b9a6ba0c20281b796caf95f45e22b24d754aa63c6debcb2b8d1edee2116abda1b8dfb73025682337223e759d5de60e03d0f9bc67d328c03210aaccbe369c"}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x1ac, 0xb, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}, @NFTA_SET_DESC={0x158, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x154, 0x2, 0x0, 0x1, [{0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7020b0c3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf8b}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x49829370}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}]}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x30, 0x8, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x600}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x874}}, 0x4000000) 1m7.634975413s ago: executing program 0 (id=654): unshare(0x2c020400) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioprio_set$pid(0x1, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_normal', 0x143000, 0xb2) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x7, 0x1, r1, 0x0}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x9}]}]}, 0x28}}, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) unshare(0x22020a00) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000040)={0x0, 0xa, 0x40000}, 0x20) unshare(0x8000080) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f00000014c0)={0x1, 0x0, [{0x10a, 0x0, 0x1}]}) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000017c0)="bc", 0x1}], 0x1, &(0x7f0000000100)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4d}}], 0x20, 0x400c850}, 0x10) r9 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r9, 0x8, 0x9, 0x7fffffffffffffff) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000080)={0x2, 0xfe}, 0x0) 1m5.291221864s ago: executing program 0 (id=660): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) socket(0x10, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) sync() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101341) ioctl$USBDEVFS_IOCTL(r5, 0x80045515, &(0x7f00000000c0)=@usbdevfs_connect={0x7}) prctl$PR_SVE_SET_VL(0x32, 0x5210) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="080005000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x40c50}, 0x20008000) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r9, r0, &(0x7f0000002080)=0x64, 0x21c) 1m2.749424556s ago: executing program 0 (id=662): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000001080)={0x2, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x43}}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0xa000000, 0x30, &(0x7f0000000480)={0x2, {{0x2, 0x4e21, @multicast1}}}, 0x90) 1m2.316052598s ago: executing program 0 (id=665): r0 = socket(0x2b, 0x80801, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000600)) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0}, 0x4044092) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x183001) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0xfffffe86) 47.038552877s ago: executing program 33 (id=665): r0 = socket(0x2b, 0x80801, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000600)) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0}, 0x4044092) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x183001) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0xfffffe86) 13.264029086s ago: executing program 2 (id=789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe) bind$inet(r7, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x61, 0x4) connect$inet(r7, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r7, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75fb49d31d41a5", 0xc5, 0x0, 0x0, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x117}], 0x1}}], 0x1, 0x400c0) sendto$inet(r4, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 11.937462268s ago: executing program 2 (id=793): unshare(0x24060400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000040)={0x3, @null}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB="49107688f73ce57be85dff2ab544153dda760573223b008e40a105457a7869cf5a0379b23361c649c8be0d961d29fd358cc906c4347a224c0703167f34b5123b315635b7157f8c5246dfe16a45501178d4ee73713939387b208d084063aaa47e6951b3172f54eaeba39733", @ANYRES16=r2, @ANYBLOB="010029bd7000ffdbdf251c00000008000300", @ANYRES32, @ANYBLOB="05001d001000000006006d"], 0x34}}, 0x4000804) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) syz_pidfd_open(0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000000080)={0xc0001, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) r8 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000000)={0x20, r8}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 11.758537546s ago: executing program 6 (id=708): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2000008, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) futex(&(0x7f000000cffc), 0xd, 0x2, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, 0x0) read$FUSE(r2, &(0x7f0000001280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000006680)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x4fcb6233, {0x0, 0xfffffff7, 0x0, '\x00', {0x7ff, 0x8, 0x8000000000000000, 0x3, r4, r5, 0x8000, '\x00', 0x5, 0x200000000000007, 0xffffffff, 0x5, {0x0, 0x5}, {0x400, 0x9}, {0x7f, 0x6}, {0x900, 0xa00}, 0xfffc0000, 0xa, 0x2, 0x7}}}}) write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x22000100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="84ba17af0fed6cc284b6c5976b2d6ce8870c53245ad48a9e98d5fcd49e81c55c2727cd2c18f6dcf1e7b5e911cf8b3f7f106a8927ab563ca68f2d921a40f2d8b23cfaa5995cf877dc017a228bdc6c3fd006252fbdb0b173500725d6a1a5d174106268171e1dba19fa98c7c8a31956a9d9843aedcaf7ac57106d5b8f35be694f4ac01fd2a30c86a6", @ANYRESOCT=r1], 0x44}}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) getpid() r8 = syz_usb_connect$cdc_ncm(0x2, 0x8f, &(0x7f0000000700)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xc7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x1a, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xaf5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3, 0x6, 0x8}, {0x6, 0x24, 0x1a, 0x3, 0x10}, [@mdlm_detail={0x1d, 0x24, 0x13, 0x6, "298e8567698349aa3c44a19033daf812aa2f412b1057b22a44"}, @acm={0x4, 0x24, 0x2, 0x10}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xf, 0x84, 0xf7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xd, 0x4, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xe, 0x68, 0x1}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x200, 0x8, 0x2, 0x4, 0x20, 0x5}, 0x2b, &(0x7f0000000600)={0x5, 0xf, 0x2b, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x52, 0xff, 0x3, 0x4cf9, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x7, 0x3, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x8, 0x9, 0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x3, 0x4, 0x77}]}, 0x5, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xfa, &(0x7f00000008c0)=@string={0xfa, 0x3, "f365d0e2e8120e391f356353e8df2b3e7bd1b2811cb6c042bd48174a9755911fa04c27ab51fe53d4eb55fe3efb13c6307d865d5ce5d7c3b231447b2413587c90ad45c9a2da4786a67b32f5f40be9cffbe862f76685e2ecd96dda683e79b051fa5b81b03a422335ccf89c6b5925e4d41508635184f4908511b05180db8fc6004cee0a27fc4f6d3948621f4b5b771fca666d1b81a87bf5bdb531aa517048429b8cb8c53faa5d1f423513fd2dccd888862ec1d5a00c6de2e7a6d69c1dfedc9db3e23881a4d52168b4c918328bf3fc120456976f920f34e1e00527cd03c3821c11d6efd99688b40212935ec29bdff7a4a086b6c0b6fb078d659d"}}, {0x1f, &(0x7f00000009c0)=@string={0x1f, 0x3, "d83408ba39ab6a114e1117b9344fb2369f0a3c61c8c482855d25757de6"}}]}) syz_usb_control_io$cdc_ncm(r8, &(0x7f0000000b80)={0x14, &(0x7f0000000a80)={0x20, 0x22, 0x8d, {0x8d, 0xd, "a6ce258a5374d8a31ec7dea10ae9bfeeb881bcc427f7fb3e86ea6b3f2d357beeb768b4e8b06ba55873d11b7296fe2e5c39fff3286dcf04adb6a13f689a70bd9e69c247f3427b0b7bb159724f31ed3b3a089730cd64147de7ee619a6a73d4666f2e0733eaca4cb8ae1593a902c219327307149d45ff9b8f2730efbb7ddabae12e712c2b49912538a4aa828d"}}, &(0x7f0000000b40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ec0)={0x44, &(0x7f0000000c80)={0x0, 0x13, 0xb4, "959b168448c0ebc7f9ddcec9a322319434a8e8eddfc7d7a8e401e8b1c2cda7d54e6529635e03ff6a7f6c33e89376f0675d38071e12c3f29e2a3bd9c95266907e85ff53664c7cf3f183f2fbb6712967de6a6dbb762d5c75ac3e3bdfc4b8be9fbd88dce41f7c56fbc889234265db4bb5e293890dd44b734c53c8e03ce79d751e2aec06a755124d2168982b6bff467ae32515f5fd486c61a9755c7376db163c884086e05492cc628245192b31a33e8185ca6d618225"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xe9}, &(0x7f0000000d80)={0x20, 0x80, 0x1c, {0xfffc, 0x7, 0x0, 0x5, 0x40, 0x6, 0x2, 0x1000, 0xfffd, 0x5, 0x400, 0x101}}, &(0x7f0000000dc0)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000000e00)={0x20, 0x83, 0x2}, &(0x7f0000000e40)={0x20, 0x87, 0x2}, &(0x7f0000000e80)={0x20, 0x89, 0x2, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40000000200001002dbd7000fedbdf25310010bc02007d7f0000000014000200fe80000000000000000000000000002f080017004e204e23050016004c000000"], 0x40}, 0x1, 0x0, 0x0, 0x200408f0}, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x2, 0x4c88c2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f0000000480)={{0x3, 0x2, 0x1c0, 0x1, 'syz1\x00', 0x71}, 0x5, 0x400, 0x9, r6, 0x7, 0x3ff, 'syz1\x00', &(0x7f0000000400)=['{/\x00', '\'\xc1,,{[\x00', 'syzkaller\x00', '\x00', '/dev/fuse\x00', '(-%^\']\\\x1a@\x00', '\x00'], 0x2a}) 9.674694258s ago: executing program 2 (id=798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x3, 0x3a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 9.467769206s ago: executing program 4 (id=799): mbind(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1, 0x0, 0x4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3200008e705c9a01b4ce2fa868890a9f00f0b06fea993fdf4a86bb8b8c77ad378a57e527222f75aa07000000ed59d622b7a631bcc18d4f2e9b94f6b59c3ea9b0aec51ce60c44247a5912bd18c457d567f3a5473c11652f46d485da1d0a15c7df1746a6c7c94d2a46143b65307a99", @ANYRES16=r2, @ANYBLOB="01000000000000000000140000001c0007800c00040000000000000000000c0003000000000000000000"], 0x30}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf572}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x3f6e20cf74260575) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 9.249833457s ago: executing program 6 (id=800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000340)={0x0, 0xffffffff}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000440)={r2, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000480)=0x10) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x2, &(0x7f0000000100)={[0x7]}, 0x8) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x28}}, 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12015002c9825f2082057400702ae702030109021b000205e820040904ffdda50309040006000202ff05"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x669f, 0x8, 0x0, 0xfffffffc}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x0, 0x6040, 0x1, {0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(r3, 0x47f9, 0x3f, 0x0, 0x0, 0x0) 9.248896844s ago: executing program 4 (id=801): r0 = socket$pptp(0x18, 0x1, 0x2) readv(r0, &(0x7f0000001040)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/16, 0x10}], 0x2) write$input_event(0xffffffffffffffff, &(0x7f0000001080)={{0x0, 0xea60}, 0x5, 0x3, 0x80}, 0x18) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, 0x1, 0x4, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000011c0)={0x1, 0x9, 0xa}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001200), 0x4c00, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000001240)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000001280)={0x48, 0x1, r2, 0x0, 0x4, 0x7fffffffffffffff}) sync_file_range(r0, 0xd, 0x80000000, 0x2) r3 = syz_open_dev$hidraw(&(0x7f0000001300), 0x82de, 0x0) pwritev(r3, &(0x7f0000001540)=[{&(0x7f0000001340)="5b1bde9d26434711efc3db96c21819292c08bc4c9a06d627dd62b187dd1bc41b2c011f9618edee91ee602a69cc8dbcbdf6caac442bf98d01a6d2ca9a3ede93cba6aaac1849dadd20263e4d91807e0766ba9f2029bb4a49ec41173344c1cf7774e79889110cc960f712905a2275a12cf8abb574a16a1f66775c8abacb21379d9d67a9098692cc3b2c5ffb70a93957df923d0d7d5a83aaded9c5d07bc134e512672abb220492ebcce58933058b227677f751f62358f33a7e77ec0c5692daa68f87221bce231c376918c639a1030280cf04121f4689c5e6696a38c83a28cba409bcacd1e12f695cc21c54", 0xe9}, {&(0x7f0000001440)="01e7987dd444257c62bf7d119cd9b6a262", 0x11}, {&(0x7f0000001480)="c3b3c699cab75d85053d9d27e949b2d5bc032e01865459ce1bf30664cd9f1b19825c03e65a9c3b9bf92de7aec6f6e2370fb4ec0fddde6befd87afd75c81e4be6fe0a059beece65e0917d8351a06b14f5d55fa9c74b5e2b5e63c7340d4ece8e7828def5cc9dd74f94b0a4c7ac519a43db68dfb6db2edb3a69065891527b174a78b11c455f050cee3a71dcbad4d496c10ba3e1ba74f796dd059ec20a3b14", 0x9d}], 0x3, 0xd87, 0xff) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000001580)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000001600)={0x7, 0x0, 0x3, 0x1, 0x2, 0x0, [{0xdc9, 0x2, 0x1, '\x00', 0x1808}, {0x9, 0x4, 0xb2, '\x00', 0x200}]}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = getuid() ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000017c0)={'ip_vti0\x00', &(0x7f0000001700)={'ip_vti0\x00', 0x0, 0x700, 0x7800, 0x0, 0x9, {{0x24, 0x4, 0x3, 0x32, 0x90, 0x65, 0x0, 0x92, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x1c, 0x2e, 0x0, 0x6, [0x2189, 0x8, 0xa06, 0x3, 0x1, 0x43]}, @generic={0x82, 0xa, "11723fb683256461"}, @timestamp={0x44, 0x14, 0xd4, 0x0, 0xd, [0x5, 0x7, 0x400000, 0x0]}, @cipso={0x86, 0x18, 0x1, [{0x1, 0xd, "72a012908d1764c65d38c7"}, {0x6, 0x5, "ca77f8"}]}, @rr={0x7, 0x1f, 0xf6, [@dev={0xac, 0x14, 0x14, 0x2e}, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast, @multicast2, @remote]}, @ssrr={0x89, 0xb, 0x67, [@rand_addr=0x64010100, @rand_addr=0x64010100]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001800)={{0x1, 0x1, 0x18, r3, {0xee01, 0x0}}, './file0\x00'}) sendmsg$nl_xfrm(r4, &(0x7f00000019c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001980)={&(0x7f0000001840)=@acquire={0x130, 0x17, 0x1, 0x70bd2c, 0x25dfdbfb, {{@in=@remote, 0x4d6, 0x33}, @in=@broadcast, {@in=@broadcast, @in=@multicast2, 0x4e22, 0x0, 0x4e24, 0x1, 0xa, 0x0, 0xa0, 0x21, 0x0, r5}, {{@in=@local, @in=@broadcast, 0x4e22, 0x6, 0x4e22, 0x9, 0xa, 0x80, 0xa0, 0xff, r6, r8}, {0x7, 0x3, 0x1ff, 0x4, 0x4, 0x1, 0x10000, 0x5}, {0xff, 0x3, 0x7, 0x623}, 0xb2cf, 0x6e6bc0, 0x0, 0x1}, 0x9, 0xc0a, 0x61c6, 0x70bd26}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x80000000}]}, 0x130}, 0x1, 0x0, 0x0, 0x40050}, 0x178cf1720dae9c7d) r10 = accept4$ax25(r7, &(0x7f0000001a00)={{0x3, @rose}, [@null, @null, @netrom, @null, @bcast, @rose, @null, @netrom]}, &(0x7f0000001a80)=0x48, 0x100000) getsockopt$IP_SET_OP_VERSION(r10, 0x1, 0x53, &(0x7f0000001ac0), &(0x7f0000001b00)=0x8) sendmsg$nl_route(r7, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)=@ipv6_delrule={0x58, 0x21, 0x10, 0x70bd29, 0x25dfdbff, {0xa, 0x80, 0x10, 0x3, 0x2, 0x0, 0x0, 0x7, 0x2}, [@FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @mcast2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008811}, 0x41) ioctl$IOMMU_DESTROY$ioas(r7, 0x3b80, &(0x7f0000001c80)={0x8, r2}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000001dc0)={0x20, 0x2, &(0x7f0000001cc0)="d8f33e4ef0e6cd4f94d19eab24a0880c8a3c2f23e862bdb69d58edf3cca9aea3475686385da47cfd5504618acc1a9a4dda8f4a583bc5b1a5e69808fff6f8a600e6feb0e67ba6532c5ca24df37759db5a81b185ee64c0c04518916297cdaadd70a02d179da2f756c624140a5451e5ba07efe7426bf050090ed8ec0c5bc037b805f4f2b584729982a936764617aa6cd0ac5f1c02a9bbea1e5c6b470111ec4603f525179dbf6301199000509a28409e56dac2b27aa7695dd9b7f13e075fcc975e0e3fa4b3a9d205ba6c0fd4ed6e1460734330446cd177fd781847cc170bf0e7e7078e7c79fe6eafde0f770995a34f2aadc66b98aa", 0x1de, 0x18000000}) r11 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r11, &(0x7f0000001e00)={0x18, 0x2, {0x3, @local}}, 0x1e) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001e80)={&(0x7f0000001e40)='global_dirty_state\x00', r7, 0x0, 0x2}, 0x18) r13 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002080), 0x10001, 0x0) r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r15 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000020c0), 0x600600, 0x0) sendmsg$unix(r7, &(0x7f0000002480)={&(0x7f0000001ec0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001f40)="a0a911d9e41ade4240f842f7377c2390a9324b9905ba6e0d9277ffadf2fc20c4e62e660e69d43a1d42392aae3e8445056b8b1de03a29c90882ce27b710f76ca8cb0c1a54a90b9d4274dbe0b0d972eb4bf8a4dce48f46a0cf928f9ec99e3084d452c003540fe1b8f9de516f015ae3984a604a1f22961ecf88ea03c23b633a9e61e5d87c8a3d52d5dc2cb884cdbde9978da091aefd4798782e7bb3fd4ce8f70df13e964453c114a526e0ed7018cfc4db5ce7258792c6ede97c3f2d712b47d7ebbb52eaf64da15d", 0xc6}], 0x1, &(0x7f0000002380)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r13, r1, r1]}}, @rights={{0x30, 0x1, 0x1, [r7, r1, r4, r14, r0, r15, r12, r0]}}, @rights={{0x38, 0x1, 0x1, [r12, r4, r10, 0xffffffffffffffff, r12, r4, r10, r3, r11, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r7, r4]}}], 0xd0, 0x8800}, 0x24000000) 8.966683408s ago: executing program 4 (id=803): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)={0xd7, 0xe9, 0x9}) 8.767863002s ago: executing program 4 (id=804): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYRES32], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) (rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x1, 0x1) fchdir(r2) (async, rerun: 32) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x9c0000, 0x7, 0x3dc7, r2, 0x0, &(0x7f0000000040)={0x980903, 0x6, '\x00', @value64=0x60}}) (rerun: 32) 8.667069362s ago: executing program 2 (id=805): timer_create(0x9, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000000500)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x20060400) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), 0xffffffffffffffff, r2}}, 0x18) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r5, 0x3) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)) 5.902055678s ago: executing program 5 (id=807): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) readv(r6, &(0x7f0000002d80)=[{&(0x7f0000000900)=""/237, 0xed}], 0x1) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x7, r1}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) prlimit64(r2, 0x2, &(0x7f0000000180)={0x4e, 0x5}, &(0x7f0000000240)) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ee, @empty, 0x1}, {0xa, 0x4e21, 0x8, @loopback, 0x108}, r8, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r8}}, 0x18) 4.770697772s ago: executing program 4 (id=808): unshare(0x24060400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000040)={0x3, @null}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB="49107688f73ce57be85dff2ab544153dda760573223b008e40a105457a7869cf5a0379b23361c649c8be0d961d29fd358cc906c4347a224c0703167f34b5123b315635b7157f8c5246dfe16a45501178d4ee73713939387b208d084063aaa47e6951b3172f54eaeba39733", @ANYRES16=r2, @ANYBLOB="010029bd7000ffdbdf251c00000008000300", @ANYRES32=r4, @ANYBLOB="05001d001000000006006d"], 0x34}}, 0x4000804) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) syz_pidfd_open(0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r6, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, &(0x7f0000000080)={0xc0001, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) r9 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000000)={0x20, r9}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.572895994s ago: executing program 2 (id=809): r0 = syz_open_procfs(0x0, &(0x7f0000000500)='coredump_filter\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000400)="f26dbaf80c66b8d6eb2e8866efbafc0cec660f0090010066b8050300000f23c80f21f86635040080000f23f83e0fa00f080f5d8676e4f2acba4100b000ee6764260fc7ae01000000", 0x48}], 0x1, 0x0, &(0x7f0000000140)=[@dstype3={0x7, 0x2}, @cstype0={0x4, 0x6}], 0x2) r1 = syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x482b, 0x10100, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000200)=[{&(0x7f00000018c0)=""/15, 0xf}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') write$dsp(r4, &(0x7f0000000080)="eb874790ed590b92d1eb348c60606a2f66c2b4fcd42113c840def56c12791bd15db40174e3753cbf73710786af8007a68045fe13664b18e883258f68b6b297b554dde2dc60bdc77b5a067be1725768572c2deadd2368e22e3cb588d679f62082a612398114160506806644681b5de5bec4b1fb77d9584b702c", 0x79) io_uring_enter(r1, 0x567, 0xa1ff, 0x5, 0x0, 0x0) 4.568054218s ago: executing program 1 (id=810): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)=@known='user.incfs.metadata\x00') 3.775431711s ago: executing program 1 (id=811): r0 = socket(0xa, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x1041}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41, 0x1}}}, 0x10, 0x0}, 0x20001) close_range(r1, r1, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x8, &(0x7f00000001c0)=[{0x6, 0x0, 0x80, 0x3}, {0x60, 0xfc, 0x1, 0xd}, {0x8, 0xa, 0x10, 0x4}, {0x1ff, 0x8, 0x40, 0x6}, {0x1, 0x9, 0x8}, {0x9, 0x5, 0xd1, 0x3}, {0x8, 0x3, 0x40, 0x232}, {0x1, 0x4, 0x4e, 0x5}]}) sendmmsg$unix(r9, &(0x7f0000001000)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000380)="29c394aa1f0ab7252ee17545f841bbd4105b9cbf49998861e448cf92e578722648dbd0077cbe362139127345eed850bcf0d1fcafaf919548fde91417cff0e9f0aa9fea6e42400715e5eb4f754fa094953068db59d2212a2e204b3a8b7e97c1633bff78626ab6f7d33dca97bb35cde6d674a344199c423988c85c063b73a875d16afbfff0bb2c05a34f895342", 0x8c}, {&(0x7f0000000440)="4daece3758e9804bc69e03c0e6ffedb1a6fa97018a8e719f6a9125da4fb6249f03e01ce42eb9ed158f595e33fa1e881aea74f2ea012629d3aad8a649c3eb0e166deb29cbce81020063f2dcbd49b1b280098c60604d573a52f90c89dc2695a9d4c1c62346881b4a3b75eb029c98088b9779e63814afd95e8db8d6215549b4f57b54b4d50e7646545a8d8dc5517c7da66efd909fb00bdfd571ee5690d74c7d34d5855ea8769153a8ed89c1247bc367", 0xae}, {&(0x7f0000000500)="1bf356a45701a83a3b49752565e4cbfdb1b2307d72b0739a477b2b619c8ccf83efc83d43f3", 0x25}, {&(0x7f0000001540)="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", 0x1000}], 0x4, 0x0, 0x0, 0x24000044}}, {{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000600)="384fdb638a12040616942f529f340d857d5aac82ad29d2aa2e1edca868a0171c6dd21c847e4ce51a235915303ecfa7bde3e2b863320960464ee743183207f771c5cc33053a3524d456a059ae0d4928b997aef4512297a8a959e51b20c5537e3a8357071fd48a272de5f3f349323d7607495c2cd7f76b62a7e7a94cd6f9b74fec", 0x80}, {&(0x7f0000000680)="26d792651453000691d6ae9381c2028e98cd3ee4b9b809958f9d1ab0fd2f50952a107f76935fc96d1b21d9f694ed5eff652a2f6aa6db66398b0fd4694bd5a53c6177c7f9a53bc3743eb9fcd883a6fb301f07ac3ca130a5107729ea28f759119a718c736942c125cfcf0d0e7a7ae36873ab1c9c2afbb630117815e50226625bf77571585e0c9a68ea9a6a7b", 0x8b}, {&(0x7f0000000b00)="fbe4bf2a699052f2edf011fd6271099e80573116d49d84a9d5701d45d84b91b282f769b49f821fc92a024df2fcb71fd75f57c51cb515134d8c93450944539656a821629f31a6518f5724d5cc78988c43c2c8390facf53477e88095f41574adbe447647c74cba6542838a5cac1718e6ae521c483d02c34192b6b4f63038709cfa835b1aca217a8a26b443b88d32b3967c763a134787bec7f667f111d1d054ae99ea40933601550dc30bbdb7b0c3bc073c4958ac530dcf476d87d9a3ded667054768809bd4b8fb184476ed16bf642d737330bdca7ff186fd79ae94e60c0b6a4224", 0xe0}, {&(0x7f0000000c00)="475d7496f932c852b0091b022a2d31c43d3678882c02bd5ddaa95ae2a6ad05e3730d82909c709977687dea74dd2175aabdb6e8cdf7491b48f3b9c9eceb7431890edcd155aedec9a3f6954ed0e7db4d01669e913adb9897ea20ff82b7210ae3d2df47a214674856fce2500b9b021af2f97d66a61c6f8843b7bb0169f2739cb528d83d3d3bfa6d0a441d", 0x89}], 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r9, @ANYRES32=r8, @ANYRES32=r8, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES16=r3, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r10, @ANYRES32=r6, @ANYRES32=r8, @ANYRESOCT=r10, @ANYRES32=r10, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r3, @ANYRES8=r0, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000e30028000100008000000000000000000000d7ce6b0e0e5886451c03986601fc7f32ebe1eb67172230bbc585bc7e5691a094992089cad15954ed56cf2982a9275b36247abb56da72bc3d61a29dcfa4000b34d7484effce240e39ad07a91a18e793294e65fa82187908a1", @ANYRES32, @ANYRES32=r10, @ANYRES32=r6, @ANYRES32=r10, @ANYRES32=r5, @ANYRES32=r6], 0x128, 0x4080}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d40)="d1c1a5b95f5cec39766c19fbf901c55fc620048d7d8fb01b4f4323af5e9c2d5a7601ebc59c71a63d48eca43f75f62778da55cad6a0d5ac5ea8b54e9662fd5cb41b9633edfa2247c7ae9d41ae38d00e4e26e3bdac412046bc4cb4a53c5ffb02a8454d63d60f094b2324d325edcdcdaaf8e7c3181762c205d0c2010e412e56dec0230d640d7339cd83009411669669cc37fc29f52c8f1075b21b5d55154e8138fb0a17386408aea2a474ac4789b4af055b88586fccbddf20669248fb7893420ae20183b085a51fb5c3b9aefc015818e0f165bb5803e3f2aa31", 0xd8}, {&(0x7f0000000ac0)='z', 0x1}], 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES8=r9, @ANYRES32=r1, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8}}], 0x3, 0x4000880) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.627755533s ago: executing program 5 (id=812): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f00000009c0)=[{{&(0x7f0000000180)=@xdp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/171, 0xab}], 0x1, &(0x7f0000000300)=""/16, 0x10}, 0x6}, {{&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/226, 0xe2}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f00000004c0)=""/171, 0xab}, {&(0x7f0000000b80)=""/119, 0x77}], 0x4, &(0x7f0000000580)=""/154, 0x9a}, 0x8}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)=""/206, 0xce}], 0x1, &(0x7f00000008c0)=""/228, 0xe4}, 0xfffff655}], 0x3, 0x102, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x100}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x3c) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xffffffffffffffff) 3.43681659s ago: executing program 2 (id=813): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x22) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xc}]}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_emit_ethernet(0x2f3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f00000002c0)=@ready={0x0, 0x0, 0x8, "6ddb21ec", {0x1, 0x12, 0x6, 0xc, 0xbd}}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f0000000d00)=@conn_svc_rsp={0x0, 0x0, 0xa, "c8f33be6", {0x3, 0x100, 0x0, 0x4, 0x9c, 0x37, 0x8}}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xfffffffffffffd8c, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "7dd019e3", {0x3, 0x100, 0x0, 0x2, 0x2, 0x10, 0x8}}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x36, 0xd, 0x0, 0x1a, 0x2, 0xffffffc0, 0x2, 0x134, 0x1}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1f00004e7f9aa62864ee3882e1bfba0606c150aacb271945cb9d4cf30b2abddbea77777502fb00"]) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) 2.891519665s ago: executing program 4 (id=814): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x22) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xc}]}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_emit_ethernet(0x2f3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f00000002c0)=@ready={0x0, 0x0, 0x8, "6ddb21ec", {0x1, 0x12, 0x6, 0xc, 0xbd}}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f0000000d00)=@conn_svc_rsp={0x0, 0x0, 0xa, "c8f33be6", {0x3, 0x100, 0x0, 0x4, 0x9c, 0x37, 0x8}}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xfffffffffffffd8c, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "7dd019e3", {0x3, 0x100, 0x0, 0x2, 0x2, 0x10, 0x8}}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x36, 0xd, 0x0, 0x1a, 0x2, 0xffffffc0, 0x2, 0x134, 0x1}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1f00004e7f9aa62864ee3882e1bfba0606c150aacb271945cb9d4cf30b2abddbea77777502fb00"]) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) 2.539124853s ago: executing program 1 (id=815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x3, 0x3a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 2.513694537s ago: executing program 5 (id=816): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)={0xd7, 0xe9, 0x9}) 2.075400824s ago: executing program 5 (id=817): clock_getres(0x5, &(0x7f0000000080)) clock_nanosleep(0x2, 0x1, &(0x7f0000000100), &(0x7f0000000140)) clock_gettime(0x7, &(0x7f0000000040)) rt_sigtimedwait(&(0x7f0000000000)={[0x4]}, 0x0, &(0x7f00000000c0)={0x77359400}, 0x8) 1.40472318s ago: executing program 1 (id=818): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d77e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpgrp(0x0) syz_pidfd_open(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x6071, 0x0, 0xe7, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) 1.039320505s ago: executing program 6 (id=819): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0xfffffffe}}}}}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x1a0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x7}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x168, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xce, 0x4, 0x3, 0x2, 0x3, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x3, 0xe4, 0x8, 0x3, 0x0, 0x1, 0x6a0, 0x4}}, {0xc, 0x2, [0x6, 0xa449, 0x800, 0x5d0a]}}, {{0x1c, 0x1, {0x6, 0x81, 0x40, 0x6, 0x0, 0x8, 0x0, 0x4}}, {0xc, 0x2, [0x3, 0x8, 0x6, 0x9]}}, {{0x1c, 0x1, {0xa, 0x4f, 0x44, 0x9, 0x0, 0x6, 0x3, 0x1}}, {0x6, 0x2, [0x8001]}}, {{0x1c, 0x1, {0x3, 0x1, 0x7, 0x7, 0x0, 0xf0, 0xffffffff, 0x7}}, {0x12, 0x2, [0x7fff, 0x1000, 0x5, 0x0, 0x356, 0x5, 0x2]}}, {{0x1c, 0x1, {0x5, 0x9, 0x6, 0x80000040, 0x0, 0x4, 0xf2, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x0, 0x4, 0xff, 0x9, 0x1, 0x80000001, 0x6, 0x1}}, {0xb, 0x2, [0x7]}}, {{0x1c, 0x1, {0xe0, 0x7, 0x6, 0x7f, 0x0, 0x6b, 0x2, 0x1}}, {0x6, 0x2, [0x3ff]}}, {{0x1c, 0x1, {0xa4, 0x10, 0x80, 0x8, 0x0, 0xc5, 0x5, 0x9}}, {0x16, 0x2, [0x6, 0x4, 0x2, 0x7, 0xfffe, 0xff, 0x7, 0x9, 0x7]}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8041}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x6, 0x7fff, 0x5, 0x3, 0x3}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r5, @in6={{0xa, 0x4e24, 0x8904, @local, 0x3}}, 0x167, 0x6}, &(0x7f00000002c0)=0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {0xffffffffffffffff, r7}}, './file0\x00'}) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r10, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x0) r11 = socket$igmp6(0xa, 0x3, 0x2) sendfile(r11, r10, &(0x7f0000000700)=0x10, 0x10000) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) sendmmsg$inet6(r11, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0xfffffffffffffdf5, 0x0}}], 0x1, 0x0) recvfrom(r11, 0x0, 0x0, 0x40010120, 0x0, 0x0) 645.054345ms ago: executing program 5 (id=820): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000a00)={0xa, 0x5e20, 0x16e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002e00)={@map, 0xffffffffffffffff, 0x4, 0x2d}, 0x20) connect$inet6(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x181880, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x80) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x9f}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2000c814, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) 298.224384ms ago: executing program 1 (id=821): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)=@known='user.incfs.metadata\x00') 88.912895ms ago: executing program 5 (id=822): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x0, 0xdaf1, 0x31424752, 0x2, 0x1, [{0x2, 0x1}, {0x1, 0x2000000a}, {0x10001, 0x200}, {0x1000c061, 0x5}, {0xfffffff8, 0x801d}, {0x1, 0x4}, {0x4, 0x8}, {0x3, 0x400}], 0x0, 0x40, 0x0, 0x0, 0x5}}) r3 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x6, 0xc43, &(0x7f00000009c0)={{0x12, 0x1, 0x250, 0x53, 0xed, 0x8d, 0x40, 0x1b80, 0xe399, 0x6806, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc31, 0x3, 0x8, 0x6, 0x40, 0x5, [{{0x9, 0x4, 0xa4, 0x3, 0x10, 0x94, 0xa1, 0x99, 0xff, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x2, 0x5, 0x1, "68dc85"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0xf9, 0x0, "1647", "8b"}]}], [{{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x32, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0xfeff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x4, 0xa0, 0xd2}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0xd1, 0x6, 0xe, [@generic={0x4a, 0x9, "fe3c52335b17061b7b56465a260343665970e9741321e04d717ee16a463570908e326824f6004be3e60a495949b44bc7a9126cb49a88167efa31deb8bf9d29f609730b3362b82c7e"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x7d, 0xb, 0x31}}, {{0x9, 0x5, 0x9, 0x1c, 0x400, 0x0, 0xd, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x7}, @generic={0x6e, 0x9, "41a60ef0f63b9a138488b057f5cd9b904e3f1ce137750a91e0e293067d1ab2fb1ffaa787800a96dd699d853762237f99b2c8e2029178ea5a0fc6e3613e39f20aeab5cbc38431c85549fd40aa8f12079cfabf721b1b617998b5af0bf45b6d8b8f885beb23fc4f24f8eb69e696"}]}}, {{0x9, 0x5, 0xd, 0x14, 0x10, 0x4, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x7}]}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x9, 0xa, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x81, 0x0, 0xff, [@generic={0xd9, 0x44, "57818414ee9eeb846b71e32ccd2acbe41e30815fb781e9b376a2e51bcf00a10d87957391809df9f573a4bcb72f8f1722c8400dbf44addeaf05f8f670ff2433dc664552e0228ef6ffb50dfc6a89ecc251409c693ae044e6e846d9d3174d7bede47910780431dd76a7871aa2feef66fcf18a86273c28de99f39d4f30b98c69c8e76b7d56a1519e85afd54306029338ee10cee7b22d91c1e5cccc675f8ad24a4a49087c8dc3f7f41dbaaa36b4786f620593a34f518b4d8cb588ea8e7845fe24697532ad51c2168ac7b749a54b374150fff3a82de3a1f7eee0"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x4, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x6}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x1, 0x4, 0x9}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x1, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x4}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x2, 0x80, 0xf7, [@generic={0x54, 0x22, "6f618b076a4933060b5b4b917899a0e1ef4f28503401e72ee0f73f82553ea476071c4c53df40b7fa5aad63d9489c72a6690ad2beaf7c350c0c4526dab3693636007334724df24b31886065a2cc04cd195fc0"}, @generic={0xcd, 0x22, "503bffa0d0418786049119f1641bbd318574fa4282da877b0152c40c271b3e7c5522c1d5a31dcad69001c1b05b801549694ac63f33223242f3fd5e579dc4650a9a3e2a03700900dcd637d94cc6b715a993ac33f326a0b2e65b893ab6b07ec91a52c27fc1592075ac730f850503134a9287a3ae3df1211883f20d4d0859d91d7539baf7bc49c96eee7b72d4d76905d7b265993d968ad52542111d21f8a3e349e00e7fafb374616d4a6ecda0c6947b8739affc2fb36f788591f082062056307095480de3b9350a1bd0940e39"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0x3, 0x80, 0x4}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x40, 0x70, 0x8, [@generic={0x9f, 0x9, "e5b767a49a84071c5d057f7a224cc32818942d938a089e91d466d407b6dbae9aa0613ca0bf97f482f4e0e16058b90b56a6b75799693d6f6d16c42a31d4f32576c3c99454f1ddc0991e6b2e91eb0e80defa9066eafaf1a30f625efaa2437e456799f9a8129f0adbc188cfca6dd6698325c427b31e4d8db78fc32f52fae243aa6910263116dadf56bbefc96b85dbdf2868d67acdaf2a27b7eaf000431ce4"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x7, 0x3, 0x38, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x4}]}}, {{0x9, 0x5, 0xd, 0x5a74bbf109016744, 0x20, 0xfc, 0x81, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xdf, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}]}}]}}, {{0x9, 0x4, 0xee, 0xdc, 0x5, 0x36, 0x28, 0xdb, 0xc1, [@generic={0x66, 0x10, "fbde3893b73310bba6e687175428ce2a83671454ad4b053cde071cf9656e0b88ccd762337d2878510b1d19cf5391ae0220a56fbfaadd729c9b2b15dbe53c747d97dd5f4d664fa560a6164fcad475adf98b5f60cc2e86c4033b0d90fee58dc1d9c206234f"}], [{{0x9, 0x5, 0x1, 0x1, 0x8, 0x40, 0x40, 0xc, [@generic={0x49, 0xd, "3e119162cae022a481d35deece89beb4a796c2d52f7379199fa270f4375b8016c5cc3f5e0c7085d79c19ab9e8754a1bd8578650443ece7df86b20781ed73c99e23709bb1eb409f"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x1, 0x8d, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x72, 0x7}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0xc, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc6, 0x80, 0xc}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x7f, 0x80, 0xc6, [@generic={0x87, 0x21, "7eb0a439626fb14d01776ecbea5d8bb1e006a070e46a076b852db0b697799e4a9c0322a55773a865d00a5e08d72591dbc23656897dfe70313963211e2184a1f85200d3fb618a54f9f65e60bea2e15cf5ed3516d8da1faffe53039c9ecb708695b25dabbadb616f5c9e4914c9502dd42c72f0e94ceb1334f8e8648e2cf1416b4f5caf57c6f9"}]}}, {{0x9, 0x5, 0x1, 0x458a598fb1c33abf, 0x40, 0xc8, 0xae, 0x3, [@generic={0x8b, 0xc, "f81072ab7b680765102b908fc1386449652ef6d0ccfac404efa7b15e017c365b3efe106cc5de803b005ebc8e7cd8d2875b727af5102c885128cf9bc85ec9c9271cff9c4939d0902c49fa0b3731f37b09efc16d038a76bb71d88c0c6947dcc7af0020b620bcd0bcc25232c242fc0498133aaa0869247da2cc86c05044df03c48d15e5e0edf0fca939f5"}, @generic={0xf1, 0x30, "a354189fc572631a7be3fdf31226274270dddbd8c1ceeebbd1cb3248561a2b5e4540849bcdb396e65402cd4caba074f997c7211f5d0c0cc33656b932d656cc84c36ce5bed4bac96f90950756d73317eaa6e8021231dfcb4013207e25b1cbeae35262259332738f1ca2c5ecf2b8b28e7855476c3ef3ffb71ef5288af2731ce8389734e3472d5347049c473e1821824a274b8d932952949cfb7d397d815f14e2bfbc7842cc3c6b4a8b25af84b6c2d12ffc723f3cb36ee2542b7fa2491373f157efc144a14aaf51cfc1bfd47f468cf55083bd373e85e1e7b511493a0cc4d3ac8409e7294d041ad9308407861df0080d38"}]}}]}}, {{0x9, 0x4, 0x38, 0x3, 0xb, 0x20, 0xa3, 0x58, 0x4, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x8}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf, 0x1, 0x3, 0x6, "fa", "1e"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, "03", "9b27c4"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x2, 0x1, 0x4, '-'}, @as_header={0x7, 0x24, 0x1, 0x80, 0xff}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0x5, 0x30, "150dc3a6d3307a3f"}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "a3a64d748c93"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xff, 0x4, 0x3}, {0x6, 0x24, 0x1a, 0x2}}], [{{0x9, 0x5, 0x9, 0x10, 0x20, 0xa, 0x0, 0xc, [@generic={0x7b, 0x11, "5dc3a73b89fa2eea831a53ee2b8455d98e409503f6c28f68abadc1c7a2f701d63b26ef029ddc4e04300f7548c767620888fc3cb60490bf94c5eb25b405b07c5991157eff15bf7ab133165a702c493f4d6420af1ad243c95cae91531a9e2d07c45852329e8abf8a771dcd85d260ce7bf886c788aef15b4e47d0"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x36, 0xe6}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x40, 0x7, 0x9, [@generic={0xbe, 0xb, "71106f47839d2ad3c13081f2817b8dfae9cff041eb07d6bd381b7496ad1b224c58a23d5657a7ddfca6a2e23da37e1d7af1d9384a5f81627f10be385e8922f736c3ed1f8d5c06946f1b819c44b3ed5d981afe428f67b73af5fda70c0eb756cde5e1549640299b9dddeda7fb5d202a97cfe1fe3ec54cc5c8f28bdaeaea7535844b2c55dd7002768e333dc574b0bff7193723c75c7b8243fae04251fc29aa96ec658ea2cc2242d2c14484985c635f8b057ac455ea3da023df7cfc286508"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0xf7, 0xf2, 0x1, [@generic={0x28, 0xb, "e4d58091a4ff7179d5f5f4f703315630ee720c8efb3ab8aa2d4f1f5ba542df613895eb27c7f1"}, @generic={0xec, 0x11, "ddac970c147c57c6d7ceaf0f95d9c6c2c991beac63fc2b59c5baaf98934962a1edaf5433dc174bc8e6eb32974d8a6b29bd7a513aefd8e07e0fa9312873d0d24f513ee6616343018428444318e4679cf4539472320d05af819142f651386e5b02b9868d523b5eed5d05b648060bffcd433f6a07753d5e31e27d2519e3f3da7c412fc070e88958789b9f3135b9110d7b327416f3332d19555fbce00061f47dc3c3514a07ab3d01acc79fec4b8ee4e0de0905eaed3463b24727aaea2caab9cc22d4badbffc4211576210c19738bc46a27e46738c2dc2f232a24b78eaedbd5c5ce26960b6bf995fb43d815cc"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x10, 0xe, 0xea, [@generic={0x7a, 0x20, "e5fed5aacf4fa48d7b0ed9586916c9f328f5452fb489ff6a42e3bf99c2838b360431061ac6bea6de506ce4957f7909cb3ecaf627f0127384c7fd400fdd342f3705903f4259c72385f0a67c8ac988d7bc6ff01bdbaf3bdb2a9d6a61bd1c777df974fa37e4e52217a9287975047dab6d2317fc6bca98572eda"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0xd, 0x2, 0x7}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x16, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x3, 0x4, 0x4, [@generic={0xfe, 0x22, "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"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0xe, 0xa2, 0xfe, [@generic={0x4c, 0x1, "cc48656c70d543cbdd75a37eb6f989c736fa1d86ebdf0d3ac30b0be30e5ac869eae70fc044427ee6ab25f731b65229ea8d4ae869b1556c48317ad5954ac17f34cd9d88068be48eab89ad"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x0, 0x3, 0x1, 0x81}}, {{0x9, 0x5, 0xd, 0xa, 0x200, 0x0, 0x2, 0xe8}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0xc, 0x5, 0x6, 0x8, 0xaa}, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="050f050000"]}) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r4, &(0x7f00000000c0)="47ae88816e99884739966863f8d5bc", 0x36, 0xc190, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0xe0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="40000600000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x1, 0x2, 0x9, 0x3, 0xa, 0x7ff6, 0x3, 0x4, 0x2006, 0xfffc, 0x2, 0xf8}}, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0xfffffffffffffff7, &(0x7f00000001c0)=[{0x0}], 0x1, 0x8}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYRESHEX=r7], 0x0}, 0x0) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x109000, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000001640)={0x318, r9, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x90000}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40000000}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe12}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfc000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffc00}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa94f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff6368}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "94aaccbcf65ab46167d057829b72232194b99c5db164"}}, @TIPC_NLA_NODE_ID={0x9e, 0x3, "0abc888cea913ff253d6194725de74c27cecb107769ea7c19130522abab08c14c063960bdd75c75161b42e35ec7e647e864caf97b29a1bcb840160bc5b32c5a6aad75d2845468cd1bc2da519331e61880cebb349fbdd2cb5707b633f58448c8366e8f8a8b73fb30a6b5ed246a91839ea1d8e5b19a77c29f7b8934d44e2f26e0027f47ded64c7713956ed18c359009fe201d148a7bb948bafd315"}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc68}]}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x34, 0x3, "40d42b1179fe8a512073a1fd3aa8ac698e692d9618c5585b451b61710d2748fd045c16dbd55530db1430b2c0816c863e"}, @TIPC_NLA_NODE_ID={0x71, 0x3, "af8411467ed980a6c4f3e070f28e3f498200970db9b3caf2c3c2ac99ec0070336afdd9e4786ef5e26cedce8ac48b4e646ede237e306a6815ac536c626b8ccbc62f80e52813ea0f5439b8ebca85cb65dee5780e30f9d26b2382d68d25ec659ddbd0e92b535f4820f360ee37fe53"}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x50}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4bf7}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x4, 0x0, 0x0, 0x3}]}, {0x0, [0x61, 0x0, 0x0]}}, 0x0, 0x29, 0x0, 0x0, 0x4000000}, 0x28) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 0s ago: executing program 1 (id=823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) sched_setaffinity(0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): device number 15 using dummy_hcd [ 230.832731][ T49] usb 1-1: device descriptor read/8, error -71 [ 231.087965][ T49] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 231.108618][ T49] usb 1-1: device descriptor read/8, error -71 [ 231.218597][ T49] usb usb1-port1: unable to enumerate USB device [ 231.518370][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'. [ 232.500568][ T7192] netlink: 92 bytes leftover after parsing attributes in process `syz.2.406'. [ 232.500624][ T7192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.406'. [ 232.737949][ T5881] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 232.962711][ T5881] usb 3-1: config 0 has an invalid descriptor of length 8, skipping remainder of the config [ 232.962755][ T5881] usb 3-1: too many endpoints for config 0 interface 0 altsetting 4: 128, using maximum allowed: 30 [ 232.962783][ T5881] usb 3-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 232.962798][ T5881] usb 3-1: config 0 interface 0 has no altsetting 0 [ 232.962819][ T5881] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 232.962831][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.966470][ T5881] usb 3-1: config 0 descriptor?? [ 233.246657][ T5881] usb 3-1: string descriptor 0 read error: -71 [ 233.276252][ T5881] usb 3-1: selecting invalid altsetting 0 [ 233.515453][ T5881] usb 3-1: USB disconnect, device number 17 [ 233.615924][ T7204] FAULT_INJECTION: forcing a failure. [ 233.615924][ T7204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.615984][ T7204] CPU: 1 UID: 0 PID: 7204 Comm: syz.0.409 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 233.616006][ T7204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.616018][ T7204] Call Trace: [ 233.616026][ T7204] [ 233.616034][ T7204] dump_stack_lvl+0x189/0x250 [ 233.616064][ T7204] ? __pfx____ratelimit+0x10/0x10 [ 233.616093][ T7204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.616117][ T7204] ? __pfx__printk+0x10/0x10 [ 233.616153][ T7204] should_fail_ex+0x46c/0x600 [ 233.616191][ T7204] _copy_to_user+0x31/0xb0 [ 233.616214][ T7204] simple_read_from_buffer+0xe1/0x170 [ 233.616240][ T7204] proc_fail_nth_read+0x1b6/0x220 [ 233.616270][ T7204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 233.616301][ T7204] ? rw_verify_area+0x2ac/0x4e0 [ 233.616325][ T7204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 233.616353][ T7204] vfs_read+0x206/0xa30 [ 233.616375][ T7204] ? preempt_schedule_thunk+0x16/0x30 [ 233.616404][ T7204] ? __pfx_vfs_read+0x10/0x10 [ 233.616425][ T7204] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 233.616460][ T7204] ? mutex_lock_nested+0x154/0x1d0 [ 233.616483][ T7204] ? fdget_pos+0x253/0x320 [ 233.616512][ T7204] ksys_read+0x14b/0x260 [ 233.616540][ T7204] ? __pfx_ksys_read+0x10/0x10 [ 233.616575][ T7204] do_syscall_64+0xfa/0xf80 [ 233.616595][ T7204] ? rcu_is_watching+0x15/0xb0 [ 233.616612][ T7204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.616631][ T7204] ? clear_bhb_loop+0x60/0xb0 [ 233.616655][ T7204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.616673][ T7204] RIP: 0033:0x7f331d38e15c [ 233.616690][ T7204] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 233.616706][ T7204] RSP: 002b:00007f331b5ac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 233.616727][ T7204] RAX: ffffffffffffffda RBX: 00007f331d5e6180 RCX: 00007f331d38e15c [ 233.616741][ T7204] RDX: 000000000000000f RSI: 00007f331b5ac0a0 RDI: 0000000000000008 [ 233.616753][ T7204] RBP: 00007f331b5ac090 R08: 0000000000000000 R09: 0000000000000000 [ 233.616765][ T7204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.616777][ T7204] R13: 00007f331d5e6218 R14: 00007f331d5e6180 R15: 00007fffc6614a68 [ 233.616810][ T7204] [ 236.147735][ T7242] FAULT_INJECTION: forcing a failure. [ 236.147735][ T7242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.147769][ T7242] CPU: 0 UID: 0 PID: 7242 Comm: syz.0.421 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 236.147793][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 236.147802][ T7242] Call Trace: [ 236.147809][ T7242] [ 236.147817][ T7242] dump_stack_lvl+0x189/0x250 [ 236.147844][ T7242] ? __pfx____ratelimit+0x10/0x10 [ 236.147870][ T7242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.147892][ T7242] ? __pfx__printk+0x10/0x10 [ 236.147923][ T7242] should_fail_ex+0x46c/0x600 [ 236.147948][ T7242] strncpy_from_user+0x36/0x2c0 [ 236.147971][ T7242] getname_flags+0xf3/0x540 [ 236.147992][ T7242] user_path_at+0x24/0x60 [ 236.148011][ T7242] __se_sys_mount+0x2d4/0x410 [ 236.148034][ T7242] ? __pfx___se_sys_mount+0x10/0x10 [ 236.148053][ T7242] ? do_syscall_64+0xbe/0xf80 [ 236.148071][ T7242] ? __x64_sys_mount+0x20/0xc0 [ 236.148093][ T7242] do_syscall_64+0xfa/0xf80 [ 236.148113][ T7242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.148132][ T7242] ? clear_bhb_loop+0x60/0xb0 [ 236.148155][ T7242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.148173][ T7242] RIP: 0033:0x7f331d38f749 [ 236.148237][ T7242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.148252][ T7242] RSP: 002b:00007f331b5ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 236.148272][ T7242] RAX: ffffffffffffffda RBX: 00007f331d5e5fa0 RCX: 00007f331d38f749 [ 236.148285][ T7242] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 236.148296][ T7242] RBP: 00007f331b5ee090 R08: 0000200000000200 R09: 0000000000000000 [ 236.148308][ T7242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.148320][ T7242] R13: 00007f331d5e6038 R14: 00007f331d5e5fa0 R15: 00007fffc6614a68 [ 236.148352][ T7242] [ 236.757999][ T6837] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 236.762447][ T37] audit: type=1326 audit(1766052252.796:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7254 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 236.762703][ T37] audit: type=1326 audit(1766052252.796:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7254 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 236.763699][ T37] audit: type=1326 audit(1766052252.796:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7254 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 236.768191][ T37] audit: type=1326 audit(1766052252.806:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7254 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 236.793799][ T37] audit: type=1326 audit(1766052252.826:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7254 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 236.981186][ T37] audit: type=1326 audit(1766052253.016:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7254 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 236.991899][ T6837] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 236.998293][ T37] audit: type=1326 audit(1766052253.036:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7254 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 237.015140][ T37] audit: type=1326 audit(1766052253.046:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7254 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 237.015512][ T37] audit: type=1326 audit(1766052253.046:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7254 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 237.015790][ T37] audit: type=1326 audit(1766052253.046:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7254 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 237.208719][ T6837] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 237.311294][ T6837] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 238.623476][ T6837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.697471][ T6837] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.725142][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.726198][ T6002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.764044][ T6002] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.764268][ T6002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.846164][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 240.425129][ T7284] team0: Port device team_slave_0 removed [ 240.465751][ T5802] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 240.757943][ T5972] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 240.910132][ T5972] usb 2-1: config 0 has an invalid interface number: 129 but max is 0 [ 240.910162][ T5972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.910183][ T5972] usb 2-1: config 0 has no interface number 0 [ 240.910229][ T5972] usb 2-1: config 0 interface 129 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.916403][ T5972] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=80.8e [ 240.916436][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.916466][ T5972] usb 2-1: Product: syz [ 240.916481][ T5972] usb 2-1: Manufacturer: syz [ 240.916497][ T5972] usb 2-1: SerialNumber: syz [ 240.999359][ T5972] r8152-cfgselector 2-1: Unknown version 0x0000 [ 240.999388][ T5972] r8152-cfgselector 2-1: config 0 descriptor?? [ 241.005213][ T5972] r8152 2-1:0.129: Expected endpoints are not found [ 243.049553][ T6837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.322794][ T5940] r8152-cfgselector 2-1: USB disconnect, device number 9 [ 243.671630][ T7347] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 243.674667][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'. [ 243.676077][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'. [ 243.681570][ T7347] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 243.728884][ T7347] vhci_hcd vhci_hcd.0: Device attached [ 243.797961][ T5940] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 243.909990][ T5972] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 243.937957][ T49] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 243.939740][ T6837] veth0_vlan: entered promiscuous mode [ 243.957906][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 243.959834][ T5940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.959883][ T5940] usb 5-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 243.959902][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.967950][ T5972] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 243.992088][ T6837] veth1_vlan: entered promiscuous mode [ 244.018650][ T5940] usb 5-1: config 0 descriptor?? [ 244.035938][ T5940] dvb-usb: found a 'TeVii S662' in warm state. [ 244.035991][ T5940] dw2102: su3000_power_ctrl: 1, initialized 0 [ 244.036421][ T5940] dvb-usb: bulk message failed: -22 (2/0) [ 244.098055][ T5940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 244.098942][ T5940] dvbdev: DVB: registering new adapter (TeVii S662) [ 244.098989][ T5940] usb 5-1: media controller created [ 244.101008][ T5940] dvb-usb: bulk message failed: -22 (6/0) [ 244.101027][ T5940] dw2102: i2c transfer failed. [ 244.101047][ T5940] dvb-usb: bulk message failed: -22 (6/0) [ 244.101060][ T5940] dw2102: i2c transfer failed. [ 244.101076][ T5940] dvb-usb: bulk message failed: -22 (6/0) [ 244.101089][ T5940] dw2102: i2c transfer failed. [ 244.101105][ T5940] dvb-usb: bulk message failed: -22 (6/0) [ 244.101117][ T5940] dw2102: i2c transfer failed. [ 244.101133][ T5940] dvb-usb: bulk message failed: -22 (6/0) [ 244.101145][ T5940] dw2102: i2c transfer failed. [ 244.101161][ T5940] dvb-usb: bulk message failed: -22 (6/0) [ 244.101175][ T5940] dw2102: i2c transfer failed. [ 244.101184][ T5940] dvb-usb: MAC address: 02:02:02:02:02:02 [ 244.220269][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.258364][ T5940] dvb-usb: bulk message failed: -22 (3/0) [ 244.258389][ T5940] dw2102: command 0x0e transfer failed. [ 244.258399][ T5940] dvb-usb: bulk message failed: -22 (3/0) [ 244.258411][ T5940] dw2102: command 0x0e transfer failed. [ 244.331573][ T49] usb 1-1: unable to get BOS descriptor or descriptor too short [ 244.340893][ T49] usb 1-1: not running at top speed; connect to a high speed hub [ 244.356239][ T49] usb 1-1: config 5 has an invalid interface number: 255 but max is 1 [ 244.356269][ T49] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 244.356289][ T49] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 244.356311][ T49] usb 1-1: config 5 has no interface number 0 [ 244.356342][ T49] usb 1-1: too many endpoints for config 5 interface 255 altsetting 221: 165, using maximum allowed: 30 [ 244.356386][ T49] usb 1-1: config 5 interface 255 altsetting 221 has 0 endpoint descriptors, different from the interface descriptor's value: 165 [ 244.356415][ T49] usb 1-1: config 5 interface 255 has no altsetting 0 [ 244.366107][ T49] usb 1-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 244.366146][ T49] usb 1-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 244.366167][ T49] usb 1-1: Product: syz [ 244.366182][ T49] usb 1-1: Manufacturer: syz [ 244.366196][ T49] usb 1-1: SerialNumber: syz [ 244.519180][ T7350] vhci_hcd: connection reset by peer [ 244.556436][ T68] vhci_hcd vhci_hcd.2: stop threads [ 244.568439][ T5940] dvb-usb: bulk message failed: -22 (3/0) [ 244.568463][ T5940] dw2102: command 0x0e transfer failed. [ 244.568472][ T5940] dvb-usb: bulk message failed: -22 (3/0) [ 244.568482][ T5940] dw2102: command 0x0e transfer failed. [ 244.568490][ T5940] dvb-usb: bulk message failed: -22 (1/0) [ 244.568501][ T5940] dw2102: command 0x51 transfer failed. [ 244.568509][ T5940] dvb-usb: bulk message failed: -22 (5/0) [ 244.568521][ T5940] dw2102: i2c probe for address 0x68 failed. [ 244.568530][ T5940] dvb-usb: bulk message failed: -22 (5/0) [ 244.568543][ T5940] dw2102: i2c probe for address 0x69 failed. [ 244.568553][ T5940] dvb-usb: bulk message failed: -22 (5/0) [ 244.568566][ T5940] dw2102: i2c probe for address 0x6a failed. [ 244.568575][ T5940] dw2102: probing for demodulator failed. Is the external power switched on? [ 244.568585][ T5940] dvb-usb: no frontend was attached by 'TeVii S662' [ 244.600648][ T68] vhci_hcd vhci_hcd.2: release socket [ 244.656268][ T68] vhci_hcd vhci_hcd.2: disconnect device [ 244.757883][ T5940] rc_core: IR keymap rc-tt-1500 not found [ 244.757906][ T5940] Registered IR keymap rc-empty [ 244.760678][ T5940] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 244.764123][ T5940] input: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input11 [ 244.804416][ T5940] dvb-usb: schedule remote query interval to 250 msecs. [ 244.804440][ T5940] dw2102: su3000_power_ctrl: 0, initialized 1 [ 244.804453][ T5940] dvb-usb: TeVii S662 successfully initialized and connected. [ 245.111645][ T5940] dvb-usb: bulk message failed: -22 (1/0) [ 245.111669][ T5940] dw2102: i2c transfer failed. [ 245.467030][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 245.467411][ T37] audit: type=1326 audit(1766052261.366:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7346 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331d38f749 code=0x7ffc0000 [ 245.471127][ T37] audit: type=1326 audit(1766052261.366:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7346 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331d38f749 code=0x7ffc0000 [ 246.013938][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 246.013958][ T10] dw2102: i2c transfer failed. [ 246.088571][ T6837] veth0_macvtap: entered promiscuous mode [ 246.204812][ T6837] veth1_macvtap: entered promiscuous mode [ 246.279376][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 246.279397][ T10] dw2102: i2c transfer failed. [ 246.539221][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 246.539241][ T10] dw2102: i2c transfer failed. [ 246.545136][ T6837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.441638][ T6837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.058026][ T5940] dvb-usb: bulk message failed: -22 (1/0) [ 248.058050][ T5940] dw2102: i2c transfer failed. [ 248.310828][ T5881] usb 5-1: USB disconnect, device number 24 [ 248.311266][ T49] usbhid 1-1:5.255: couldn't find an input interrupt endpoint [ 248.318095][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 248.318116][ T5874] dw2102: i2c transfer failed. [ 248.368838][ T49] usb 1-1: USB disconnect, device number 17 [ 249.308032][ T5972] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 249.547641][ T5881] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 249.638436][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.657204][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.661293][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.674372][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.675302][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.411162][ T5881] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 250.843393][ T5881] usb 3-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 250.843427][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.855946][ T5881] usb 3-1: config 0 descriptor?? [ 250.878330][ T5881] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 250.959645][ T5881] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 251.243321][ T6837] syz-executor (6837) used greatest stack depth: 17496 bytes left [ 251.584271][ T7421] ubi31: attaching mtd0 [ 251.626983][ T7421] ubi31: scanning is finished [ 251.627008][ T7421] ubi31: empty MTD device detected [ 252.388244][ T61] Bluetooth: hci0: command tx timeout [ 252.496272][ T37] audit: type=1800 audit(1766052268.516:627): pid=7401 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.452" name="/" dev="fuse" ino=0 res=0 errno=0 [ 252.580859][ T803] usb 3-1: USB disconnect, device number 18 [ 253.035616][ T7421] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 253.035672][ T7421] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 253.035717][ T7421] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 253.035760][ T7421] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 253.035803][ T7421] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 253.035846][ T7421] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 253.035889][ T7421] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3640949323 [ 253.035937][ T7421] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 253.139145][ T7431] ubi31: background thread "ubi_bgt31d" started, PID 7431 [ 253.381364][ T803] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 253.809572][ T803] usb 3-1: device descriptor read/64, error -71 [ 254.048015][ T803] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 254.127941][ T5928] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 254.178009][ T803] usb 3-1: device descriptor read/64, error -71 [ 254.443858][ T803] usb usb3-port1: attempt power cycle [ 254.457935][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 254.463735][ T5928] usb 5-1: unable to get BOS descriptor or descriptor too short [ 254.465053][ T5928] usb 5-1: config 8 has an invalid interface number: 141 but max is 0 [ 254.465106][ T5928] usb 5-1: config 8 has no interface number 0 [ 254.465154][ T5928] usb 5-1: config 8 interface 141 altsetting 11 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 254.465181][ T5928] usb 5-1: config 8 interface 141 has no altsetting 0 [ 254.477913][ T61] Bluetooth: hci0: command tx timeout [ 254.478080][ T5928] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=c1.47 [ 254.478104][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.478122][ T5928] usb 5-1: Product: syz [ 254.478133][ T5928] usb 5-1: Manufacturer: syz [ 254.478145][ T5928] usb 5-1: SerialNumber: syz [ 254.857927][ T803] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 254.882273][ T803] usb 3-1: device descriptor read/8, error -71 [ 254.996808][ T7434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.011047][ T7434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.055991][ T5928] ir_toy 5-1:8.141: required endpoints not found [ 255.140925][ T5928] usb 5-1: USB disconnect, device number 25 [ 255.198719][ T803] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 255.218440][ T803] usb 3-1: device descriptor read/8, error -71 [ 255.341204][ T803] usb usb3-port1: unable to enumerate USB device [ 255.636325][ T7394] chnl_net:caif_netlink_parms(): no params data found [ 256.002384][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.002435][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.267282][ T61] Bluetooth: hci0: command tx timeout [ 257.589260][ T5940] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 257.797928][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 257.800313][ T5940] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 257.800341][ T5940] usb 5-1: config 0 has no interface number 0 [ 257.800390][ T5940] usb 5-1: config 0 interface 184 has no altsetting 0 [ 257.802979][ T5940] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 257.803011][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.803032][ T5940] usb 5-1: Product: syz [ 257.803046][ T5940] usb 5-1: Manufacturer: syz [ 257.803061][ T5940] usb 5-1: SerialNumber: syz [ 257.828586][ T5940] usb 5-1: config 0 descriptor?? [ 257.861956][ T5940] smsc75xx v1.0.0 [ 258.369620][ T5940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 258.369655][ T5940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 258.369676][ T5940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 258.369994][ T5940] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 258.407962][ T5940] usb 5-1: USB disconnect, device number 26 [ 258.818015][ T5940] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 258.975363][ T5940] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 258.975396][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.975417][ T5940] usb 5-1: Product: syz [ 258.975432][ T5940] usb 5-1: Manufacturer: syz [ 258.975447][ T5940] usb 5-1: SerialNumber: syz [ 259.189824][ T5940] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 259.291078][ T61] Bluetooth: hci0: command tx timeout [ 259.320612][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 259.549971][ T7394] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.550301][ T7394] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.550503][ T7394] bridge_slave_0: entered allmulticast mode [ 259.560125][ T7394] bridge_slave_0: entered promiscuous mode [ 259.654571][ T7394] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.654710][ T7394] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.654904][ T7394] bridge_slave_1: entered allmulticast mode [ 259.688323][ T7394] bridge_slave_1: entered promiscuous mode [ 259.888999][ T7490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.471'. [ 260.836153][ T7394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.844512][ T5971] usb 5-1: USB disconnect, device number 27 [ 260.878495][ T7394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.037876][ T10] usb 5-1: Service connection timeout for: 258 [ 261.037899][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 261.041821][ T10] ath9k_htc: Failed to initialize the device [ 261.207874][ T5971] usb 5-1: ath9k_htc: USB layer deinitialized [ 261.244293][ T5940] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 261.259314][ T68] bridge_slave_1: left allmulticast mode [ 261.259335][ T68] bridge_slave_1: left promiscuous mode [ 261.259518][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.380075][ T7499] syz.2.472 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 262.286093][ T5940] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 262.286126][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.286147][ T5940] usb 1-1: Product: syz [ 262.286162][ T5940] usb 1-1: Manufacturer: syz [ 262.286177][ T5940] usb 1-1: SerialNumber: syz [ 262.323078][ T68] bridge_slave_0: left allmulticast mode [ 262.323107][ T68] bridge_slave_0: left promiscuous mode [ 262.323366][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.369788][ T5940] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 262.397439][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 262.974131][ T7509] input: syz0 as /devices/virtual/input/input12 [ 263.258087][ T5971] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 263.440469][ T5971] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 263.440501][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.440522][ T5971] usb 5-1: Product: syz [ 263.440536][ T5971] usb 5-1: Manufacturer: syz [ 263.440551][ T5971] usb 5-1: SerialNumber: syz [ 263.446082][ T5971] usb 5-1: config 0 descriptor?? [ 263.524874][ T5972] usb 1-1: USB disconnect, device number 18 [ 263.740813][ T5971] hso 5-1:0.0: Failed to find BULK IN ep [ 263.746372][ T5971] usb-storage 5-1:0.0: USB Mass Storage device detected [ 264.157541][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.238173][ T9] usb 1-1: Service connection timeout for: 259 [ 264.238198][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 264.239506][ T9] ath9k_htc: Failed to initialize the device [ 264.313028][ T5972] usb 1-1: ath9k_htc: USB layer deinitialized [ 264.348749][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.180160][ T68] bond0 (unregistering): Released all slaves [ 265.402401][ T5928] usb 5-1: USB disconnect, device number 28 [ 266.791456][ T7394] team0: Port device team_slave_0 added [ 266.796313][ T7394] team0: Port device team_slave_1 added [ 266.906974][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 266.931264][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 267.100696][ T5874] IPVS: starting estimator thread 0... [ 267.188009][ T7551] IPVS: using max 8 ests per chain, 19200 per kthread [ 267.198064][ T5945] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 267.361962][ T5945] usb 1-1: unable to get BOS descriptor or descriptor too short [ 267.362563][ T5945] usb 1-1: not running at top speed; connect to a high speed hub [ 267.363765][ T5945] usb 1-1: config 5 has an invalid interface number: 255 but max is 1 [ 267.363807][ T5945] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 267.363834][ T5945] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 267.363856][ T5945] usb 1-1: config 5 has no interface number 0 [ 267.363887][ T5945] usb 1-1: too many endpoints for config 5 interface 255 altsetting 221: 165, using maximum allowed: 30 [ 267.363928][ T5945] usb 1-1: config 5 interface 255 altsetting 221 has 0 endpoint descriptors, different from the interface descriptor's value: 165 [ 267.363957][ T5945] usb 1-1: config 5 interface 255 has no altsetting 0 [ 267.367253][ T5945] usb 1-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 267.367280][ T5945] usb 1-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 267.367299][ T5945] usb 1-1: Product: syz [ 267.367313][ T5945] usb 1-1: Manufacturer: syz [ 267.367327][ T5945] usb 1-1: SerialNumber: syz [ 267.571820][ T68] hsr_slave_0: left promiscuous mode [ 267.874300][ T68] hsr_slave_1: left promiscuous mode [ 267.886052][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.891836][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.653442][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.653472][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.438976][ T68] veth1_macvtap: left promiscuous mode [ 269.442045][ T68] veth0_macvtap: left promiscuous mode [ 269.447183][ T68] veth1_vlan: left promiscuous mode [ 269.448963][ T68] veth0_vlan: left promiscuous mode [ 269.931293][ T5945] usbhid 1-1:5.255: couldn't find an input interrupt endpoint [ 270.162898][ T5945] usb 1-1: USB disconnect, device number 19 [ 270.794372][ T7589] tmpfs: Unknown parameter 'grpquota†IÏDhm<}¼÷ºlЉSOO%MÕ¹E' [ 274.228647][ T68] team0 (unregistering): Port device team_slave_1 removed [ 274.499800][ T68] team0 (unregistering): Port device team_slave_0 removed [ 276.699207][ T7394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.699220][ T7394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.699236][ T7394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.705842][ T7573] ip6gre1: entered allmulticast mode [ 276.738135][ T7394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.738153][ T7394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.738181][ T7394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.111418][ T7621] FAULT_INJECTION: forcing a failure. [ 277.111418][ T7621] name failslab, interval 1, probability 0, space 0, times 0 [ 277.111457][ T7621] CPU: 0 UID: 0 PID: 7621 Comm: syz.2.499 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 277.111485][ T7621] Tainted: [L]=SOFTLOCKUP [ 277.111492][ T7621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.111519][ T7621] Call Trace: [ 277.111530][ T7621] [ 277.111539][ T7621] dump_stack_lvl+0x189/0x250 [ 277.111567][ T7621] ? __pfx____ratelimit+0x10/0x10 [ 277.111595][ T7621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.111619][ T7621] ? __pfx__printk+0x10/0x10 [ 277.111645][ T7621] ? __pfx___might_resched+0x10/0x10 [ 277.111669][ T7621] should_fail_ex+0x46c/0x600 [ 277.111699][ T7621] ? io_submit_one+0x11f/0x1440 [ 277.111723][ T7621] should_failslab+0xa8/0x100 [ 277.111743][ T7621] ? io_submit_one+0x11f/0x1440 [ 277.111765][ T7621] kmem_cache_alloc_noprof+0x84/0x6c0 [ 277.111799][ T7621] io_submit_one+0x11f/0x1440 [ 277.111835][ T7621] ? __pfx_io_submit_one+0x10/0x10 [ 277.111857][ T7621] ? __might_fault+0xb0/0x130 [ 277.111891][ T7621] ? __might_fault+0xb0/0x130 [ 277.111922][ T7621] __se_sys_io_submit+0x185/0x320 [ 277.111948][ T7621] ? __pfx___se_sys_io_submit+0x10/0x10 [ 277.111968][ T7621] ? ksys_write+0x230/0x260 [ 277.112004][ T7621] ? do_syscall_64+0xbe/0xf80 [ 277.112027][ T7621] do_syscall_64+0xfa/0xf80 [ 277.112047][ T7621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.112066][ T7621] ? clear_bhb_loop+0x60/0xb0 [ 277.112098][ T7621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.112115][ T7621] RIP: 0033:0x7f2bbc45f749 [ 277.112132][ T7621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.112148][ T7621] RSP: 002b:00007f2bba6a5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 277.112167][ T7621] RAX: ffffffffffffffda RBX: 00007f2bbc6b6090 RCX: 00007f2bbc45f749 [ 277.112180][ T7621] RDX: 00002000000006c0 RSI: 0000000000000001 RDI: 00007f2bbc68f000 [ 277.112193][ T7621] RBP: 00007f2bba6a5090 R08: 0000000000000000 R09: 0000000000000000 [ 277.112205][ T7621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.112216][ T7621] R13: 00007f2bbc6b6128 R14: 00007f2bbc6b6090 R15: 00007fff4109ada8 [ 277.112249][ T7621] [ 277.260654][ T7627] netlink: 92 bytes leftover after parsing attributes in process `syz.1.502'. [ 277.260714][ T7627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.502'. [ 277.505530][ T7394] hsr_slave_0: entered promiscuous mode [ 277.521321][ T7394] hsr_slave_1: entered promiscuous mode [ 277.919120][ T5928] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 278.079794][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 279.149673][ T5928] usb 2-1: config 0 has an invalid interface number: 222 but max is 0 [ 279.149695][ T5928] usb 2-1: config 0 has no interface number 0 [ 279.153428][ T5928] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0010, bcdDevice=61.2f [ 279.153448][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.153459][ T5928] usb 2-1: Product: syz [ 279.153473][ T5928] usb 2-1: Manufacturer: syz [ 279.153481][ T5928] usb 2-1: SerialNumber: syz [ 279.222691][ T5928] usb 2-1: config 0 descriptor?? [ 279.289472][ T5928] esd_usb 2-1:0.222: sending version message failed [ 279.289526][ T5928] esd_usb 2-1:0.222: probe with driver esd_usb failed with error -22 [ 279.695636][ T10] usb 2-1: USB disconnect, device number 10 [ 280.914936][ T7670] netlink: 92 bytes leftover after parsing attributes in process `syz.0.513'. [ 280.914991][ T7670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.513'. [ 285.184102][ T7711] [U]  [ 285.184164][ T7711] [U] K{‘ [ 285.184652][ T7711] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖÆ¯¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 285.187108][ T7711] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 285.198299][ T7711] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 285.210133][ T7711] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)޹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 285.232104][ T7711] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-ɿ߿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 285.253575][ T7711] [U] ܾ˜4B`Ë—HÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 285.254535][ T7711] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 285.256627][ T7711] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`Ʀ\ [ 285.306436][ T7711] [U] M¢XÎÂ"Ä{;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆÈ½ [ 285.323582][ T7711] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 285.329988][ T7711] [U] 22½“Æ©ÐÛ©X?0;3U± [ 285.350874][ T7711] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 285.351638][ T7711] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 285.354665][ T7711] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 285.355061][ T7711] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 285.364215][ T7711] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 285.366755][ T7711] [U] ¹ EC [ 285.376216][ T7711] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙ߯Ë,ÎLÂ,Õ [ 285.403378][ T7710] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 285.687214][ T7394] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 285.762370][ T7394] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 285.907947][ T7394] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 286.076744][ T7394] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 287.577278][ T7751] loop6: detected capacity change from 0 to 524287999 [ 287.635694][ T7394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.751221][ T7394] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.807315][ T7751] Dev loop6: unable to read RDB block 8 [ 287.807492][ T7751] loop6: unable to read partition table [ 287.809195][ T7751] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 287.820572][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.820774][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.861173][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.861315][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.306934][ T7394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.802135][ T7394] veth0_vlan: entered promiscuous mode [ 289.831381][ T7394] veth1_vlan: entered promiscuous mode [ 289.910396][ T7394] veth0_macvtap: entered promiscuous mode [ 289.942576][ T7394] veth1_macvtap: entered promiscuous mode [ 290.470041][ T7394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.540580][ T7394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.585991][ T68] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.586042][ T68] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.586076][ T68] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.586109][ T68] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.744709][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.744731][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.867937][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.867960][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.123188][ T7823] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.549'. [ 294.123314][ T7823] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.549'. [ 294.459191][ T7829] vlan2: entered allmulticast mode [ 294.459215][ T7829] veth0_to_bond: entered allmulticast mode [ 294.937827][ T37] audit: type=1326 audit(1766052310.966:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7835 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 294.962256][ T37] audit: type=1326 audit(1766052310.966:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7835 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 294.962301][ T37] audit: type=1326 audit(1766052310.966:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7835 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 294.962340][ T37] audit: type=1326 audit(1766052310.966:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7835 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 294.962378][ T37] audit: type=1326 audit(1766052310.966:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7835 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 294.962418][ T37] audit: type=1326 audit(1766052310.966:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7835 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 294.962457][ T37] audit: type=1326 audit(1766052310.966:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7835 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 294.962496][ T37] audit: type=1326 audit(1766052310.966:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7835 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 294.962533][ T37] audit: type=1326 audit(1766052310.966:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7835 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 294.962602][ T37] audit: type=1326 audit(1766052310.976:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7835 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 299.387884][ T7875] FAULT_INJECTION: forcing a failure. [ 299.387884][ T7875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.387921][ T7875] CPU: 1 UID: 0 PID: 7875 Comm: syz.0.561 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 299.387938][ T7875] Tainted: [L]=SOFTLOCKUP [ 299.387941][ T7875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 299.387949][ T7875] Call Trace: [ 299.387954][ T7875] [ 299.387960][ T7875] dump_stack_lvl+0x189/0x250 [ 299.387977][ T7875] ? __pfx____ratelimit+0x10/0x10 [ 299.387993][ T7875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.388006][ T7875] ? __pfx__printk+0x10/0x10 [ 299.388025][ T7875] should_fail_ex+0x46c/0x600 [ 299.388042][ T7875] _copy_to_user+0x31/0xb0 [ 299.388054][ T7875] simple_read_from_buffer+0xe1/0x170 [ 299.388068][ T7875] proc_fail_nth_read+0x1b6/0x220 [ 299.388085][ T7875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.388101][ T7875] ? rw_verify_area+0x2ac/0x4e0 [ 299.388115][ T7875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.388130][ T7875] vfs_read+0x206/0xa30 [ 299.388148][ T7875] ? __pfx_vfs_read+0x10/0x10 [ 299.388160][ T7875] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 299.388178][ T7875] ? mutex_lock_nested+0x154/0x1d0 [ 299.388190][ T7875] ? fdget_pos+0x253/0x320 [ 299.388207][ T7875] ksys_read+0x14b/0x260 [ 299.388221][ T7875] ? __pfx_ksys_read+0x10/0x10 [ 299.388237][ T7875] ? do_syscall_64+0xbe/0xf80 [ 299.388250][ T7875] do_syscall_64+0xfa/0xf80 [ 299.388261][ T7875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.388271][ T7875] ? clear_bhb_loop+0x60/0xb0 [ 299.388284][ T7875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.388294][ T7875] RIP: 0033:0x7f331d38e15c [ 299.388304][ T7875] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 299.388313][ T7875] RSP: 002b:00007f331b5ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 299.388325][ T7875] RAX: ffffffffffffffda RBX: 00007f331d5e5fa0 RCX: 00007f331d38e15c [ 299.388333][ T7875] RDX: 000000000000000f RSI: 00007f331b5ee0a0 RDI: 0000000000000005 [ 299.388339][ T7875] RBP: 00007f331b5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 299.388346][ T7875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.388352][ T7875] R13: 00007f331d5e6038 R14: 00007f331d5e5fa0 R15: 00007fffc6614a68 [ 299.388369][ T7875] [ 300.267097][ T7884] random: crng reseeded on system resumption [ 301.180706][ T7894] netlink: 'syz.0.569': attribute type 1 has an invalid length. [ 301.239456][ T7896] FAULT_INJECTION: forcing a failure. [ 301.239456][ T7896] name failslab, interval 1, probability 0, space 0, times 0 [ 301.239492][ T7896] CPU: 0 UID: 0 PID: 7896 Comm: syz.0.569 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 301.239517][ T7896] Tainted: [L]=SOFTLOCKUP [ 301.239523][ T7896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.239534][ T7896] Call Trace: [ 301.239542][ T7896] [ 301.239550][ T7896] dump_stack_lvl+0x189/0x250 [ 301.239580][ T7896] ? __pfx____ratelimit+0x10/0x10 [ 301.239608][ T7896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.239632][ T7896] ? __pfx__printk+0x10/0x10 [ 301.239658][ T7896] ? __pfx___might_resched+0x10/0x10 [ 301.239684][ T7896] should_fail_ex+0x46c/0x600 [ 301.239733][ T7896] should_failslab+0xa8/0x100 [ 301.239753][ T7896] __kmalloc_cache_noprof+0x84/0x6d0 [ 301.239780][ T7896] ? rtnl_newlink+0xfb/0x1c90 [ 301.239805][ T7896] rtnl_newlink+0xfb/0x1c90 [ 301.239823][ T7896] ? kasan_save_track+0x3e/0x80 [ 301.239847][ T7896] ? kasan_save_free_info+0x46/0x50 [ 301.239867][ T7896] ? __kasan_slab_free+0x5c/0x80 [ 301.239891][ T7896] ? kmem_cache_free+0x18f/0x8d0 [ 301.239913][ T7896] ? nlmon_xmit+0xb0/0x100 [ 301.239936][ T7896] ? dev_hard_start_xmit+0x2e0/0x840 [ 301.239958][ T7896] ? __dev_queue_xmit+0x14b4/0x31d0 [ 301.239982][ T7896] ? __netlink_deliver_tap+0x5ad/0x850 [ 301.240005][ T7896] ? netlink_deliver_tap+0x19c/0x1b0 [ 301.240027][ T7896] ? netlink_unicast+0x811/0xa10 [ 301.240046][ T7896] ? netlink_sendmsg+0x805/0xb30 [ 301.240069][ T7896] ? __sock_sendmsg+0x21c/0x270 [ 301.240093][ T7896] ? ____sys_sendmsg+0x508/0x810 [ 301.240113][ T7896] ? ___sys_sendmsg+0x21f/0x2a0 [ 301.240133][ T7896] ? __x64_sys_sendmsg+0x1a1/0x260 [ 301.240156][ T7896] ? __pfx_rtnl_newlink+0x10/0x10 [ 301.240180][ T7896] ? __lock_acquire+0x6b6/0x2cf0 [ 301.240221][ T7896] ? __local_bh_enable+0x27b/0x410 [ 301.240248][ T7896] ? __local_bh_enable+0x28c/0x410 [ 301.240268][ T7896] ? reacquire_held_locks+0x121/0x1c0 [ 301.240297][ T7896] ? __pfx___local_bh_enable+0x10/0x10 [ 301.240327][ T7896] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 301.240349][ T7896] ? lockdep_hardirqs_on+0x98/0x140 [ 301.240379][ T7896] ? __lock_acquire+0x6b6/0x2cf0 [ 301.240410][ T7896] ? __dev_queue_xmit+0x259/0x31d0 [ 301.240454][ T7896] ? __dev_queue_xmit+0x259/0x31d0 [ 301.240479][ T7896] ? __dev_queue_xmit+0x1936/0x31d0 [ 301.240502][ T7896] ? netlink_unicast+0x811/0xa10 [ 301.240521][ T7896] ? netlink_sendmsg+0x805/0xb30 [ 301.240572][ T7896] ? __pfx_rtnl_newlink+0x10/0x10 [ 301.240592][ T7896] rtnetlink_rcv_msg+0x7cf/0xb70 [ 301.240618][ T7896] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 301.240642][ T7896] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 301.240659][ T7896] ? ref_tracker_free+0x61e/0x7c0 [ 301.240682][ T7896] ? __asan_memcpy+0x40/0x70 [ 301.240710][ T7896] ? __pfx_ref_tracker_free+0x10/0x10 [ 301.240733][ T7896] ? __skb_clone+0x63/0x7a0 [ 301.240766][ T7896] netlink_rcv_skb+0x208/0x470 [ 301.240789][ T7896] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 301.240812][ T7896] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 301.240844][ T7896] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.240876][ T7896] netlink_unicast+0x846/0xa10 [ 301.240905][ T7896] ? __pfx_netlink_unicast+0x10/0x10 [ 301.240928][ T7896] ? netlink_sendmsg+0x642/0xb30 [ 301.240948][ T7896] ? skb_put+0x11b/0x210 [ 301.240971][ T7896] netlink_sendmsg+0x805/0xb30 [ 301.241002][ T7896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.241033][ T7896] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 301.241056][ T7896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.241079][ T7896] __sock_sendmsg+0x21c/0x270 [ 301.241107][ T7896] ____sys_sendmsg+0x508/0x810 [ 301.241133][ T7896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.241164][ T7896] ? import_iovec+0x74/0xa0 [ 301.241186][ T7896] ___sys_sendmsg+0x21f/0x2a0 [ 301.241213][ T7896] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.241271][ T7896] ? __fget_files+0x2a/0x420 [ 301.241290][ T7896] ? __fget_files+0x3a6/0x420 [ 301.241320][ T7896] __x64_sys_sendmsg+0x1a1/0x260 [ 301.241346][ T7896] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 301.241378][ T7896] ? __pfx_ksys_write+0x10/0x10 [ 301.241407][ T7896] ? do_syscall_64+0xbe/0xf80 [ 301.241431][ T7896] do_syscall_64+0xfa/0xf80 [ 301.241448][ T7896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.241466][ T7896] ? clear_bhb_loop+0x60/0xb0 [ 301.241490][ T7896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.241509][ T7896] RIP: 0033:0x7f331d38f749 [ 301.241526][ T7896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.241542][ T7896] RSP: 002b:00007f331b5cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.241563][ T7896] RAX: ffffffffffffffda RBX: 00007f331d5e6090 RCX: 00007f331d38f749 [ 301.241578][ T7896] RDX: 0000000020048040 RSI: 0000200000000280 RDI: 0000000000000003 [ 301.241591][ T7896] RBP: 00007f331b5cd090 R08: 0000000000000000 R09: 0000000000000000 [ 301.241604][ T7896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.241614][ T7896] R13: 00007f331d5e6128 R14: 00007f331d5e6090 R15: 00007fffc6614a68 [ 301.241647][ T7896] [ 302.711976][ T7894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.831017][ T5874] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 305.026522][ T5874] usb 5-1: too many endpoints for config 0 interface 0 altsetting 1: 65, using maximum allowed: 30 [ 305.026572][ T5874] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.026600][ T5874] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 305.026627][ T5874] usb 5-1: config 0 interface 0 has no altsetting 0 [ 305.026661][ T5874] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 305.026685][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.053139][ T5874] usb 5-1: config 0 descriptor?? [ 305.182107][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.577'. [ 306.514487][ T5874] hid-multitouch 0003:1FD2:6007.0003: unbalanced delimiter at end of report description [ 306.515410][ T5874] hid-multitouch 0003:1FD2:6007.0003: probe with driver hid-multitouch failed with error -22 [ 306.563463][ T5874] usb 5-1: USB disconnect, device number 29 [ 308.507930][ T5874] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 308.920293][ T5874] usb 3-1: device descriptor read/64, error -71 [ 309.302350][ T7955] netlink: 43 bytes leftover after parsing attributes in process `syz.1.584'. [ 309.329461][ T5874] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 309.457970][ T5874] usb 3-1: device descriptor read/64, error -71 [ 309.568351][ T5874] usb usb3-port1: attempt power cycle [ 309.612755][ T9] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 309.612796][ T9] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 309.612823][ T9] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 309.612850][ T9] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 309.612876][ T9] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 309.612903][ T9] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 309.612961][ T9] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 309.612989][ T9] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 309.613016][ T9] hid-generic 0003:0004:0000.0004: item fetching failed at offset 15/17 [ 309.616138][ T9] hid-generic 0003:0004:0000.0004: probe with driver hid-generic failed with error -22 [ 310.443131][ T5874] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 310.460580][ T5874] usb 3-1: device descriptor read/8, error -71 [ 310.601430][ T7973] Device name not specified. [ 310.601430][ T7973] [ 310.698157][ T5874] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 310.719098][ T5874] usb 3-1: device descriptor read/8, error -71 [ 311.016430][ T5874] usb usb3-port1: unable to enumerate USB device [ 312.405607][ T9] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 312.547907][ T9] usb 5-1: device descriptor read/64, error -71 [ 312.959347][ T9] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 313.640561][ T7995] FAULT_INJECTION: forcing a failure. [ 313.640561][ T7995] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 313.640599][ T7995] CPU: 1 UID: 0 PID: 7995 Comm: syz.1.597 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 313.640627][ T7995] Tainted: [L]=SOFTLOCKUP [ 313.640634][ T7995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 313.640645][ T7995] Call Trace: [ 313.640653][ T7995] [ 313.640661][ T7995] dump_stack_lvl+0x189/0x250 [ 313.640690][ T7995] ? __pfx____ratelimit+0x10/0x10 [ 313.640718][ T7995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.640742][ T7995] ? __pfx__printk+0x10/0x10 [ 313.640764][ T7995] ? fs_reclaim_acquire+0x7d/0x100 [ 313.640791][ T7995] should_fail_ex+0x46c/0x600 [ 313.640821][ T7995] prepare_alloc_pages+0x22b/0x6c0 [ 313.640848][ T7995] __alloc_frozen_pages_noprof+0x123/0x370 [ 313.640867][ T7995] ? trace_kmalloc+0x1f/0xb0 [ 313.640895][ T7995] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 313.640923][ T7995] ? policy_nodemask+0x27c/0x720 [ 313.640942][ T7995] ? __alloc_skb+0x2f1/0x430 [ 313.640966][ T7995] alloc_pages_mpol+0xd1/0x380 [ 313.640989][ T7995] alloc_pages_noprof+0xcf/0x1e0 [ 313.641011][ T7995] alloc_skb_with_frags+0x233/0x890 [ 313.641049][ T7995] sock_alloc_send_pskb+0x859/0x990 [ 313.641094][ T7995] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 313.641126][ T7995] ? __lock_acquire+0x6b6/0x2cf0 [ 313.641162][ T7995] tun_get_user+0xa4e/0x3de0 [ 313.641208][ T7995] ? __pfx_tun_get_user+0x10/0x10 [ 313.641239][ T7995] ? __lock_acquire+0x6b6/0x2cf0 [ 313.641266][ T7995] ? kstrtoull+0x12f/0x1d0 [ 313.641298][ T7995] ? ref_tracker_alloc+0x2fe/0x450 [ 313.641325][ T7995] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 313.641356][ T7995] ? tun_get+0x1c/0x2f0 [ 313.641384][ T7995] ? tun_get+0x1c/0x2f0 [ 313.641406][ T7995] ? tun_get+0x1c/0x2f0 [ 313.641433][ T7995] tun_chr_write_iter+0x119/0x200 [ 313.641459][ T7995] vfs_write+0x5d5/0xb40 [ 313.641488][ T7995] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 313.641512][ T7995] ? __pfx_vfs_write+0x10/0x10 [ 313.641544][ T7995] ? __fget_files+0x2a/0x420 [ 313.641574][ T7995] ksys_write+0x14b/0x260 [ 313.641602][ T7995] ? __pfx_ksys_write+0x10/0x10 [ 313.641631][ T7995] ? do_syscall_64+0xbe/0xf80 [ 313.641654][ T7995] do_syscall_64+0xfa/0xf80 [ 313.641673][ T7995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.641692][ T7995] ? clear_bhb_loop+0x60/0xb0 [ 313.641716][ T7995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.641734][ T7995] RIP: 0033:0x7fe903dfe1ff [ 313.641751][ T7995] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 313.641768][ T7995] RSP: 002b:00007fe902045000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 313.641788][ T7995] RAX: ffffffffffffffda RBX: 00007fe904056090 RCX: 00007fe903dfe1ff [ 313.641802][ T7995] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 313.641815][ T7995] RBP: 00007fe902045090 R08: 0000000000000000 R09: 0000000000000000 [ 313.641827][ T7995] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000001 [ 313.641838][ T7995] R13: 00007fe904056128 R14: 00007fe904056090 R15: 00007fff4ef926a8 [ 313.641871][ T7995] [ 313.869595][ T9] usb 5-1: device descriptor read/64, error -71 [ 313.978212][ T9] usb usb5-port1: attempt power cycle [ 314.078469][ T7998] netlink: 32 bytes leftover after parsing attributes in process `syz.5.598'. [ 314.326985][ T9] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 314.382234][ T8004] FAULT_INJECTION: forcing a failure. [ 314.382234][ T8004] name failslab, interval 1, probability 0, space 0, times 0 [ 314.382270][ T8004] CPU: 1 UID: 0 PID: 8004 Comm: syz.5.601 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 314.382296][ T8004] Tainted: [L]=SOFTLOCKUP [ 314.382303][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.382314][ T8004] Call Trace: [ 314.382321][ T8004] [ 314.382329][ T8004] dump_stack_lvl+0x189/0x250 [ 314.382357][ T8004] ? __pfx____ratelimit+0x10/0x10 [ 314.382395][ T8004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.382420][ T8004] ? __pfx__printk+0x10/0x10 [ 314.382443][ T8004] ? __pfx___might_resched+0x10/0x10 [ 314.382467][ T8004] should_fail_ex+0x46c/0x600 [ 314.382498][ T8004] should_failslab+0xa8/0x100 [ 314.382519][ T8004] __kmalloc_noprof+0xe0/0x7e0 [ 314.382546][ T8004] ? bpf_ctx_init+0xbd/0x1d0 [ 314.382567][ T8004] ? __lock_acquire+0x6b6/0x2cf0 [ 314.382594][ T8004] bpf_ctx_init+0xbd/0x1d0 [ 314.382621][ T8004] bpf_prog_test_run_sk_lookup+0x29c/0xb70 [ 314.382663][ T8004] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 314.382692][ T8004] ? __fget_files+0x3a6/0x420 [ 314.382712][ T8004] ? __fget_files+0x2a/0x420 [ 314.382736][ T8004] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 314.382762][ T8004] bpf_prog_test_run+0x2cd/0x340 [ 314.382788][ T8004] __sys_bpf+0x562/0x860 [ 314.382811][ T8004] ? __pfx___sys_bpf+0x10/0x10 [ 314.382830][ T8004] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 314.382870][ T8004] ? ksys_write+0x230/0x260 [ 314.382898][ T8004] ? __pfx_ksys_write+0x10/0x10 [ 314.382929][ T8004] __x64_sys_bpf+0x7c/0x90 [ 314.382950][ T8004] do_syscall_64+0xfa/0xf80 [ 314.382970][ T8004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.382989][ T8004] ? clear_bhb_loop+0x60/0xb0 [ 314.383011][ T8004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.383029][ T8004] RIP: 0033:0x7fbdfb71f749 [ 314.383046][ T8004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.383063][ T8004] RSP: 002b:00007fbdf997e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 314.383083][ T8004] RAX: ffffffffffffffda RBX: 00007fbdfb975fa0 RCX: 00007fbdfb71f749 [ 314.383097][ T8004] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 314.383110][ T8004] RBP: 00007fbdf997e090 R08: 0000000000000000 R09: 0000000000000000 [ 314.383122][ T8004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.383132][ T8004] R13: 00007fbdfb976038 R14: 00007fbdfb975fa0 R15: 00007ffcbe02aa58 [ 314.383159][ T8004] [ 314.621388][ T9] usb 5-1: device descriptor read/8, error -71 [ 317.983093][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 318.000198][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.000268][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.328099][ T10] usb 6-1: device not accepting address 2, error -71 [ 319.907873][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 320.284738][ T8046] netlink: 277 bytes leftover after parsing attributes in process `syz.1.612'. [ 320.292342][ T8046] FAULT_INJECTION: forcing a failure. [ 320.292342][ T8046] name failslab, interval 1, probability 0, space 0, times 0 [ 320.292406][ T8046] CPU: 1 UID: 0 PID: 8046 Comm: syz.1.612 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 320.292434][ T8046] Tainted: [L]=SOFTLOCKUP [ 320.292441][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 320.292452][ T8046] Call Trace: [ 320.292460][ T8046] [ 320.292469][ T8046] dump_stack_lvl+0x189/0x250 [ 320.292499][ T8046] ? __pfx____ratelimit+0x10/0x10 [ 320.292528][ T8046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.292560][ T8046] ? __pfx__printk+0x10/0x10 [ 320.292588][ T8046] ? __local_bh_enable_ip+0x1f4/0x2e0 [ 320.292614][ T8046] should_fail_ex+0x46c/0x600 [ 320.292643][ T8046] ? __alloc_skb+0x255/0x430 [ 320.292663][ T8046] should_failslab+0xa8/0x100 [ 320.292684][ T8046] ? __alloc_skb+0x255/0x430 [ 320.292702][ T8046] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 320.292737][ T8046] __alloc_skb+0x255/0x430 [ 320.292762][ T8046] ? __pfx___alloc_skb+0x10/0x10 [ 320.292786][ T8046] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 320.292817][ T8046] xfrm_send_policy_notify+0x29d/0x1bb0 [ 320.292842][ T8046] ? rt_spin_unlock+0x161/0x200 [ 320.292866][ T8046] ? xfrm_policy_bysel_ctx+0xbe/0x990 [ 320.292889][ T8046] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 320.292915][ T8046] ? km_policy_notify+0x28/0x200 [ 320.292945][ T8046] ? __nla_validate_parse+0x251c/0x2d40 [ 320.292976][ T8046] ? km_policy_notify+0x28/0x200 [ 320.292997][ T8046] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 320.293019][ T8046] km_policy_notify+0x121/0x200 [ 320.293039][ T8046] ? km_policy_notify+0x28/0x200 [ 320.293070][ T8046] xfrm_get_policy+0x805/0xc50 [ 320.293101][ T8046] ? rcu_is_watching+0x15/0xb0 [ 320.293126][ T8046] ? __pfx_xfrm_get_policy+0x10/0x10 [ 320.293155][ T8046] ? __nla_parse+0x24/0x60 [ 320.293187][ T8046] ? __nla_parse+0x40/0x60 [ 320.293218][ T8046] xfrm_user_rcv_msg+0x7a3/0xab0 [ 320.293247][ T8046] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 320.293316][ T8046] ? rcu_is_watching+0x15/0xb0 [ 320.293335][ T8046] ? trace_irq_disable+0x37/0x100 [ 320.293356][ T8046] ? preempt_schedule_irq+0xde/0x150 [ 320.293392][ T8046] netlink_rcv_skb+0x208/0x470 [ 320.293418][ T8046] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 320.293442][ T8046] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.293489][ T8046] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 320.293516][ T8046] xfrm_netlink_rcv+0x79/0x90 [ 320.293544][ T8046] netlink_unicast+0x846/0xa10 [ 320.293575][ T8046] ? __pfx_netlink_unicast+0x10/0x10 [ 320.293597][ T8046] ? smack_socket_getpeersec_dgram+0x266/0x430 [ 320.293627][ T8046] ? netlink_sendmsg+0x642/0xb30 [ 320.293649][ T8046] ? skb_put+0x11b/0x210 [ 320.293674][ T8046] netlink_sendmsg+0x805/0xb30 [ 320.293709][ T8046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.293744][ T8046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.293776][ T8046] __sock_sendmsg+0x21c/0x270 [ 320.293818][ T8046] ____sys_sendmsg+0x508/0x810 [ 320.293848][ T8046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.293882][ T8046] ? import_iovec+0x74/0xa0 [ 320.293905][ T8046] ___sys_sendmsg+0x21f/0x2a0 [ 320.293931][ T8046] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.293994][ T8046] ? __fget_files+0x2a/0x420 [ 320.294013][ T8046] ? __fget_files+0x3a6/0x420 [ 320.294045][ T8046] __x64_sys_sendmsg+0x1a1/0x260 [ 320.294071][ T8046] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.294092][ T8046] ? irqentry_exit+0x5dd/0x660 [ 320.294136][ T8046] do_syscall_64+0xfa/0xf80 [ 320.294161][ T8046] ? rcu_is_watching+0x15/0xb0 [ 320.294178][ T8046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.294197][ T8046] ? clear_bhb_loop+0x60/0xb0 [ 320.294220][ T8046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.294239][ T8046] RIP: 0033:0x7fe903dff749 [ 320.294257][ T8046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.294274][ T8046] RSP: 002b:00007fe902024038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.294294][ T8046] RAX: ffffffffffffffda RBX: 00007fe904056180 RCX: 00007fe903dff749 [ 320.294308][ T8046] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 320.294320][ T8046] RBP: 00007fe902024090 R08: 0000000000000000 R09: 0000000000000000 [ 320.294332][ T8046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.294344][ T8046] R13: 00007fe904056218 R14: 00007fe904056180 R15: 00007fff4ef926a8 [ 320.294377][ T8046] [ 321.297919][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 321.499526][ T10] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 321.499555][ T10] usb 6-1: config 4 has no interface number 0 [ 321.500034][ T10] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.500065][ T10] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.500105][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 321.500128][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.662613][ T5972] kernel read not supported for file /384/coredump_filter (pid: 5972 comm: kworker/1:10) [ 321.787915][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 321.794140][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 321.837370][ T10] hub 6-1:4.128: USB hub found [ 321.922071][ T31] usb 1-1: device descriptor read/64, error -32 [ 322.348619][ T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 322.880305][ T31] usb 1-1: config 0 has an invalid descriptor of length 8, skipping remainder of the config [ 322.880351][ T31] usb 1-1: too many endpoints for config 0 interface 0 altsetting 4: 128, using maximum allowed: 30 [ 322.880433][ T31] usb 1-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 322.880463][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 322.880496][ T31] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 322.880520][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.886070][ T31] usb 1-1: config 0 descriptor?? [ 323.908791][ T10] hub 6-1:4.128: 6 ports detected [ 323.908853][ T10] hub 6-1:4.128: Using single TT (err -22) [ 323.910539][ T10] hub 6-1:4.128: insufficient power available to use all downstream ports [ 324.176309][ T31] usb 1-1: string descriptor 0 read error: -71 [ 324.211303][ T31] usb 1-1: selecting invalid altsetting 0 [ 324.245128][ T31] usb 1-1: USB disconnect, device number 21 [ 324.344903][ T7614] udevd[7614]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.438009][ T10] hub 6-1:4.128: hub_hub_status failed (err = -71) [ 324.438030][ T10] hub 6-1:4.128: config failed, can't get hub status (err -71) [ 324.490696][ T10] usb 6-1: USB disconnect, device number 3 [ 324.635274][ T8078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.623'. [ 324.635549][ T8078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.623'. [ 324.680080][ T8079] ubi: mtd0 is already attached to ubi31 [ 324.680247][ T8078] ubi: mtd0 is already attached to ubi31 [ 324.878210][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 325.060849][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 325.060884][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.060906][ T10] usb 6-1: Product: syz [ 325.060921][ T10] usb 6-1: Manufacturer: syz [ 325.060936][ T10] usb 6-1: SerialNumber: syz [ 325.879132][ T10] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 325.915096][ T5881] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 329.149448][ T5881] usb 6-1: Service connection timeout for: 259 [ 329.149513][ T5881] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 329.190362][ T5874] usb 6-1: USB disconnect, device number 4 [ 329.464449][ T5881] ath9k_htc: Failed to initialize the device [ 329.518816][ T5874] usb 6-1: ath9k_htc: USB layer deinitialized [ 330.094006][ T8128] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 331.301917][ T8143] binder: 8137:8143 ioctl c0306201 200000000080 returned -14 [ 331.304647][ T8143] binder: 8137:8143 ioctl c0306201 2000000003c0 returned -14 [ 331.305329][ T8143] binder: 8137:8143 ioctl c0306201 200000000c00 returned -14 [ 333.865211][ T8171] FAULT_INJECTION: forcing a failure. [ 333.865211][ T8171] name failslab, interval 1, probability 0, space 0, times 0 [ 333.865247][ T8171] CPU: 0 UID: 0 PID: 8171 Comm: syz.2.647 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 333.865273][ T8171] Tainted: [L]=SOFTLOCKUP [ 333.865279][ T8171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.865291][ T8171] Call Trace: [ 333.865298][ T8171] [ 333.865306][ T8171] dump_stack_lvl+0x189/0x250 [ 333.865333][ T8171] ? __pfx____ratelimit+0x10/0x10 [ 333.865360][ T8171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.865382][ T8171] ? __pfx__printk+0x10/0x10 [ 333.865406][ T8171] ? __pfx___might_resched+0x10/0x10 [ 333.865430][ T8171] should_fail_ex+0x46c/0x600 [ 333.865468][ T8171] should_failslab+0xa8/0x100 [ 333.865489][ T8171] __kmalloc_noprof+0xe0/0x7e0 [ 333.865514][ T8171] ? kfree+0x4d/0x900 [ 333.865532][ T8171] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 333.865558][ T8171] tomoyo_realpath_from_path+0xe3/0x5d0 [ 333.865590][ T8171] tomoyo_check_open_permission+0x1c1/0x3b0 [ 333.865614][ T8171] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 333.865638][ T8171] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 333.865693][ T8171] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 333.865723][ T8171] ? tomoyo_file_open+0x168/0x220 [ 333.865748][ T8171] security_file_open+0xb1/0x270 [ 333.865774][ T8171] do_dentry_open+0x35c/0x1270 [ 333.865808][ T8171] vfs_open+0x3b/0x350 [ 333.865825][ T8171] ? path_openat+0x340f/0x3df0 [ 333.865852][ T8171] path_openat+0x342a/0x3df0 [ 333.865899][ T8171] ? __pfx_stack_trace_save+0x10/0x10 [ 333.865932][ T8171] ? __pfx_path_openat+0x10/0x10 [ 333.865957][ T8171] ? do_raw_spin_lock+0x121/0x290 [ 333.865988][ T8171] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 333.866008][ T8171] ? lockdep_hardirqs_on+0x98/0x140 [ 333.866027][ T8171] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 333.866053][ T8171] do_filp_open+0x1fa/0x410 [ 333.866080][ T8171] ? __pfx_do_filp_open+0x10/0x10 [ 333.866101][ T8171] ? rt_mutex_slowunlock+0x493/0x8a0 [ 333.866150][ T8171] ? alloc_fd+0x64f/0x6c0 [ 333.866181][ T8171] do_sys_openat2+0x121/0x200 [ 333.866204][ T8171] ? __pfx_do_sys_openat2+0x10/0x10 [ 333.866227][ T8171] ? exc_page_fault+0x82/0x100 [ 333.866254][ T8171] __x64_sys_openat+0x138/0x170 [ 333.866280][ T8171] do_syscall_64+0xfa/0xf80 [ 333.866300][ T8171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.866319][ T8171] ? clear_bhb_loop+0x60/0xb0 [ 333.866342][ T8171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.866359][ T8171] RIP: 0033:0x7f2bbc45df90 [ 333.866377][ T8171] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 333.866393][ T8171] RSP: 002b:00007f2bba6c3ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 333.866413][ T8171] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f2bbc45df90 [ 333.866427][ T8171] RDX: 0000000000000002 RSI: 00007f2bbc4e3c6c RDI: 00000000ffffff9c [ 333.866439][ T8171] RBP: 00007f2bbc4e3c6c R08: 0000000000000000 R09: 0000000000000000 [ 333.866451][ T8171] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 333.866469][ T8171] R13: 000000000000003f R14: 00002000000003c0 R15: 00007fff4109ada8 [ 333.866509][ T8171] [ 333.866516][ T8171] ERROR: Out of memory at tomoyo_realpath_from_path. [ 333.971545][ T8173] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.982291][ T8173] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.989647][ T8173] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.990065][ T8173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.990420][ T8173] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.990593][ T8173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.003170][ T8173] team0: Port device bridge0 added [ 334.403763][ T8184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.652'. [ 334.498481][ T5940] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 334.649933][ T5940] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64 [ 334.649959][ T5940] usb 3-1: config 1 interface 0 has no altsetting 0 [ 334.658803][ T5940] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 334.658835][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.658853][ T5940] usb 3-1: Product: syz [ 334.658868][ T5940] usb 3-1: Manufacturer: syz [ 334.658882][ T5940] usb 3-1: SerialNumber: syz [ 334.665685][ T8171] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 334.949264][ T5940] rtl8150 3-1:1.0: couldn't reset the device [ 334.949656][ T5940] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 334.976837][ T5940] usb 3-1: USB disconnect, device number 27 [ 336.008247][ T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 337.144858][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.144926][ T31] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 337.144951][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.185879][ T31] usb 6-1: config 0 descriptor?? [ 337.195383][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 338.752351][ T8216] syz.0.660 (8216): drop_caches: 2 [ 339.748755][ T31] pwc: send_video_command error -71 [ 339.748780][ T31] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 339.748854][ T31] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 339.831814][ T31] usb 6-1: USB disconnect, device number 5 [ 340.426723][ T37] kauditd_printk_skb: 125 callbacks suppressed [ 340.426741][ T37] audit: type=1326 audit(1766052356.456:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 340.426899][ T37] audit: type=1326 audit(1766052356.456:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 340.427237][ T37] audit: type=1326 audit(1766052356.456:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 340.427390][ T37] audit: type=1326 audit(1766052356.456:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 340.427665][ T37] audit: type=1326 audit(1766052356.456:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 340.428351][ T37] audit: type=1326 audit(1766052356.466:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 340.428716][ T37] audit: type=1326 audit(1766052356.466:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 340.429161][ T37] audit: type=1326 audit(1766052356.466:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 340.429540][ T37] audit: type=1326 audit(1766052356.466:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 340.430042][ T37] audit: type=1326 audit(1766052356.466:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 342.387267][ T8249] overlayfs: regular lower layers cannot follow data lower layers [ 344.432904][ T8261] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 344.747896][ T5947] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 344.802763][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.679'. [ 344.909978][ T5947] usb 6-1: config 0 has an invalid descriptor of length 8, skipping remainder of the config [ 344.910055][ T5947] usb 6-1: too many endpoints for config 0 interface 0 altsetting 4: 128, using maximum allowed: 30 [ 344.910107][ T5947] usb 6-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 344.910123][ T5947] usb 6-1: config 0 interface 0 has no altsetting 0 [ 344.910143][ T5947] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 344.910155][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.922657][ T5947] usb 6-1: config 0 descriptor?? [ 345.171516][ T5947] usb 6-1: string descriptor 0 read error: -71 [ 345.183889][ T5947] usb 6-1: selecting invalid altsetting 0 [ 345.292024][ T5947] usb 6-1: USB disconnect, device number 6 [ 345.672506][ T5972] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 346.478475][ T5972] usb 2-1: Using ep0 maxpacket: 16 [ 346.533047][ T5972] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 346.533082][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 346.549355][ T5972] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 346.549386][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.549406][ T5972] usb 2-1: Product: syz [ 346.549420][ T5972] usb 2-1: Manufacturer: syz [ 346.549434][ T5972] usb 2-1: SerialNumber: syz [ 346.600692][ T5972] usb 2-1: config 0 descriptor?? [ 346.622022][ T5972] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 346.622058][ T5972] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 346.924247][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 346.924264][ T37] audit: type=1326 audit(1766052362.956:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8284 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdfb71f749 code=0x7ffc0000 [ 346.924753][ T37] audit: type=1326 audit(1766052362.956:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8284 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fbdfb71f749 code=0x7ffc0000 [ 346.925041][ T37] audit: type=1326 audit(1766052362.956:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8284 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdfb71f749 code=0x7ffc0000 [ 346.925398][ T37] audit: type=1326 audit(1766052362.956:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8284 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbdfb71f749 code=0x7ffc0000 [ 346.939206][ T37] audit: type=1326 audit(1766052362.976:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8284 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdfb71f749 code=0x7ffc0000 [ 346.940457][ T37] audit: type=1326 audit(1766052362.976:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8284 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdfb71f749 code=0x7ffc0000 [ 347.016656][ T37] audit: type=1326 audit(1766052363.046:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8284 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbdfb71f749 code=0x7ffc0000 [ 347.016933][ T37] audit: type=1326 audit(1766052363.046:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8284 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdfb71f749 code=0x7ffc0000 [ 347.017288][ T37] audit: type=1326 audit(1766052363.046:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8284 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbdfb71f749 code=0x7ffc0000 [ 347.017657][ T37] audit: type=1326 audit(1766052363.046:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8284 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdfb71f749 code=0x7ffc0000 [ 347.258641][ T5972] em28xx 2-1:0.0: unknown em28xx chip ID (224) [ 347.459183][ T5972] em28xx 2-1:0.0: Config register raw data: 0xe0 [ 347.459205][ T5972] em28xx 2-1:0.0: I2S Audio (3 sample rate(s)) [ 347.459220][ T5972] em28xx 2-1:0.0: No AC97 audio processor [ 347.736776][ T5972] usb 2-1: USB disconnect, device number 11 [ 348.007909][ T5874] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 348.141572][ T8301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.683'. [ 348.161454][ T8299] netlink: 'syz.2.689': attribute type 83 has an invalid length. [ 348.182027][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.182062][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.182084][ T5874] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 348.182110][ T5874] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.182123][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.200860][ T5874] usb 6-1: config 0 descriptor?? [ 349.522830][ T5874] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 349.522869][ T5874] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 349.522897][ T5874] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 349.522922][ T5874] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 349.522981][ T5874] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 349.523008][ T5874] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 349.523034][ T5874] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 349.523060][ T5874] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 349.523087][ T5874] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 349.523114][ T5874] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 349.597988][ T5948] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 349.613127][ T5874] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 349.767245][ T5948] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 349.767277][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.767297][ T5948] usb 2-1: Product: syz [ 349.767312][ T5948] usb 2-1: Manufacturer: syz [ 349.767327][ T5948] usb 2-1: SerialNumber: syz [ 349.822856][ T5948] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 349.871306][ T5874] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 350.283632][ T7936] usb 6-1: USB disconnect, device number 7 [ 351.722174][ T5874] usb 2-1: Service connection timeout for: 259 [ 351.722199][ T5874] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 351.800775][ T5874] ath9k_htc: Failed to initialize the device [ 351.824155][ T5874] usb 2-1: ath9k_htc: USB layer deinitialized [ 351.984098][ T5948] usb 2-1: USB disconnect, device number 12 [ 351.994443][ T37] kauditd_printk_skb: 36 callbacks suppressed [ 351.994459][ T37] audit: type=1326 audit(1766052368.016:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8334 comm="syz.5.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdfb71f749 code=0x7ffc0000 [ 351.994760][ T37] audit: type=1326 audit(1766052368.026:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8334 comm="syz.5.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fbdfb71f749 code=0x7ffc0000 [ 351.994936][ T37] audit: type=1326 audit(1766052368.026:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8334 comm="syz.5.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdfb71f749 code=0x7ffc0000 [ 351.995173][ T37] audit: type=1326 audit(1766052368.026:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8334 comm="syz.5.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbdfb71f749 code=0x7ffc0000 [ 351.995488][ T37] audit: type=1326 audit(1766052368.026:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8334 comm="syz.5.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdfb71f749 code=0x7ffc0000 [ 351.995735][ T37] audit: type=1326 audit(1766052368.026:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8334 comm="syz.5.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbdfb71f749 code=0x7ffc0000 [ 351.996106][ T37] audit: type=1326 audit(1766052368.026:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8334 comm="syz.5.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdfb71f749 code=0x7ffc0000 [ 351.996339][ T37] audit: type=1326 audit(1766052368.026:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8334 comm="syz.5.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbdfb71f749 code=0x7ffc0000 [ 351.996751][ T37] audit: type=1326 audit(1766052368.026:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8334 comm="syz.5.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdfb71f749 code=0x7ffc0000 [ 351.996984][ T37] audit: type=1326 audit(1766052368.026:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8334 comm="syz.5.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbdfb71f749 code=0x7ffc0000 [ 352.848666][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.852644][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.658058][ T5940] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 354.807856][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 354.809993][ T5940] usb 5-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.810028][ T5940] usb 5-1: config 1 interface 0 has no altsetting 0 [ 354.812532][ T5940] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40 [ 354.812560][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.812580][ T5940] usb 5-1: Product: syz [ 354.812595][ T5940] usb 5-1: Manufacturer: syz [ 354.812610][ T5940] usb 5-1: SerialNumber: syz [ 355.091124][ T5940] usbhid 5-1:1.0: can't add hid device: -71 [ 355.091253][ T5940] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 355.102695][ T5940] usb 5-1: USB disconnect, device number 34 [ 355.539995][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.543032][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.545184][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.547665][ T5802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.579290][ T5802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 355.759834][ T8342] syz.2.700 (8342) used greatest stack depth: 16440 bytes left [ 355.888034][ T1344] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.217851][ T5874] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 356.326039][ T1344] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.369933][ T5874] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64 [ 356.369967][ T5874] usb 3-1: config 1 interface 0 has no altsetting 0 [ 356.372197][ T5874] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 356.372224][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.372242][ T5874] usb 3-1: Product: syz [ 356.372256][ T5874] usb 3-1: Manufacturer: syz [ 356.372268][ T5874] usb 3-1: SerialNumber: syz [ 356.376057][ T1344] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.086871][ T8373] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.148998][ T1344] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.551771][ T5802] Bluetooth: hci5: command tx timeout [ 360.580431][ T5802] Bluetooth: hci5: command tx timeout [ 361.351654][ T5874] rtl8150 3-1:1.0: couldn't reset the device [ 361.352022][ T5874] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 361.502616][ T5874] usb 3-1: USB disconnect, device number 28 [ 361.829671][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 361.829689][ T37] audit: type=1326 audit(1766052377.866:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8408 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 361.830194][ T37] audit: type=1326 audit(1766052377.866:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8408 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 361.830581][ T37] audit: type=1326 audit(1766052377.866:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8408 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 361.832977][ T37] audit: type=1326 audit(1766052377.866:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8408 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 362.030820][ T8364] chnl_net:caif_netlink_parms(): no params data found [ 362.035174][ T37] audit: type=1326 audit(1766052378.066:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8408 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 362.035562][ T37] audit: type=1326 audit(1766052378.066:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8408 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe903dff749 code=0x7ffc0000 [ 362.263732][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'. [ 362.314271][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'. [ 362.620334][ T5940] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 362.638579][ T5802] Bluetooth: hci5: command tx timeout [ 362.791253][ T5940] usb 5-1: unable to get BOS descriptor or descriptor too short [ 362.794699][ T5940] usb 5-1: not running at top speed; connect to a high speed hub [ 362.795907][ T5940] usb 5-1: config 5 has an invalid interface number: 255 but max is 1 [ 362.795932][ T5940] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 362.795952][ T5940] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 362.795973][ T5940] usb 5-1: config 5 has no interface number 0 [ 362.796004][ T5940] usb 5-1: too many endpoints for config 5 interface 255 altsetting 221: 165, using maximum allowed: 30 [ 362.796049][ T5940] usb 5-1: config 5 interface 255 altsetting 221 has 0 endpoint descriptors, different from the interface descriptor's value: 165 [ 362.796077][ T5940] usb 5-1: config 5 interface 255 has no altsetting 0 [ 362.818652][ T5940] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 362.818684][ T5940] usb 5-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 362.818705][ T5940] usb 5-1: Product: syz [ 362.818719][ T5940] usb 5-1: Manufacturer: syz [ 362.818733][ T5940] usb 5-1: SerialNumber: syz [ 364.717902][ T5802] Bluetooth: hci5: command tx timeout [ 366.103978][ T5940] usbhid 5-1:5.255: couldn't find an input interrupt endpoint [ 366.111974][ T5940] usb 5-1: USB disconnect, device number 35 [ 366.494579][ T8364] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.518844][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.519089][ T8364] bridge_slave_0: entered allmulticast mode [ 367.404797][ T8453] No control pipe specified [ 367.499637][ T5947] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 367.628030][ T8364] bridge_slave_0: entered promiscuous mode [ 367.640352][ T8364] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.652841][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.653093][ T8364] bridge_slave_1: entered allmulticast mode [ 367.675741][ T8364] bridge_slave_1: entered promiscuous mode [ 367.774062][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.774105][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.774128][ T5947] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 367.774186][ T5947] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 367.774208][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.840766][ T5947] usb 3-1: config 0 descriptor?? [ 368.199917][ T8364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.204272][ T8364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.252043][ T5947] hid_parser_main: 5 callbacks suppressed [ 368.252072][ T5947] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 368.252104][ T5947] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 368.252133][ T5947] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 368.252163][ T5947] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 368.252191][ T5947] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 368.252220][ T5947] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 368.252248][ T5947] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 368.252277][ T5947] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 368.252305][ T5947] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 368.252334][ T5947] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 368.376581][ T5947] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 368.427964][ T7936] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 369.413548][ T7936] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 369.413598][ T7936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.413619][ T7936] usb 5-1: Product: syz [ 369.413641][ T7936] usb 5-1: Manufacturer: syz [ 369.413656][ T7936] usb 5-1: SerialNumber: syz [ 369.528763][ T7936] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 369.605437][ T5928] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 369.760886][ T8364] team0: Port device team_slave_0 added [ 369.794149][ T8364] team0: Port device team_slave_1 added [ 369.831159][ T8459] random: crng reseeded on system resumption [ 370.025797][ T5971] usb 3-1: USB disconnect, device number 29 [ 370.516729][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.516751][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.517033][ T8364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.537908][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.538182][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.538211][ T8364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.724858][ T5928] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 370.725204][ T5928] ath9k_htc: Failed to initialize the device [ 370.817175][ T5928] usb 5-1: ath9k_htc: USB layer deinitialized [ 372.023422][ T5947] usb 5-1: USB disconnect, device number 36 [ 372.227902][ T5940] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 372.310510][ T8477] netlink: 76 bytes leftover after parsing attributes in process `syz.1.739'. [ 372.315507][ T8364] hsr_slave_0: entered promiscuous mode [ 372.316984][ T8364] hsr_slave_1: entered promiscuous mode [ 372.317566][ T8364] debugfs: 'hsr0' already exists in 'hsr' [ 372.317584][ T8364] Cannot create hsr debugfs directory [ 372.507958][ T5947] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 372.668023][ T5947] usb 5-1: Using ep0 maxpacket: 8 [ 372.689435][ T5947] usb 5-1: config 125 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.689473][ T5947] usb 5-1: config 125 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.689512][ T5947] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 372.689535][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.986821][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'. [ 372.999199][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'. [ 373.267856][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 373.422506][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 373.423634][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 373.450722][ T10] usb 2-1: config 5 has an invalid interface number: 255 but max is 1 [ 373.450751][ T10] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 373.450770][ T10] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 373.450790][ T10] usb 2-1: config 5 has no interface number 0 [ 373.450916][ T10] usb 2-1: too many endpoints for config 5 interface 255 altsetting 221: 165, using maximum allowed: 30 [ 373.450959][ T10] usb 2-1: config 5 interface 255 altsetting 221 has 0 endpoint descriptors, different from the interface descriptor's value: 165 [ 373.451039][ T10] usb 2-1: config 5 interface 255 has no altsetting 0 [ 373.507415][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 373.513385][ T10] usb 2-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 373.513410][ T10] usb 2-1: Product: syz [ 373.513423][ T10] usb 2-1: Manufacturer: syz [ 373.513434][ T10] usb 2-1: SerialNumber: syz [ 374.120987][ T5940] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 374.121024][ T5940] usb 3-1: can't read configurations, error -71 [ 376.121315][ T10] usbhid 2-1:5.255: couldn't find an input interrupt endpoint [ 376.136715][ T10] usb 2-1: USB disconnect, device number 13 [ 376.558787][ T5947] usbhid 5-1:125.0: can't add hid device: -71 [ 376.558904][ T5947] usbhid 5-1:125.0: probe with driver usbhid failed with error -71 [ 376.578284][ T5947] usb 5-1: USB disconnect, device number 37 [ 376.706402][ T8518] netlink: 'syz.1.753': attribute type 7 has an invalid length. [ 376.726594][ T8364] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 376.798301][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 376.848370][ T8364] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 376.884923][ T8364] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 376.960588][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.960623][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.960661][ T10] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 376.960685][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.965711][ T10] usb 6-1: config 0 descriptor?? [ 377.008588][ T8364] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 377.094358][ T5947] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 377.262867][ T5947] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 377.262901][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.262923][ T5947] usb 3-1: Product: syz [ 377.262938][ T5947] usb 3-1: Manufacturer: syz [ 377.262952][ T5947] usb 3-1: SerialNumber: syz [ 377.329172][ T5947] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 377.353934][ T7936] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 377.467916][ T8535] netlink: 'syz.5.751': attribute type 9 has an invalid length. [ 377.566213][ C1] usb 3-1: ath9k_htc: invalid pkt_len (fedb) [ 377.894321][ T5940] usb 3-1: USB disconnect, device number 32 [ 378.255084][ T8364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.393505][ T8364] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.454526][ T1558] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.454831][ T1558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.497896][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 378.611058][ T10] usb 6-1: string descriptor 0 read error: -71 [ 378.618421][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.618623][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.638438][ T7936] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 378.638618][ T7936] ath9k_htc: Failed to initialize the device [ 378.642186][ T5940] usb 3-1: ath9k_htc: USB layer deinitialized [ 378.644970][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 378.645089][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 378.671031][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.671089][ T9] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 378.671114][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.721345][ T10] usb 6-1: USB disconnect, device number 8 [ 378.735219][ T9] usb 5-1: config 0 descriptor?? [ 378.967507][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.967576][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.125297][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.761'. [ 379.137366][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.761'. [ 379.172819][ T9] usb 5-1: USB disconnect, device number 38 [ 379.432127][ T10] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 379.592725][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 379.593357][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 379.594534][ T10] usb 6-1: config 5 has an invalid interface number: 255 but max is 1 [ 379.594559][ T10] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 379.594577][ T10] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 379.594597][ T10] usb 6-1: config 5 has no interface number 0 [ 379.594628][ T10] usb 6-1: too many endpoints for config 5 interface 255 altsetting 221: 165, using maximum allowed: 30 [ 379.594670][ T10] usb 6-1: config 5 interface 255 altsetting 221 has 0 endpoint descriptors, different from the interface descriptor's value: 165 [ 379.594698][ T10] usb 6-1: config 5 interface 255 has no altsetting 0 [ 379.671359][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 379.671390][ T10] usb 6-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 379.671410][ T10] usb 6-1: Product: syz [ 379.671434][ T10] usb 6-1: Manufacturer: syz [ 379.671448][ T10] usb 6-1: SerialNumber: syz [ 379.693948][ T8559] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 379.923436][ T37] audit: type=1326 audit(1766052395.956:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8565 comm="syz.4.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 379.957195][ T37] audit: type=1326 audit(1766052395.956:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8565 comm="syz.4.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 379.990547][ T37] audit: type=1326 audit(1766052396.016:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8565 comm="syz.4.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 380.224618][ T37] audit: type=1326 audit(1766052396.066:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8565 comm="syz.4.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 380.225628][ T37] audit: type=1326 audit(1766052396.256:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8565 comm="syz.4.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 380.840353][ T37] audit: type=1326 audit(1766052396.866:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8565 comm="syz.4.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 381.077561][ T8364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.782435][ T10] usbhid 6-1:5.255: couldn't find an input interrupt endpoint [ 382.830169][ T10] usb 6-1: USB disconnect, device number 9 [ 382.917832][ T5971] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 383.278753][ T5971] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 383.278782][ T5971] usb 2-1: config 1 has no interface number 0 [ 383.278835][ T5971] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 32 [ 383.278862][ T5971] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 383.278887][ T5971] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 383.281995][ T5971] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 383.282025][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.282047][ T5971] usb 2-1: Product: syz [ 383.282062][ T5971] usb 2-1: Manufacturer: syz [ 383.282078][ T5971] usb 2-1: SerialNumber: syz [ 383.529598][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.773'. [ 384.302321][ T8589] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 384.302512][ T8589] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 384.326817][ T5971] usb 2-1: Expected 3 endpoints, found: 2 [ 384.406826][ T8602] netlink: 72 bytes leftover after parsing attributes in process `syz.5.774'. [ 384.507324][ T8604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.518092][ T8604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.645315][ T5947] usb 2-1: USB disconnect, device number 14 [ 384.846843][ T8613] netlink: 36 bytes leftover after parsing attributes in process `syz.1.777'. [ 384.987585][ T8364] veth0_vlan: entered promiscuous mode [ 385.017919][ T37] audit: type=1326 audit(1766052401.046:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbc45f749 code=0x7ffc0000 [ 385.018126][ T37] audit: type=1326 audit(1766052401.056:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f2bbc45f749 code=0x7ffc0000 [ 385.018174][ T37] audit: type=1326 audit(1766052401.056:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbc45f749 code=0x7ffc0000 [ 385.021420][ T37] audit: type=1326 audit(1766052401.056:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2bbc45f749 code=0x7ffc0000 [ 385.022697][ T37] audit: type=1326 audit(1766052401.056:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbc45f749 code=0x7ffc0000 [ 385.025347][ T37] audit: type=1326 audit(1766052401.056:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bbc45f749 code=0x7ffc0000 [ 385.026299][ T37] audit: type=1326 audit(1766052401.056:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbc45f749 code=0x7ffc0000 [ 385.027054][ T37] audit: type=1326 audit(1766052401.056:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2bbc45f749 code=0x7ffc0000 [ 385.027458][ T37] audit: type=1326 audit(1766052401.056:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbc45f749 code=0x7ffc0000 [ 385.028354][ T37] audit: type=1326 audit(1766052401.066:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2bbc45f749 code=0x7ffc0000 [ 385.238977][ T8364] veth1_vlan: entered promiscuous mode [ 385.332791][ T8364] veth0_macvtap: entered promiscuous mode [ 385.356212][ T8364] veth1_macvtap: entered promiscuous mode [ 385.445823][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.503748][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.532121][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.532364][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.532400][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.532432][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.653098][ T8629] input: syz0 as /devices/virtual/input/input13 [ 385.918543][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 385.922912][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 386.190978][ T7936] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 386.434326][ T1558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.434347][ T1558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.470701][ T7936] usb 2-1: unable to get BOS descriptor or descriptor too short [ 386.471488][ T7936] usb 2-1: not running at top speed; connect to a high speed hub [ 386.473003][ T7936] usb 2-1: config 5 has an invalid interface number: 255 but max is 1 [ 386.473027][ T7936] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 386.473047][ T7936] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 386.473068][ T7936] usb 2-1: config 5 has no interface number 0 [ 386.473099][ T7936] usb 2-1: too many endpoints for config 5 interface 255 altsetting 221: 165, using maximum allowed: 30 [ 386.473140][ T7936] usb 2-1: config 5 interface 255 altsetting 221 has 0 endpoint descriptors, different from the interface descriptor's value: 165 [ 386.473166][ T7936] usb 2-1: config 5 interface 255 has no altsetting 0 [ 386.475992][ T7936] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 386.476017][ T7936] usb 2-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 386.476038][ T7936] usb 2-1: Product: syz [ 386.476053][ T7936] usb 2-1: Manufacturer: syz [ 386.476067][ T7936] usb 2-1: SerialNumber: syz [ 386.628483][ T8644] random: crng reseeded on system resumption [ 388.419590][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.419614][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.262760][ T7936] usbhid 2-1:5.255: couldn't find an input interrupt endpoint [ 389.337186][ T7936] usb 2-1: USB disconnect, device number 15 [ 390.720781][ T37] kauditd_printk_skb: 33 callbacks suppressed [ 390.720800][ T37] audit: type=1326 audit(1766052406.746:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbc45f749 code=0x7ffc0000 [ 390.724242][ T37] audit: type=1326 audit(1766052406.756:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f2bbc45f749 code=0x7ffc0000 [ 390.732829][ T37] audit: type=1326 audit(1766052406.766:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbc45f749 code=0x7ffc0000 [ 390.735343][ T37] audit: type=1326 audit(1766052406.766:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2bbc45f749 code=0x7ffc0000 [ 390.735392][ T37] audit: type=1326 audit(1766052406.766:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbc45f749 code=0x7ffc0000 [ 390.735430][ T37] audit: type=1326 audit(1766052406.766:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bbc45f749 code=0x7ffc0000 [ 390.735469][ T37] audit: type=1326 audit(1766052406.766:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbc45f749 code=0x7ffc0000 [ 390.735507][ T37] audit: type=1326 audit(1766052406.766:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2bbc45f749 code=0x7ffc0000 [ 390.735544][ T37] audit: type=1326 audit(1766052406.766:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbc45f749 code=0x7ffc0000 [ 390.756343][ T37] audit: type=1326 audit(1766052406.786:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2bbc45f749 code=0x7ffc0000 [ 390.854895][ T8678] fuse: Unknown parameter '0x0000000000000006' [ 391.167970][ T5881] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 391.347099][ T5881] usb 7-1: Using ep0 maxpacket: 16 [ 391.553243][ T5945] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 391.822117][ T5881] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.822151][ T5881] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.822170][ T5881] usb 7-1: config 0 interface 0 has no altsetting 0 [ 391.822199][ T5881] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 391.822220][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.931042][ T5881] usb 7-1: config 0 descriptor?? [ 391.967952][ T5945] usb 6-1: device descriptor read/64, error -71 [ 392.217879][ T5945] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 392.348898][ T5881] hid (null): report_id 0 is invalid [ 392.348922][ T5881] hid (null): global environment stack underflow [ 392.353129][ T5945] usb 6-1: device descriptor read/64, error -71 [ 392.373045][ T5881] cougar 0003:060B:500A.0007: unexpected long global item [ 392.373815][ T5881] cougar 0003:060B:500A.0007: parse failed [ 392.373913][ T5881] cougar 0003:060B:500A.0007: probe with driver cougar failed with error -22 [ 392.547064][ T8678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.547619][ T8678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.550487][ T5881] usb 7-1: USB disconnect, device number 2 [ 392.696260][ T5945] usb usb6-port1: attempt power cycle [ 393.191221][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.800'. [ 393.192440][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.800'. [ 393.372318][ T5945] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 393.408526][ T5945] usb 6-1: device descriptor read/8, error -71 [ 393.547859][ T5867] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 393.732151][ T5945] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 393.748521][ T5945] usb 6-1: device descriptor read/8, error -71 [ 393.823225][ T5867] usb 7-1: unable to get BOS descriptor or descriptor too short [ 393.823912][ T5867] usb 7-1: not running at top speed; connect to a high speed hub [ 393.824978][ T5867] usb 7-1: config 5 has an invalid interface number: 255 but max is 1 [ 393.825003][ T5867] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 393.825023][ T5867] usb 7-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 393.825044][ T5867] usb 7-1: config 5 has no interface number 0 [ 393.825073][ T5867] usb 7-1: too many endpoints for config 5 interface 255 altsetting 221: 165, using maximum allowed: 30 [ 393.825097][ T5867] usb 7-1: config 5 interface 255 altsetting 221 has 0 endpoint descriptors, different from the interface descriptor's value: 165 [ 393.825112][ T5867] usb 7-1: config 5 interface 255 has no altsetting 0 [ 393.827970][ T5867] usb 7-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 393.827993][ T5867] usb 7-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 393.828012][ T5867] usb 7-1: Product: syz [ 393.828026][ T5867] usb 7-1: Manufacturer: syz [ 393.828040][ T5867] usb 7-1: SerialNumber: syz [ 393.868536][ T5945] usb usb6-port1: unable to enumerate USB device [ 394.020867][ T9] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 394.148030][ T9] usb 5-1: device descriptor read/64, error -71 [ 394.563156][ T9] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 394.908321][ T9] usb 5-1: device descriptor read/64, error -71 [ 395.062869][ T9] usb usb5-port1: attempt power cycle [ 396.163735][ T9] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 396.182276][ T9] usb 5-1: device descriptor read/8, error -71 [ 396.863761][ T9] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 397.019146][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.806'. [ 397.110555][ T9] usb 5-1: device not accepting address 42, error -71 [ 397.210289][ T9] usb usb5-port1: unable to enumerate USB device [ 398.065528][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 398.065547][ T37] audit: type=1326 audit(1766052414.096:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8719 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 398.065943][ T37] audit: type=1326 audit(1766052414.096:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8719 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 398.128871][ T37] audit: type=1326 audit(1766052414.096:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8719 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 398.159640][ T37] audit: type=1326 audit(1766052414.166:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8719 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 398.160106][ T37] audit: type=1326 audit(1766052414.196:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8719 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 398.455350][ T37] audit: type=1326 audit(1766052414.196:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8719 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 398.490048][ T37] audit: type=1326 audit(1766052414.526:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8719 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 398.609151][ T5945] kernel read not supported for file /585/coredump_filter (pid: 5945 comm: kworker/1:6) [ 398.642114][ T37] audit: type=1326 audit(1766052414.526:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8719 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 398.676713][ T37] audit: type=1326 audit(1766052414.676:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8719 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 399.076812][ T37] audit: type=1326 audit(1766052415.106:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8719 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ae2cf749 code=0x7ffc0000 [ 399.597961][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 399.901357][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 399.901389][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.901409][ T9] usb 3-1: Product: syz [ 399.901422][ T9] usb 3-1: Manufacturer: syz [ 399.901435][ T9] usb 3-1: SerialNumber: syz [ 399.928009][ T5881] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 399.990869][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 400.107963][ T5881] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 400.107997][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.108018][ T5881] usb 5-1: Product: syz [ 400.108087][ T5881] usb 5-1: Manufacturer: syz [ 400.108103][ T5881] usb 5-1: SerialNumber: syz [ 400.115214][ T5948] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 400.278895][ T5881] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 400.422028][ T5977] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 400.624765][ T5867] usbhid 7-1:5.255: couldn't find an input interrupt endpoint [ 400.652519][ T5867] usb 7-1: USB disconnect, device number 3 [ 401.748697][ T8755] netlink: 84 bytes leftover after parsing attributes in process `syz.6.819'. [ 402.157944][ T5948] usb 3-1: Service connection timeout for: 259 [ 402.157967][ T5948] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 402.158957][ T5881] usb 3-1: USB disconnect, device number 33 [ 402.174615][ T7936] usb 5-1: USB disconnect, device number 43 [ 402.205054][ T5948] ath9k_htc: Failed to initialize the device [ 402.210823][ T8758] IPv6: addrconf: prefix option has invalid lifetime [ 402.307278][ T5881] usb 3-1: ath9k_htc: USB layer deinitialized [ 402.448021][ T5867] ------------[ cut here ]------------ [ 402.448041][ T5867] WARNING: kernel/kcov.c:872 at kcov_remote_start+0x5d9/0x710, CPU#1: kworker/1:4/5867 [ 402.448103][ T5867] Modules linked in: [ 402.448130][ T5867] CPU: 1 UID: 0 PID: 5867 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 402.448161][ T5867] Tainted: [L]=SOFTLOCKUP [ 402.448168][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 402.448182][ T5867] Workqueue: usb_hub_wq hub_event [ 402.448213][ T5867] RIP: 0010:kcov_remote_start+0x5d9/0x710 [ 402.448237][ T5867] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 81 2c be 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 89 3a 13 09 89 c0 48 c7 c7 a0 83 b2 [ 402.448258][ T5867] RSP: 0018:ffffc90005037728 EFLAGS: 00010202 [ 402.448276][ T5867] RAX: 0000000000000002 RBX: ffff88802ef19e40 RCX: 0000000000000000 [ 402.448292][ T5867] RDX: 0000000000000000 RSI: ffffffff8b3f56c0 RDI: ffffffff8b3f5680 [ 402.448307][ T5867] RBP: ffffc90005037a30 R08: ffffffff8ad5e5d1 R09: ffffffff8d5ae8c0 [ 402.448324][ T5867] R10: dffffc0000000000 R11: fffffbfff1db664f R12: ffff888027ddf000 [ 402.448342][ T5867] R13: dffffc0000000000 R14: 0100000000000006 R15: ffff888027ddd000 [ 402.448358][ T5867] FS: 0000000000000000(0000) GS:ffff888126e01000(0000) knlGS:0000000000000000 [ 402.448376][ T5867] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 402.448391][ T5867] CR2: 00007fe904b856c0 CR3: 0000000026962000 CR4: 00000000003526f0 [ 402.448411][ T5867] Call Trace: [ 402.448426][ T5867] [ 402.448440][ T5867] hub_event+0x158/0x4f30 [ 402.448480][ T5867] ? __lock_acquire+0x6b6/0x2cf0 [ 402.448515][ T5867] ? look_up_lock_class+0x74/0x150 [ 402.448549][ T5867] ? __lock_acquire+0x6b6/0x2cf0 [ 402.448585][ T5867] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 402.448631][ T5867] ? __pfx_hub_event+0x10/0x10 [ 402.448658][ T5867] ? process_scheduled_works+0x9ef/0x1770 [ 402.448691][ T5867] ? _raw_spin_unlock_irq+0x23/0x50 [ 402.448711][ T5867] ? process_scheduled_works+0x9ef/0x1770 [ 402.448734][ T5867] ? process_scheduled_works+0x9ef/0x1770 [ 402.448761][ T5867] process_scheduled_works+0xad1/0x1770 [ 402.448819][ T5867] ? __pfx_process_scheduled_works+0x10/0x10 [ 402.448864][ T5867] worker_thread+0x8a0/0xda0 [ 402.448905][ T5867] ? __kthread_parkme+0x7b/0x200 [ 402.448943][ T5867] kthread+0x711/0x8a0 [ 402.448976][ T5867] ? __pfx_worker_thread+0x10/0x10 [ 402.449001][ T5867] ? __pfx_kthread+0x10/0x10 [ 402.449028][ T5867] ? rt_spin_unlock+0x150/0x200 [ 402.449061][ T5867] ? rt_spin_unlock+0x161/0x200 [ 402.449087][ T5867] ? __pfx_kthread+0x10/0x10 [ 402.449119][ T5867] ret_from_fork+0x599/0xb30 [ 402.449146][ T5867] ? __pfx_ret_from_fork+0x10/0x10 [ 402.449182][ T5867] ? __switch_to_asm+0x39/0x70 [ 402.449211][ T5867] ? __switch_to_asm+0x33/0x70 [ 402.449241][ T5867] ? __pfx_kthread+0x10/0x10 [ 402.449272][ T5867] ret_from_fork_asm+0x1a/0x30 [ 402.449323][ T5867] [ 402.449342][ T5867] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 402.449361][ T5867] CPU: 1 UID: 0 PID: 5867 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 402.449392][ T5867] Tainted: [L]=SOFTLOCKUP [ 402.449399][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 402.449413][ T5867] Workqueue: usb_hub_wq hub_event [ 402.449439][ T5867] Call Trace: [ 402.449447][ T5867] [ 402.449456][ T5867] dump_stack_lvl+0x99/0x250 [ 402.449494][ T5867] ? __asan_memcpy+0x40/0x70 [ 402.449524][ T5867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.449552][ T5867] ? __pfx__printk+0x10/0x10 [ 402.449590][ T5867] vpanic+0x237/0x6d0 [ 402.449619][ T5867] ? __pfx_vpanic+0x10/0x10 [ 402.449646][ T5867] ? is_bpf_text_address+0x292/0x2b0 [ 402.449674][ T5867] ? is_bpf_text_address+0x26/0x2b0 [ 402.449712][ T5867] panic+0xb9/0xc0 [ 402.449740][ T5867] ? __pfx_panic+0x10/0x10 [ 402.449780][ T5867] ? ret_from_fork_asm+0x1a/0x30 [ 402.449818][ T5867] __warn+0x317/0x4b0 [ 402.449845][ T5867] ? kcov_remote_start+0x5d9/0x710 [ 402.449873][ T5867] ? kcov_remote_start+0x5d9/0x710 [ 402.449896][ T5867] __report_bug+0x288/0x500 [ 402.449930][ T5867] ? kcov_remote_start+0x5d9/0x710 [ 402.449960][ T5867] ? __pfx___report_bug+0x10/0x10 [ 402.450007][ T5867] ? rt_spin_lock+0x1c1/0x3e0 [ 402.450039][ T5867] ? kcov_remote_start+0x5d9/0x710 [ 402.450062][ T5867] report_bug+0x16a/0x220 [ 402.450094][ T5867] ? kcov_remote_start+0x5d9/0x710 [ 402.450115][ T5867] ? kcov_remote_start+0x5db/0x710 [ 402.450138][ T5867] handle_bug+0x98/0x200 [ 402.450163][ T5867] exc_invalid_op+0x1a/0x50 [ 402.450188][ T5867] asm_exc_invalid_op+0x1a/0x20 [ 402.450209][ T5867] RIP: 0010:kcov_remote_start+0x5d9/0x710 [ 402.450233][ T5867] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 81 2c be 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 89 3a 13 09 89 c0 48 c7 c7 a0 83 b2 [ 402.450251][ T5867] RSP: 0018:ffffc90005037728 EFLAGS: 00010202 [ 402.450269][ T5867] RAX: 0000000000000002 RBX: ffff88802ef19e40 RCX: 0000000000000000 [ 402.450284][ T5867] RDX: 0000000000000000 RSI: ffffffff8b3f56c0 RDI: ffffffff8b3f5680 [ 402.450299][ T5867] RBP: ffffc90005037a30 R08: ffffffff8ad5e5d1 R09: ffffffff8d5ae8c0 [ 402.450316][ T5867] R10: dffffc0000000000 R11: fffffbfff1db664f R12: ffff888027ddf000 [ 402.450332][ T5867] R13: dffffc0000000000 R14: 0100000000000006 R15: ffff888027ddd000 [ 402.450358][ T5867] ? rt_spin_lock+0x1c1/0x3e0 [ 402.450408][ T5867] ? kcov_remote_start+0xe1/0x710 [ 402.450436][ T5867] hub_event+0x158/0x4f30 [ 402.450471][ T5867] ? __lock_acquire+0x6b6/0x2cf0 [ 402.450505][ T5867] ? look_up_lock_class+0x74/0x150 [ 402.450539][ T5867] ? __lock_acquire+0x6b6/0x2cf0 [ 402.450575][ T5867] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 402.450619][ T5867] ? __pfx_hub_event+0x10/0x10 [ 402.450646][ T5867] ? process_scheduled_works+0x9ef/0x1770 [ 402.450678][ T5867] ? _raw_spin_unlock_irq+0x23/0x50 [ 402.450704][ T5867] ? process_scheduled_works+0x9ef/0x1770 [ 402.450727][ T5867] ? process_scheduled_works+0x9ef/0x1770 [ 402.450753][ T5867] process_scheduled_works+0xad1/0x1770 [ 402.450811][ T5867] ? __pfx_process_scheduled_works+0x10/0x10 [ 402.450856][ T5867] worker_thread+0x8a0/0xda0 [ 402.450897][ T5867] ? __kthread_parkme+0x7b/0x200 [ 402.450935][ T5867] kthread+0x711/0x8a0 [ 402.450969][ T5867] ? __pfx_worker_thread+0x10/0x10 [ 402.450994][ T5867] ? __pfx_kthread+0x10/0x10 [ 402.451021][ T5867] ? rt_spin_unlock+0x150/0x200 [ 402.451055][ T5867] ? rt_spin_unlock+0x161/0x200 [ 402.451082][ T5867] ? __pfx_kthread+0x10/0x10 [ 402.451113][ T5867] ret_from_fork+0x599/0xb30 [ 402.451141][ T5867] ? __pfx_ret_from_fork+0x10/0x10 [ 402.451177][ T5867] ? __switch_to_asm+0x39/0x70 [ 402.451206][ T5867] ? __switch_to_asm+0x33/0x70 [ 402.451235][ T5867] ? __pfx_kthread+0x10/0x10 [ 402.451267][ T5867] ret_from_fork_asm+0x1a/0x30 [ 402.451317][ T5867] [ 402.451864][ T5867] Kernel Offset: disabled