last executing test programs: 17.103770535s ago: executing program 2 (id=207): r0 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x80a00, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x3b, 0x3) 15.188190909s ago: executing program 1 (id=210): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="e80000003a00290200000000fdffffff0a000000eb927b02facbe84e97bd526daf73a23646cde5c0c4"], 0xe8}, 0x1, 0x6000000}, 0x0) readv(r0, &(0x7f0000000840)=[{&(0x7f0000001a00)=""/4083, 0xff3}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000000400000007"], 0x31) unshare(0x22020600) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000540)={r1, 0x0}, 0x20) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) 14.948075241s ago: executing program 1 (id=212): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040), 0x0, 0x40800) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000040)) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x27, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x4, 0x8001, 0x5c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x871, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0x2, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x7, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x6, 0x8, 0x3, 0xd4a8535, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x82, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x4, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) 13.425323268s ago: executing program 2 (id=214): fcntl$lock(0xffffffffffffffff, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192, 0x0, 0x10}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) syz_emit_ethernet(0x132, &(0x7f0000000300)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x2, 0x6, "ffcd09", 0xfc, 0x11, 0x21101d8c38078bb7, @local, @private1={0xfc, 0x1, '\x00', 0x1}, {[@srh={0x8, 0x12, 0x4, 0x9, 0xf8, 0x68, 0x30, [@mcast1, @mcast2, @remote, @remote, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, @dev={0xfe, 0x80, '\x00', 0xd}, @remote]}], {0x4e24, 0x4e24, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "ae3347a71244fdee37528a92189bdb4c1bc10a897af85f42907cb22a78d29c92", "1cd5668ea176198b342794b2bdd007b5", {"9236605764c8548a3c117f6b4c514498", "c9729473e3bcba27a39697aa5e484986"}}}}}}}}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f00000002c0)=@ethtool_stats}) 13.21285446s ago: executing program 1 (id=217): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r0, 0x0) userfaultfd(0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40081, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x334}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc1, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 11.523494081s ago: executing program 0 (id=218): syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024400010100200009040000ff02020000052402000005240004000d240f01090000000000000000090581032000037fff09058202000000010009050302"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000001140)=ANY=[@ANYBLOB="5574000003000000010000000000000095000000000000847448e305d254e7a4e660fb5e00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={&(0x7f0000001180)={0x2d, 0x20, 0x1f, 0x40}, 0xc, &(0x7f0000001040)={0x0}, 0x1, 0x0, 0x0, 0x408c1}, 0x200c0841) (async) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) (async) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0101"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x20004450) (async) recvmsg(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) (async) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) (async) syz_usb_connect$uac1(0x2, 0xd8, &(0x7f0000001300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x1, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1000, 0x5}, [@extension_unit={0xb, 0x24, 0x8, 0x5, 0x8, 0x7, "aa3afe78"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x200, 0x4, 0x10, 0x1, 0x35, 0x8}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x6, 0x6, [0x8, 0x9, 0x4, 0x5, 0xa, 0xa]}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x1ff, 0x2, 0x8, 0x101, 0xf4, 0x3}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0x0, 'O'}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0x8, 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x4, 0x1, 0xc, 'W\\', "d1c2"}, @as_header={0x7, 0x24, 0x1, 0xe, 0xc9, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0x5a, 0x0, {0x7, 0x25, 0x1, 0x81, 0xb6, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x1, 0x7, 0x12, "0f9ce85a70fa87eea2"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x5, 0x5, {0x7, 0x25, 0x1, 0x82, 0x8}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x98, 0xfe, 0x0, 0x20, 0x8}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x4001}}, {0xa6, &(0x7f0000000540)=ANY=[@ANYBLOB="a6038d6cce3882d6ba522621eaa94f85fb9edd0c721fcfd84cb96bb439c19d51e7988a16a26b1b9dffcb0283f8b4bd344f2695dc349a98802087d54900fca1b385c0da0edf01de697433e5f104c8b556aaaa946b37c1269417ffc36fdb3ccab9a4bbb8ff926dd59dcf2944ed1fe7dd8b74cec6db90cca39f11a2afcb1eae642ad4b89a4d7fd9e3ab4dab841e4edaf47a318ddd471d8cd594481edfdda163bf9c99ccf9fb9b35"]}, {0x21, &(0x7f0000000600)=@string={0x21, 0x3, "25592a273fb3fcf1af20e6a3bb3c39e9010cdd1635a9c9f06bff2fb6ab4f74"}}, {0xbb, &(0x7f0000000640)=@string={0xbb, 0x3, "5170748b7a659536c9e80bb90d914e6b06ec412e4d7b4c377f9b9d585a38222010e7953515c7c63b7074f5f62c4bbfdb916d7e3092645430b374d1c40b2c00c6d76cb6b01b353b2df2d1c98aa077ab6e719a13dcf5a4f4fd6f2d1235ab37e490add281c2ec380b7753ed3b5dc601c9664d3ebfde31ce1b91a58dc50d04db559a7ac540653377f2a4e93ab4ff48f2e1a80b2fa8c6456c3acc908102578028a95707c0e58bc5b2ceb71eed861651242e473019ea61f68e099433"}}]}) execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}) (async, rerun: 32) r8 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) (rerun: 32) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) (async, rerun: 32) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) (async, rerun: 32) openat$binfmt(0xffffffffffffff9c, r7, 0x41, 0x1ff) socket$kcm(0x29, 0x2, 0x0) 10.423825824s ago: executing program 2 (id=220): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33"}, 0x29) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 10.423507117s ago: executing program 3 (id=221): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xec, 0x18, 0x90, 0x20, 0x856, 0xac30, 0xdaf9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x77, 0x2, 0x0, 0xb3, 0xcb, 0x2d}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 10.162284515s ago: executing program 2 (id=222): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x189000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x189000, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) 9.621732329s ago: executing program 2 (id=223): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x840000000002, 0x3, 0xfa) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x60}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r5 = dup2(r4, 0xffffffffffffffff) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@deltfilter={0x8c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xc}, {0xd, 0xffff}, {0xf, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x8}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e21}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xff, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0xc}]}}]}, 0x8c}}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6(0xa, 0x800000000000002, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000080)={0x2020}, 0x2020) pread64(r8, &(0x7f0000002100)=""/171, 0xab, 0x9a) read$FUSE(r8, &(0x7f0000002280)={0x2020}, 0x2020) 9.556260315s ago: executing program 0 (id=224): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x5) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x80002, 0x7f) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 7.516745199s ago: executing program 0 (id=226): bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$vim2m(&(0x7f0000000100), 0x800, 0x2) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) (fail_nth: 6) 6.985879242s ago: executing program 1 (id=227): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040), 0x0, 0x40800) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000040)) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x27, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x4, 0x8001, 0x5c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x871, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0x2, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x7, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x6, 0x8, 0x3, 0xd4a8535, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x82, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x4, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) 6.868125877s ago: executing program 3 (id=228): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008b86d3106d04b50801d7010203030902120001000000000904"], 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4000}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x95, 0x8, 0x2371}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) r2 = io_uring_setup(0x96f, &(0x7f0000000040)={0x0, 0xc6b0, 0x2, 0x0, 0xee}) io_uring_register$IORING_REGISTER_MEM_REGION(r2, 0x22, &(0x7f0000000180)={&(0x7f0000000140)={&(0x7f00000000c0)="d468efd9", 0x4, 0x1, 0x9, 0x9}}, 0x1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x1de, &(0x7f0000001180)=ANY=[], 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0x98f900, 0x2}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000040)={0xffffffffffffff7f, 0x6, 0x3}) 6.373291278s ago: executing program 0 (id=230): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44880}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002600)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r3, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r5, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) socket$kcm(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0xffffffffffffff6b, &(0x7f0000000000)=[{&(0x7f0000000580)="48000000150081fb7059ae08060c040002ff0f03900000000000000200006fabca3b4e7d06a6bd7c00060000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x8400) read$msr(r0, &(0x7f0000000340)=""/91, 0x5b) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000580)={0x28, 0x6, r5, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000300)={0x28, 0x2, r5, 0x0, &(0x7f0000000600)="a1", 0x1, 0x9}) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000003c0)={{0x3a, @private=0xa010100, 0x4e22, 0x3, 'sed\x00', 0x28, 0x1, 0x3c}, {@private=0xa010102, 0x4e23, 0x3, 0x7fff, 0x77e, 0x3}}, 0x44) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r5, 0x0, &(0x7f00000002c0)="c5", 0x1, 0xbe5}) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000000000)={0x18, r5, 0xfff, 0x8001}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) 5.355863775s ago: executing program 4 (id=232): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'bridge0\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x65ef}, {0xb, 0x1203}]}}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r1, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) writev(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000001380)="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", 0x450}], 0x1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000005c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x5, @local, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e22, 0x4000000, @rand_addr=' \x01\x00', 0x2}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x69, @mcast1, 0xf}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000500)="9225e54bf63342abb9151f57821bf3aa27056483b4a20cf50ffc1adabb697ad3f56df2e8918c31b0ff91958950e0ddaa26845068926f938b7e65e2a217193c03fb7f2ae9ad96984951cf6eedb7f4104d86a1667ccf7237c216304b370df907bf7091b0453a1ae6f175a372c5339a3280c954b5e0af658acd878fd6a0cf793756922d1046ffe0b251cd8ec07c3ec0ae2b54dedf40", 0x94}, {&(0x7f00000023c0)="6c84d9289efb149df3a9dd0601ee247bb9f8c3233d42214eb62ac406f9faa76c6b2a433a11be2d420e6d7ad24de19a733e570c9c876b7fe53c4319457535b16f35cb3a281b9bbdc0ac2206f2d008fb2829be7b7d128f67b61efad877ce0e8802a84485cd332d7270c2fef5af2538af663cf0adf23e8246fb0c94ea127ffcad7821abbe352327f87fe27cecc039d0a6bf213fdee510bfd4c35debd8fbbe7ade2bc2fa6137a0088d880d2aa12e977dbdd845a270eb6a6d09f3b735ed0de9c8e063cf3bb3578b163e23e187c327fe570dc5d9f7e347d8d2ab36d118f246530c2eeea2e608385b2b24147773369fc5c5a950cdc5f4dc8a215c90fea1366f65b8997a7aabedabab1b3dd1857569c4317fe0043b1c0fcd37b1a6d1da0acb9e83fe4f50f53aae0c0e60167da40dbfff6242fd621456b83fb4f0d11f039f1d3387a24adf2ee344b53d0fcd3c9cf444c5e2e77666e0e1b328fd9bc23d7a865857d375068086afe1059ed0d76c0eeda33a014ca21fec4ac033c1bcb5a0424072d1ae27486324d3d1f40776eb92a07265e44a1c8ed08d36c5cec6c8faf12c6b2e313d1e6fd9dcf00e920f160c9ab69f3a8baba694fd0804e7fd50f1368ba30e25e71da7bae3bb1b465cb5817d9d86dd1b39041c0a8c1de55b0bdaa609e94ae6ec47dba06303d5d511bd02414d7f2b3f0bdbd7e03ddfee347b91893c09ce3bfcc49f31345835cf33a797f3a45e608c7ecc1f1cfc51e3cb4a1ada629f2c8b5727dbe694a4b7a21b6c6846db30b965416cba11d99de541c599ac743fa9939747f8c3a0afc7cdcbeaa42c580f2d2727b230af633367549bacbca4c0f3febdf9917ad484747ddbe2eab90a52231138b5e6578d5946f8f0bf794ad21f47bf1e8e96d2f49c34a9b90d4a2f85d1f1efffc30dbc12bfb2499b86ba306f5860865c27d5b9b7da19fc8bc39cc85ee16a8488a713325dff3a39479897576d212176cc2b958f17089933a83c418ed21a2ac262f98999bd4a20cd0df6d3680e84dffc7d8a3270ef9a35b1952c38dc1b7f32d326ec6536a62518815f8543b4ba227dd705aa6a043ac955b50b00da4f6c1b9a16c517f9dc2b5b1cef0d9ed8401f1104fc9815967a8bb6e8fd5f201f7fa1a5f1a1c30e121b4ed93da16a9099feb3401987678a7e34b20e1d088c8727ced208a064bd0b0b7d98886559189a90de80b77a6cbe26c9e8a0141ccde2cf479a684fdb31cf436efa3e0504548217fff9874104cae312c0b1f610589548e6fa2756e1805e3dc29c55d256df310bce64026f39c2c20f02622bf09a62fd28c96afee6ac682ec3f81c1a7e99c290626ca450f05c7c2cc1032d6b8a317440bace48795d0cf1f8e3da1839ca19553c53948702c194d7df63a439fc6b6c72683032c9a55d16fbca8e1dfc97553ab7c3822362fdabe1472dc452579468e444875a3b755146ca388a72bc4aa48fe570eab31304c14cbc0dd1a269251fc44902d6d3c8ba1e9cd49382991ef2b1b390d3f28a7d057a8a7c4cfb8a0ef4ff63297aa1a43f65abbcb682660693ca8a0f8aee5be77abca2605b45a932f807cf1cc9bdbe8ee7ce3875735bd8cd4ba49607bd106eb0ae196174cbef08bc276a49e0d2a9bbf79e8467406272bd30247e7bc3d0ae3dd60e80a79b958a13f684ba60f5811eacfdf573915b7e67e9eac133128f2402b699d5860fbedaaa26275472f09ff3179e724d25aea2146eb4e2a85bbac5d02965ff34181a99a5cb108779ad0dd5fec20e4a9dc30cd3b283d6a370614cbc1eb50defea6339fdbe9d57f264d6b3726f3642871febc0de1565d0d4d885b493a21e8b20f293e273674105b5084c61ac29191827f5a1d6dc777f70ca2c02e36ae41610cda631c8a27bd1100ccc8fe24ce942681ec25921f9bc4f72e7f0449b247cabda26e7f320cd3a8e8711709704546540f95bc1ca28befa720ac02cd5322a39b9cb5c6628ed4a7a6ff3ed63c6304cf0bb708fd02dba07666db216cf43b8221e74134b909d37a75aeada48ae593189e0d83ac5fedd52af3bf9481e010252e85bdb36478dd4f349d5eb2610b4a9d327abf1e486e06fee5e9a0b7a69954fb1f5a3479ab67147adf0a7de51c7a35a51ca1e66724cf95b6efb190409d223cf8064b530ceddae9f3346967592d9069b51e61e1bddd75ae949e565ec614f0e7e554d34ff99ae2b6fdc1d5b4227d4014410e608e2d959686cf0ee656024e0ce41167a01656cadaef7626ab457e21504286d50dc4c4643974c8ede9e465f2d0863e51c03adc48b81c0050241ea14c53e84ac80680306169b3939eb06c500435c1526eac550f30c5f8317e5cccb1473e64b997c2d108c931685c4c2ddfc0912e0157ac01fe245ee954ab8365361f8c00bcea7e29dbf1953b13b59ee2ac1f06d123969bc783cc0b582a03daef5e52c4126d11f1ca619691e15c64967a4adb872b44ab191381aa2929f42e4ba4ea2c8a2d4de30849f5e3f383ad8881062650e76461e1d22785c3d81cca0f703862cfa8e8d83c50182622dc45040fab1ae7f60530c182b75e8d5b4b35d69a823908b13b5c2ff1e4864d372e7d4da12f08b0f25cf2fbc0ae1106ee10d71830595ba75e79e8ddc17143d10af0971bbcb15ee8bfa537651e48b05ea3c31a6d0494d7cf538c404bcd554524534e477429f1a6812beec4af3184e9ff424f8a97eada12d0b7a088fbdc15003de77e9ae365f8f653d964176cab57d923edd33c5df284093ee08d5a1c261630288010848b6447486c648e805a6f3238d77e60146d209947cb1d36104178ecffc71978180aa5f372000a6591659fc58d67176d0460310c4d6979a1c38e496a14ca9a972c059494a2701b998e58d014ef9b2aacfd57280e3fa3cadbdcf78a7fefab3223b5e1e5033fdce4bfb91e06c20dcb9a9bb984489d09dd48f14fcdf3fd667cd5b95224cc8422f0bf5a80573f5c190ff89e32e81cab9cfddd7c8298087284782bada69e07f1e9ac4470a6d0d40cc440bee5ea9a402618b806401efc83703a7e3c2961aefb6af39dd444643590a0954ecf46053535ffa5d90e6c0315bd92131784e8c649a6d120152eb494aa538c3b5708b26e010a114e648529b69e41b92cad981747f54bec686f31c113887de6411c71382c84db9865e9a8b876db2275c27938d823b80bd0f5a7df52f762b01531ff07ef70498902c0335738da5afd5296962058d550bc5eec0e0a97a31b2a4b68391973ebd78909dab1fc1c4678d6f9e0e12055b0b2f61aba5eaaac0f73834203aba69a4dc9bcc45192a0f72cdb0fd133a46d8bf81e2ab2e7d5547445fae7077f10960fad7060616e5f8adc98735f89420cf37c4bcb7922d1fde531de747a2ff858404877a60e4054b9453d58e320fc32e71d03f9fa456b0e1ebd470191a3e20d85b961fffc313473b4d93074561a26fdcc6d3c93a6644eb0a8360157c3b3ce98f1286bf1069302888e9f0792561ba76d4657afce2ac268f9fe19cc9ec4e70207d060a2745c9a13abbbeb721ce0edc31aa45ab8bc4686822981d86d67b8501c6504b8c3600e922eb1ad58684ed377b053197d92c2d6328f5699a76ea585b2d67674696ca6c7d4c58ddc9b64b3d9216a73e8599e0f501ed1664f407c76b5ab0fd16f5144c2d14c3dd5c784caed785073091d13cea4f3cd3ed45bf8325cbc909d385b0171fc292a681c518727f29f54fbc209a7c205421512d179e9093578984f147ca9f0c363d9b8c6acc9b23958f459db3a7c062a5ca94e1d39790e4b5fa52ec7cd82c68832974f3857100d15059f1a5ee34f0b96cc805435231f5987b3b23336e66aa024a042014c8e14c8a960364836c4aecef9f8f88caedd0f45d87652efe82c3c324a1e40eb11003e28b91245117043f9d2517fb79da180005fa7bd818301d9ea5fedf2463c6b27eddb83155a7323f9ed8f1d16efb233d061ed02a26fb3076bdbdba3dce780f3ebb35e0ce73edf840e9bb151e2b43d24bfadaefd31bf7276e5207622eae874cb0f07c757a92b7d791a3774fcdeb231e5a52a8c2d9d8d9272110c84083e068d622b94c29d5a1f272368a3e6d2b888167626f92a332ceacd34eb8d93998e4bffd4dd963f820c72893044c25aa3c97e84077148c935bc9af7f581d4c9cfe7210ad0ce2095d95b20e8c335597ae4b2e57f249ccb65f7fc0d1e2af4e2ec8c072deeb3b00fb7dcd73cf4302a52a67badd323ff21cff33d13903e90870d167508394d35e40a5828f96295d70520263c8f795ef9de474fca6d0452a739b5e9de82b42b427ab074b5c1d47f4f6f168e065230f6d4a129459f36e3f3745c55ee85b0196840d2d804432e49cd095f0ba9f67645e17f1da85212e3f946bff4b1000dfbf66ff91031ba8fdaf4da16d19ddccca96d0206937c7f7fa7c5907231dda7838efd63ef3e0d796fa54de0bbefa3df6a4abd5d17099a3a48403095ab9cc55abea77e15e3018bbcf364975ea58e799ce3a85fb23f255a1ce52d1c43e88189953be007545b9c3c2641963fa415194089bd8d25f566c9008d5269f86933d4a755a40f2b01d0abb4cdf55ce7df17d2b6e83e911a0f68acc9452065265160da2b261a5556a9c0c8e3f95c216d6b691c8d37732e465686aee245a7de283a6359dbb858c3deb1b619db6c4559776335e6455ca65ee6e95e61d4382867f50b55ba1f3b3e48537d84f969c2a5d58f1ab8132b5fe77e3cc8454018a07aa61e31f9359145b8475166e1bd3661746805698aa9c7028fc589a7eff96fe968115df6a401318bcf02d5d829f47eff94ca2af99a6fb0eabe63412144511b101bdf58554c87cb57bc51cbb148da67a721772fc494375e274d62e4a2d580b078eeb2d71e33c6049c77dc2d1ab136eca1b6109a855e1ff67663fe21ed09762869c3df28b1b5119d58b7b41a9820fb9b9de761911bd1d7bb7a0e3c159138c9d5f7fad01a2ccaa57640767a80feecfedc4b4192ee56963334ceef98d95e1b198219b5f72962fd4dd65d2ea4392724b744cba0d8b6fb6fbcd4b06b4e32f35e717fc3585267a25818d2c153d43d9a995e19b11f656c2535b8608ad9017c429f44eca6d636042fa1c539905820cb72ac4f9831a9dd3be537195bddd531964b3538fd00ce78baaca34093959533f0dc22907e25ab4c80ad65ba8f37de0ff9aa79533a1e3678bd9f45f05e369ad7db81f41c555e3e65ac61b45821c1cdf2334acee12c8a8b1acddfb955476c2333c2edb3074b3053e38cfdefc1a2c145e4de23be3db66c597ba11cb73bb78a055162011b06ff980f11bfd4a168f1079375112191cb35e3ee17f73cb897326a217c420892b486d95c822ecfab343259f8d62cc014370bb1686de6c6e81fc870aee6ed34fa574fd3aff59b3e7c4dc793ea44a99ff0253497259941fad0170288bf8640039f134f651040318f851f0101627de3a63752a33a1645b6dd0f50de7ad02fab3d0b833e48d843a17d3c3f0cbcceae8752219e95401fd2079f4f02c1b491a3f34c651095425a45ebe092e89d49f47c1d4f4df6d8969d9057d65784f5bd80317d7ea3e325dfe3c58375b2614035b4d79010d21ccccff45ca7959755adea191f6914f8054290e2908448898057d721bcebb2d722e0a341a1ea30ff114d61c41bbd08182d2d4b2674654b8c782665ed4682a66226270b676766fc6c6cb0bd596f265a0c0962676b0ddc9b7416ce7fdd162f1799533d758c33905285bfd0ba3615f0ee0700d8c1d202e334e6de863c6ed0c3e6bb12b103a2d8a7505019967f47f4dcda8b8bc31bf8b6b513d28b9100b4c", 0x1000}], 0x2, &(0x7f0000000700)=[@dstopts={{0x178, 0x29, 0x37, {0x0, 0x2b, '\x00', [@ra={0x5, 0x2, 0x80}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x10, {0x1, 0x2, 0x1, 0x3, [0x8]}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xbe9}, @generic={0x5, 0x74, "c13c33cf2d4a741cdd4e3ed94c1f8440965a9f11e2216b6ad57b7e80bf9c58d9ec81fcebefc741cc3908a0c15f7e5354afc019866704a3c606a5e66ad2031eebef323731baf6a9e4df50611199d3d37991d25fd0b22990e4345588bffd25f4feb8e492b71cdc6366b523b63b3e403ab3bdaaeb13"}, @jumbo={0xc2, 0x4, 0x3}, @generic={0x6, 0xb5, "48e3e7ebf8ca9e54b3883fd8228ed95e0cb72f1b3aff3d22ed4839159192180243871169f0449af1bbd6d223d732faa709e688b8dd0d1defdaabac01552bd48b9511139f469267e95c17fa133fff36dbb04f5b28d06ddca3d543e67cc63fa18306745585db8b380f7a0d51652b3db845ce8a4ceb4f0fe881d86614ce9cb3012ec82a6767ffa97b5d14e0d8fcf7ac19d8e5eac72c342d836651d4a043dd6417d530a770c6f01c85e094081ce2db2c6c4ee7d32effe6"}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x62, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0xfff7}, @ra={0x5, 0x2, 0x3ff}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x34e4}}, @rthdr={{0x48, 0x29, 0x39, {0x2b, 0x6, 0x1, 0xff, 0x0, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback]}}}], 0x208}}], 0x3, 0x0) shutdown(r2, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000017c0)={0x0, 0x0, 0x10001, 0x9}, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x80000001, 0x8c000) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffa, 0x313182) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000340)={r4, 0x6b34cd54, {0x0, 0x0, 0x0, 0x101, 0x8, 0x0, 0x9, 0x10, 0x4, "94e965f17a45f36d4a0fe5faeb43f76c4cb4818d17c74ba3415472999ac8591f1dea9fff11d74915e6513f316847af8af40e12aabd3d1622c17cfd612b7a81b5", "d45c5557953b5b4903baa8eb8dfc7adf13f2c090b0b9b5556944baa4eca9a18862bdb6b801ac9c7141b471ace7edd57f2680b9da3551e1a4fd855d86238920bd", "cfa8618a7e9396e9a27badf489872dd17d73dcfe020fb3be96e1471537684ba4", [0x3, 0x9]}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x800, 0x2) socket$packet(0x11, 0x2, 0x300) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) 5.047543279s ago: executing program 3 (id=233): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x124, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x442}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @remote}]}}}, @IFLA_AF_SPEC={0xec, 0x1a, 0x0, 0x1, [@AF_INET={0x38, 0x2, 0x0, 0x1, {0x34, 0x1, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0x2}, {0x8, 0x1a}, {0x8, 0x13, 0x0, 0x0, 0x6}, {0x8, 0xa, 0x0, 0x0, 0x7f}, {0x8, 0x4, 0x0, 0x0, 0x1}, {0x8, 0x5, 0x0, 0x0, 0x9779}]}}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0xf, 0x0, 0x0, 0xfffffffb}, {0x8, 0x3, 0x0, 0x0, 0x4}, {0x8, 0x2, 0x0, 0x0, 0x5}, {0x8, 0x3, 0x0, 0x0, 0xf201}, {0x8, 0x14, 0x0, 0x0, 0x1}]}}, @AF_INET6={0x5c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x59}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}]}, @AF_MPLS={0x4}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}]}, 0x124}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\"\x00'], 0x0}, 0x0) 4.852148462s ago: executing program 4 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x11, &(0x7f0000000100)=0xfffffff6, 0x4) (fail_nth: 2) 4.850555947s ago: executing program 0 (id=235): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x3, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x4, 0x1, 0x40}}, 0x28) r2 = syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x6) landlock_restrict_self(r4, 0x2) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001b00)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="20390600000000523cd0a28d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000340)={0x0, 0x13, 0xf, "984024ca5e7bc2f674f7dc2c0d9f87"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.000759798s ago: executing program 4 (id=236): r0 = open$dir(&(0x7f0000000100)='./file1\x00', 0x80, 0x42) r1 = openat(r0, &(0x7f0000000140)='./file7\x00', 0x4100, 0xc6) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x10c) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x6) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000000)={0x6168, r1}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x81c0, 0xf00) r5 = landlock_create_ruleset(&(0x7f0000000240)={0x548}, 0x18, 0x0) landlock_restrict_self(r5, 0x1) linkat(0xffffffffffffff9c, &(0x7f0000000a80)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file7\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000240)={0x13, 0x10, 0x7, {0x0, r6, 0x2}}, 0x18) landlock_restrict_self(r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x200040, 0x0) 2.428633999s ago: executing program 2 (id=237): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r0, 0x0) userfaultfd(0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40081, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x334}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc1, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2.135255995s ago: executing program 4 (id=238): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xec, 0x18, 0x90, 0x20, 0x856, 0xac30, 0xdaf9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x77, 0x2, 0x0, 0xb3, 0xcb, 0x2d}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2.134075675s ago: executing program 1 (id=239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000400)={0x60, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x27}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) (fail_nth: 9) 1.651896378s ago: executing program 3 (id=240): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = socket$inet6(0xa, 0x80002, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000002e80)=[{{&(0x7f00000003c0)=@ax25={{0x3, @default}, [@rose, @bcast, @null, @null, @rose, @null, @null, @netrom]}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000440)=""/93, 0x5d}, {&(0x7f00000004c0)=""/120, 0x78}, {&(0x7f00000001c0)=""/46, 0x2e}, {&(0x7f0000000340)=""/7, 0x7}, {&(0x7f0000000540)=""/178, 0xb2}], 0x5, &(0x7f0000000680)=""/72, 0x48}, 0x10001}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/251, 0xfb}, {&(0x7f0000001800)=""/234, 0xea}], 0x3, &(0x7f0000001940)=""/193, 0xc1}, 0x3}, {{&(0x7f0000001a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000001ac0)=""/4081, 0xff1}, {&(0x7f0000002ac0)=""/135, 0x87}, {&(0x7f0000002b80)=""/26, 0x1a}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002c00)=""/103, 0x67}, {&(0x7f0000002c80)=""/189, 0xbd}], 0x2, &(0x7f0000002f80)=""/241, 0xf1}, 0xfffffff7}], 0x4, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(r7, 0x7aba, 0x15c6, 0x14, &(0x7f0000002d80)={[0x8]}, 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, &(0x7f0000000080)=""/23, &(0x7f0000000180)=0x17) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10004005}, 0x20000800) 1.595582354s ago: executing program 1 (id=241): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r1) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = syz_usb_connect(0x3, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xec, 0x18, 0x90, 0x20, 0x856, 0xac30, 0xdaf9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x77, 0x2, 0x0, 0xb3, 0xcb, 0x2d}}]}}]}}, 0x0) r3 = syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x100, @loopback={0xff00000000000002}}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000940)={0x0, 0xe, 0x1, "8f"}, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) syz_emit_ethernet(0x6a, &(0x7f0000004200)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x30, 0x3a, 0xff, @rand_addr=' \x01\x00', @local, {[], @param_prob={0x4, 0x2, 0x0, 0x8, {0x1, 0x6, "ad32af", 0x800, 0x3b, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}}, 0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r6, 0xd) r7 = landlock_create_ruleset(&(0x7f0000000240)={0x0, 0x2, 0x1}, 0xfffffffffffffe30, 0x2) landlock_restrict_self(r7, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) 1.593201716s ago: executing program 0 (id=242): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = getpgrp(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(&(0x7f0000000d40), &(0x7f0000000480)={'fscrypt:', @auto=[0x31, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x64, 0x0, 0x0, 0x1, 0x31]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c07000000aa00"}, 0x48, 0xfffffffffffffffa) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000008) accept4$unix(r4, &(0x7f0000000840)=@abs, &(0x7f0000000240)=0x6e, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000940)={{{@in6=@private0, @in6=@private0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000a40)=0xe8) fstat(r1, &(0x7f0000000a80)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe}}}, &(0x7f0000000040)=0x84) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 1.112812385s ago: executing program 4 (id=243): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xb, &(0x7f00000000c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x5, 0x53, 0xfffff034}, {0x6, 0x4a, 0x6, 0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="4701000000000000ff8483400000000020000000", 0x70, 0x81, &(0x7f0000000340)={0x11, 0x0, r3, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x800040, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6e6f78617474722c756e616d653d5e2c6e6f657874656e642c64656275671d3078303030303030303030303030303030362c6163636573733d757365722c6361636865"]) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000280)={0x2710, 0x7, 0x13, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="08001b", @ANYRES32=0x0, @ANYBLOB='\f\x00'], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f0000000040)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1fS!\xc3\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd0\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|\x83q\xc8\r\x9b],R&\xfch\xd5\xa1\x96\xc2\xed\x8e\x19F\xb0\nK\xb3\xcc<5A\x9f=\x8d\xa4\xf3q\xcbq\x1e\x92\x98\xf1S\xfd\x14\xc9\x01\x17\x15\xdc\xa6$\xa2\xa5\xe4-\x857T\a7\xc6\t\x7f\x15\xc3ov(') r7 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0xc0245720, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 398.904604ms ago: executing program 3 (id=244): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, &(0x7f0000000040)=0x88) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x20, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x3}}, {@default_permissions}, {@default_permissions}, {@allow_other}], [{@hash}, {@context={'context', 0x3d, 'root'}}]}}) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000340)=0x8) close(r0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r4, &(0x7f0000000400)={0x4, 0x6, 0x1, 0x6}) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) r6 = syz_open_dev$dri(&(0x7f0000000440), 0xffffffffffffff81, 0x608082) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0x1}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000540)={r8, 0xb6b, 0x2787, 0x0, 0x5a6, 0x6}, &(0x7f0000000580)=0x14) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', r0}, 0x18) setns(0xffffffffffffffff, 0x4000000) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001a00)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001a40)={0x0, 0x0}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001ec0)={'\x00', 0x4, 0x7fffffff, 0x0, 0x577e, 0x5, 0x0}) stat(&(0x7f0000001f40)='./file0\x00', &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000002040)={&(0x7f0000000640)=@proc={0x10, 0x0, 0x25dfdbff, 0x40}, 0xc, &(0x7f0000001e80)=[{&(0x7f0000000680)={0x1344, 0x33, 0x600, 0x70bd2d, 0x25dfdbff, "", [@generic="c687b99ce324ff72455f2ba7f7397af22ee539489954f5802e4a5c67cf27eab81ffed7ae5c24aa8786bb", @generic='\f', @nested={0x1307, 0x77, 0x0, 0x1, [@generic="2228c1bb0d8f5fd59ad8e014744f87d3f062a8ccec76487d6186550a73e755d6a9bc0b5d7b882467bad1b0d3f99395eb91c4027790f8749ca8877d9cdbc6a0a127deb1edb06c8d26e975055dba31a505b6e8d60590e9f4965b9e4fb939f5da51e1f4e31725ef56decc40ca92f49305ffc3437385bbbefdb8270023c78c3ddc8a5adf8a080285f3fe3c9567bec916de7c0298d1c44d03d73a21e88784a242a35a833087c5c74d9bb0936ba894f552bf260f4297225b81c817eb8a46a3f1c7bab284a2752770061c001bcaf3ee944b9fe0f99eb0ed73d7d47b19e4e1ac4dc7dabf3d61ec200c", @typed={0x8, 0xf9, 0x0, 0x0, @uid=r1}, @nested={0x4, 0x67}, @nested={0x4, 0x6}, @generic="2fdcc24b69f683ff1184e71b1ae08f3859f56bec56b18428c72d1e4dae1dfe9bec14f2f755e4eab7aa68cdc18f58b5129203a56dd5f3821c37a24499b6ccba9ca09ded6d1b8ddd9c79b700a1566d7f15955a47b530b94bbcd6b0c37824d03d67e9babcc044c572b19767cf0522dea4275f532be547a0f468dc2e5559c9cb166ccf0592aef91c61bd3154f800cfdbea79f68f4a6f2a4370fffe8c88b4ff0fc068f993113f30e1f6caee3748f35c866b6f0b21a61b", @generic="380dcaa49555aa568f365e84a4293e05f3a354c12e9920e0b7aeabe9a47935994bd82c8c1dc88e57d16a293c84b1dbd1727e0022654be140c60ea181964454b76005d47e173a0c5d17fac8303b687fce00d77741ded21098f5182f0d62752f7d3d9bf5a9e68e603fbbe0502fe5de8496be70608213cedd675b03bc3bdcaf75e2c165068c784816147bdb930f3d5aa930880c7edce57c9d5aa0bec85ea97baaecb23652971415a5f55305f70314a2a702c91e5d05ceec0c261411a5c61a3ccde9d96b6917a2ffb5738fb92456a2753f14911063abf235906bb893adb7805e65aa87a7a75a56ba0181ef30de664f", @typed={0x4, 0x50}, @nested={0x4, 0x12c}, @generic="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", @generic="4811eb4751a0884b17d22eea9fb634d59346a2e5c8468a50d0b062c69aee689a13707175fcd7b3098dd1468d122f9e3847590125a45b732c2211d92f53d0fa3c4afc857c1a1a78b977a22ef24f44204f82cb93b8c667063f51f702b1246020d25ab70d0a62"]}]}, 0x1344}, {&(0x7f0000001a80)={0x3d8, 0x10, 0x20, 0x70bd25, 0x25dfdbfb, "", [@nested={0x18, 0x10, 0x0, 0x1, [@nested={0x4, 0xa3}, @typed={0x8, 0x119, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x10a, 0x0, 0x0, @uid=r2}]}, @generic="01ec20d0f3aa2bc2c41f08ad68a8801797c1dc082db3433399c7", @generic="c890a82b909dcc66339b231a4ad3d70f1d245ede5832c304ee91f01f222b729a5ee33c9be41c9b5e8424e70a061adfbf7b5ebff39ee0962a050e528d5239482a338a1a72999054599b162dead5de1b96c213042f7d3bee7b891e91833d184a7868cf577c5b20147f450ce6af8f3c3c86c56c1a09f3167b1f31ddba82c814fea5eb95bff50248214a6c2be3", @nested={0x15b, 0x118, 0x0, 0x1, [@generic="3bf341bb1dbc295f3321360049c273977e37fd1b3c8e72103ad9f135c7946d1e9c927a7eb42a06023ac80d4b31f642e7e6989313928fd0864e100a0652c87893e05f83dfda1036ec0b801be63ee6dfa7edfb6e1defa91280905c90667bb453f36d52eaaf83f17c8ab180fb5d20289582bf9b61a3d328e79f1c28c29c58a5556ace53efbd5e081f17fc0a23a9d6cf50e098ec1974f39be59d8f93fe0e6908a1899a7ce1ff2c4e2f527007fb4da5b1653b465f09ca", @generic="aaf1898a0b4636867da54d7f468f4ade09b46a40c87523cb06c433f2c6f2c7c74d02a51d2eae46b44d5b5a8ea78e36a0f5844e720dbdbb913e2d4d4e1c7c70b79ea84448d05d067f5318d2ac33c6d1de96649294053efb730a410c39cecd4d5b61a68d235ba4a536a0ba90102c6e0c88ae5a375f6e50e10d26963ec16dcdf84b5684055cc61298fc8139dd9a4438f2afa2e0061e146952725e4bd4", @nested={0x4, 0x119}, @nested={0x4, 0xfa}]}, @nested={0x60, 0x5, 0x0, 0x1, [@nested={0x4, 0x10a}, @typed={0x8, 0xc0, 0x0, 0x0, @pid=r9}, @generic="4dec190f5628717c44a8a3c44c56ddba188813e5668e6d69f9a33c63ef1d5335ba1a3337d6d452e4d8e9a260da1eb519d28f9ea6ce558e0ab3c4e2e615f239e860895aca92634fabdf7f76b2", @nested={0x4, 0xf4}]}, @generic="ffc8dbcf6343f797d4acb4e8da1e9bb0f92c27a69935bc366185cb2bcb520b66a5da0f5c7ad7ffc64a1fff9df6dcfe48c53520a37a7843f88846c71c7bef950d49fb709b1bbb14e11ecba5097eba3343d2c5704843d46a07ae518d8f9d3a8b95cc9daee7adbbd91f37ff57deff490b0e91e4c073e337d40cd874606361417dd32e83a8f56016d6df5c30145538673b465548bdbe92231c7db33069b7b7ab2de3c94b9c364600d71bf07e", @typed={0x8, 0x13d, 0x0, 0x0, @pid=r10}, @generic="76654a8e397bf85672d88d41a2a6d49647aa80f21bbf3c7c666df7afee7a2327b87ecbb282cde66ef2636b1bfdcc8ddfacc4e1e7c086b04e52e36697e28872fd83e144799c8953e71599ca743c212bfa7725fca565646cef1cbc00c3fa9577911d921959684bf73d0ac18b4c21a5aea72c2c7cf3cd13a82d61350a8226d694e399eca734b58e4441f8223b67faf077d8cf5098c9a8655a75873e487449"]}, 0x3d8}], 0x2, &(0x7f0000002000)=[@cred={{0x1c, 0x1, 0x2, {r11, r4, r12}}}], 0x20, 0x20044011}, 0x40000) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000002180)={0x1, 0x0, 0x1000, 0xb9, &(0x7f0000002080)="007e498bdd97417430a3f81bbea2d90fc433b971d401dc2baf6072ff97ae56a3861eec6d1d59150bce5b5243b1be38f40a96ea128ecdae5a5a7732845341c8d452079d24dbf801252459c07dfba8cec0d92fbdd132ec5932348c6797a6fc905da784efb90f14aed951f76b0091f5cf0bf3ab4474a9fa14e655ae68503bc74cb63be08a193b99d96506604c5597ef896cbda707bdcd426933b0bdc668d6cfc8cffb2a1cdb3122be434913c06ee9a397a5aaa692ec44cc57184d", 0x0, 0x0, &(0x7f0000002140)}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000002200)={0x9, 0x1632, 0x200, 0x3, 0x18, "0b437cc2cbffb04e7717da5f8e90313b1aba22"}) setregid(r12, r12) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000002240)={0x0, 0x8, 0x3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000002640)={r13, 0xfff, 0x1, [0x9, 0x2, 0x7fffffff, 0x7, 0x1], [0x7, 0x101, 0x8a, 0x3, 0x2, 0x6, 0x80000000, 0x10000, 0x1, 0x6d3, 0xff, 0x13, 0x4, 0x2, 0xfffffffffffffffa, 0x1, 0x2, 0x5, 0x2, 0x5, 0x7, 0xf1, 0x9, 0x7, 0x1, 0x5, 0x7ff, 0x5, 0x3, 0x800, 0xff00000000000000, 0x8, 0x8, 0x1, 0x7, 0x0, 0x9, 0x6, 0xffffffff, 0x80, 0xe581, 0x2, 0x3, 0x6, 0x70, 0xe, 0x446c, 0x3, 0x3, 0x0, 0x5, 0x8, 0x757, 0xb, 0x3, 0x10000, 0x10, 0x8, 0x6e4, 0xff90, 0x8001, 0x79c, 0x8f, 0x2000, 0x100000001, 0x2, 0xffffffff, 0x6, 0x1, 0x0, 0x7c, 0x2, 0x8, 0x0, 0x100, 0x98d1, 0x4, 0x8000000000000001, 0x6, 0x5, 0x23, 0x4, 0x81f, 0x7, 0xa, 0x1d, 0x8000000000000001, 0x3, 0x9, 0x6, 0x1ff, 0x4, 0x882, 0x7, 0x0, 0x8, 0x5, 0x4f75, 0xffffffff82843f2a, 0x1, 0x0, 0x4a88, 0x8e09, 0x3, 0x7fffffffffffffff, 0x278, 0x2, 0x0, 0x6, 0x5, 0x1e561fdc000000, 0x7, 0xde0, 0x0, 0x7, 0x2, 0x100000000000000, 0x3, 0xfffffffffffffffb, 0xc9, 0x3]}) ioctl$SNDCTL_SYNTH_INFO(r3, 0xc08c5102, &(0x7f0000002a80)={"5ed122b0eb8e6cc6491c7ae95c84647b6e03baf93c80d1b385a0f9837819", 0x6, 0x2, 0x1, 0x80, 0x9, 0x8, 0x6, 0x4, [0x1, 0x2, 0xc, 0x0, 0x7, 0xf06, 0x8, 0x1, 0x5, 0x200, 0x6, 0x7, 0x40, 0x140000, 0x0, 0x4, 0x9a6e, 0x9, 0x3b]}) recvmmsg(r0, &(0x7f00000097c0)=[{{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002b40)=""/77, 0x4d}, {&(0x7f0000002bc0)=""/121, 0x79}, {&(0x7f0000002c40)=""/184, 0xb8}, {&(0x7f0000002d00)=""/48, 0x30}, {&(0x7f0000002d40)=""/203, 0xcb}, {&(0x7f0000002e40)=""/73, 0x49}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/87, 0x57}, {&(0x7f0000003f40)=""/12, 0xc}, {&(0x7f0000003f80)=""/161, 0xa1}], 0xa, &(0x7f0000004100)=""/6, 0x6}, 0x3}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000004140)=""/228, 0xe4}, {&(0x7f0000004240)=""/56, 0x38}], 0x2, &(0x7f00000042c0)=""/13, 0xd}, 0x1}, {{&(0x7f0000004300)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000004600)=[{&(0x7f0000004380)=""/94, 0x5e}, {&(0x7f0000004400)=""/79, 0x4f}, {&(0x7f0000004480)=""/101, 0x65}, {&(0x7f0000004500)=""/235, 0xeb}], 0x4, 0xfffffffffffffffd}, 0x9}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/66, 0x42}, {&(0x7f00000056c0)=""/252, 0xfc}, {&(0x7f00000057c0)=""/103, 0x67}, {&(0x7f0000005840)=""/181, 0xb5}, {&(0x7f0000005900)=""/116, 0x74}, {&(0x7f0000005980)=""/218, 0xda}], 0x7, &(0x7f0000005b00)=""/4096, 0x1000}}, {{&(0x7f0000006b00)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000008dc0)=[{&(0x7f0000006b80)=""/81, 0x51}, {&(0x7f0000006c00)=""/4096, 0x1000}, {&(0x7f0000007c00)=""/4096, 0x1000}, {&(0x7f0000008c00)=""/180, 0xb4}, {&(0x7f0000008cc0)=""/36, 0x24}, {&(0x7f0000008d00)=""/162, 0xa2}], 0x6, &(0x7f0000008e40)=""/83, 0x53}}, {{&(0x7f0000008ec0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000009180)=[{&(0x7f0000008f40)=""/247, 0xf7}, {&(0x7f0000009040)=""/108, 0x6c}, {&(0x7f00000090c0)=""/152, 0x98}], 0x3, &(0x7f00000091c0)=""/2, 0x2}, 0x8b}, {{0x0, 0x0, &(0x7f0000009640)=[{&(0x7f0000009200)}, {&(0x7f0000009240)=""/150, 0x96}, {&(0x7f0000009300)=""/81, 0x51}, {&(0x7f0000009380)=""/153, 0x99}, {&(0x7f0000009440)=""/213, 0xd5}, {&(0x7f0000009540)=""/170, 0xaa}, {&(0x7f0000009600)=""/10, 0xa}], 0x7, &(0x7f00000096c0)=""/212, 0xd4}, 0x1}], 0x7, 0x10000, &(0x7f0000009980)={0x77359400}) 47.433433ms ago: executing program 4 (id=245): unshare(0x200) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041cf700c900ad81"], 0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x540b, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x8fb90000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 0s ago: executing program 3 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x805936d41ec618b7}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, 0x0, &(0x7f0000000080)=0xfffffffffffffe1b) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x6, 0x0, 0xffffffffffffffff, 0xfffffffdffffffff) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r5, 0x60}], 0x1, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8001a0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts. [ 92.057982][ T932] cfg80211: failed to load regulatory.db [ 92.379442][ T5779] cgroup: Unknown subsys name 'net' [ 92.641114][ T5779] cgroup: Unknown subsys name 'cpuset' [ 92.706011][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.603003][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.087760][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.089972][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.090415][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.096469][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.102121][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.104142][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.110195][ T5111] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.117863][ T5111] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.121699][ T5111] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.123451][ T5111] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.238889][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.240314][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.240700][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.241859][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.243009][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.310368][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.313173][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.314902][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.318943][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.321984][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.324455][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.330486][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.341120][ T5111] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.344638][ T5111] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.346779][ T5111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.118026][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 98.186811][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 98.193411][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 98.479494][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 98.509324][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 98.610483][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.611399][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.611809][ T5793] bridge_slave_0: entered allmulticast mode [ 98.613800][ T5793] bridge_slave_0: entered promiscuous mode [ 98.703078][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.703180][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.703357][ T5793] bridge_slave_1: entered allmulticast mode [ 98.705296][ T5793] bridge_slave_1: entered promiscuous mode [ 98.746299][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.746414][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.746539][ T5799] bridge_slave_0: entered allmulticast mode [ 98.748712][ T5799] bridge_slave_0: entered promiscuous mode [ 98.750551][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.750675][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.750836][ T5792] bridge_slave_0: entered allmulticast mode [ 98.752928][ T5792] bridge_slave_0: entered promiscuous mode [ 98.831712][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.831855][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.832048][ T5799] bridge_slave_1: entered allmulticast mode [ 98.834251][ T5799] bridge_slave_1: entered promiscuous mode [ 98.839092][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.839417][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.839842][ T5792] bridge_slave_1: entered allmulticast mode [ 98.847800][ T5792] bridge_slave_1: entered promiscuous mode [ 98.955116][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.015803][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.038202][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.180489][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.231497][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.234400][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.234683][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.235325][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.252573][ T5798] Bluetooth: hci1: command tx timeout [ 99.252855][ T5798] Bluetooth: hci0: command tx timeout [ 99.278805][ T5800] bridge_slave_0: entered allmulticast mode [ 99.280642][ T5800] bridge_slave_0: entered promiscuous mode [ 99.308065][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.308189][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.308356][ T5801] bridge_slave_0: entered allmulticast mode [ 99.310446][ T5801] bridge_slave_0: entered promiscuous mode [ 99.317904][ T5111] Bluetooth: hci2: command tx timeout [ 99.364838][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.364971][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.365120][ T5800] bridge_slave_1: entered allmulticast mode [ 99.368067][ T5800] bridge_slave_1: entered promiscuous mode [ 99.396975][ T5111] Bluetooth: hci3: command tx timeout [ 99.397059][ T5111] Bluetooth: hci4: command tx timeout [ 99.418061][ T5793] team0: Port device team_slave_0 added [ 99.418290][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.418423][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.418596][ T5801] bridge_slave_1: entered allmulticast mode [ 99.421524][ T5801] bridge_slave_1: entered promiscuous mode [ 99.495142][ T5793] team0: Port device team_slave_1 added [ 99.515100][ T5799] team0: Port device team_slave_0 added [ 99.521700][ T5792] team0: Port device team_slave_0 added [ 99.569087][ T5799] team0: Port device team_slave_1 added [ 99.571647][ T5792] team0: Port device team_slave_1 added [ 99.574584][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.608454][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.650496][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.653646][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.654707][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.654719][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.654739][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.774484][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.774498][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.774519][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.797111][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.797182][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.797256][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.801898][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.801948][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.802022][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.920214][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.920234][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.920254][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.921302][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.921313][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.921333][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.923552][ T5800] team0: Port device team_slave_0 added [ 99.978939][ T5801] team0: Port device team_slave_0 added [ 100.036376][ T5800] team0: Port device team_slave_1 added [ 100.038400][ T5801] team0: Port device team_slave_1 added [ 100.159474][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.159489][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.159508][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.529035][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.529054][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.529083][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.553388][ T5793] hsr_slave_0: entered promiscuous mode [ 100.558973][ T5793] hsr_slave_1: entered promiscuous mode [ 100.611876][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.611895][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.611924][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.613155][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.613167][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.613186][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.639727][ T5799] hsr_slave_0: entered promiscuous mode [ 100.643626][ T5799] hsr_slave_1: entered promiscuous mode [ 100.648271][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 100.648559][ T5799] Cannot create hsr debugfs directory [ 100.686114][ T5792] hsr_slave_0: entered promiscuous mode [ 100.690069][ T5792] hsr_slave_1: entered promiscuous mode [ 100.692723][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 100.692797][ T5792] Cannot create hsr debugfs directory [ 100.934979][ T5800] hsr_slave_0: entered promiscuous mode [ 100.941901][ T5800] hsr_slave_1: entered promiscuous mode [ 100.942609][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 100.942628][ T5800] Cannot create hsr debugfs directory [ 100.964014][ T5801] hsr_slave_0: entered promiscuous mode [ 100.965167][ T5801] hsr_slave_1: entered promiscuous mode [ 100.968662][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 100.968738][ T5801] Cannot create hsr debugfs directory [ 101.315693][ T5798] Bluetooth: hci0: command tx timeout [ 101.315726][ T5798] Bluetooth: hci1: command tx timeout [ 101.395538][ T5111] Bluetooth: hci2: command tx timeout [ 101.475592][ T5111] Bluetooth: hci4: command tx timeout [ 101.475624][ T5111] Bluetooth: hci3: command tx timeout [ 101.873575][ T5793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.903029][ T5793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.943806][ T5793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.992684][ T5793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.100378][ T5799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.133592][ T5799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.171369][ T5799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.227577][ T5799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.351745][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.396700][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.434758][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.471270][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.612146][ T5800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.651769][ T5800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.694582][ T5800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.734389][ T5800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.801981][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.868806][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.929416][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.976878][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.013954][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.033924][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.072681][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.073973][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.120465][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.120597][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.147504][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.232875][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.284591][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.284736][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.307895][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.346954][ T2161] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.347130][ T2161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.405983][ T5798] Bluetooth: hci1: command tx timeout [ 103.406015][ T5798] Bluetooth: hci0: command tx timeout [ 103.432120][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.469977][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.475619][ T5111] Bluetooth: hci2: command tx timeout [ 103.501550][ T2161] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.502648][ T2161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.556450][ T5111] Bluetooth: hci3: command tx timeout [ 103.556481][ T5111] Bluetooth: hci4: command tx timeout [ 103.581103][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.581246][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.661482][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.689794][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.722648][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.722862][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.782076][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.782590][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.834718][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.879709][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.879928][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.931622][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.931839][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.973337][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.213573][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.378652][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.544101][ T5799] veth0_vlan: entered promiscuous mode [ 104.629729][ T5799] veth1_vlan: entered promiscuous mode [ 104.727045][ T5792] veth0_vlan: entered promiscuous mode [ 104.730264][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.798666][ T5792] veth1_vlan: entered promiscuous mode [ 104.843693][ T5799] veth0_macvtap: entered promiscuous mode [ 104.880662][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.882916][ T5799] veth1_macvtap: entered promiscuous mode [ 104.885198][ T5793] veth0_vlan: entered promiscuous mode [ 104.942915][ T5793] veth1_vlan: entered promiscuous mode [ 104.980562][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.982137][ T5792] veth0_macvtap: entered promiscuous mode [ 104.983597][ T5800] veth0_vlan: entered promiscuous mode [ 105.030664][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.044140][ T5792] veth1_macvtap: entered promiscuous mode [ 105.073972][ T5800] veth1_vlan: entered promiscuous mode [ 105.075232][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.096548][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.105225][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.132531][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.237953][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.238534][ T5801] veth0_vlan: entered promiscuous mode [ 105.287373][ T5793] veth0_macvtap: entered promiscuous mode [ 105.306545][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.309993][ T5793] veth1_macvtap: entered promiscuous mode [ 105.403883][ T5801] veth1_vlan: entered promiscuous mode [ 105.427512][ T2161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.433702][ T2161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.456765][ T2161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.476599][ T5798] Bluetooth: hci0: command tx timeout [ 105.476630][ T5798] Bluetooth: hci1: command tx timeout [ 105.503131][ T2161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.530334][ T5800] veth0_macvtap: entered promiscuous mode [ 105.534119][ T2161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.534143][ T2161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.557531][ T5111] Bluetooth: hci2: command tx timeout [ 105.599770][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.624237][ T5800] veth1_macvtap: entered promiscuous mode [ 105.635678][ T5111] Bluetooth: hci4: command tx timeout [ 105.635709][ T5111] Bluetooth: hci3: command tx timeout [ 105.703223][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.760752][ T2161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.760772][ T2161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.799957][ T175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.845415][ T175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.868678][ T175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.889557][ T175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.893173][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.908155][ T5801] veth0_macvtap: entered promiscuous mode [ 105.993486][ T5801] veth1_macvtap: entered promiscuous mode [ 106.008531][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.025591][ T2161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.025612][ T2161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.134095][ T2161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.134873][ T2161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.172906][ T2161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.239242][ T2161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.264810][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.264832][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.306543][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.405223][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.442173][ T5913] FAULT_INJECTION: forcing a failure. [ 106.442173][ T5913] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.442224][ T5913] CPU: 0 UID: 0 PID: 5913 Comm: syz.3.6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 106.442249][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.442270][ T5913] Call Trace: [ 106.442282][ T5913] [ 106.442292][ T5913] dump_stack_lvl+0xe8/0x150 [ 106.442335][ T5913] should_fail_ex+0x46b/0x600 [ 106.442368][ T5913] _copy_from_user+0x2d/0xb0 [ 106.442400][ T5913] ___sys_sendmsg+0x1c6/0x360 [ 106.442422][ T5913] ? __lock_acquire+0x6b5/0x2cf0 [ 106.442455][ T5913] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.442483][ T5913] ? kstrtouint+0x6e/0xe0 [ 106.442534][ T5913] ? __fget_files+0x2a/0x420 [ 106.442564][ T5913] ? __fget_files+0x3a6/0x420 [ 106.442609][ T5913] __sys_sendmmsg+0x282/0x4e0 [ 106.442638][ T5913] ? __pfx___sys_sendmmsg+0x10/0x10 [ 106.442670][ T5913] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 106.442707][ T5913] ? ksys_write+0x248/0x270 [ 106.442731][ T5913] ? __pfx_ksys_write+0x10/0x10 [ 106.442760][ T5913] __x64_sys_sendmmsg+0xa0/0xc0 [ 106.442784][ T5913] do_syscall_64+0x14d/0xf80 [ 106.442813][ T5913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.442834][ T5913] ? trace_irq_disable+0x37/0x100 [ 106.442853][ T5913] ? clear_bhb_loop+0x40/0x90 [ 106.442880][ T5913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.442901][ T5913] RIP: 0033:0x7f6b90cdbf79 [ 106.442925][ T5913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.442944][ T5913] RSP: 002b:00007f6b8ef2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 106.442966][ T5913] RAX: ffffffffffffffda RBX: 00007f6b90f55fa0 RCX: 00007f6b90cdbf79 [ 106.442982][ T5913] RDX: 0000000000000001 RSI: 0000200000008700 RDI: 0000000000000003 [ 106.442995][ T5913] RBP: 00007f6b8ef2e090 R08: 0000000000000000 R09: 0000000000000000 [ 106.443008][ T5913] R10: 0000000004048810 R11: 0000000000000246 R12: 0000000000000001 [ 106.443021][ T5913] R13: 00007f6b90f56038 R14: 00007f6b90f55fa0 R15: 00007ffe282fbea8 [ 106.443055][ T5913] [ 106.674313][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.674336][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.732120][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.763318][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.806955][ T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.832774][ T44] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.981866][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.981889][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.094204][ T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.094227][ T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.185629][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 107.326431][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.326454][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.392228][ T9] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 107.392258][ T9] usb 1-1: config 0 has no interface number 0 [ 107.392309][ T9] usb 1-1: config 0 interface 11 has no altsetting 0 [ 107.392355][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 107.392381][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.502764][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.502786][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.539860][ T9] usb 1-1: config 0 descriptor?? [ 107.707308][ T9] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 107.707807][ T9] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 7 [ 107.816211][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.816254][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.949888][ T9] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 107.951791][ T9] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 107.968796][ T9] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 107.968957][ T9] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 108.018963][ T9] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 108.019120][ T9] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 108.149894][ T5917] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 108.212411][ T9] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 108.312763][ T9] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 108.313871][ T9] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 108.314832][ T9] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 108.314895][ T9] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 108.325029][ T9] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 108.356389][ T9] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 108.431724][ T9] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 108.775832][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.813395][ T5917] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 108.863075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.863147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.955489][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 108.962874][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.962908][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.962949][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 108.962972][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.030598][ T31] usb 2-1: config 0 descriptor?? [ 109.042317][ T31] hub 2-1:0.0: USB hub found [ 109.272327][ T31] hub 2-1:0.0: 1 port detected [ 109.295242][ T5925] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.692654][ T5925] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 109.887792][ T5803] hub 2-1:0.0: activate --> -90 [ 109.931432][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 110.748357][ T5803] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 110.748390][ T5803] usb 2-1-port1: connect-debounce failed [ 110.750769][ T5803] usb 2-1-port1: cannot disable (err = -71) [ 110.876103][ T5921] usb 2-1: Failed to suspend device, error -71 [ 110.925246][ T5803] usb 2-1: USB disconnect, device number 2 [ 111.199371][ T807] usb 1-1: USB disconnect, device number 2 [ 111.267098][ T807] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 111.305049][ T807] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 111.317370][ T807] keyspan 1-1:0.11: device disconnected [ 111.959658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.959776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.959895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.959928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.995328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.995378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.995463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.995536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.414441][ T5953] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13'. [ 116.215505][ T5803] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.519958][ T5976] Bluetooth: MGMT ver 1.23 [ 117.687105][ T5858] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 117.765830][ T49] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.842897][ T5858] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 117.842931][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.842953][ T5858] usb 1-1: Product: syz [ 117.842968][ T5858] usb 1-1: Manufacturer: syz [ 117.842984][ T5858] usb 1-1: SerialNumber: syz [ 117.875568][ T5803] usb 5-1: device descriptor read/64, error -71 [ 117.924259][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 117.924294][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 117.924318][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 117.924345][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 117.975242][ T49] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 117.975274][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.995830][ T49] usb 3-1: Product: syz [ 117.995851][ T49] usb 3-1: Manufacturer: syz [ 117.995867][ T49] usb 3-1: SerialNumber: syz [ 118.030309][ T49] usb 3-1: config 0 descriptor?? [ 118.146730][ T5803] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.347583][ T49] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 118.402749][ T5858] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 118.402817][ T5858] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 118.405643][ T5803] usb 5-1: Using ep0 maxpacket: 32 [ 118.437704][ T5803] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 118.437734][ T5803] usb 5-1: config 0 has no interface number 0 [ 118.437769][ T5803] usb 5-1: config 0 interface 119 has no altsetting 0 [ 118.441549][ T5803] usb 5-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=da.f9 [ 118.441577][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.441599][ T5803] usb 5-1: Product: syz [ 118.441613][ T5803] usb 5-1: Manufacturer: syz [ 118.441627][ T5803] usb 5-1: SerialNumber: syz [ 118.509214][ T5803] usb 5-1: config 0 descriptor?? [ 118.591565][ T5981] usb 3-1: USB disconnect, device number 2 [ 118.628158][ T5871] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.767838][ T5803] mos7840 5-1:0.119: required endpoints missing [ 118.795486][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 118.803607][ T5871] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 118.803645][ T5871] usb 4-1: config 1 interface 0 has no altsetting 0 [ 118.841101][ T5871] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.40 [ 118.841135][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.841157][ T5871] usb 4-1: Product: Ó¿ [ 118.841171][ T5871] usb 4-1: Manufacturer: Ñ… [ 118.841187][ T5871] usb 4-1: SerialNumber: ྀ䧭韹å¸í—闵Ꚇíœä„Ší‘ˆä”Ÿë¸‡æ©–ᾄçºî®á·•ë‡é¥ì® ïª¸éŽ©ç¹¥ç¹°ä±‡èšŒëœ à¢ªæ“ƒè‹¿îµè£ä“¡ä¾­Ã¤å²‹ä£¡ã†¸è·†ïŽë§µë•¤é®ç· [ 118.931559][ T5803] usb 5-1: USB disconnect, device number 3 [ 119.443173][ T5871] usbhid 4-1:1.0: can't add hid device: -71 [ 119.446055][ T5871] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 119.476956][ T5994] netlink: 104 bytes leftover after parsing attributes in process `syz.4.23'. [ 119.599750][ T5871] usb 4-1: USB disconnect, device number 2 [ 121.941466][ T5858] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 121.953945][ T5858] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 121.959236][ T5858] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 121.959442][ T5858] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 122.022123][ T5858] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 122.087599][ T5858] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 122.162842][ T6005] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.189680][ T5858] usb 1-1: USB disconnect, device number 3 [ 122.189758][ T5798] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 122.189797][ T5798] CPU: 1 UID: 0 PID: 5798 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 122.189822][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 122.189836][ T5798] Workqueue: hci3 hci_rx_work [ 122.189891][ T5798] Call Trace: [ 122.189900][ T5798] [ 122.189910][ T5798] dump_stack_lvl+0xe8/0x150 [ 122.189946][ T5798] sysfs_create_dir_ns+0x271/0x2a0 [ 122.189969][ T5798] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 122.189994][ T5798] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 122.190021][ T5798] ? rt_spin_unlock+0x160/0x200 [ 122.190047][ T5798] kobject_add_internal+0x631/0xd10 [ 122.190089][ T5798] kobject_add+0x163/0x240 [ 122.190127][ T5798] ? __pfx_kobject_add+0x10/0x10 [ 122.190167][ T5798] ? get_device_parent+0x370/0x3a0 [ 122.190206][ T5798] device_add+0x408/0xb80 [ 122.190253][ T5798] hci_conn_add_sysfs+0xd5/0x210 [ 122.190289][ T5798] le_conn_complete_evt+0xf1d/0x1430 [ 122.190326][ T5798] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 122.190353][ T5798] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 122.190384][ T5798] ? lockdep_hardirqs_on+0x7a/0x110 [ 122.190415][ T5798] ? skb_pull_data+0xfb/0x200 [ 122.190445][ T5798] hci_le_enh_conn_complete_evt+0x189/0x490 [ 122.190472][ T5798] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 122.190504][ T5798] hci_event_packet+0x7af/0x12c0 [ 122.190543][ T5798] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 122.190567][ T5798] ? __pfx_hci_event_packet+0x10/0x10 [ 122.190599][ T5798] ? rt_spin_unlock+0x14f/0x200 [ 122.190632][ T5798] ? hci_send_to_monitor+0xe2/0x590 [ 122.190662][ T5798] hci_rx_work+0x3ee/0x1030 [ 122.190702][ T5798] ? process_scheduled_works+0xa0f/0x17a0 [ 122.190731][ T5798] process_scheduled_works+0xaec/0x17a0 [ 122.190787][ T5798] ? __pfx_process_scheduled_works+0x10/0x10 [ 122.190820][ T5798] ? assign_work+0x3d5/0x5e0 [ 122.190852][ T5798] worker_thread+0xa50/0xfc0 [ 122.190964][ T5798] kthread+0x388/0x470 [ 122.190998][ T5798] ? __pfx_worker_thread+0x10/0x10 [ 122.191022][ T5798] ? __pfx_kthread+0x10/0x10 [ 122.191058][ T5798] ret_from_fork+0x51e/0xb90 [ 122.191090][ T5798] ? __pfx_ret_from_fork+0x10/0x10 [ 122.191116][ T5798] ? __switch_to+0xc7d/0x1400 [ 122.191144][ T5798] ? __pfx_kthread+0x10/0x10 [ 122.191178][ T5798] ret_from_fork_asm+0x1a/0x30 [ 122.191238][ T5798] [ 122.191269][ T5798] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 122.191308][ T5798] Bluetooth: hci3: failed to register connection device [ 125.307972][ T6019] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.857886][ T6022] usb usb8: usbfs: process 6022 (syz.0.31) did not claim interface 0 before use [ 130.267182][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.445736][ T9] usb 2-1: config 0 has an invalid interface number: 111 but max is 0 [ 130.445768][ T9] usb 2-1: config 0 has no interface number 0 [ 130.445878][ T9] usb 2-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 130.445913][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.452282][ T9] usb 2-1: config 0 descriptor?? [ 130.472879][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 130.575472][ T5803] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 132.492372][ T9] gspca_ov534_9: reg_w failed -110 [ 132.525435][ T5803] usb 4-1: Using ep0 maxpacket: 32 [ 132.539498][ T5803] usb 4-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 132.539528][ T5803] usb 4-1: config 47 has no interfaces? [ 132.544515][ T5803] usb 4-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 132.544547][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.544568][ T5803] usb 4-1: Product: syz [ 132.544584][ T5803] usb 4-1: Manufacturer: syz [ 132.544599][ T5803] usb 4-1: SerialNumber: syz [ 132.845713][ T5803] usb 4-1: USB disconnect, device number 3 [ 132.915619][ T9] gspca_ov534_9: Unknown sensor 0000 [ 132.915735][ T9] ov534_9 2-1:0.111: probe with driver ov534_9 failed with error -22 [ 132.940313][ T9] usb 2-1: USB disconnect, device number 3 [ 132.946729][ T6059] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 135.167783][ T6059] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.526985][ T6076] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 138.288499][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.288580][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.905498][ T5803] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 139.113545][ T5803] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.113576][ T5803] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 139.141579][ T5803] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 139.141615][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.141638][ T5803] usb 2-1: Product: syz [ 139.141659][ T5803] usb 2-1: Manufacturer: syz [ 139.141674][ T5803] usb 2-1: SerialNumber: syz [ 139.307414][ T5803] usb 2-1: config 0 descriptor?? [ 142.335683][ T6111] netlink: 44 bytes leftover after parsing attributes in process `syz.1.54'. [ 142.879971][ T5858] usb 2-1: USB disconnect, device number 4 [ 143.266631][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 143.465493][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 143.472925][ T9] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 143.472954][ T9] usb 1-1: config 0 has no interface number 0 [ 143.473010][ T9] usb 1-1: config 0 interface 119 has no altsetting 0 [ 143.475600][ T9] usb 1-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=da.f9 [ 143.475707][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.475761][ T9] usb 1-1: Product: syz [ 143.475813][ T9] usb 1-1: Manufacturer: syz [ 143.475847][ T9] usb 1-1: SerialNumber: syz [ 143.590993][ T9] usb 1-1: config 0 descriptor?? [ 143.863973][ T9] mos7840 1-1:0.119: required endpoints missing [ 144.129378][ T5982] usb 1-1: USB disconnect, device number 4 [ 144.154375][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.64'. [ 144.307807][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 144.465545][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 144.471559][ T31] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 144.471590][ T31] usb 3-1: config 0 has no interface number 0 [ 144.504469][ T31] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=f8.c5 [ 144.504502][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.504524][ T31] usb 3-1: Product: syz [ 144.504540][ T31] usb 3-1: Manufacturer: syz [ 144.504556][ T31] usb 3-1: SerialNumber: syz [ 144.561035][ T31] usb 3-1: config 0 descriptor?? [ 146.942330][ T6139] RDS: rds_bind could not find a transport for fe80::12, load rds_tcp or rds_rdma? [ 148.030917][ T6153] comedi comedi4: bad chanlist[2]=0x00000009 chan=9 range length=2 [ 148.064312][ T5982] usb 3-1: USB disconnect, device number 3 [ 150.485818][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 150.635487][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 150.637954][ T9] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 150.637982][ T9] usb 3-1: config 0 has no interface number 0 [ 150.638048][ T9] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.638077][ T9] usb 3-1: config 0 interface 85 has no altsetting 0 [ 150.642310][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 150.642342][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.642363][ T9] usb 3-1: Product: syz [ 150.642378][ T9] usb 3-1: Manufacturer: syz [ 150.642394][ T9] usb 3-1: SerialNumber: syz [ 150.708760][ T9] usb 3-1: config 0 descriptor?? [ 151.103549][ T9] appletouch 3-1:0.85: Failed to read mode from device. [ 151.103787][ T9] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 151.669165][ T9] usb 3-1: USB disconnect, device number 4 [ 152.868715][ T6190] usb usb7: usbfs: process 6190 (syz.2.85) did not claim interface 0 before use [ 152.894127][ T6186] syz_tun: entered promiscuous mode [ 152.898311][ T6186] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 154.307214][ T932] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 155.800907][ T932] usb 1-1: not running at top speed; connect to a high speed hub [ 155.802755][ T932] usb 1-1: config 0 has an invalid interface number: 251 but max is 1 [ 155.802787][ T932] usb 1-1: config 0 has an invalid interface number: 116 but max is 1 [ 155.802810][ T932] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 155.802830][ T932] usb 1-1: config 0 has no interface number 0 [ 155.802847][ T932] usb 1-1: config 0 has no interface number 1 [ 155.802908][ T932] usb 1-1: config 0 interface 251 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 155.802940][ T932] usb 1-1: config 0 interface 251 altsetting 6 endpoint 0xC has invalid maxpacket 2015, setting to 1023 [ 155.802966][ T932] usb 1-1: config 0 interface 251 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 155.802991][ T932] usb 1-1: config 0 interface 251 altsetting 6 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 155.803019][ T932] usb 1-1: config 0 interface 251 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 155.803040][ T932] usb 1-1: config 0 interface 251 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 155.803064][ T932] usb 1-1: config 0 interface 251 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 155.803085][ T932] usb 1-1: config 0 interface 251 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 155.803124][ T932] usb 1-1: config 0 interface 116 altsetting 3 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 155.803152][ T932] usb 1-1: config 0 interface 116 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 155.803309][ T932] usb 1-1: config 0 interface 116 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 155.803335][ T932] usb 1-1: config 0 interface 116 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 155.803360][ T932] usb 1-1: config 0 interface 116 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 155.803384][ T932] usb 1-1: config 0 interface 116 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 155.803407][ T932] usb 1-1: config 0 interface 116 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 155.803429][ T932] usb 1-1: config 0 interface 116 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 155.803451][ T932] usb 1-1: config 0 interface 116 altsetting 3 has 9 endpoint descriptors, different from the interface descriptor's value: 11 [ 155.803480][ T932] usb 1-1: config 0 interface 251 has no altsetting 0 [ 155.803499][ T932] usb 1-1: config 0 interface 116 has no altsetting 0 [ 155.824008][ T932] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=61.af [ 155.824123][ T932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.824187][ T932] usb 1-1: Product: ꑪწĮåŠç·¤æ°¿ï—£á’€å®©é¥ªá ‹ä–ƒæ±Œä£žèº‘凡壖੒鋦儯廕钙è„ìŽ­ïŸŠë¾„çˆ›äœµâ·°ç¾žå˜æª¤ì§‰Ò˜â†›âŒ‹ì¥Žá»ì‰ºë…„噞ិⱄ⨶仨衅욙苑ഺ뉹᧿迸熤쭯ᘸ婑溔鈶팿৞쵴ꫢà¤íŽœêŒ [ 155.824259][ T932] usb 1-1: Manufacturer: Б [ 155.824293][ T932] usb 1-1: SerialNumber: င [ 155.866700][ T932] usb 1-1: config 0 descriptor?? [ 155.976720][ T6199] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 156.319263][ T932] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 156.320215][ T932] dvb-usb: bulk message failed: -8 (2/0) [ 156.409225][ T932] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 156.453005][ T932] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) error while loading driver (-19) [ 156.454106][ T932] dvb_usb_cxusb 1-1:0.251: probe with driver dvb_usb_cxusb failed with error -22 [ 156.666439][ T932] cdc_ether 1-1:0.116: skipping garbage [ 156.666457][ T932] cdc_ether 1-1:0.116: skipping garbage [ 156.666471][ T932] usb 1-1: bad CDC descriptors [ 156.668710][ T932] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 156.668800][ T932] dvb-usb: bulk message failed: -8 (2/0) [ 156.703352][ T932] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 156.708833][ T932] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) error while loading driver (-19) [ 156.709203][ T932] dvb_usb_cxusb 1-1:0.116: probe with driver dvb_usb_cxusb failed with error -22 [ 156.777195][ T932] usb 1-1: USB disconnect, device number 5 [ 158.983448][ T6226] FAULT_INJECTION: forcing a failure. [ 158.983448][ T6226] name failslab, interval 1, probability 0, space 0, times 1 [ 158.983489][ T6226] CPU: 0 UID: 0 PID: 6226 Comm: syz.3.97 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 158.983519][ T6226] Tainted: [L]=SOFTLOCKUP [ 158.983526][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.983540][ T6226] Call Trace: [ 158.983548][ T6226] [ 158.983558][ T6226] dump_stack_lvl+0xe8/0x150 [ 158.983595][ T6226] should_fail_ex+0x46b/0x600 [ 158.983626][ T6226] should_failslab+0xa8/0x100 [ 158.983653][ T6226] __kmalloc_noprof+0xdf/0x7b0 [ 158.983693][ T6226] ? sock_kmalloc+0xd6/0x160 [ 158.983721][ T6226] sock_kmalloc+0xd6/0x160 [ 158.983746][ T6226] ____sys_sendmsg+0x1c2/0xac0 [ 158.983777][ T6226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.983813][ T6226] ? import_iovec+0x73/0xa0 [ 158.983846][ T6226] ___sys_sendmsg+0x2a5/0x360 [ 158.983867][ T6226] ? __lock_acquire+0x6b5/0x2cf0 [ 158.983902][ T6226] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.983961][ T6226] ? __fget_files+0x2a/0x420 [ 158.983990][ T6226] ? __fget_files+0x3a6/0x420 [ 158.984030][ T6226] __x64_sys_sendmsg+0x1c3/0x2a0 [ 158.984056][ T6226] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.984087][ T6226] ? __pfx_ksys_write+0x10/0x10 [ 158.984120][ T6226] do_syscall_64+0x14d/0xf80 [ 158.984149][ T6226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.984170][ T6226] ? trace_irq_disable+0x37/0x100 [ 158.984188][ T6226] ? clear_bhb_loop+0x40/0x90 [ 158.984220][ T6226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.984242][ T6226] RIP: 0033:0x7f6b90cdbf79 [ 158.984275][ T6226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.984294][ T6226] RSP: 002b:00007f6b8ef2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.984317][ T6226] RAX: ffffffffffffffda RBX: 00007f6b90f55fa0 RCX: 00007f6b90cdbf79 [ 158.984333][ T6226] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 158.984346][ T6226] RBP: 00007f6b8ef2e090 R08: 0000000000000000 R09: 0000000000000000 [ 158.984359][ T6226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.984372][ T6226] R13: 00007f6b90f56038 R14: 00007f6b90f55fa0 R15: 00007ffe282fbea8 [ 158.984406][ T6226] [ 159.818582][ T6235] netlink: 592 bytes leftover after parsing attributes in process `syz.4.99'. [ 159.819340][ T6235] netlink: 40 bytes leftover after parsing attributes in process `syz.4.99'. [ 159.941994][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 160.924448][ T6257] netlink: 52 bytes leftover after parsing attributes in process `syz.4.102'. [ 160.965695][ T6256] binder: BINDER_SET_CONTEXT_MGR already set [ 160.965707][ T6256] binder: 6247:6256 ioctl 4018620d 2000000000c0 returned -16 [ 160.967509][ T6256] binder: BINDER_SET_CONTEXT_MGR already set [ 160.967518][ T6256] binder: 6247:6256 ioctl 4018620d 200000000040 returned -16 [ 161.541947][ T5871] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 163.400578][ T5871] usb 5-1: device descriptor read/64, error -71 [ 163.583917][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 163.647950][ T5871] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 163.744164][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 163.746601][ T31] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 163.746631][ T31] usb 1-1: config 0 has no interface number 0 [ 163.746665][ T31] usb 1-1: config 0 interface 119 has no altsetting 0 [ 163.749747][ T31] usb 1-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=da.f9 [ 163.749777][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.749799][ T31] usb 1-1: Product: syz [ 163.749814][ T31] usb 1-1: Manufacturer: syz [ 163.749830][ T31] usb 1-1: SerialNumber: syz [ 163.788759][ T5871] usb 5-1: device descriptor read/64, error -71 [ 163.824571][ T31] usb 1-1: config 0 descriptor?? [ 163.905612][ T5871] usb usb5-port1: attempt power cycle [ 164.061229][ T31] mos7840 1-1:0.119: required endpoints missing [ 164.111267][ T31] usb 1-1: USB disconnect, device number 6 [ 164.332151][ T5871] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 164.332685][ T5803] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 164.365355][ T5871] usb 5-1: device descriptor read/8, error -71 [ 164.429639][ T6286] netlink: 840 bytes leftover after parsing attributes in process `syz.3.112'. [ 164.504494][ T5803] usb 2-1: Using ep0 maxpacket: 32 [ 164.506388][ T5803] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 164.506417][ T5803] usb 2-1: config 0 has no interface number 0 [ 164.512501][ T5803] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 164.512540][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.512562][ T5803] usb 2-1: Product: syz [ 164.512577][ T5803] usb 2-1: Manufacturer: syz [ 164.512592][ T5803] usb 2-1: SerialNumber: syz [ 164.595814][ T5803] usb 2-1: config 0 descriptor?? [ 164.616367][ T5803] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 164.730158][ T5981] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 164.839195][ T5803] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 164.867245][ T5803] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 164.890930][ T5981] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 164.890958][ T5981] usb 3-1: config 1 has no interface number 0 [ 164.891004][ T5981] usb 3-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.891027][ T5981] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 164.891057][ T5981] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 164.893864][ T5981] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 164.893890][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.893906][ T5981] usb 3-1: Product: syz [ 164.893919][ T5981] usb 3-1: Manufacturer: syz [ 164.893932][ T5981] usb 3-1: SerialNumber: syz [ 164.936014][ T6291] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 164.959492][ T5981] usb 3-1: Expected 3 endpoints, found: 2 [ 165.049397][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 165.053149][ T5906] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 165.073366][ T932] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 165.211075][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.211144][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.211161][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 165.211191][ T5906] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.211210][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.240854][ T932] usb 1-1: Using ep0 maxpacket: 16 [ 165.280630][ T5906] usb 4-1: config 0 descriptor?? [ 165.288809][ T932] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.288838][ T932] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.304435][ T932] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.304481][ T932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.304503][ T932] usb 1-1: Product: syz [ 165.304545][ T932] usb 1-1: Manufacturer: syz [ 165.304593][ T932] usb 1-1: SerialNumber: syz [ 165.381028][ T5871] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 165.406753][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 165.406791][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16943, setting to 1024 [ 165.406878][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 165.406924][ T5871] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.406948][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.481341][ T6302] Zero length message leads to an empty skb [ 165.500255][ T5871] usb 5-1: config 0 descriptor?? [ 165.574100][ T932] usb 1-1: 0:2 : does not exist [ 165.619521][ T932] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 166.221226][ T5906] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 166.475694][ T6308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.490815][ T6308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.553371][ T932] usb 1-1: USB disconnect, device number 7 [ 166.864627][ T5858] usb 4-1: USB disconnect, device number 4 [ 167.291876][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.523329][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 167.528819][ T932] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 167.578379][ T5858] usb 2-1: USB disconnect, device number 5 [ 167.668374][ T5858] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 167.735834][ T932] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 167.735865][ T932] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 167.735951][ T932] usb 1-1: config 220 has no interface number 2 [ 167.736041][ T932] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 167.736198][ T932] usb 1-1: config 220 interface 0 has no altsetting 0 [ 167.736220][ T932] usb 1-1: config 220 interface 76 has no altsetting 0 [ 167.736239][ T932] usb 1-1: config 220 interface 1 has no altsetting 0 [ 167.835791][ T932] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 167.835815][ T932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.835829][ T932] usb 1-1: Product: syz [ 167.835840][ T932] usb 1-1: Manufacturer: syz [ 167.835889][ T932] usb 1-1: SerialNumber: syz [ 167.887499][ T5858] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 167.953537][ T5858] quatech2 2-1:0.51: device disconnected [ 168.080440][ T9] usb 3-1: USB disconnect, device number 5 [ 169.187257][ T932] usb 1-1: selecting invalid altsetting 0 [ 169.207035][ T932] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 169.207081][ T932] uvcvideo 1-1:220.0: No valid video chain found. [ 169.306732][ T932] usb 1-1: selecting invalid altsetting 0 [ 169.307011][ T932] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 169.353319][ T932] usb 1-1: USB disconnect, device number 8 [ 169.684600][ T36] audit: type=1326 audit(2000000059.218:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.1.124" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5abcabf79 code=0x0 [ 170.297569][ T5906] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 170.478612][ T5906] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 170.478651][ T5906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.478671][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 170.478693][ T5906] usb 4-1: config 1 has no interface number 0 [ 170.478729][ T5906] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 170.478770][ T5906] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 170.703240][ T5906] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.703274][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.703297][ T5906] usb 4-1: Product: syz [ 170.703312][ T5906] usb 4-1: Manufacturer: syz [ 170.703333][ T5906] usb 4-1: SerialNumber: syz [ 171.098018][ T5906] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 171.098071][ T5906] cdc_ncm 4-1:1.1: bind() failure [ 171.507497][ T6347] netlink: 564 bytes leftover after parsing attributes in process `syz.3.126'. [ 171.507526][ T6347] netlink: 564 bytes leftover after parsing attributes in process `syz.3.126'. [ 172.106948][ T6335] fuse: Unknown parameter '0x0000000000000003' [ 172.413783][ T5871] usbhid 5-1:0.0: can't add hid device: -32 [ 172.413908][ T5871] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 173.578568][ T31] usb 4-1: USB disconnect, device number 5 [ 173.880242][ T6361] FAULT_INJECTION: forcing a failure. [ 173.880242][ T6361] name failslab, interval 1, probability 0, space 0, times 0 [ 173.880282][ T6361] CPU: 1 UID: 0 PID: 6361 Comm: syz.3.131 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 173.880312][ T6361] Tainted: [L]=SOFTLOCKUP [ 173.880319][ T6361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.880331][ T6361] Call Trace: [ 173.880339][ T6361] [ 173.880348][ T6361] dump_stack_lvl+0xe8/0x150 [ 173.880383][ T6361] should_fail_ex+0x46b/0x600 [ 173.880416][ T6361] should_failslab+0xa8/0x100 [ 173.880443][ T6361] __kmalloc_cache_noprof+0x84/0x690 [ 173.880467][ T6361] ? sctp_add_bind_addr+0x8c/0x370 [ 173.880497][ T6361] sctp_add_bind_addr+0x8c/0x370 [ 173.880527][ T6361] sctp_copy_local_addr_list+0x314/0x4f0 [ 173.880556][ T6361] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 173.880581][ T6361] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 173.880609][ T6361] ? sctp_v6_is_any+0x64/0x80 [ 173.880639][ T6361] ? sctp_copy_one_addr+0x93/0x360 [ 173.880668][ T6361] sctp_bind_addr_copy+0xb3/0x3c0 [ 173.880693][ T6361] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 173.880731][ T6361] sctp_connect_new_asoc+0x2ff/0x6b0 [ 173.880765][ T6361] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 173.880798][ T6361] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 173.880825][ T6361] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.880861][ T6361] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 173.880887][ T6361] ? security_sctp_bind_connect+0x7e/0x2c0 [ 173.880925][ T6361] sctp_sendmsg+0x14c0/0x2990 [ 173.880971][ T6361] ? __pfx_sctp_sendmsg+0x10/0x10 [ 173.881007][ T6361] ? __might_fault+0xaf/0x130 [ 173.881033][ T6361] ? __might_fault+0xaf/0x130 [ 173.881068][ T6361] ? sock_rps_record_flow+0x19/0x400 [ 173.881103][ T6361] ? inet_sendmsg+0x2f4/0x370 [ 173.881139][ T6361] __sys_sendto+0x643/0x7d0 [ 173.881178][ T6361] ? __pfx___sys_sendto+0x10/0x10 [ 173.881238][ T6361] ? ksys_write+0x248/0x270 [ 173.881261][ T6361] ? __pfx_ksys_write+0x10/0x10 [ 173.881288][ T6361] __x64_sys_sendto+0xde/0x100 [ 173.881324][ T6361] do_syscall_64+0x14d/0xf80 [ 173.881351][ T6361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.881371][ T6361] ? trace_irq_disable+0x37/0x100 [ 173.881388][ T6361] ? clear_bhb_loop+0x40/0x90 [ 173.881413][ T6361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.881434][ T6361] RIP: 0033:0x7f6b90cdbf79 [ 173.881453][ T6361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.881469][ T6361] RSP: 002b:00007f6b8ef2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 173.881492][ T6361] RAX: ffffffffffffffda RBX: 00007f6b90f55fa0 RCX: 00007f6b90cdbf79 [ 173.881508][ T6361] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 173.881521][ T6361] RBP: 00007f6b8ef2e090 R08: 0000200000000080 R09: 000000000000001c [ 173.881536][ T6361] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 173.881548][ T6361] R13: 00007f6b90f56038 R14: 00007f6b90f55fa0 R15: 00007ffe282fbea8 [ 173.881583][ T6361] [ 176.081173][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 176.252288][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 176.254942][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.254979][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.255004][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 176.255047][ T31] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 176.255072][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.375191][ T31] usb 4-1: config 0 descriptor?? [ 176.852626][ T31] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 176.852668][ T31] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 176.852697][ T31] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 176.852734][ T31] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 176.852762][ T31] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 176.852790][ T31] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 176.852818][ T31] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 176.852847][ T31] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 176.852875][ T31] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 176.852903][ T31] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 176.852930][ T31] hid-multitouch 0003:0457:07DA.0002: collection stack underflow [ 176.852955][ T31] hid-multitouch 0003:0457:07DA.0002: item 0 0 0 12 parsing failed [ 176.853851][ T31] hid-multitouch 0003:0457:07DA.0002: probe with driver hid-multitouch failed with error -22 [ 177.116513][ T31] usb 4-1: USB disconnect, device number 6 [ 177.770283][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 177.930723][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 177.983789][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 177.983832][ T31] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 177.983856][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.076076][ T31] usb 3-1: config 0 descriptor?? [ 178.306823][ T6384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.140'. [ 178.332333][ T6377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.333628][ T6377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.499440][ T6384] vlan2: entered promiscuous mode [ 178.499473][ T6384] dummy0: entered promiscuous mode [ 178.508079][ T5871] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 178.560339][ T31] hid-led 0003:1D34:0004.0003: item fetching failed at offset 5/7 [ 178.569480][ T31] hid-led 0003:1D34:0004.0003: probe with driver hid-led failed with error -22 [ 178.702565][ T5871] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 178.702598][ T5871] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.702646][ T5871] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.702673][ T5871] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.706235][ T5871] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 178.706483][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 178.706508][ T5871] usb 1-1: Product: syz [ 178.706523][ T5871] usb 1-1: Manufacturer: syz [ 178.706549][ T5871] usb 1-1: SerialNumber: syz [ 178.821868][ T5871] usb 1-1: config 0 descriptor?? [ 178.836681][ T5871] hub 1-1:0.0: bad descriptor, ignoring hub [ 178.836723][ T5871] hub 1-1:0.0: probe with driver hub failed with error -5 [ 178.930267][ T932] usb 3-1: USB disconnect, device number 6 [ 179.228723][ T5871] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 179.247959][ T6391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.252716][ T6391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.671429][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.312342][ T6403] netlink: 60 bytes leftover after parsing attributes in process `syz.2.145'. [ 182.401010][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 182.596573][ T6406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.144'. [ 182.613747][ T5871] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 182.773441][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 182.778195][ T5871] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 182.778226][ T5871] usb 3-1: config 0 has no interface number 0 [ 182.778287][ T5871] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 182.778318][ T5871] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 182.778349][ T5871] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 182.778376][ T5871] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 182.778404][ T5871] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 182.778432][ T5871] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.876453][ T5871] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 182.876477][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.876491][ T5871] usb 3-1: Product: syz [ 182.876502][ T5871] usb 3-1: Manufacturer: syz [ 182.876512][ T5871] usb 3-1: SerialNumber: syz [ 182.913593][ T5871] usb 3-1: config 0 descriptor?? [ 183.204907][ T6403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.145'. [ 183.654505][ T5803] usb 1-1: USB disconnect, device number 9 [ 183.965006][ T5871] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 184.010191][ T5871] usb 3-1: USB disconnect, device number 7 [ 184.495547][ T5906] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 184.783301][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 184.785963][ T5906] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 184.785988][ T5906] usb 1-1: config 0 has no interface number 0 [ 184.786014][ T5906] usb 1-1: config 0 interface 119 has no altsetting 0 [ 184.790974][ T5906] usb 1-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=da.f9 [ 184.791006][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.791027][ T5906] usb 1-1: Product: syz [ 184.791042][ T5906] usb 1-1: Manufacturer: syz [ 184.791056][ T5906] usb 1-1: SerialNumber: syz [ 185.797452][ T5906] usb 1-1: config 0 descriptor?? [ 186.092301][ T5906] mos7840 1-1:0.119: required endpoints missing [ 186.248115][ T6427] FAULT_INJECTION: forcing a failure. [ 186.248115][ T6427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.248155][ T6427] CPU: 0 UID: 0 PID: 6427 Comm: syz.3.151 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 186.248186][ T6427] Tainted: [L]=SOFTLOCKUP [ 186.248194][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.248207][ T6427] Call Trace: [ 186.248215][ T6427] [ 186.248224][ T6427] dump_stack_lvl+0xe8/0x150 [ 186.248259][ T6427] should_fail_ex+0x46b/0x600 [ 186.248291][ T6427] _copy_from_iter+0x1d3/0x1670 [ 186.248323][ T6427] ? rcu_is_watching+0x15/0xb0 [ 186.248361][ T6427] ? __pfx__copy_from_iter+0x10/0x10 [ 186.248388][ T6427] ? __build_skb_around+0x22d/0x3c0 [ 186.248422][ T6427] ? __alloc_skb+0x193/0x390 [ 186.248455][ T6427] ? netlink_sendmsg+0x650/0xb40 [ 186.248481][ T6427] ? skb_put+0x11b/0x210 [ 186.248517][ T6427] netlink_sendmsg+0x6c0/0xb40 [ 186.248555][ T6427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.248593][ T6427] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.248620][ T6427] ____sys_sendmsg+0xa4e/0xac0 [ 186.248642][ T6427] ? __might_fault+0xaf/0x130 [ 186.248673][ T6427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.248704][ T6427] ? import_iovec+0x73/0xa0 [ 186.248748][ T6427] ___sys_sendmsg+0x2a5/0x360 [ 186.248769][ T6427] ? __lock_acquire+0x6b5/0x2cf0 [ 186.248803][ T6427] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.248861][ T6427] ? __fget_files+0x2a/0x420 [ 186.248890][ T6427] ? __fget_files+0x3a6/0x420 [ 186.248931][ T6427] __x64_sys_sendmsg+0x1c3/0x2a0 [ 186.248956][ T6427] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.248989][ T6427] ? __pfx_ksys_write+0x10/0x10 [ 186.249023][ T6427] do_syscall_64+0x14d/0xf80 [ 186.249052][ T6427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.249073][ T6427] ? trace_irq_disable+0x37/0x100 [ 186.249092][ T6427] ? clear_bhb_loop+0x40/0x90 [ 186.249119][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.249139][ T6427] RIP: 0033:0x7f6b90cdbf79 [ 186.249158][ T6427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.249177][ T6427] RSP: 002b:00007f6b8ef2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.249201][ T6427] RAX: ffffffffffffffda RBX: 00007f6b90f55fa0 RCX: 00007f6b90cdbf79 [ 186.249217][ T6427] RDX: 0000000000024080 RSI: 0000200000000000 RDI: 0000000000000003 [ 186.249231][ T6427] RBP: 00007f6b8ef2e090 R08: 0000000000000000 R09: 0000000000000000 [ 186.249244][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.249257][ T6427] R13: 00007f6b90f56038 R14: 00007f6b90f55fa0 R15: 00007ffe282fbea8 [ 186.249291][ T6427] [ 186.383868][ T5803] usb 1-1: USB disconnect, device number 10 [ 186.939728][ T6432] process 'syz.3.153' launched '/dev/fd/4' with NULL argv: empty string added [ 188.007920][ T6439] sg_write: data in/out 1701604413/57 bytes for SCSI command 0x0-- guessing data in; [ 188.007920][ T6439] program syz.1.155 not setting count and/or reply_len properly [ 190.331857][ T5803] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 190.514853][ T5803] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 190.514887][ T5803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.566982][ T5803] usb 4-1: config 0 descriptor?? [ 190.613214][ T5803] cp210x 4-1:0.0: cp210x converter detected [ 192.578504][ T6447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.579288][ T6447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.707821][ T6453] sctp: [Deprecated]: syz.2.160 (pid 6453) Use of int in max_burst socket option deprecated. [ 192.707821][ T6453] Use struct sctp_assoc_value instead [ 192.799008][ T5803] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 193.044243][ T5803] usb 4-1: cp210x converter now attached to ttyUSB0 [ 194.126962][ T5803] usb 4-1: USB disconnect, device number 7 [ 194.154157][ T5803] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 194.309347][ T5803] cp210x 4-1:0.0: device disconnected [ 194.896651][ T932] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 195.057042][ T932] usb 3-1: Using ep0 maxpacket: 8 [ 195.074316][ T932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.074351][ T932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.074392][ T932] usb 3-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 195.074417][ T932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.259392][ T932] usb 3-1: config 0 descriptor?? [ 195.519465][ T6459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.539604][ T6467] FAULT_INJECTION: forcing a failure. [ 195.539604][ T6467] name failslab, interval 1, probability 0, space 0, times 0 [ 195.539640][ T6467] CPU: 1 UID: 0 PID: 6467 Comm: syz.1.165 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 195.539662][ T6467] Tainted: [L]=SOFTLOCKUP [ 195.539668][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 195.539678][ T6467] Call Trace: [ 195.539684][ T6467] [ 195.539692][ T6467] dump_stack_lvl+0xe8/0x150 [ 195.539723][ T6467] should_fail_ex+0x46b/0x600 [ 195.539749][ T6467] should_failslab+0xa8/0x100 [ 195.539771][ T6467] __kmalloc_cache_noprof+0x84/0x690 [ 195.539791][ T6467] ? __local_bh_disable_ip+0x3c/0x420 [ 195.539810][ T6467] ? tipc_nametbl_insert_publ+0x77b/0x12c0 [ 195.539842][ T6467] ? tipc_nametbl_insert_publ+0x484/0x12c0 [ 195.539869][ T6467] tipc_nametbl_insert_publ+0x77b/0x12c0 [ 195.539901][ T6467] ? tipc_nametbl_insert_publ+0x484/0x12c0 [ 195.539938][ T6467] ? tipc_nametbl_publish+0x76/0x210 [ 195.539967][ T6467] tipc_nametbl_publish+0xdd/0x210 [ 195.539995][ T6467] ? tipc_nametbl_publish+0x76/0x210 [ 195.540024][ T6467] tipc_sk_publish+0x17b/0x3c0 [ 195.540048][ T6467] ? __pfx_tipc_sk_publish+0x10/0x10 [ 195.540066][ T6467] ? tipc_nametbl_build_group+0x4ee/0x520 [ 195.540092][ T6467] ? tipc_nametbl_build_group+0x2e/0x520 [ 195.540127][ T6467] tipc_sk_join+0x3ab/0x6a0 [ 195.540157][ T6467] ? __pfx_tipc_sk_join+0x10/0x10 [ 195.540181][ T6467] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 195.540215][ T6467] ? lockdep_hardirqs_on+0x7a/0x110 [ 195.540245][ T6467] tipc_setsockopt+0x73e/0x990 [ 195.540272][ T6467] ? __pfx_tipc_setsockopt+0x10/0x10 [ 195.540294][ T6467] ? __fget_files+0x2a/0x420 [ 195.540324][ T6467] ? __fget_files+0x2a/0x420 [ 195.540348][ T6467] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 195.540369][ T6467] ? __pfx_tipc_setsockopt+0x10/0x10 [ 195.540401][ T6467] do_sock_setsockopt+0x17c/0x1b0 [ 195.540438][ T6467] __x64_sys_setsockopt+0x143/0x1b0 [ 195.540476][ T6467] do_syscall_64+0x14d/0xf80 [ 195.540501][ T6467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.540521][ T6467] ? trace_irq_disable+0x37/0x100 [ 195.540537][ T6467] ? clear_bhb_loop+0x40/0x90 [ 195.540562][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.540581][ T6467] RIP: 0033:0x7fb5abcabf79 [ 195.540597][ T6467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.540612][ T6467] RSP: 002b:00007fb5a9f06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 195.540630][ T6467] RAX: ffffffffffffffda RBX: 00007fb5abf25fa0 RCX: 00007fb5abcabf79 [ 195.540643][ T6467] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 195.540652][ T6467] RBP: 00007fb5a9f06090 R08: 0000000000000010 R09: 0000000000000000 [ 195.540662][ T6467] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 195.540672][ T6467] R13: 00007fb5abf26038 R14: 00007fb5abf25fa0 R15: 00007ffec760c158 [ 195.540700][ T6467] [ 195.545975][ T6467] tipc: Failed to bind to 268435522,0,0 [ 195.692483][ T6459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.987779][ T6471] comedi comedi2: ni_at_a2150: I/O port conflict (0x7,28) [ 197.120376][ T6476] netlink: 'syz.0.167': attribute type 1 has an invalid length. [ 197.120406][ T6476] netlink: 'syz.0.167': attribute type 1 has an invalid length. [ 197.826378][ T5803] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 197.990530][ T5803] usb 2-1: config index 0 descriptor too short (expected 29202, got 18) [ 197.990564][ T5803] usb 2-1: config 244 has too many interfaces: 157, using maximum allowed: 32 [ 197.990586][ T5803] usb 2-1: config 244 has an invalid descriptor of length 19, skipping remainder of the config [ 197.990608][ T5803] usb 2-1: config 244 has 0 interfaces, different from the descriptor's value: 157 [ 197.990646][ T5803] usb 2-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 197.990672][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.866280][ T5803] usb 2-1: string descriptor 0 read error: -71 [ 198.937716][ T5803] usb 2-1: USB disconnect, device number 6 [ 199.052111][ T932] usbhid 3-1:0.0: can't add hid device: -71 [ 199.052241][ T932] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 199.078438][ T932] usb 3-1: USB disconnect, device number 8 [ 200.209793][ T5798] Bluetooth: hci3: command 0x0405 tx timeout [ 202.520096][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.520169][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.176547][ T6520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.177136][ T6520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.319660][ T6524] tmpfs: Bad value for 'mpol' [ 212.024566][ T6533] tmpfs: Bad value for 'mpol' [ 214.129030][ T6545] kAFS: unable to lookup cell 'syz1' [ 214.171806][ T5803] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 216.192534][ T5803] usb 2-1: Using ep0 maxpacket: 32 [ 216.256800][ T5803] usb 2-1: device descriptor read/all, error -71 [ 220.747913][ T6575] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.191'. [ 220.748341][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 221.977536][ T932] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 222.146949][ T932] usb 1-1: device descriptor read/64, error -71 [ 222.403552][ T932] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 223.231983][ T932] usb 1-1: device descriptor read/64, error -71 [ 223.649673][ T932] usb usb1-port1: attempt power cycle [ 225.225950][ T932] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 225.398165][ T932] usb 1-1: device descriptor read/8, error -71 [ 225.405092][ T6606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.405631][ T6606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.657023][ T6623] netlink: 'syz.0.203': attribute type 1 has an invalid length. [ 226.616785][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'. [ 226.737805][ T6634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.754946][ T6634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.776012][ T49] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 226.951690][ T49] usb 2-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 226.951722][ T49] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 226.951745][ T49] usb 2-1: Manufacturer: syz [ 227.009843][ T49] usb 2-1: config 0 descriptor?? [ 227.070824][ T6634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.071429][ T6634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.404418][ T6608] Bluetooth: hci4: command 0x0406 tx timeout [ 227.404460][ T6608] Bluetooth: hci1: command 0x0406 tx timeout [ 227.404483][ T6608] Bluetooth: hci2: command 0x0406 tx timeout [ 227.404506][ T6608] Bluetooth: hci0: command 0x0406 tx timeout [ 227.615964][ T49] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 227.620172][ T49] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 227.645024][ T49] usb 2-1: USB disconnect, device number 9 [ 227.958230][ T6639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.958843][ T6639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.016114][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 228.187283][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 228.194971][ T31] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 228.195002][ T31] usb 1-1: config 0 has no interface number 0 [ 228.195036][ T31] usb 1-1: config 0 interface 119 has no altsetting 0 [ 228.265534][ T31] usb 1-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=da.f9 [ 228.265567][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.265589][ T31] usb 1-1: Product: syz [ 228.265603][ T31] usb 1-1: Manufacturer: syz [ 228.265618][ T31] usb 1-1: SerialNumber: syz [ 228.325445][ T31] usb 1-1: config 0 descriptor?? [ 228.638612][ T31] mos7840 1-1:0.119: required endpoints missing [ 228.757043][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'. [ 228.942358][ T31] usb 1-1: USB disconnect, device number 15 [ 230.725433][ T6659] ======================================================= [ 230.725433][ T6659] WARNING: The mand mount option has been deprecated and [ 230.725433][ T6659] and is ignored by this kernel. Remove the mand [ 230.725433][ T6659] option from the mount to silence this warning. [ 230.725433][ T6659] ======================================================= [ 233.507487][ T6680] loop8: detected capacity change from 0 to 7 [ 233.575712][ T6680] Dev loop8: unable to read RDB block 7 [ 233.575762][ T6680] loop8: unable to read partition table [ 233.576405][ T6680] loop8: partition table beyond EOD, truncated [ 233.576427][ T6680] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 233.714541][ T49] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 233.778843][ T31] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 233.885193][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 233.931884][ T49] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 233.931920][ T49] usb 4-1: config 0 has no interface number 0 [ 233.931956][ T49] usb 4-1: config 0 interface 119 has no altsetting 0 [ 233.938270][ T49] usb 4-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=da.f9 [ 233.945891][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.945921][ T49] usb 4-1: Product: syz [ 233.945937][ T49] usb 4-1: Manufacturer: syz [ 233.945952][ T49] usb 4-1: SerialNumber: syz [ 234.022027][ T49] usb 4-1: config 0 descriptor?? [ 234.260695][ T49] mos7840 4-1:0.119: required endpoints missing [ 234.285501][ T49] usb 4-1: USB disconnect, device number 8 [ 236.958572][ T6702] FAULT_INJECTION: forcing a failure. [ 236.958572][ T6702] name failslab, interval 1, probability 0, space 0, times 0 [ 236.958615][ T6702] CPU: 0 UID: 0 PID: 6702 Comm: syz.0.226 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 236.958646][ T6702] Tainted: [L]=SOFTLOCKUP [ 236.958654][ T6702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.958666][ T6702] Call Trace: [ 236.958674][ T6702] [ 236.958684][ T6702] dump_stack_lvl+0xe8/0x150 [ 236.958720][ T6702] should_fail_ex+0x46b/0x600 [ 236.958752][ T6702] should_failslab+0xa8/0x100 [ 236.958779][ T6702] __kmalloc_noprof+0xdf/0x7b0 [ 236.958804][ T6702] ? security_prepare_creds+0x52/0x360 [ 236.958833][ T6702] security_prepare_creds+0x52/0x360 [ 236.958859][ T6702] prepare_creds+0x57d/0x820 [ 236.958885][ T6702] lookup_user_key+0x1f5/0x1170 [ 236.958908][ T6702] ? irqentry_exit+0x59e/0x620 [ 236.958938][ T6702] ? lockdep_hardirqs_on+0x7a/0x110 [ 236.958970][ T6702] ? __pfx_lookup_user_key+0x10/0x10 [ 236.958996][ T6702] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 236.959030][ T6702] ? rep_movs_alternative+0x4a/0x90 [ 236.959057][ T6702] __se_sys_add_key+0x315/0x420 [ 236.959092][ T6702] ? __pfx___se_sys_add_key+0x10/0x10 [ 236.959134][ T6702] ? __x64_sys_add_key+0x20/0xc0 [ 236.959169][ T6702] do_syscall_64+0x14d/0xf80 [ 236.959197][ T6702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.959230][ T6702] ? trace_irq_disable+0x37/0x100 [ 236.959250][ T6702] ? clear_bhb_loop+0x40/0x90 [ 236.959277][ T6702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.959297][ T6702] RIP: 0033:0x7fef401bbf79 [ 236.959317][ T6702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.959336][ T6702] RSP: 002b:00007fef3e416028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 236.959359][ T6702] RAX: ffffffffffffffda RBX: 00007fef40435fa0 RCX: 00007fef401bbf79 [ 236.959375][ T6702] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000080 [ 236.959390][ T6702] RBP: 00007fef3e416090 R08: ffffffffffffffff R09: 0000000000000000 [ 236.959404][ T6702] R10: 00000000000fffff R11: 0000000000000246 R12: 0000000000000001 [ 236.959418][ T6702] R13: 00007fef40436038 R14: 00007fef40435fa0 R15: 00007ffc71b06098 [ 236.959452][ T6702] [ 237.616448][ T5981] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 237.653172][ T6711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.653717][ T6711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.776611][ T5981] usb 4-1: Using ep0 maxpacket: 16 [ 237.804066][ T5981] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 237.804088][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.804109][ T5981] usb 4-1: Product: syz [ 237.804119][ T5981] usb 4-1: Manufacturer: syz [ 237.804130][ T5981] usb 4-1: SerialNumber: syz [ 237.843394][ T5981] usb 4-1: config 0 descriptor?? [ 237.872309][ T5981] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 238.084134][ T6706] capability: warning: `syz.3.228' uses 32-bit capabilities (legacy support in use) [ 238.113805][ T5981] pwc: Warning: more than 1 configuration available. [ 238.114347][ T5981] pwc: Failed to set LED on/off time (-71) [ 238.114919][ T5981] pwc: send_video_command error -71 [ 238.114936][ T5981] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 238.115258][ T5981] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 238.163911][ T5981] usb 4-1: USB disconnect, device number 9 [ 238.187172][ T6688] udevd[6688]: setting mode of /dev/bus/usb/004/009 to 020664 failed: No such file or directory [ 238.187378][ T6688] udevd[6688]: setting owner of /dev/bus/usb/004/009 to uid=0, gid=0 failed: No such file or directory [ 239.187784][ T5981] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 239.340726][ T6724] FAULT_INJECTION: forcing a failure. [ 239.340726][ T6724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.340795][ T6724] CPU: 0 UID: 0 PID: 6724 Comm: syz.4.234 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 239.340850][ T6724] Tainted: [L]=SOFTLOCKUP [ 239.340864][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 239.340886][ T6724] Call Trace: [ 239.340902][ T6724] [ 239.340918][ T6724] dump_stack_lvl+0xe8/0x150 [ 239.340978][ T6724] should_fail_ex+0x46b/0x600 [ 239.341040][ T6724] _copy_to_user+0x31/0xb0 [ 239.341074][ T6724] simple_read_from_buffer+0xe1/0x170 [ 239.341110][ T6724] proc_fail_nth_read+0x1be/0x230 [ 239.341138][ T6724] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.341166][ T6724] ? rw_verify_area+0x2ac/0x4e0 [ 239.341198][ T6724] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.341224][ T6724] vfs_read+0x212/0xa70 [ 239.341248][ T6724] ? preempt_schedule_thunk+0x16/0x30 [ 239.341276][ T6724] ? __pfx_vfs_read+0x10/0x10 [ 239.341297][ T6724] ? preempt_schedule_thunk+0x16/0x30 [ 239.341328][ T6724] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 239.341360][ T6724] ? mutex_lock_nested+0x152/0x1d0 [ 239.341380][ T6724] ? fdget_pos+0x252/0x320 [ 239.341419][ T6724] ksys_read+0x156/0x270 [ 239.341443][ T6724] ? __pfx_ksys_read+0x10/0x10 [ 239.341477][ T6724] do_syscall_64+0x14d/0xf80 [ 239.341507][ T6724] ? rcu_is_watching+0x15/0xb0 [ 239.341538][ T6724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.341560][ T6724] ? clear_bhb_loop+0x40/0x90 [ 239.341587][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.341610][ T6724] RIP: 0033:0x7f2b44b4c84e [ 239.341629][ T6724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 239.341647][ T6724] RSP: 002b:00007f2b42d9bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.341671][ T6724] RAX: ffffffffffffffda RBX: 00007f2b42d9c6c0 RCX: 00007f2b44b4c84e [ 239.341687][ T6724] RDX: 000000000000000f RSI: 00007f2b42d9c0a0 RDI: 0000000000000006 [ 239.341702][ T6724] RBP: 00007f2b42d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 239.341715][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.341729][ T6724] R13: 00007f2b44e06218 R14: 00007f2b44e06180 R15: 00007ffe1a6ed9c8 [ 239.341765][ T6724] [ 239.358824][ T5981] usb 4-1: Using ep0 maxpacket: 16 [ 239.361735][ T5981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.361770][ T5981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.361795][ T5981] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 239.361839][ T5981] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 239.361864][ T5981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.031648][ T5981] usb 4-1: config 0 descriptor?? [ 241.239489][ T5981] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 241.239519][ T5981] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 241.239538][ T5981] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 241.239573][ T5981] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 241.239593][ T5981] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 241.239611][ T5981] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 241.239630][ T5981] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 241.239649][ T5981] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 241.239668][ T5981] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 241.239686][ T5981] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 241.239704][ T5981] hid-multitouch 0003:0457:07DA.0004: collection stack underflow [ 241.239721][ T5981] hid-multitouch 0003:0457:07DA.0004: item 0 0 0 12 parsing failed [ 241.356543][ T5981] hid-multitouch 0003:0457:07DA.0004: probe with driver hid-multitouch failed with error -22 [ 241.390981][ T6730] ucma_write: process 164 (syz.4.236) changed security contexts after opening file descriptor, this is not allowed. [ 241.445960][ T5981] usb 4-1: USB disconnect, device number 10 [ 241.767239][ T6734] FAULT_INJECTION: forcing a failure. [ 241.767239][ T6734] name failslab, interval 1, probability 0, space 0, times 0 [ 241.767279][ T6734] CPU: 0 UID: 0 PID: 6734 Comm: syz.1.239 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 241.767310][ T6734] Tainted: [L]=SOFTLOCKUP [ 241.767317][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.767343][ T6734] Call Trace: [ 241.767351][ T6734] [ 241.767360][ T6734] dump_stack_lvl+0xe8/0x150 [ 241.767395][ T6734] should_fail_ex+0x46b/0x600 [ 241.767427][ T6734] should_failslab+0xa8/0x100 [ 241.767454][ T6734] kmem_cache_alloc_noprof+0x87/0x680 [ 241.767478][ T6734] ? skb_clone+0x212/0x3a0 [ 241.767507][ T6734] skb_clone+0x212/0x3a0 [ 241.767535][ T6734] __netlink_deliver_tap+0x404/0x850 [ 241.767579][ T6734] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.767608][ T6734] netlink_deliver_tap+0x19c/0x1b0 [ 241.767640][ T6734] netlink_sendskb+0x68/0x140 [ 241.767668][ T6734] netlink_unicast+0x3c5/0x9f0 [ 241.767703][ T6734] ? __pfx_netlink_unicast+0x10/0x10 [ 241.767739][ T6734] netlink_rcv_skb+0x2b6/0x4b0 [ 241.767769][ T6734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.767793][ T6734] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.767837][ T6734] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.767865][ T6734] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.767900][ T6734] genl_rcv+0x28/0x40 [ 241.767918][ T6734] netlink_unicast+0x831/0x9f0 [ 241.767953][ T6734] ? __pfx_netlink_unicast+0x10/0x10 [ 241.767978][ T6734] ? __alloc_skb+0x193/0x390 [ 241.768010][ T6734] ? netlink_sendmsg+0x650/0xb40 [ 241.768037][ T6734] ? skb_put+0x11b/0x210 [ 241.768074][ T6734] netlink_sendmsg+0x813/0xb40 [ 241.768113][ T6734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.768160][ T6734] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.768188][ T6734] ____sys_sendmsg+0xa4e/0xac0 [ 241.768210][ T6734] ? __might_fault+0xaf/0x130 [ 241.768242][ T6734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.768275][ T6734] ? import_iovec+0x73/0xa0 [ 241.768310][ T6734] ___sys_sendmsg+0x2a5/0x360 [ 241.768331][ T6734] ? __lock_acquire+0x6b5/0x2cf0 [ 241.768366][ T6734] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.768428][ T6734] ? __fget_files+0x2a/0x420 [ 241.768462][ T6734] ? __fget_files+0x3a6/0x420 [ 241.768504][ T6734] __x64_sys_sendmsg+0x1c3/0x2a0 [ 241.768530][ T6734] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.768564][ T6734] ? __pfx_ksys_write+0x10/0x10 [ 241.768598][ T6734] do_syscall_64+0x14d/0xf80 [ 241.768626][ T6734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.768647][ T6734] ? trace_irq_disable+0x37/0x100 [ 241.768666][ T6734] ? clear_bhb_loop+0x40/0x90 [ 241.768692][ T6734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.768714][ T6734] RIP: 0033:0x7fb5abcabf79 [ 241.768733][ T6734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.768751][ T6734] RSP: 002b:00007fb5a9f06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.768774][ T6734] RAX: ffffffffffffffda RBX: 00007fb5abf25fa0 RCX: 00007fb5abcabf79 [ 241.768789][ T6734] RDX: 0000000000000080 RSI: 00002000000009c0 RDI: 0000000000000004 [ 241.768802][ T6734] RBP: 00007fb5a9f06090 R08: 0000000000000000 R09: 0000000000000000 [ 241.768815][ T6734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.768829][ T6734] R13: 00007fb5abf26038 R14: 00007fb5abf25fa0 R15: 00007ffec760c158 [ 241.768863][ T6734] [ 241.955447][ T6736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.978504][ T6736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.643083][ T6744] syz.4.243 uses obsolete (PF_INET,SOCK_PACKET) [ 242.722287][ T6746] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.243'. [ 242.723672][ T6746] cifs: Unknown parameter 'R&ühÕ¡–ÂíŽF° [ 242.723672][ T6746] K³Ì<5AŸ' [ 242.723712][ T6746] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 242.723735][ T6746] CIFS mount error: No usable UNC path provided in device string! [ 242.723735][ T6746] [ 242.723951][ T6746] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 242.750582][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 242.765101][ T6745] trusted_key: syz.3.240 sent an empty control message without MSG_MORE. [ 242.933078][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 242.934999][ T31] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 242.935019][ T31] usb 2-1: config 0 has no interface number 0 [ 242.935042][ T31] usb 2-1: config 0 interface 119 has no altsetting 0 [ 242.943205][ T31] usb 2-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=da.f9 [ 242.943304][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.943358][ T31] usb 2-1: Product: syz [ 242.943617][ T31] usb 2-1: Manufacturer: syz [ 242.943659][ T31] usb 2-1: SerialNumber: syz [ 243.026434][ T31] usb 2-1: config 0 descriptor?? [ 243.258566][ T31] mos7840 2-1:0.119: required endpoints missing [ 243.576795][ T5803] usb 2-1: USB disconnect, device number 10 [ 244.767659][ T60] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 244.767691][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 244.767724][ T60] Tainted: [L]=SOFTLOCKUP [ 244.767732][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 244.767747][ T60] Workqueue: hci2 hci_rx_work [ 244.767787][ T60] Call Trace: [ 244.767796][ T60] [ 244.767806][ T60] dump_stack_lvl+0xe8/0x150 [ 244.767843][ T60] sysfs_create_dir_ns+0x271/0x2a0 [ 244.767867][ T60] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 244.767894][ T60] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 244.767930][ T60] ? rt_spin_unlock+0x160/0x200 [ 244.767957][ T60] kobject_add_internal+0x631/0xd10 [ 244.768001][ T60] kobject_add+0x163/0x240 [ 244.768040][ T60] ? __pfx_kobject_add+0x10/0x10 [ 244.768083][ T60] ? get_device_parent+0x370/0x3a0 [ 244.768128][ T60] device_add+0x408/0xb80 [ 244.768164][ T60] hci_conn_add_sysfs+0xd5/0x210 [ 244.768201][ T60] le_conn_complete_evt+0xf1d/0x1430 [ 244.768239][ T60] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 244.768264][ T60] ? irqentry_exit+0x59e/0x620 [ 244.768293][ T60] ? rcu_is_watching+0x15/0xb0 [ 244.768332][ T60] ? skb_pull_data+0xfb/0x200 [ 244.768364][ T60] hci_le_conn_complete_evt+0x187/0x470 [ 244.768397][ T60] hci_event_packet+0x7af/0x12c0 [ 244.768439][ T60] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 244.768464][ T60] ? __pfx_hci_event_packet+0x10/0x10 [ 244.768495][ T60] ? rt_spin_unlock+0x14f/0x200 [ 244.768529][ T60] ? hci_send_to_monitor+0xe2/0x590 [ 244.768560][ T60] hci_rx_work+0x3ee/0x1030 [ 244.768608][ T60] ? process_scheduled_works+0xa0f/0x17a0 [ 244.768639][ T60] process_scheduled_works+0xaec/0x17a0 [ 244.768699][ T60] ? __pfx_process_scheduled_works+0x10/0x10 [ 244.768734][ T60] ? assign_work+0x3d5/0x5e0 [ 244.768767][ T60] worker_thread+0xa50/0xfc0 [ 244.768826][ T60] kthread+0x388/0x470 [ 244.768860][ T60] ? __pfx_worker_thread+0x10/0x10 [ 244.768885][ T60] ? __pfx_kthread+0x10/0x10 [ 244.768928][ T60] ret_from_fork+0x51e/0xb90 [ 244.768960][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 244.768988][ T60] ? __switch_to+0xc7d/0x1400 [ 244.769017][ T60] ? __pfx_kthread+0x10/0x10 [ 244.769052][ T60] ret_from_fork_asm+0x1a/0x30 [ 244.769106][ T60] [ 244.769317][ T60] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 244.769363][ T60] Bluetooth: hci2: failed to register connection device [ 244.794828][ T60] ================================================================== [ 244.794853][ T60] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x87d/0x13e0 [ 244.794892][ T60] Read of size 8 at addr ffff88803b269500 by task kworker/u9:0/60 [ 244.794922][ T60] [ 244.794938][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 244.794970][ T60] Tainted: [L]=SOFTLOCKUP [ 244.794979][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 244.794994][ T60] Workqueue: hci2 hci_rx_work [ 244.795029][ T60] Call Trace: [ 244.795038][ T60] [ 244.795047][ T60] dump_stack_lvl+0xe8/0x150 [ 244.795081][ T60] print_report+0xba/0x230 [ 244.795109][ T60] ? l2cap_connect_cfm+0x87d/0x13e0 [ 244.795135][ T60] kasan_report+0x117/0x150 [ 244.795162][ T60] ? l2cap_connect_cfm+0x87d/0x13e0 [ 244.795194][ T60] l2cap_connect_cfm+0x87d/0x13e0 [ 244.795228][ T60] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 244.795255][ T60] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 244.795285][ T60] ? lockdep_hardirqs_on+0x7a/0x110 [ 244.795314][ T60] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 244.795344][ T60] ? mutex_lock_nested+0x152/0x1d0 [ 244.795365][ T60] ? hci_connect_cfm+0x2c/0x140 [ 244.795387][ T60] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 244.795416][ T60] hci_connect_cfm+0x95/0x140 [ 244.795440][ T60] le_conn_complete_evt+0xf65/0x1430 [ 244.795472][ T60] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 244.795496][ T60] ? irqentry_exit+0x59e/0x620 [ 244.795524][ T60] ? rcu_is_watching+0x15/0xb0 [ 244.795559][ T60] ? skb_pull_data+0xfb/0x200 [ 244.795587][ T60] hci_le_conn_complete_evt+0x187/0x470 [ 244.795616][ T60] hci_event_packet+0x7af/0x12c0 [ 244.795651][ T60] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 244.795675][ T60] ? __pfx_hci_event_packet+0x10/0x10 [ 244.795706][ T60] ? rt_spin_unlock+0x14f/0x200 [ 244.795734][ T60] ? hci_send_to_monitor+0xe2/0x590 [ 244.795762][ T60] hci_rx_work+0x3ee/0x1030 [ 244.795799][ T60] ? process_scheduled_works+0xa0f/0x17a0 [ 244.795826][ T60] process_scheduled_works+0xaec/0x17a0 [ 244.795868][ T60] ? __pfx_process_scheduled_works+0x10/0x10 [ 244.795904][ T60] ? assign_work+0x3d5/0x5e0 [ 244.795932][ T60] worker_thread+0xa50/0xfc0 [ 244.795973][ T60] kthread+0x388/0x470 [ 244.796005][ T60] ? __pfx_worker_thread+0x10/0x10 [ 244.796032][ T60] ? __pfx_kthread+0x10/0x10 [ 244.796064][ T60] ret_from_fork+0x51e/0xb90 [ 244.796094][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 244.796120][ T60] ? __switch_to+0xc7d/0x1400 [ 244.796145][ T60] ? __pfx_kthread+0x10/0x10 [ 244.796177][ T60] ret_from_fork_asm+0x1a/0x30 [ 244.796220][ T60] [ 244.796228][ T60] [ 244.796233][ T60] Allocated by task 60: [ 244.796244][ T60] kasan_save_track+0x3e/0x80 [ 244.796262][ T60] __kasan_kmalloc+0x93/0xb0 [ 244.796282][ T60] __kmalloc_cache_noprof+0x3a6/0x690 [ 244.796303][ T60] l2cap_chan_create+0x51/0x7a0 [ 244.796331][ T60] l2cap_sock_new_connection_cb+0x182/0x2e0 [ 244.796361][ T60] l2cap_connect_cfm+0x368/0x13e0 [ 244.796385][ T60] hci_connect_cfm+0x95/0x140 [ 244.796406][ T60] le_conn_complete_evt+0xf65/0x1430 [ 244.796429][ T60] hci_le_conn_complete_evt+0x187/0x470 [ 244.796450][ T60] hci_event_packet+0x7af/0x12c0 [ 244.796479][ T60] hci_rx_work+0x3ee/0x1030 [ 244.796508][ T60] process_scheduled_works+0xaec/0x17a0 [ 244.796530][ T60] worker_thread+0xa50/0xfc0 [ 244.796554][ T60] kthread+0x388/0x470 [ 244.796582][ T60] ret_from_fork+0x51e/0xb90 [ 244.796607][ T60] ret_from_fork_asm+0x1a/0x30 [ 244.796638][ T60] [ 244.796643][ T60] Freed by task 6759: [ 244.796653][ T60] kasan_save_track+0x3e/0x80 [ 244.796671][ T60] kasan_save_free_info+0x46/0x50 [ 244.796699][ T60] __kasan_slab_free+0x5c/0x80 [ 244.796718][ T60] kfree+0x1c1/0x690 [ 244.796735][ T60] l2cap_sock_cleanup_listen+0xf0/0x440 [ 244.796762][ T60] l2cap_sock_release+0x6e/0x270 [ 244.796787][ T60] sock_close+0xc3/0x240 [ 244.796810][ T60] __fput+0x45e/0xa80 [ 244.796835][ T60] task_work_run+0x1d9/0x270 [ 244.796853][ T60] exit_to_user_mode_loop+0xed/0x480 [ 244.796878][ T60] do_syscall_64+0x32d/0xf80 [ 244.796910][ T60] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.796931][ T60] [ 244.796936][ T60] The buggy address belongs to the object at ffff88803b269000 [ 244.796936][ T60] which belongs to the cache kmalloc-2k of size 2048 [ 244.796956][ T60] The buggy address is located 1280 bytes inside of [ 244.796956][ T60] freed 2048-byte region [ffff88803b269000, ffff88803b269800) [ 244.796980][ T60] [ 244.796985][ T60] The buggy address belongs to the physical page: [ 244.797005][ T60] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803b26d000 pfn:0x3b268 [ 244.797033][ T60] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 244.797052][ T60] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 244.797079][ T60] page_type: f5(slab) [ 244.797100][ T60] raw: 0080000000000240 ffff88813fe0e000 ffffea000180e010 ffff88813fe0cc88 [ 244.797120][ T60] raw: ffff88803b26d000 0000000000080004 00000000f5000000 0000000000000000 [ 244.797140][ T60] head: 0080000000000240 ffff88813fe0e000 ffffea000180e010 ffff88813fe0cc88 [ 244.797160][ T60] head: ffff88803b26d000 0000000000080004 00000000f5000000 0000000000000000 [ 244.797180][ T60] head: 0080000000000003 ffffea0000ec9a01 00000000ffffffff 00000000ffffffff [ 244.797198][ T60] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 244.797210][ T60] page dumped because: kasan: bad access detected [ 244.797226][ T60] page_owner tracks the page as allocated [ 244.797234][ T60] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5801, tgid 5801 (syz-executor), ts 103010523830, free_ts 102997099998 [ 244.797272][ T60] post_alloc_hook+0x228/0x280 [ 244.797294][ T60] get_page_from_freelist+0x28bb/0x2950 [ 244.797320][ T60] __alloc_frozen_pages_noprof+0x18d/0x380 [ 244.797346][ T60] allocate_slab+0x77/0x660 [ 244.797374][ T60] refill_objects+0x334/0x3c0 [ 244.797400][ T60] __pcs_replace_empty_main+0x328/0x5f0 [ 244.797429][ T60] __kmalloc_cache_noprof+0x44e/0x690 [ 244.797452][ T60] rtnl_newlink+0x136/0x1be0 [ 244.797480][ T60] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 244.797507][ T60] netlink_rcv_skb+0x232/0x4b0 [ 244.797532][ T60] netlink_unicast+0x831/0x9f0 [ 244.797555][ T60] netlink_sendmsg+0x813/0xb40 [ 244.797592][ T60] __sys_sendto+0x72a/0x7d0 [ 244.797622][ T60] __x64_sys_sendto+0xde/0x100 [ 244.797651][ T60] do_syscall_64+0x14d/0xf80 [ 244.797677][ T60] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.797697][ T60] page last free pid 5805 tgid 5805 stack trace: [ 244.797714][ T60] __free_frozen_pages+0xfd0/0x1160 [ 244.797736][ T60] __slab_free+0x24f/0x2a0 [ 244.797756][ T60] qlist_free_all+0x97/0x100 [ 244.797787][ T60] kasan_quarantine_reduce+0x148/0x160 [ 244.797818][ T60] __kasan_slab_alloc+0x22/0x80 [ 244.797838][ T60] __kmalloc_cache_noprof+0x338/0x690 [ 244.797860][ T60] nsim_fib_event+0xf3c/0xa410 [ 244.797882][ T60] nsim_fib_event_work+0x26e/0x3e0 [ 244.797911][ T60] process_scheduled_works+0xaec/0x17a0 [ 244.797934][ T60] worker_thread+0xa50/0xfc0 [ 244.797958][ T60] kthread+0x388/0x470 [ 244.797987][ T60] ret_from_fork+0x51e/0xb90 [ 244.798012][ T60] ret_from_fork_asm+0x1a/0x30 [ 244.798044][ T60] [ 244.798049][ T60] Memory state around the buggy address: [ 244.798061][ T60] ffff88803b269400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.798076][ T60] ffff88803b269480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.798091][ T60] >ffff88803b269500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.798102][ T60] ^ [ 244.798113][ T60] ffff88803b269580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.798128][ T60] ffff88803b269600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.798139][ T60] ================================================================== [ 244.798161][ T60] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 244.798184][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 244.798215][ T60] Tainted: [L]=SOFTLOCKUP [ 244.798223][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 244.798238][ T60] Workqueue: hci2 hci_rx_work [ 244.798271][ T60] Call Trace: [ 244.798279][ T60] [ 244.798288][ T60] vpanic+0x1e0/0x670 [ 244.798323][ T60] panic+0xc5/0xd0 [ 244.798354][ T60] ? __pfx_panic+0x10/0x10 [ 244.798386][ T60] ? l2cap_connect_cfm+0x87d/0x13e0 [ 244.798414][ T60] ? rcu_is_watching+0x15/0xb0 [ 244.798451][ T60] ? l2cap_connect_cfm+0x87d/0x13e0 [ 244.798478][ T60] check_panic_on_warn+0x89/0xb0 [ 244.798500][ T60] ? l2cap_connect_cfm+0x87d/0x13e0 [ 244.798525][ T60] end_report+0x6f/0x140 [ 244.798548][ T60] kasan_report+0x128/0x150 [ 244.798573][ T60] ? l2cap_connect_cfm+0x87d/0x13e0 [ 244.798605][ T60] l2cap_connect_cfm+0x87d/0x13e0 [ 244.798637][ T60] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 244.798663][ T60] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 244.798693][ T60] ? lockdep_hardirqs_on+0x7a/0x110 [ 244.798721][ T60] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 244.798750][ T60] ? mutex_lock_nested+0x152/0x1d0 [ 244.798771][ T60] ? hci_connect_cfm+0x2c/0x140 [ 244.798793][ T60] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 244.798820][ T60] hci_connect_cfm+0x95/0x140 [ 244.798844][ T60] le_conn_complete_evt+0xf65/0x1430 [ 244.798903][ T60] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 244.798935][ T60] ? irqentry_exit+0x59e/0x620 [ 244.798963][ T60] ? rcu_is_watching+0x15/0xb0 [ 244.798999][ T60] ? skb_pull_data+0xfb/0x200 [ 244.799028][ T60] hci_le_conn_complete_evt+0x187/0x470 [ 244.799057][ T60] hci_event_packet+0x7af/0x12c0 [ 244.799093][ T60] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 244.799116][ T60] ? __pfx_hci_event_packet+0x10/0x10 [ 244.799146][ T60] ? rt_spin_unlock+0x14f/0x200 [ 244.799181][ T60] ? hci_send_to_monitor+0xe2/0x590 [ 244.799209][ T60] hci_rx_work+0x3ee/0x1030 [ 244.799246][ T60] ? process_scheduled_works+0xa0f/0x17a0 [ 244.799273][ T60] process_scheduled_works+0xaec/0x17a0 [ 244.799315][ T60] ? __pfx_process_scheduled_works+0x10/0x10 [ 244.799344][ T60] ? assign_work+0x3d5/0x5e0 [ 244.799371][ T60] worker_thread+0xa50/0xfc0 [ 244.799413][ T60] kthread+0x388/0x470 [ 244.799444][ T60] ? __pfx_worker_thread+0x10/0x10 [ 244.799469][ T60] ? __pfx_kthread+0x10/0x10 [ 244.799501][ T60] ret_from_fork+0x51e/0xb90 [ 244.799531][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 244.799555][ T60] ? __switch_to+0xc7d/0x1400 [ 244.799579][ T60] ? __pfx_kthread+0x10/0x10 [ 244.799615][ T60] ret_from_fork_asm+0x1a/0x30 [ 244.799658][ T60] [ 244.800277][ T60] Kernel Offset: disabled