last executing test programs: 2m31.386681895s ago: executing program 2 (id=2315): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x122, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x2f}, 0x50) 2m31.131795018s ago: executing program 2 (id=2316): syz_usb_connect(0x5, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0x8f, 0xf6, 0x2b, 0x20, 0x16ca, 0x1502, 0xd33a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xaa, 0x2, 0x40, 0x1, [{{0x9, 0x4, 0xf8, 0x4, 0x0, 0xb, 0xad, 0x2c, 0x7}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0x7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2ef}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x7f}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x40}}], 0x1, 0x4) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\b\x00\x00\x00$ \x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="eb77d00d40a0e413b1685b92338020563c8725a30dcc8e55efa84c6bab2cf95205b69a675106916a5424e9a81fd787419af1d3ad65ee0b325d2aaa292a044df987f09fef4dd5b150785bc8d7638b9edd61e3e71ed9a0f55c0588545181b7ec72ac92841bb1ae2e5e96dc22d9a48d54ff4e095653c9a35f0adef1e5acf51ce2d75cf026b7968283b2ff5800bde7a31e7a4fa46dc04040e5ab3b", @ANYRES64=0x0], 0x20) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000400), 0x12100, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000f00)=""/4096, 0x1000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800442, 0x0) ioctl$TIOCGSID(r3, 0x5429, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xc0188000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f8000000100000042dbd7000fbdbdf256d6f727573366532430a000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240000002600000000000000000000080001007e0f0000080001000500000008000100b200"/232], 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0005c05c61232e1a80508d37bf6690d300", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000540), &(0x7f00000000c0)=@udp6, 0x2}, 0x20) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x2f1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a602bb0000fc02000000000000000000000000000000000000000000000000000000000000223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a787534bb3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b335b141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a"], 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x1a, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32], 0x24}}, 0x0) r10 = semget(0x1, 0x0, 0x20) semtimedop(r10, &(0x7f0000000780)=[{0x3, 0x3}, {0x1, 0xc3d, 0x1000}, {0x2, 0xf282, 0x1000}, {0x1, 0x15, 0x3000}, {0x3, 0x0, 0x1000}, {0x2, 0x5, 0x1000}, {0x2, 0x9, 0xddd0f67606ebe9a1}], 0x7, &(0x7f0000000800)={0x77359400}) ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f0000000440)) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000840)=ANY=[@ANYBLOB="120100030000002825059a07556e910f22488706d9d2478144a8a440000102030109021b00010105801d090400000107010203090501024000090d7f"], &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x8, 0x0, 0x81, 0x40, 0x7}, 0x3d, &(0x7f0000000080)={0x5, 0xf, 0x3d, 0x4, [@ptm_cap={0x3}, @generic={0x2b, 0x10, 0x3, "833c13c56014fadafc67031fadc4cfaf1e141cf158c44cbb7752b7beb286f05950d5392fee37f7a5"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x7, 0x3, 0x8000}]}, 0x8, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x302b}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x412}}, {0xb2, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, {0x52, &(0x7f00000002c0)=@string={0x52, 0x3, "26d97d50d9e5d75920713a484fe0e7ac9b7fe74cdead0f0c65f57a1c809b2c76ef07b56474b3e8b64619131656ecbea318f23a89d92333b8d3664e1394ef2b5014189a718f0ba6b58164db233b215fb9"}}, {0x24, &(0x7f0000000340)=@string={0x24, 0x3, "b25dac77f36064a3bfc18fd7253357e6437d460ec54180f97457b45281623d444bec"}}]}) 2m28.964095412s ago: executing program 2 (id=2323): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2cb, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000003c0)={0x0, @pix={0x0, 0x0, 0x47524247}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r8 = dup(r7) r9 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r9, 0x200004) sendfile(r8, r9, 0x0, 0x80001d00c0d1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0xfffffffffffffda4) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 2m27.307760912s ago: executing program 2 (id=2329): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000806000108000604000100000000080000000000f0180dd3e80b00000009"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f00000028c0), &(0x7f0000000380)=0x60) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}}, {0xa, 0x20, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}, r6, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r6, 0x4040099d}}, 0x48) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = dup(r3) bind$inet6(r8, &(0x7f0000000080)={0x27, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "0005000300000000001000"}}}]}, 0x48}}, 0x4000010) 2m23.744924351s ago: executing program 2 (id=2338): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000300)=""/146, 0x92}, {&(0x7f00000003c0)=""/36, 0x24}, {&(0x7f0000000400)=""/221, 0xdd}, {&(0x7f0000000500)=""/252, 0xfc}, {&(0x7f0000000600)=""/10, 0xa}, {&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f00000006c0)=""/149, 0x95}], 0x7, &(0x7f0000000800)=""/205, 0xcd}, 0x1267}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/130, 0x82}, {&(0x7f00000009c0)=""/146, 0x92}, {&(0x7f0000000a80)=""/201, 0xc9}], 0x3}, 0x5}], 0x2, 0x10002, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0xd7, 0x6573, 0x6}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x100000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x1a, 0x8001, 0xfffffffc, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa15, 0xfffffffc}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000c40)) ioctl$SIOCSIFHWADDR(r3, 0x8937, &(0x7f0000000100)={'veth0_vlan\x00', @random="010000201000"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000001c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) r6 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) dup3(r2, r6, 0x0) 2m22.900958323s ago: executing program 2 (id=2339): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000069c0)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r1, r0]}}], 0x20, 0x8010}}], 0x1, 0x0) r2 = syz_usb_connect$uac1(0x0, 0xa8, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x3, 0x0, 0x6d, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xa}, [@extension_unit={0xa, 0x24, 0x8, 0x2, 0x3d8, 0x7f, "c697f6"}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x5, 0x40, "0d23f9"}, @processing_unit={0x9, 0x24, 0x7, 0x5, 0x2, 0x5, "0f1f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0x8, 0x9, {0x7, 0x25, 0x1, 0x0, 0x1, 0x567a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0x6, 0x4f, "", "a57b"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3, 0x7, 0x6, "0d12435b78bd86"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x8, 0x76, {0x7, 0x25, 0x1, 0x0, 0x1, 0x4}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x1, 0x7, 0x6, 0x1, 0x20}, 0x295, &(0x7f0000000100)={0x5, 0xf, 0x295, 0x6, [@generic={0xbe, 0x10, 0x3, "05e650aff00132ba76717177cca38b56c7d320eecb9f33edd3e8d9ad1a63a4d48aed546a6a242280c9bbf07c2ca7d48509cc5ac99669239f090037a05807803b794c15e7947aed493f2ca6895a5d25feefd45c088d6821226bbcc4e86ccd44e59afd3cded55d6861bbaa36e3c4c9e4cabd565c1571071f4532c37e19269fec637b1ed3fbe51beb00316945feba310201c871665ee86b5a797a2e31a0db258acc93d5717128a0fd837086a87512cda27be3deadd0ca1607bf271eaa"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0x10}, @generic={0x5, 0x10, 0x3, "f866"}, @ptm_cap={0x3}, @generic={0x102, 0x10, 0x1, "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"}, @generic={0xbe, 0x10, 0xa, "cd570ade6e83560aa250a46773d3cb4e65849cbc369ef2efd53cfef66c153db02c51a467f658e7e759a199583c29f2c1cf657b76b7e858a1ef001d987308031e4a13ebbf8c924018e259f32b87805e626ff6d15ea7bbc10b529256e668608ca3db73720ef388d6544a908064b7b3ad36a72c05a5606f8c095c145952bc1848eb33e0b957b8c29134338ea03fae1e4cc84b67513026306cf1bf0530a7a924ddd8e606c36e1d41a77de2d7150f40cac97c8e15d8dc03386fc4f475cc"}]}, 0x8, [{0xee, &(0x7f00000003c0)=@string={0xee, 0x3, "7038e3495d954dd17d624993e6f5a6eca97275481452b27cd0fdf9fb40792ef47d37a29d8674b0939fa492eefcbf4b31484cfc31a20e2b33ca225f1accaa08e4397120b58b96f8a05410ff84f98659adc8602c7b4f9724538e13d64ddc86a06ec949634a8c01b4faaefd5ba979121de420862c2eb37f52357f20d37dd3e4fb4c5b850916bc001977379dd261ed6c6fb5ad88bd4a0462f1145aeb234da7cbc97e8fbaa1d43f897db9aecf42e5a3bd233fbe1720ae9c96ec7b2bbc726331e80fe95e7fd9c19fdbe7a13938e01b4abfd6360e7aaca014b9ac609aa38949a905c2609b7287b35f679c7df97bc8b2"}}, {0x4b, &(0x7f00000004c0)=@string={0x4b, 0x3, "db57662ac1b8505aab053741d807daf19be4c65868dada0eacd5ba187fc916e68da702db3b5edb0888e3634d7c0b6c834f852e3b90e491eef0882af13043da2ceb918b4cdbe0b67ea8"}}, {0x5c, &(0x7f0000000540)=@string={0x5c, 0x3, "f812e6bd1069a02778b961d4ff023e8a4e1c51f226c6289a3af1ef2d240e895da14a3025d397a9d1630666a2526f8bb2ed391aba09f2005b26ca1ee0f454bef7eec27f2d553ef449432b54eec353b41ca4fbaab3b7a302dbae48"}}, {0x3a, &(0x7f00000005c0)=@string={0x3a, 0x3, "10683c0cb8662bce5a6d9464fe53962073192f022c76d773327953f5adc6aefbe06d5091627e1707837e461cc415ae8c24aadf4fdaf691a9"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1009}}, {0xb9, &(0x7f00000006c0)=@string={0xb9, 0x3, "ba8dce10c9086731576cd02f6e2073ee0f4f623112bbbffb274e655ab3970d9bea2b69eef5853e811da08927c8f5e4372205287631c7b449c746febb9dcd930e972922116cc9d3b7eba1b5556bfdd650f42030d4150d1cc033af00a88e835d9856be8784ce7974a1fc96ed6dd8963dadd7a1d96b7657f58c89d67023bde70c6e5176b8f47e038df3a29a1cacfc83dfd7639c4eb005e1e2b6525ca641daa294faca5c0dddb39fef403abfb1d063693014668a6fbb6d5b99"}}]}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x0, 0x0, 0x1, 0xb}, 0x68) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3, 0x2}) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @empty, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@flowinfo={{0x13, 0x29, 0xb, 0x40}}], 0x18}, 0x40c0) syz_usb_control_io$uac1(r2, &(0x7f00000009c0)={0x14, &(0x7f0000000800)={0x0, 0x7, 0xc6, {0xc6, 0x10, "3834b6c2f2aefba73b4c2f1dc1e2e378657603d9282d285051563fc018c48ed7be9132975ab9fd66f041e8938871066558f0b291c26fb47574b8bec092038ba907453d9b25682c7adddb76dc9386f6ebf8410fb9ecda22be523505ee36fb7d1248fc02f0a01238585d8f9bd7046f9d01f7622902af961d6f0220723607fec3c373e712744a2d2db12072cc162e2a6e29725415bd087acfccbcd35ff135c2f71899dac161dfdd099e8eff5f8ca96b1085c3ee5548b3a4e98391ba59348d3e82348cb1ac82"}}, &(0x7f0000000900)={0x0, 0x3, 0x84, @lang_id={0x0, 0x3, 0x416}}}, &(0x7f0000000c40)={0xfffffffffffffe6b, &(0x7f0000000dc0)={0x40, 0x7, 0x77, "cd74fce9f6c2892362d0b441323fd0cf840030e55c878de0905f04866fe62ffc6d0c1cbf82e3be77f7890b217f873774405644c0132848bdfdac1a6746dae7bb80313cd47d6081dbf9a2c33630f78a1e2eeee61ab030e9467df48e596e7ac835087cf5e5ca2a88b10feab64a2ceac7eeac08eb21e9d605"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x9e}, &(0x7f0000000b00)={0x20, 0x81, 0x3, '~-&'}, &(0x7f0000000d80)={0x20, 0x82, 0x2, "66f0"}, &(0x7f0000000b80)={0x20, 0x83, 0x1, "10"}, &(0x7f0000000bc0)={0x20, 0x84, 0x1, "86"}, &(0x7f0000000c00)={0x20, 0x85, 0x3, "78fbf8"}}) futex_waitv(&(0x7f0000001480)=[{0x2, &(0x7f0000001400)=0x2, 0x82}, {0x9, &(0x7f0000001440)=0x9, 0x82}], 0x2, 0x0, &(0x7f00000014c0)={0x77359400}, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000002e00)=[{0x0}], 0x1, 0x0) 2m20.9806505s ago: executing program 32 (id=2339): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000069c0)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r1, r0]}}], 0x20, 0x8010}}], 0x1, 0x0) r2 = syz_usb_connect$uac1(0x0, 0xa8, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x3, 0x0, 0x6d, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xa}, [@extension_unit={0xa, 0x24, 0x8, 0x2, 0x3d8, 0x7f, "c697f6"}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x5, 0x40, "0d23f9"}, @processing_unit={0x9, 0x24, 0x7, 0x5, 0x2, 0x5, "0f1f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0x8, 0x9, {0x7, 0x25, 0x1, 0x0, 0x1, 0x567a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0x6, 0x4f, "", "a57b"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3, 0x7, 0x6, "0d12435b78bd86"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x8, 0x76, {0x7, 0x25, 0x1, 0x0, 0x1, 0x4}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x1, 0x7, 0x6, 0x1, 0x20}, 0x295, &(0x7f0000000100)={0x5, 0xf, 0x295, 0x6, [@generic={0xbe, 0x10, 0x3, "05e650aff00132ba76717177cca38b56c7d320eecb9f33edd3e8d9ad1a63a4d48aed546a6a242280c9bbf07c2ca7d48509cc5ac99669239f090037a05807803b794c15e7947aed493f2ca6895a5d25feefd45c088d6821226bbcc4e86ccd44e59afd3cded55d6861bbaa36e3c4c9e4cabd565c1571071f4532c37e19269fec637b1ed3fbe51beb00316945feba310201c871665ee86b5a797a2e31a0db258acc93d5717128a0fd837086a87512cda27be3deadd0ca1607bf271eaa"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0x10}, @generic={0x5, 0x10, 0x3, "f866"}, @ptm_cap={0x3}, @generic={0x102, 0x10, 0x1, "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"}, @generic={0xbe, 0x10, 0xa, "cd570ade6e83560aa250a46773d3cb4e65849cbc369ef2efd53cfef66c153db02c51a467f658e7e759a199583c29f2c1cf657b76b7e858a1ef001d987308031e4a13ebbf8c924018e259f32b87805e626ff6d15ea7bbc10b529256e668608ca3db73720ef388d6544a908064b7b3ad36a72c05a5606f8c095c145952bc1848eb33e0b957b8c29134338ea03fae1e4cc84b67513026306cf1bf0530a7a924ddd8e606c36e1d41a77de2d7150f40cac97c8e15d8dc03386fc4f475cc"}]}, 0x8, [{0xee, &(0x7f00000003c0)=@string={0xee, 0x3, "7038e3495d954dd17d624993e6f5a6eca97275481452b27cd0fdf9fb40792ef47d37a29d8674b0939fa492eefcbf4b31484cfc31a20e2b33ca225f1accaa08e4397120b58b96f8a05410ff84f98659adc8602c7b4f9724538e13d64ddc86a06ec949634a8c01b4faaefd5ba979121de420862c2eb37f52357f20d37dd3e4fb4c5b850916bc001977379dd261ed6c6fb5ad88bd4a0462f1145aeb234da7cbc97e8fbaa1d43f897db9aecf42e5a3bd233fbe1720ae9c96ec7b2bbc726331e80fe95e7fd9c19fdbe7a13938e01b4abfd6360e7aaca014b9ac609aa38949a905c2609b7287b35f679c7df97bc8b2"}}, {0x4b, &(0x7f00000004c0)=@string={0x4b, 0x3, "db57662ac1b8505aab053741d807daf19be4c65868dada0eacd5ba187fc916e68da702db3b5edb0888e3634d7c0b6c834f852e3b90e491eef0882af13043da2ceb918b4cdbe0b67ea8"}}, {0x5c, &(0x7f0000000540)=@string={0x5c, 0x3, "f812e6bd1069a02778b961d4ff023e8a4e1c51f226c6289a3af1ef2d240e895da14a3025d397a9d1630666a2526f8bb2ed391aba09f2005b26ca1ee0f454bef7eec27f2d553ef449432b54eec353b41ca4fbaab3b7a302dbae48"}}, {0x3a, &(0x7f00000005c0)=@string={0x3a, 0x3, "10683c0cb8662bce5a6d9464fe53962073192f022c76d773327953f5adc6aefbe06d5091627e1707837e461cc415ae8c24aadf4fdaf691a9"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1009}}, {0xb9, &(0x7f00000006c0)=@string={0xb9, 0x3, "ba8dce10c9086731576cd02f6e2073ee0f4f623112bbbffb274e655ab3970d9bea2b69eef5853e811da08927c8f5e4372205287631c7b449c746febb9dcd930e972922116cc9d3b7eba1b5556bfdd650f42030d4150d1cc033af00a88e835d9856be8784ce7974a1fc96ed6dd8963dadd7a1d96b7657f58c89d67023bde70c6e5176b8f47e038df3a29a1cacfc83dfd7639c4eb005e1e2b6525ca641daa294faca5c0dddb39fef403abfb1d063693014668a6fbb6d5b99"}}]}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x0, 0x0, 0x1, 0xb}, 0x68) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3, 0x2}) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @empty, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@flowinfo={{0x13, 0x29, 0xb, 0x40}}], 0x18}, 0x40c0) syz_usb_control_io$uac1(r2, &(0x7f00000009c0)={0x14, &(0x7f0000000800)={0x0, 0x7, 0xc6, {0xc6, 0x10, "3834b6c2f2aefba73b4c2f1dc1e2e378657603d9282d285051563fc018c48ed7be9132975ab9fd66f041e8938871066558f0b291c26fb47574b8bec092038ba907453d9b25682c7adddb76dc9386f6ebf8410fb9ecda22be523505ee36fb7d1248fc02f0a01238585d8f9bd7046f9d01f7622902af961d6f0220723607fec3c373e712744a2d2db12072cc162e2a6e29725415bd087acfccbcd35ff135c2f71899dac161dfdd099e8eff5f8ca96b1085c3ee5548b3a4e98391ba59348d3e82348cb1ac82"}}, &(0x7f0000000900)={0x0, 0x3, 0x84, @lang_id={0x0, 0x3, 0x416}}}, &(0x7f0000000c40)={0xfffffffffffffe6b, &(0x7f0000000dc0)={0x40, 0x7, 0x77, "cd74fce9f6c2892362d0b441323fd0cf840030e55c878de0905f04866fe62ffc6d0c1cbf82e3be77f7890b217f873774405644c0132848bdfdac1a6746dae7bb80313cd47d6081dbf9a2c33630f78a1e2eeee61ab030e9467df48e596e7ac835087cf5e5ca2a88b10feab64a2ceac7eeac08eb21e9d605"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x9e}, &(0x7f0000000b00)={0x20, 0x81, 0x3, '~-&'}, &(0x7f0000000d80)={0x20, 0x82, 0x2, "66f0"}, &(0x7f0000000b80)={0x20, 0x83, 0x1, "10"}, &(0x7f0000000bc0)={0x20, 0x84, 0x1, "86"}, &(0x7f0000000c00)={0x20, 0x85, 0x3, "78fbf8"}}) futex_waitv(&(0x7f0000001480)=[{0x2, &(0x7f0000001400)=0x2, 0x82}, {0x9, &(0x7f0000001440)=0x9, 0x82}], 0x2, 0x0, &(0x7f00000014c0)={0x77359400}, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000002e00)=[{0x0}], 0x1, 0x0) 2m11.457079275s ago: executing program 1 (id=2374): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x8310000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = fanotify_init(0x10, 0x40000) splice(r0, &(0x7f0000000100)=0x1, r1, &(0x7f0000000140)=0x4, 0x81, 0xb) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r2, &(0x7f00000000c0)=""/144, 0x90, 0x2f) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94946fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r4, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x3000, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f00000002c0)="411eec2ca010ffddca666cb9a6a70624735f5029bc585dc34055e4aeea169558a2e220484244dd3b63973ca9c3ed622196bb", 0x1a000}, &(0x7f0000000040)={0x22000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfce6}]) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) ioctl$TIOCGPTPEER(r6, 0x5441, 0x6f0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xb8, 0x0, &(0x7f0000000340)="c0b902d9d30cdbe9abc89b6f5bec3c4b1977e5230ac62db2d471293add32b686741922bb02e9cc0d206e9e9e6d2433b735ea7b1c3f51d193000680cc0c225ada192d5153a4fb3abc9e96e4ad2115d8b007000648abd71ae45cf0f5d249ddc1f190af574e42dad1af17851242fffff6942d7b9ddcb2f998f664d806f5dc4e62ca28d90cf81eb0d691eca9d25c219171b6048862e7e71c3fce008a824bd5f2ea2cd2bdd7630800000000000000d5e733e91cbcc7fda58ae7ca", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) 2m11.067651852s ago: executing program 1 (id=2375): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000300)=""/146, 0x92}, {&(0x7f00000003c0)=""/36, 0x24}, {&(0x7f0000000400)=""/221, 0xdd}, {&(0x7f0000000500)=""/252, 0xfc}, {&(0x7f0000000600)=""/10, 0xa}, {&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f00000006c0)=""/149, 0x95}], 0x7, &(0x7f0000000800)=""/205, 0xcd}, 0x1267}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/130, 0x82}, {&(0x7f00000009c0)=""/146, 0x92}, {&(0x7f0000000a80)=""/201, 0xc9}], 0x3}, 0x5}], 0x2, 0x10002, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xd7, 0x6573, 0x6}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x100000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x1a, 0x8001, 0xfffffffc, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa15, 0xfffffffc}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000c40)) ioctl$SIOCSIFHWADDR(r4, 0x8937, &(0x7f0000000100)={'veth0_vlan\x00', @random="010000201000"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000001c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) r7 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) dup3(r3, r7, 0x0) 2m9.185520806s ago: executing program 1 (id=2380): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) r5 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000003c0)={0x9, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r5, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 2m7.355698272s ago: executing program 1 (id=2384): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000806000108000604000100000000080000000000f0180dd3e80b00000009"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000028c0), &(0x7f0000000380)=0x60) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}}, {0xa, 0x20, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}, r5, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r5, 0x4040099d}}, 0x48) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = dup(r2) bind$inet6(r7, &(0x7f0000000080)={0x27, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='ip6tnl0\x00'}) 2m6.488558871s ago: executing program 1 (id=2386): syz_emit_ethernet(0x3bd, &(0x7f0000000b80)={@local, @link_local, @void, {@ipv4={0x800, @gre={{0x24, 0x4, 0x2, 0x16, 0x3af, 0x68, 0x0, 0xf7, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x3b, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0x78, 0x1, 0xa, [{@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x7fffffff}, {@multicast1, 0x2}]}, @timestamp={0x44, 0x24, 0xc0, 0x0, 0x5, [0x0, 0x7, 0x7, 0xea0, 0x5, 0x5, 0x5, 0x1000]}, @lsrr={0x83, 0xf, 0x1d, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x13, 0x55, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback]}, @generic={0xb, 0x2}, @rr={0x7, 0xb, 0x13, [@multicast2, @loopback]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x93, 0x1, [0x6], "6f43873d81e14911a8a5a687e17bea1e471bf65a27bc83a5fe4d27cd3d27ace2f02caf27a89c40bd97c03315857effd3269d1b0c71c70ddc4bc7c6fd9a5fe775265930a15b52283442a807c23312870072056823bacfbcef37db577681e3f1c07acc32ed959545693f1006e6210188fc0438dc6fe9fd94556a2b017823f417740a67643b6a107ce79965d900cd6417ed9dd629"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0xffff], "4b6553e85d43626820285bcea72b592687b7326f0856816dde656a1502b6289ef6aafcd6c2d9629b30e34c1cea46369767987d9950e577ef3754a241a6245db9d336cb2e741270801a9928b0030c02b28694c785acb18a2590962460b4e244a500af63007e68009a1e1eafdc0811915fa52ec92c3c442db60048fd1059801e3777b5e4cc9f8d5b89d0772ccb39b9e0e79e77b65ce95c378f8e0cb182e7f0c64f157d328e457f5ee54ad386df5910d9550ac6069fe33fb46061d048d720f286ab9a"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "5837600d9e2f07777b8c4889bc0251022e78985ffcf8db28510024c69a12367973bcc7166d640222df725b9112ca913de4f6ba6a8e4cc7ac95b3010f5f1ab5011850c0c6da7271b9948d32f49cbe19ebed4b37144efd01d9ebd8f0c8fd51e9088da553d20fa1cee77584017c9b377098f21a6b1e670d44a08c21c6ec443f29e37f5a198a"}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0x2, 0x2, 0x1, 0x1, 0x6, 0x7}}}, {0x8, 0x22eb, 0x2, {{0x9, 0x2, 0x7f, 0x3, 0x1, 0x0, 0x0, 0x3}, 0x2, {0xc, 0x7, 0x0, 0x9, 0x0, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "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"}}}}}}, 0x0) 2m5.933313978s ago: executing program 0 (id=2390): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70700000000000063b152000000000007000000000000009500000004000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0xffff, 0x1d67, 0x1}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, 0x0, 0x2000000}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2}, 0x10}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0xc0085504, &(0x7f0000000000)=0x10) 2m4.649287015s ago: executing program 0 (id=2394): syz_usb_connect(0x5, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0x8f, 0xf6, 0x2b, 0x20, 0x16ca, 0x1502, 0xd33a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xaa, 0x2, 0x40, 0x1, [{{0x9, 0x4, 0xf8, 0x4, 0x0, 0xb, 0xad, 0x2c, 0x7}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0x7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2ef}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x7f}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x40}}], 0x1, 0x4) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\b\x00\x00\x00$ \x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="eb77d00d40a0e413b1685b92338020563c8725a30dcc8e55efa84c6bab2cf95205b69a675106916a5424e9a81fd787419af1d3ad65ee0b325d2aaa292a044df987f09fef4dd5b150785bc8d7638b9edd61e3e71ed9a0f55c0588545181b7ec72ac92841bb1ae2e5e96dc22d9a48d54ff4e095653c9a35f0adef1e5acf51ce2d75cf026b7968283b2ff5800bde7a31e7a4fa46dc04040e5ab3b", @ANYRES64=0x0], 0x20) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000400), 0x12100, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000f00)=""/4096, 0x1000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800442, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xc0188000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f8000000100000042dbd7000fbdbdf256d6f727573366532430a000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240000002600000000000000000000080001007e0f0000080001000500000008000100b200"/232], 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0005c05c61232e1a80508d37bf6690d300", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000540), &(0x7f00000000c0)=@udp6, 0x2}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x2f1, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x1a, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32], 0x24}}, 0x0) r10 = semget(0x1, 0x0, 0x20) semtimedop(r10, &(0x7f0000000780)=[{0x3, 0x3}, {0x1, 0xc3d, 0x1000}, {0x2, 0xf282, 0x1000}, {0x1, 0x15, 0x3000}, {0x3, 0x0, 0x1000}, {0x2, 0x5, 0x1000}, {0x2, 0x9, 0xddd0f67606ebe9a1}], 0x7, &(0x7f0000000800)={0x77359400}) ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f0000000440)) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000840)=ANY=[@ANYBLOB="120100030000002825059a07556e910f22488706d9d2478144a8a440000102030109021b00010105801d090400000107010203090501024000090d7f"], &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x8, 0x0, 0x81, 0x40, 0x7}, 0x3d, &(0x7f0000000080)={0x5, 0xf, 0x3d, 0x4, [@ptm_cap={0x3}, @generic={0x2b, 0x10, 0x3, "833c13c56014fadafc67031fadc4cfaf1e141cf158c44cbb7752b7beb286f05950d5392fee37f7a5"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x7, 0x3, 0x8000}]}, 0x8, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x302b}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x412}}, {0xb2, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, {0x52, &(0x7f00000002c0)=@string={0x52, 0x3, "26d97d50d9e5d75920713a484fe0e7ac9b7fe74cdead0f0c65f57a1c809b2c76ef07b56474b3e8b64619131656ecbea318f23a89d92333b8d3664e1394ef2b5014189a718f0ba6b58164db233b215fb9"}}, {0x24, &(0x7f0000000340)=@string={0x24, 0x3, "b25dac77f36064a3bfc18fd7253357e6437d460ec54180f97457b45281623d444bec"}}]}) 2m2.947398095s ago: executing program 1 (id=2402): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) r1 = io_uring_setup(0x68af, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x5, 0x2, 0x0, r0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000480)={0x40, 0x12, 0x5, "2956f9cf05"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ptys(0xc, 0x3, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x110, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xcd, 0x7f, 0x8, 0x0, 0x0, 0x0, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x2, 0xec, 0x3, 0xd, 0x0, 0x8001, 0x7, 0x1}}, {0x6, 0x2, [0x8001]}}, {{0x1c, 0x1, {0x6, 0x2, 0x7d4, 0x10000000, 0x1, 0x0, 0x8001, 0x3}}, {0xa, 0x2, [0x600, 0x8000, 0x7]}}, {{0xfffffffffffffe3c, 0x1, {0xa0, 0x8, 0x83c5, 0x2a, 0x2, 0x1, 0xfffffffa}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x2, 0x6, 0x77dd, 0x1, 0x7, 0x9, 0x4}}, {0xc, 0x2, [0x1, 0x1000, 0x69c4, 0xfff6]}}, {{0x1c, 0x1, {0x7, 0x79, 0x8, 0x8, 0x0, 0x41, 0xf}}, {0x4}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4008094}, 0x8840) syz_open_dev$MSR(&(0x7f0000000000), 0x4, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd000071186d0000000000c3640000000000806b0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bee56309bcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000020000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94eeca4794644ccda3ebc509ee95a7dc1996bdb5a8f008ddd0499470182bff8d7"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x0, 0x10, &(0x7f0000000000), 0x45, 0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, 0x0, 0x10, 0x1}, 0x48) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a0102"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) close_range(r1, 0xffffffffffffffff, 0x0) 2m2.780130332s ago: executing program 33 (id=2402): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) r1 = io_uring_setup(0x68af, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x5, 0x2, 0x0, r0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000480)={0x40, 0x12, 0x5, "2956f9cf05"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ptys(0xc, 0x3, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x110, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xcd, 0x7f, 0x8, 0x0, 0x0, 0x0, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x2, 0xec, 0x3, 0xd, 0x0, 0x8001, 0x7, 0x1}}, {0x6, 0x2, [0x8001]}}, {{0x1c, 0x1, {0x6, 0x2, 0x7d4, 0x10000000, 0x1, 0x0, 0x8001, 0x3}}, {0xa, 0x2, [0x600, 0x8000, 0x7]}}, {{0xfffffffffffffe3c, 0x1, {0xa0, 0x8, 0x83c5, 0x2a, 0x2, 0x1, 0xfffffffa}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x2, 0x6, 0x77dd, 0x1, 0x7, 0x9, 0x4}}, {0xc, 0x2, [0x1, 0x1000, 0x69c4, 0xfff6]}}, {{0x1c, 0x1, {0x7, 0x79, 0x8, 0x8, 0x0, 0x41, 0xf}}, {0x4}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4008094}, 0x8840) syz_open_dev$MSR(&(0x7f0000000000), 0x4, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x0, 0x10, &(0x7f0000000000), 0x45, 0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, 0x0, 0x10, 0x1}, 0x48) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a0102"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) close_range(r1, 0xffffffffffffffff, 0x0) 2m1.292632659s ago: executing program 0 (id=2408): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r2}, 0x18) tkill(r0, 0x12) 2m0.719761371s ago: executing program 0 (id=2409): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xc0000001, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@broadcast, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x8}, {0x5, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xa}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 1m59.66135071s ago: executing program 0 (id=2410): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001240)=@newtfilter={0x8bc, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x88c, 0x2, [@TCA_CGROUP_POLICE={0x46c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x9, 0x100, 0x8, {0x80, 0x1, 0xfff, 0x6, 0x1, 0x7fffffff}, {0x9, 0x0, 0x0, 0x3f8, 0x1, 0xdc44}, 0x4, 0x9, 0x800000}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0xa6, 0x7, 0x0, 0x882, 0x1, 0x3, 0xec, 0x0, 0x5, 0x80000000, 0xfffffffe, 0x5, 0x180, 0x2, 0x8001, 0xffffff93, 0x5, 0xd, 0x87, 0x9, 0x6, 0x400, 0x6, 0x1b1, 0x7, 0x2, 0x4, 0x9, 0x219, 0x4, 0x0, 0xfff, 0x0, 0x7, 0x6, 0x6, 0x6, 0x101, 0x0, 0x40, 0x4, 0x130540, 0x3ff, 0x9, 0x8f9, 0x45417fef, 0xfffffffb, 0x4, 0x6, 0x7, 0x9, 0x7, 0x9, 0x9, 0x6, 0xfffffffe, 0x17, 0x8, 0x4, 0xe8, 0x7ff, 0x0, 0x9, 0x5, 0x7fffffff, 0x9, 0x9, 0x2, 0x72, 0x6, 0x7f, 0x7, 0x5, 0x8, 0x33, 0x7, 0x3, 0x2, 0x2, 0x80000001, 0x3ff, 0x9, 0x4, 0x7fff, 0x6, 0x7ff, 0xfb, 0x2b4, 0x80000001, 0x8000, 0x5, 0x4, 0x95, 0x9, 0x1, 0x7fffffff, 0xb26e, 0xa15, 0x1, 0xc6, 0x2, 0x5, 0xff, 0xfff, 0x8, 0x1, 0x5, 0x1, 0x7, 0x9, 0x8, 0x9, 0xd, 0x9, 0x2, 0x0, 0x9, 0x8, 0xa35, 0x0, 0x7ff, 0x0, 0x40, 0x9, 0xfffffff8, 0x8, 0x3, 0x1b, 0x5, 0x7f, 0x9, 0x9, 0x0, 0xffffff13, 0x0, 0x0, 0x4, 0x9, 0x8c8e, 0x30, 0x100, 0x847d, 0x9, 0x4, 0x2, 0x9, 0x6800000, 0x3, 0xffffff80, 0xa1, 0x3, 0x9, 0x4, 0x0, 0x2abc, 0x0, 0x3, 0x6, 0xca, 0x8, 0x0, 0x21ec, 0x8, 0x9, 0x110644b5, 0x3, 0x5, 0x3, 0xffff, 0x101, 0x508, 0xfffeffff, 0x1, 0x4, 0x0, 0x3, 0x80000000, 0x800, 0x10000, 0x6c, 0x8, 0x8, 0x6, 0xee350000, 0x1, 0xedc, 0xff, 0x0, 0x8, 0x200, 0x9, 0xfffffffd, 0x0, 0x10001, 0x9d, 0x5, 0x6, 0x4, 0x5cdb31e2, 0xc, 0x7, 0x8, 0x0, 0x5, 0x1, 0x792, 0x9, 0xf, 0x1000, 0x6, 0x7ff, 0x10000, 0x80, 0x9, 0x101, 0x5, 0x5, 0x8000, 0x0, 0x6c, 0x0, 0x2, 0x8, 0x1, 0x4, 0x6, 0xba71, 0x100, 0x7, 0x5, 0x6, 0x3, 0x7, 0xff, 0x6, 0xd8fc, 0x2, 0xfffffffe, 0xdf, 0x3, 0x3, 0x6, 0x10000, 0x1, 0x7, 0x7, 0x4, 0x4d, 0x5, 0x0, 0x1, 0x14, 0x4, 0x3, 0xa437]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}, @TCA_CGROUP_POLICE={0x41c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xa}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffff055, 0xffff, 0x8, 0x80000001, 0x4, 0x9, 0x7f, 0xba, 0x6, 0xffff, 0x9, 0x5, 0x3e, 0x8, 0x6, 0x10, 0x3, 0x7, 0x40, 0x8, 0x5, 0x9, 0x8, 0x7, 0x2, 0x0, 0x7, 0x3, 0x3e4c, 0xffff0000, 0x5e, 0x3, 0xfffffff7, 0x8001, 0x400, 0xc, 0x2, 0xdaa, 0x8, 0x5, 0x4, 0x9, 0x6, 0x6, 0x5, 0x80000000, 0x401, 0x6, 0x80000001, 0xc, 0x80000000, 0x3, 0xb, 0x2, 0x1, 0x4, 0x180000, 0x110, 0x3, 0xad05, 0xffff8000, 0xaf, 0x5, 0x6, 0x7ff, 0x3, 0x8000, 0x7, 0x2, 0x9, 0x4, 0x8, 0x8, 0x1f, 0x2, 0x1, 0x8, 0x80, 0xb3c, 0xffffff80, 0x34, 0x752c, 0x3, 0x3ff, 0xffffffaf, 0xc, 0x2, 0x81, 0x4, 0x1000000, 0x9, 0x6, 0x0, 0x1000, 0x5, 0x2, 0x2, 0x763, 0x5, 0x4, 0x9, 0x589, 0x9, 0x1, 0xffff, 0x1, 0x1000, 0x4, 0x10001, 0x7, 0x8001, 0xc75e, 0x0, 0x6, 0x8, 0x0, 0x2, 0x1, 0x3, 0x3f2d, 0x666d, 0x1, 0x3, 0x7, 0x0, 0x2be6, 0xf5, 0x2, 0x80000000, 0x10, 0x6, 0x7, 0x7fff, 0xfb45, 0x1, 0x1, 0x0, 0x24d, 0x6, 0x5, 0x0, 0x4, 0x4005, 0x8000, 0x7, 0x200, 0x68, 0x8, 0x26298000, 0xffff, 0x4, 0x9bb8, 0xfffffffe, 0x5, 0x9, 0x80, 0x58, 0x2, 0x0, 0x3, 0x4, 0x9, 0x4, 0xffff, 0xffff, 0x5, 0x1, 0x7, 0x2, 0x94a6, 0x5, 0x6, 0x4, 0x1, 0x3, 0x32c, 0x81, 0x7, 0xf, 0x7, 0xf6c75d4, 0x4, 0x1149, 0x5, 0x3, 0x8, 0x7, 0x5, 0x1f7c, 0x6, 0x1ff, 0x7, 0xc, 0x7933eede, 0xd1e, 0x5, 0x10000, 0x7fffffff, 0x401, 0x10, 0x8001, 0xfff, 0x4, 0xff, 0xa3, 0x2, 0x0, 0x3, 0x1, 0x5, 0x4, 0x6, 0xb1d1, 0xffff, 0xad0, 0x7, 0x2, 0x1a, 0xf9, 0xb, 0x9, 0x5, 0x10000, 0x180000, 0x1, 0xa, 0x400, 0xc1, 0x9, 0x3a6e, 0x7, 0xd, 0x4, 0x0, 0x32, 0x1ff, 0x7, 0x5, 0xffffffff, 0x400, 0x1, 0xffff05e5, 0x3, 0xd, 0x0, 0x7ff, 0x200, 0x2, 0x1a9d0449, 0x0, 0xa, 0x0, 0x1, 0x80000000, 0x300000, 0xff]}]}]}}]}, 0x8bc}, 0x1, 0x0, 0x0, 0x48090}, 0x4c000) 1m58.79616157s ago: executing program 0 (id=2417): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb00}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) writev(r1, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000240)="0104001811005abeef4ba0d59844c1000000d122f0930b82758949cd5bd7c5f48ce38daa1f4417a37a5a7c279aa7", 0x2e}], 0x2) syz_usb_connect(0x5, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100025e022d2099115268d56cd02d0301090212000100824007090499030009"], 0x0) 1m43.713440974s ago: executing program 34 (id=2417): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb00}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) writev(r1, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000240)="0104001811005abeef4ba0d59844c1000000d122f0930b82758949cd5bd7c5f48ce38daa1f4417a37a5a7c279aa7", 0x2e}], 0x2) syz_usb_connect(0x5, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100025e022d2099115268d56cd02d0301090212000100824007090499030009"], 0x0) 8.96688351s ago: executing program 3 (id=2666): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) 7.927945466s ago: executing program 3 (id=2669): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000002100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x406}}}, 0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x8801}}], 0x1, 0x20044034) 7.488204321s ago: executing program 3 (id=2672): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) 7.46669537s ago: executing program 3 (id=2673): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000af00)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x9}}, 0x50) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='%'], 0x0, 0x0) 7.124925805s ago: executing program 3 (id=2676): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x8c0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) r3 = socket(0x6, 0x2, 0x10000) socket(0x200000000000011, 0x2, 0xfc) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x70bd2a, 0xffffffff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x40084c0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r4 = socket(0x10, 0x803, 0x0) recvmmsg(r4, &(0x7f00000037c0), 0x0, 0x2040000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 1.742458956s ago: executing program 3 (id=2679): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000002100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x406}}}, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x8801}}], 0x1, 0x20044034) 1.466661039s ago: executing program 4 (id=2681): socket$netlink(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x2, 0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000480)) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) 1.201454601s ago: executing program 4 (id=2682): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0), 0x0, 0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x8, 0x0, 0x0) r6 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x3c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 923.50509ms ago: executing program 4 (id=2683): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 692.637508ms ago: executing program 4 (id=2684): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) shutdown(r0, 0x1) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r0) sendmsg$ETHTOOL_MSG_WOL_GET(r2, 0x0, 0x4008051) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x1000) 566.785205ms ago: executing program 4 (id=2685): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0105303, &(0x7f0000001380)={0x0, 0x0, 0x0, 'queue1\x00'}) 0s ago: executing program 4 (id=2686): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) kernel console output (not intermixed with test programs): 2122] mapped:35430 shmem:29413 pagetables:1193 [ 546.764848][T12122] sec_pagetables:0 bounce:0 [ 546.764848][T12122] kernel_misc_reclaimable:0 [ 546.764848][T12122] free:1262846 free_pcp:13539 free_cma:0 [ 546.764900][T12122] Node 0 active_anon:1128kB inactive_anon:134364kB active_file:105852kB inactive_file:149000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141668kB dirty:552kB writeback:100kB shmem:116116kB kernel_stack:13100kB pagetables:4620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 546.764945][T12122] Node 1 active_anon:0kB inactive_anon:0kB active_file:264kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 546.764988][T12122] Node 0 DMA free:15356kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 546.765044][T12122] lowmem_reserve[]: 0 2514 2515 2515 2515 [ 546.765077][T12122] Node 0 DMA32 free:1137948kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1128kB inactive_anon:134364kB active_file:105852kB inactive_file:149000kB unevictable:1536kB writepending:652kB zspages:0kB present:3129332kB managed:2574680kB mlocked:0kB bounce:0kB free_pcp:54156kB local_pcp:7204kB free_cma:0kB [ 546.765136][T12122] lowmem_reserve[]: 0 0 1 1 1 [ 546.765165][T12122] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 546.765219][T12122] lowmem_reserve[]: 0 0 0 0 0 [ 546.765249][T12122] Node 1 Normal free:3898080kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:264kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 546.765306][T12122] lowmem_reserve[]: 0 0 0 0 0 [ 546.765336][T12122] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 546.765478][T12122] Node 0 DMA32: 852*4kB (UME) 859*8kB (UME) 1272*16kB (UME) 299*32kB (UME) 128*64kB (UME) 91*128kB (UME) 83*256kB (UME) 30*512kB (UME) 13*1024kB (UME) 20*2048kB (UME) 241*4096kB (M) = 1138056kB [ 546.765622][T12122] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 546.765713][T12122] Node 1 Normal: 192*4kB (UME) 48*8kB (UME) 38*16kB (UME) 216*32kB (UME) 96*64kB (UE) 30*128kB (UME) 12*256kB (UME) 9*512kB (UME) 3*1024kB (UM) 3*2048kB (UME) 943*4096kB (M) = 3898080kB [ 546.765856][T12122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 546.765873][T12122] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 546.765889][T12122] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 546.765904][T12122] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 546.765920][T12122] 93188 total pagecache pages [ 546.765928][T12122] 0 pages in swap cache [ 546.765935][T12122] Free swap = 124996kB [ 546.765942][T12122] Total swap = 124996kB [ 546.765950][T12122] 2097051 pages RAM [ 546.765956][T12122] 0 pages HighMem/MovableOnly [ 546.765963][T12122] 421355 pages reserved [ 546.765970][T12122] 0 pages cma reserved [ 546.862509][T12120] netlink: 'syz.0.2212': attribute type 1 has an invalid length. [ 546.862533][T12120] netlink: 'syz.0.2212': attribute type 1 has an invalid length. [ 546.862564][T12120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.768602][T11496] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 549.922928][T11496] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 549.922960][T11496] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.922982][T11496] usb 5-1: Product: syz [ 549.922999][T11496] usb 5-1: Manufacturer: syz [ 549.923014][T11496] usb 5-1: SerialNumber: syz [ 549.961926][T11496] usb 5-1: config 0 descriptor?? [ 549.980682][T11496] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 550.223950][ T150] usb 5-1: Failed to submit usb control message: -71 [ 550.223988][ T150] usb 5-1: unable to send the bmi data to the device: -71 [ 550.224007][ T150] usb 5-1: unable to get target info from device [ 550.224022][ T150] usb 5-1: could not get target info (-71) [ 550.224040][ T150] usb 5-1: could not probe fw (-71) [ 550.224615][ T6012] usb 5-1: USB disconnect, device number 49 [ 550.668382][T12178] kernel read not supported for file / 7âW)sPmQfsl{Tr)rO2:" (pid: 12178 comm: syz.0.2228) [ 550.669986][ T37] audit: type=1800 audit(1768508555.191:88): pid=12178 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2228" name=20019C1437B1CFFCC3A25729EB7350C86DE0518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C099 dev="mqueue" ino=12144 res=0 errno=0 [ 554.419126][T12200] netlink: 17780 bytes leftover after parsing attributes in process `syz.2.2232'. [ 558.618390][ T6140] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 558.786143][ T6140] usb 3-1: not running at top speed; connect to a high speed hub [ 558.795043][ T6140] usb 3-1: config index 0 descriptor too short (expected 2560, got 147) [ 558.795071][ T6140] usb 3-1: config 1 has too many interfaces: 36, using maximum allowed: 32 [ 558.795093][ T6140] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 558.795111][ T6140] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.795131][ T6140] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 36 [ 558.807200][ T6140] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 558.807230][ T6140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.807252][ T6140] usb 3-1: Product: syz [ 558.807267][ T6140] usb 3-1: Manufacturer: syz [ 558.807282][ T6140] usb 3-1: SerialNumber: syz [ 559.058598][ T6364] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 559.100369][T12218] sock: sock_set_timeout: `syz.2.2242' (pid 12218) tries to set negative timeout [ 559.102378][T12218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.102869][T12218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.355655][T12222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.364518][T12222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.454019][T12222] overlayfs: workdir and upperdir must be separate subtrees [ 559.598574][ T6594] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 559.661040][ T6140] usb 3-1: USB disconnect, device number 45 [ 559.748286][ T6594] usb 4-1: Using ep0 maxpacket: 16 [ 559.750719][ T6594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.750751][ T6594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.750775][ T6594] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 559.750819][ T6594] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 559.750843][ T6594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.755563][ T6594] usb 4-1: config 0 descriptor?? [ 560.116187][ T6364] usb 2-1: unable to get BOS descriptor or descriptor too short [ 560.116272][ T6364] usb 2-1: too many configurations: 16, using maximum allowed: 8 [ 560.122024][ T6364] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 560.122062][ T6364] usb 2-1: can't read configurations, error -71 [ 560.212272][ T6594] hid_parser_main: 9 callbacks suppressed [ 560.212296][ T6594] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 560.212329][ T6594] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 560.212358][ T6594] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x1 [ 560.212385][ T6594] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 560.212415][ T6594] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 560.212444][ T6594] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 560.212472][ T6594] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 560.212501][ T6594] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 560.212528][ T6594] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 560.212556][ T6594] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 560.212680][ T6594] hid-multitouch 0003:0457:07DA.000E: collection stack underflow [ 560.212708][ T6594] hid-multitouch 0003:0457:07DA.000E: item 0 0 0 12 parsing failed [ 560.213601][ T6594] hid-multitouch 0003:0457:07DA.000E: probe with driver hid-multitouch failed with error -22 [ 560.403618][ T6140] usb 4-1: USB disconnect, device number 20 [ 560.509149][T12246] kernel read not supported for file / 7âW)sPmQfsl{Tr)rO2:" (pid: 12246 comm: syz.2.2244) [ 560.512102][ T37] audit: type=1800 audit(1768508565.031:89): pid=12246 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2244" name=20019C1437B1CFFCC3A25729EB7350C86DE0518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C099 dev="mqueue" ino=12095 res=0 errno=0 [ 560.717139][T12244] netlink: 'syz.4.2247': attribute type 1 has an invalid length. [ 561.584370][T12251] netlink: 17780 bytes leftover after parsing attributes in process `syz.1.2248'. [ 561.661057][T12244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 561.681757][T12259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2249'. [ 561.681794][T12259] netlink: 'syz.3.2249': attribute type 7 has an invalid length. [ 561.681808][T12259] netlink: 'syz.3.2249': attribute type 8 has an invalid length. [ 561.681819][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2249'. [ 561.733900][T12259] team0: entered promiscuous mode [ 561.733924][T12259] team_slave_0: entered promiscuous mode [ 561.734150][T12259] team_slave_1: entered promiscuous mode [ 561.737247][T12259] bond0: entered promiscuous mode [ 561.737270][T12259] bond_slave_0: entered promiscuous mode [ 561.737501][T12259] bond_slave_1: entered promiscuous mode [ 561.759933][T12259] gretap0: entered promiscuous mode [ 561.794575][T12259] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 563.746738][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.746807][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.863275][T12286] FAULT_INJECTION: forcing a failure. [ 563.863275][T12286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.863314][T12286] CPU: 0 UID: 0 PID: 12286 Comm: syz.4.2258 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 563.863342][T12286] Tainted: [L]=SOFTLOCKUP [ 563.863350][T12286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 563.863362][T12286] Call Trace: [ 563.863370][T12286] [ 563.863378][T12286] dump_stack_lvl+0xe8/0x150 [ 563.863409][T12286] should_fail_ex+0x46c/0x600 [ 563.863439][T12286] _copy_from_user+0x2d/0xb0 [ 563.863460][T12286] ___sys_sendmsg+0x158/0x2a0 [ 563.863488][T12286] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.863544][T12286] ? __fget_files+0x2a/0x420 [ 563.863562][T12286] ? __fget_files+0x3a6/0x420 [ 563.863590][T12286] __x64_sys_sendmsg+0x1a1/0x260 [ 563.863615][T12286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 563.863647][T12286] ? __pfx_ksys_write+0x10/0x10 [ 563.863683][T12286] do_syscall_64+0xec/0xf80 [ 563.863703][T12286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.863721][T12286] ? trace_irq_disable+0x37/0x100 [ 563.863742][T12286] ? clear_bhb_loop+0x60/0xb0 [ 563.863765][T12286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.863784][T12286] RIP: 0033:0x7f060c8af749 [ 563.863802][T12286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.863819][T12286] RSP: 002b:00007f060aaf5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.863839][T12286] RAX: ffffffffffffffda RBX: 00007f060cb06090 RCX: 00007f060c8af749 [ 563.863854][T12286] RDX: 0000000000000090 RSI: 0000200000000240 RDI: 0000000000000003 [ 563.863867][T12286] RBP: 00007f060aaf5090 R08: 0000000000000000 R09: 0000000000000000 [ 563.863880][T12286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.863893][T12286] R13: 00007f060cb06128 R14: 00007f060cb06090 R15: 00007ffdd08d7d08 [ 563.863923][T12286] [ 563.955507][T12288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2257'. [ 563.955543][T12288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2257'. [ 564.001364][T12288] dummy0: entered promiscuous mode [ 564.012860][T12288] team0: entered promiscuous mode [ 564.012885][T12288] team_slave_0: entered promiscuous mode [ 564.013418][T12288] team_slave_1: entered promiscuous mode [ 564.022481][T12288] debugfs: 'hsr1' already exists in 'hsr' [ 564.022512][T12288] Cannot create hsr debugfs directory [ 564.078757][ T6364] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 564.138288][T11496] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 564.234769][ T6364] usb 4-1: config index 0 descriptor too short (expected 1316, got 36) [ 564.234802][ T6364] usb 4-1: config 7 has an invalid interface number: 204 but max is -1 [ 564.234825][ T6364] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 0 [ 564.234848][ T6364] usb 4-1: config 7 has no interface number 0 [ 564.234901][ T6364] usb 4-1: config 7 interface 204 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 564.234925][ T6364] usb 4-1: config 7 interface 204 has no altsetting 0 [ 564.302154][T12283] ALSA: seq fatal error: cannot create timer (-19) [ 564.323069][ T6364] usb 4-1: New USB device found, idVendor=0424, idProduct=9904, bcdDevice=d1.ce [ 564.323162][ T6364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.323186][ T6364] usb 4-1: Product: syz [ 564.323202][ T6364] usb 4-1: Manufacturer: syz [ 564.323218][ T6364] usb 4-1: SerialNumber: syz [ 564.449907][T12293] kernel read not supported for file / 7âW)sPmQfsl{Tr)rO2:" (pid: 12293 comm: syz.2.2260) [ 564.458269][ T37] audit: type=1800 audit(1768508568.971:90): pid=12293 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2260" name=20019C1437B1CFFCC3A25729EB7350C86DE0518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C099 dev="mqueue" ino=12095 res=0 errno=0 [ 565.967103][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 566.118299][ T6289] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 566.225565][ T6364] smsc95xx v2.0.0 [ 566.225586][ T6364] smsc95xx 4-1:7.204 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 566.227306][ T6364] smsc95xx 4-1:7.204: probe with driver smsc95xx failed with error -22 [ 566.278209][ T6289] usb 5-1: Using ep0 maxpacket: 16 [ 566.284848][ T6364] usbhid 4-1:7.204: couldn't find an input interrupt endpoint [ 566.303562][T12305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.303948][ T6289] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 566.304206][T12305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.304819][ T6289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.304842][ T6289] usb 5-1: Product: syz [ 566.304856][ T6289] usb 5-1: Manufacturer: syz [ 566.304871][ T6289] usb 5-1: SerialNumber: syz [ 566.309830][T12305] overlayfs: workdir and upperdir must be separate subtrees [ 566.338501][T12306] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2264'. [ 566.694280][T12310] FAULT_INJECTION: forcing a failure. [ 566.694280][T12310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.694311][T12310] CPU: 1 UID: 0 PID: 12310 Comm: syz.3.2265 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 566.694333][T12310] Tainted: [L]=SOFTLOCKUP [ 566.694342][T12310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 566.694350][T12310] Call Trace: [ 566.694357][T12310] [ 566.694364][T12310] dump_stack_lvl+0xe8/0x150 [ 566.694388][T12310] should_fail_ex+0x46c/0x600 [ 566.694411][T12310] _copy_from_user+0x2d/0xb0 [ 566.694427][T12310] ___sys_sendmsg+0x158/0x2a0 [ 566.694448][T12310] ? __pfx____sys_sendmsg+0x10/0x10 [ 566.694491][T12310] ? __fget_files+0x2a/0x420 [ 566.694506][T12310] ? __fget_files+0x3a6/0x420 [ 566.694527][T12310] __x64_sys_sendmsg+0x1a1/0x260 [ 566.694547][T12310] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 566.694573][T12310] ? __pfx_ksys_write+0x10/0x10 [ 566.694601][T12310] do_syscall_64+0xec/0xf80 [ 566.694616][T12310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.694630][T12310] ? trace_irq_disable+0x37/0x100 [ 566.694645][T12310] ? clear_bhb_loop+0x60/0xb0 [ 566.694662][T12310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.694676][T12310] RIP: 0033:0x7f183ef0f749 [ 566.694700][T12310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.694713][T12310] RSP: 002b:00007f183d16e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.694730][T12310] RAX: ffffffffffffffda RBX: 00007f183f165fa0 RCX: 00007f183ef0f749 [ 566.694741][T12310] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 566.694750][T12310] RBP: 00007f183d16e090 R08: 0000000000000000 R09: 0000000000000000 [ 566.694760][T12310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.694769][T12310] R13: 00007f183f166038 R14: 00007f183f165fa0 R15: 00007fffb6b73cf8 [ 566.694793][T12310] [ 566.869600][ T6289] usb 5-1: config 0 descriptor?? [ 568.359735][ T6364] usb 4-1: USB disconnect, device number 21 [ 568.382698][ T6289] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 568.409073][ T6289] usb 5-1: Detected FT-X [ 568.438825][ T6289] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 568.439649][ T6289] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 568.440766][ T6289] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 568.483962][T11496] usb 1-1: unable to get BOS descriptor or descriptor too short [ 568.484043][T11496] usb 1-1: too many configurations: 16, using maximum allowed: 8 [ 568.485027][T11496] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 568.485062][T11496] usb 1-1: can't read configurations, error -71 [ 568.500800][ T6289] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 568.514840][ T6289] usb 5-1: USB disconnect, device number 50 [ 568.534686][ T6289] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 568.535435][ T6289] ftdi_sio 5-1:0.0: device disconnected [ 569.374750][T12331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2273'. [ 569.374791][T12331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2273'. [ 569.555834][T12331] gretap0: entered promiscuous mode [ 570.148821][ T5900] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 570.768407][T12331] gretap0: left promiscuous mode [ 571.004962][ T5900] usb 5-1: config index 0 descriptor too short (expected 1316, got 36) [ 571.004995][ T5900] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 571.005016][ T5900] usb 5-1: config 7 has no interfaces? [ 571.009821][ T5900] usb 5-1: New USB device found, idVendor=0424, idProduct=9904, bcdDevice=d1.ce [ 571.009854][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.009876][ T5900] usb 5-1: Product: syz [ 571.009891][ T5900] usb 5-1: Manufacturer: syz [ 571.009907][ T5900] usb 5-1: SerialNumber: syz [ 572.509951][ T5900] usb 5-1: USB disconnect, device number 51 [ 572.668250][ T37] audit: type=1326 audit(1768508577.181:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12353 comm="syz.0.2281" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd74403f749 code=0x0 [ 572.878288][T11869] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 572.901897][T11496] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 572.921388][T12359] FAULT_INJECTION: forcing a failure. [ 572.921388][T12359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.921412][T12359] CPU: 1 UID: 0 PID: 12359 Comm: syz.0.2281 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 572.921428][T12359] Tainted: [L]=SOFTLOCKUP [ 572.921432][T12359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 572.921440][T12359] Call Trace: [ 572.921445][T12359] [ 572.921450][T12359] dump_stack_lvl+0xe8/0x150 [ 572.921470][T12359] should_fail_ex+0x46c/0x600 [ 572.921488][T12359] _copy_from_user+0x2d/0xb0 [ 572.921501][T12359] kstrtouint_from_user+0xc4/0x170 [ 572.921517][T12359] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 572.921540][T12359] proc_fail_nth_write+0x88/0x200 [ 572.921558][T12359] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 572.921576][T12359] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 572.921592][T12359] vfs_write+0x287/0xb40 [ 572.921611][T12359] ? __pfx_vfs_write+0x10/0x10 [ 572.921626][T12359] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 572.921638][T12359] ? lockdep_hardirqs_on+0x7b/0x110 [ 572.921649][T12359] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 572.921660][T12359] ? mutex_lock_nested+0x154/0x1d0 [ 572.921674][T12359] ? fdget_pos+0x253/0x320 [ 572.921690][T12359] ksys_write+0x14b/0x260 [ 572.921705][T12359] ? __pfx_ksys_write+0x10/0x10 [ 572.921725][T12359] do_syscall_64+0xec/0xf80 [ 572.921737][T12359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.921747][T12359] ? clear_bhb_loop+0x60/0xb0 [ 572.921760][T12359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.921770][T12359] RIP: 0033:0x7fd74403e1ff [ 572.921781][T12359] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 572.921790][T12359] RSP: 002b:00007fd74227d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 572.921808][T12359] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd74403e1ff [ 572.921816][T12359] RDX: 0000000000000001 RSI: 00007fd74227d0a0 RDI: 0000000000000004 [ 572.921823][T12359] RBP: 00007fd74227d090 R08: 0000000000000000 R09: 0000000000000000 [ 572.921830][T12359] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 572.921836][T12359] R13: 00007fd744296128 R14: 00007fd744296090 R15: 00007ffd124a5b98 [ 572.921853][T12359] [ 573.048290][T11496] usb 4-1: Using ep0 maxpacket: 16 [ 573.058353][T11496] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 573.058383][T11496] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.058404][T11496] usb 4-1: Product: syz [ 573.058418][T11496] usb 4-1: Manufacturer: syz [ 573.058432][T11496] usb 4-1: SerialNumber: syz [ 573.214085][T11496] usb 4-1: config 0 descriptor?? [ 573.228879][T11496] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 573.230628][T11496] usb 4-1: Detected FT-X [ 573.288244][T11869] usb 2-1: Using ep0 maxpacket: 32 [ 573.290329][T11869] usb 2-1: config 0 has an invalid interface number: 101 but max is 0 [ 573.290355][T11869] usb 2-1: config 0 has no interface number 0 [ 573.290387][T11869] usb 2-1: config 0 interface 101 has no altsetting 0 [ 573.291849][T11869] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 573.291875][T11869] usb 2-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0 [ 573.291946][T11869] usb 2-1: Manufacturer: syz [ 573.371984][T11869] usb 2-1: config 0 descriptor?? [ 573.416746][T11496] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 573.448434][ T49] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 573.766729][T11869] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 573.813132][T11869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 573.816163][T11869] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 573.816228][T11869] usb 2-1: media controller created [ 573.897264][T11869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 573.986435][T11496] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5 [ 574.010510][T11496] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 574.067837][T12363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.085137][T12363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.117160][T12363] overlayfs: workdir and upperdir must be separate subtrees [ 574.285262][T12350] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2279'. [ 574.373079][T12383] FAULT_INJECTION: forcing a failure. [ 574.373079][T12383] name failslab, interval 1, probability 0, space 0, times 0 [ 574.373180][T12383] CPU: 0 UID: 0 PID: 12383 Comm: syz.2.2287 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 574.373209][T12383] Tainted: [L]=SOFTLOCKUP [ 574.373216][T12383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 574.373228][T12383] Call Trace: [ 574.373237][T12383] [ 574.373246][T12383] dump_stack_lvl+0xe8/0x150 [ 574.373280][T12383] should_fail_ex+0x46c/0x600 [ 574.373309][T12383] ? skb_clone+0x212/0x3a0 [ 574.373335][T12383] should_failslab+0xa8/0x100 [ 574.373356][T12383] ? skb_clone+0x212/0x3a0 [ 574.373378][T12383] kmem_cache_alloc_noprof+0x84/0x6c0 [ 574.373412][T12383] skb_clone+0x212/0x3a0 [ 574.373435][T12383] ? dev_queue_xmit_nit+0x268/0xad0 [ 574.373461][T12383] dev_queue_xmit_nit+0x29a/0xad0 [ 574.373485][T12383] ? dev_queue_xmit_nit+0x2d/0xad0 [ 574.373519][T12383] dev_hard_start_xmit+0x1be/0x840 [ 574.373563][T12383] __dev_queue_xmit+0x1482/0x3210 [ 574.373588][T12383] ? netlink_unicast+0x811/0xa10 [ 574.373608][T12383] ? netlink_sendmsg+0x805/0xb30 [ 574.373629][T12383] ? __sock_sendmsg+0x21c/0x270 [ 574.373658][T12383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.373687][T12383] ? __dev_queue_xmit+0x253/0x3210 [ 574.373724][T12383] ? __pfx___dev_queue_xmit+0x10/0x10 [ 574.373757][T12383] ? __copy_skb_header+0xa7/0x550 [ 574.373782][T12383] ? __asan_memcpy+0x40/0x70 [ 574.373806][T12383] ? __skb_clone+0x63/0x7a0 [ 574.373835][T12383] ? __skb_clone+0x483/0x7a0 [ 574.373867][T12383] ? skb_clone+0x246/0x3a0 [ 574.373895][T12383] __netlink_deliver_tap+0x5ad/0x850 [ 574.373933][T12383] ? netlink_deliver_tap+0x2e/0x1b0 [ 574.373959][T12383] netlink_deliver_tap+0x19c/0x1b0 [ 574.373985][T12383] netlink_unicast+0x811/0xa10 [ 574.374017][T12383] ? __pfx_netlink_unicast+0x10/0x10 [ 574.374038][T12383] ? __alloc_skb+0x198/0x3a0 [ 574.374072][T12383] ? netlink_sendmsg+0x642/0xb30 [ 574.374094][T12383] ? skb_put+0x11b/0x210 [ 574.374120][T12383] netlink_sendmsg+0x805/0xb30 [ 574.374156][T12383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.374190][T12383] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 574.374214][T12383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.374240][T12383] __sock_sendmsg+0x21c/0x270 [ 574.374271][T12383] ____sys_sendmsg+0x508/0x810 [ 574.374302][T12383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.374384][T12383] ? import_iovec+0x74/0xa0 [ 574.374413][T12383] ___sys_sendmsg+0x21f/0x2a0 [ 574.374445][T12383] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.374506][T12383] ? __fget_files+0x2a/0x420 [ 574.374526][T12383] ? __fget_files+0x3a6/0x420 [ 574.374557][T12383] __x64_sys_sendmsg+0x1a1/0x260 [ 574.374586][T12383] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.374620][T12383] ? __pfx_ksys_write+0x10/0x10 [ 574.374660][T12383] do_syscall_64+0xec/0xf80 [ 574.374680][T12383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.374697][T12383] ? trace_irq_disable+0x37/0x100 [ 574.374717][T12383] ? clear_bhb_loop+0x60/0xb0 [ 574.374741][T12383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.374759][T12383] RIP: 0033:0x7f0dca7af749 [ 574.374778][T12383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.374793][T12383] RSP: 002b:00007f0dc8a0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.374814][T12383] RAX: ffffffffffffffda RBX: 00007f0dcaa05fa0 RCX: 00007f0dca7af749 [ 574.374830][T12383] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000005 [ 574.374842][T12383] RBP: 00007f0dc8a0e090 R08: 0000000000000000 R09: 0000000000000000 [ 574.374855][T12383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.374867][T12383] R13: 00007f0dcaa06038 R14: 00007f0dcaa05fa0 R15: 00007fffed9e73c8 [ 574.374903][T12383] [ 574.403695][ T7855] usb 4-1: USB disconnect, device number 22 [ 574.466494][ T7855] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 574.484061][ T7855] ftdi_sio 4-1:0.0: device disconnected [ 574.679297][ T49] usb 1-1: unable to get BOS descriptor or descriptor too short [ 574.679380][ T49] usb 1-1: too many configurations: 16, using maximum allowed: 8 [ 574.680350][ T49] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 574.680385][ T49] usb 1-1: can't read configurations, error -71 [ 575.039851][T11869] az6027: usb out operation failed. (-71) [ 575.043967][T11869] az6027: usb out operation failed. (-71) [ 575.043985][T11869] stb0899_attach: Driver disabled by Kconfig [ 575.043996][T11869] az6027: no front-end attached [ 575.043996][T11869] [ 575.055180][T11869] az6027: usb out operation failed. (-71) [ 575.055205][T11869] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 575.126689][T11869] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 575.156889][T11869] dvb-usb: schedule remote query interval to 400 msecs. [ 575.156911][T11869] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 575.175258][T11869] usb 2-1: USB disconnect, device number 24 [ 575.458367][ T37] audit: type=1326 audit(1768508579.971:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12388 comm="syz.3.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 575.458420][ T37] audit: type=1326 audit(1768508579.971:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12388 comm="syz.3.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 575.458457][ T37] audit: type=1326 audit(1768508579.971:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12388 comm="syz.3.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 575.458493][ T37] audit: type=1326 audit(1768508579.971:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12388 comm="syz.3.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 575.458531][ T37] audit: type=1326 audit(1768508579.971:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12388 comm="syz.3.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 575.458570][ T37] audit: type=1326 audit(1768508579.971:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12388 comm="syz.3.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f183ef0df90 code=0x7ffc0000 [ 575.458607][ T37] audit: type=1326 audit(1768508579.971:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12388 comm="syz.3.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 575.825540][T12403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'. [ 575.836717][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2293'. [ 578.977777][T11869] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 578.994928][T12418] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.2299'. [ 579.268249][ T5943] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 579.418540][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 579.423441][ T5943] usb 5-1: config 0 has an invalid interface number: 14 but max is 0 [ 579.423471][ T5943] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 579.423491][ T5943] usb 5-1: config 0 has an invalid descriptor of length 157, skipping remainder of the config [ 579.423513][ T5943] usb 5-1: config 0 has no interface number 0 [ 579.423562][ T5943] usb 5-1: config 0 interface 14 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 579.423592][ T5943] usb 5-1: config 0 interface 14 has no altsetting 0 [ 579.426294][ T5943] usb 5-1: New USB device found, idVendor=03eb, idProduct=4102, bcdDevice=d2.a1 [ 579.426325][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.426349][ T5943] usb 5-1: Product: syz [ 579.426365][ T5943] usb 5-1: Manufacturer: syz [ 579.426381][ T5943] usb 5-1: SerialNumber: syz [ 579.438268][T11869] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 579.450857][ T5943] usb 5-1: config 0 descriptor?? [ 579.599232][T11869] usb 4-1: Using ep0 maxpacket: 32 [ 579.601378][T11869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.601402][T11869] usb 4-1: config 0 has no interfaces? [ 579.603561][T11869] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 579.603583][T11869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.603595][T11869] usb 4-1: Product: syz [ 579.603603][T11869] usb 4-1: Manufacturer: syz [ 579.603611][T11869] usb 4-1: SerialNumber: syz [ 579.607323][T11869] usb 4-1: config 0 descriptor?? [ 579.808248][ T5855] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 579.960284][ T5855] usb 3-1: Using ep0 maxpacket: 16 [ 579.965994][ T5855] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 579.966018][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.966030][ T5855] usb 3-1: Product: syz [ 579.966039][ T5855] usb 3-1: Manufacturer: syz [ 579.966047][ T5855] usb 3-1: SerialNumber: syz [ 580.008536][ T5855] usb 3-1: config 0 descriptor?? [ 580.012881][ T5855] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 580.014737][ T5855] usb 3-1: Detected FT-X [ 580.090661][T11869] usb 5-1: USB disconnect, device number 52 [ 580.117356][ T5943] usb 4-1: USB disconnect, device number 23 [ 580.485260][ T5855] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 581.016503][ T5855] ftdi_sio 3-1:0.0: GPIO initialisation failed: -5 [ 581.034448][ T5855] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 581.849210][T12428] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2302'. [ 582.177192][ T49] usb 3-1: USB disconnect, device number 46 [ 582.278567][T12462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2311'. [ 583.206082][ T49] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 583.220401][ T49] ftdi_sio 3-1:0.0: device disconnected [ 585.308414][ T49] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 585.458282][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 585.462793][ T49] usb 3-1: unable to get BOS descriptor or descriptor too short [ 585.464290][ T49] usb 3-1: config 170 has an invalid interface number: 248 but max is 0 [ 585.464317][ T49] usb 3-1: config 170 has no interface number 0 [ 585.464352][ T49] usb 3-1: config 170 interface 248 has no altsetting 0 [ 585.479702][ T49] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=d3.3a [ 585.479736][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.479758][ T49] usb 3-1: Product: syz [ 585.479774][ T49] usb 3-1: Manufacturer: syz [ 585.479790][ T49] usb 3-1: SerialNumber: syz [ 586.084558][T12477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.085068][T12477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.268466][T11869] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 586.326840][ T49] usb 3-1: USB disconnect, device number 47 [ 586.433075][T11869] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 586.433099][T11869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.433111][T11869] usb 5-1: Product: syz [ 586.433119][T11869] usb 5-1: Manufacturer: syz [ 586.433128][T11869] usb 5-1: SerialNumber: syz [ 586.436209][T11869] usb 5-1: config 0 descriptor?? [ 586.494924][T12487] FAULT_INJECTION: forcing a failure. [ 586.494924][T12487] name failslab, interval 1, probability 0, space 0, times 0 [ 586.494960][T12487] CPU: 1 UID: 0 PID: 12487 Comm: syz.3.2317 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 586.494987][T12487] Tainted: [L]=SOFTLOCKUP [ 586.494994][T12487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 586.495006][T12487] Call Trace: [ 586.495014][T12487] [ 586.495023][T12487] dump_stack_lvl+0xe8/0x150 [ 586.495052][T12487] should_fail_ex+0x46c/0x600 [ 586.495083][T12487] should_failslab+0xa8/0x100 [ 586.495103][T12487] __kmalloc_noprof+0xe0/0x7e0 [ 586.495127][T12487] ? kfree+0x4d/0x900 [ 586.495148][T12487] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 586.495173][T12487] tomoyo_realpath_from_path+0xe3/0x5d0 [ 586.495194][T12487] ? tomoyo_domain+0xd9/0x130 [ 586.495219][T12487] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 586.495253][T12487] tomoyo_path_number_perm+0x1e8/0x5a0 [ 586.495279][T12487] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 586.495302][T12487] ? __lock_acquire+0x6b6/0x2cf0 [ 586.495328][T12487] ? do_raw_spin_lock+0x121/0x290 [ 586.495376][T12487] ? __fget_files+0x2a/0x420 [ 586.495399][T12487] ? __fget_files+0x2a/0x420 [ 586.495416][T12487] ? __fget_files+0x3a6/0x420 [ 586.495434][T12487] ? __fget_files+0x2a/0x420 [ 586.495458][T12487] security_file_ioctl+0xcb/0x2d0 [ 586.495485][T12487] __se_sys_ioctl+0x47/0x170 [ 586.495513][T12487] do_syscall_64+0xec/0xf80 [ 586.495532][T12487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.495550][T12487] ? trace_irq_disable+0x37/0x100 [ 586.495568][T12487] ? clear_bhb_loop+0x60/0xb0 [ 586.495588][T12487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.495606][T12487] RIP: 0033:0x7f183ef0f749 [ 586.495623][T12487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.495640][T12487] RSP: 002b:00007f183d16e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.495660][T12487] RAX: ffffffffffffffda RBX: 00007f183f165fa0 RCX: 00007f183ef0f749 [ 586.495676][T12487] RDX: 00002000000002c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 586.495688][T12487] RBP: 00007f183d16e090 R08: 0000000000000000 R09: 0000000000000000 [ 586.495701][T12487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.495713][T12487] R13: 00007f183f166038 R14: 00007f183f165fa0 R15: 00007fffb6b73cf8 [ 586.495744][T12487] [ 586.495751][T12487] ERROR: Out of memory at tomoyo_realpath_from_path. [ 586.730912][T12482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.731793][T12482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.086195][T11869] usb-storage 5-1:0.0: USB Mass Storage device detected [ 587.528451][T11869] usb 5-1: USB disconnect, device number 53 [ 588.854031][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2327'. [ 590.600311][T12528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.601661][T12528] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 590.602669][T12528] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 592.116833][T12545] FAULT_INJECTION: forcing a failure. [ 592.116833][T12545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.116867][T12545] CPU: 0 UID: 0 PID: 12545 Comm: syz.1.2333 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 592.116895][T12545] Tainted: [L]=SOFTLOCKUP [ 592.116903][T12545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.116915][T12545] Call Trace: [ 592.116923][T12545] [ 592.116932][T12545] dump_stack_lvl+0xe8/0x150 [ 592.116961][T12545] should_fail_ex+0x46c/0x600 [ 592.116992][T12545] _copy_to_user+0x31/0xb0 [ 592.117014][T12545] simple_read_from_buffer+0xe1/0x170 [ 592.117038][T12545] proc_fail_nth_read+0x1b6/0x220 [ 592.117069][T12545] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 592.117098][T12545] ? rw_verify_area+0x2ac/0x4e0 [ 592.117121][T12545] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 592.117149][T12545] vfs_read+0x206/0xa30 [ 592.117181][T12545] ? __pfx_vfs_read+0x10/0x10 [ 592.117208][T12545] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 592.117229][T12545] ? lockdep_hardirqs_on+0x7b/0x110 [ 592.117248][T12545] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 592.117268][T12545] ? mutex_lock_nested+0x154/0x1d0 [ 592.117291][T12545] ? fdget_pos+0x253/0x320 [ 592.117319][T12545] ksys_read+0x14b/0x260 [ 592.117345][T12545] ? __pfx_ksys_read+0x10/0x10 [ 592.117381][T12545] do_syscall_64+0xec/0xf80 [ 592.117400][T12545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.117417][T12545] ? trace_irq_disable+0x37/0x100 [ 592.117436][T12545] ? clear_bhb_loop+0x60/0xb0 [ 592.117458][T12545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.117475][T12545] RIP: 0033:0x7fc38651e15c [ 592.117491][T12545] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 592.117506][T12545] RSP: 002b:00007fc384786030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 592.117526][T12545] RAX: ffffffffffffffda RBX: 00007fc386775fa0 RCX: 00007fc38651e15c [ 592.117540][T12545] RDX: 000000000000000f RSI: 00007fc3847860a0 RDI: 0000000000000004 [ 592.117551][T12545] RBP: 00007fc384786090 R08: 0000000000000000 R09: 0000000000000000 [ 592.117562][T12545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.117574][T12545] R13: 00007fc386776038 R14: 00007fc386775fa0 R15: 00007fffb3d81698 [ 592.117601][T12545] [ 592.908286][ T6140] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 593.058305][ T6140] usb 5-1: device descriptor read/64, error -71 [ 593.318268][ T6140] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 594.808341][ T6140] usb 5-1: device descriptor read/64, error -71 [ 594.928560][ T6140] usb usb5-port1: attempt power cycle [ 595.308923][ T6140] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 595.341069][ T6140] usb 5-1: device descriptor read/8, error -71 [ 595.554589][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.598328][ T6140] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 595.630085][ T6140] usb 5-1: device descriptor read/8, error -71 [ 595.710611][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 595.715352][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 595.736049][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 595.738813][ T6140] usb usb5-port1: unable to enumerate USB device [ 595.747980][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 595.754690][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 595.834107][T12591] FAULT_INJECTION: forcing a failure. [ 595.834107][T12591] name failslab, interval 1, probability 0, space 0, times 0 [ 595.834144][T12591] CPU: 0 UID: 0 PID: 12591 Comm: syz.3.2346 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 595.834181][T12591] Tainted: [L]=SOFTLOCKUP [ 595.834188][T12591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 595.834200][T12591] Call Trace: [ 595.834208][T12591] [ 595.834217][T12591] dump_stack_lvl+0xe8/0x150 [ 595.834248][T12591] should_fail_ex+0x46c/0x600 [ 595.834278][T12591] should_failslab+0xa8/0x100 [ 595.834299][T12591] __kmalloc_noprof+0xe0/0x7e0 [ 595.834325][T12591] ? video_usercopy+0x18e/0x13f0 [ 595.834351][T12591] video_usercopy+0x18e/0x13f0 [ 595.834377][T12591] ? smk_tskacc+0x2fc/0x370 [ 595.834399][T12591] ? __pfx___video_do_ioctl+0x10/0x10 [ 595.834420][T12591] ? __pfx_video_usercopy+0x10/0x10 [ 595.834439][T12591] ? smack_file_ioctl+0x2ac/0x340 [ 595.834477][T12591] ? __fget_files+0x2a/0x420 [ 595.834497][T12591] ? __fget_files+0x3a6/0x420 [ 595.834520][T12591] v4l2_ioctl+0x190/0x1e0 [ 595.834541][T12591] ? __pfx_v4l2_ioctl+0x10/0x10 [ 595.834560][T12591] __se_sys_ioctl+0xff/0x170 [ 595.834587][T12591] do_syscall_64+0xec/0xf80 [ 595.834608][T12591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.834625][T12591] ? trace_irq_disable+0x37/0x100 [ 595.834645][T12591] ? clear_bhb_loop+0x60/0xb0 [ 595.834668][T12591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.834687][T12591] RIP: 0033:0x7f183ef0f749 [ 595.834704][T12591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.834721][T12591] RSP: 002b:00007f183d16e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.834742][T12591] RAX: ffffffffffffffda RBX: 00007f183f165fa0 RCX: 00007f183ef0f749 [ 595.834757][T12591] RDX: 0000200000000100 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 595.834771][T12591] RBP: 00007f183d16e090 R08: 0000000000000000 R09: 0000000000000000 [ 595.834784][T12591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.834797][T12591] R13: 00007f183f166038 R14: 00007f183f165fa0 R15: 00007fffb6b73cf8 [ 595.834829][T12591] [ 596.073967][T12588] wg1 speed is unknown, defaulting to 1000 [ 596.238280][ T6140] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 596.399324][ T6140] usb 5-1: Using ep0 maxpacket: 16 [ 596.404564][ T6140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.404599][ T6140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.404623][ T6140] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 596.404666][ T6140] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 596.404691][ T6140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.467205][ T6140] usb 5-1: config 0 descriptor?? [ 598.410294][ T61] Bluetooth: hci0: command tx timeout [ 598.597901][ T6140] usbhid 5-1:0.0: can't add hid device: -71 [ 598.598079][ T6140] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 598.625806][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.692401][ T6140] usb 5-1: USB disconnect, device number 58 [ 599.160485][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.276118][T12629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 599.682279][T12646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2351'. [ 599.682318][T12646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2351'. [ 600.028410][T12649] affs: No valid root block on device nullb0 [ 600.438760][ T6186] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 600.490854][ T61] Bluetooth: hci0: command tx timeout [ 600.496129][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.588190][ T6186] usb 4-1: Using ep0 maxpacket: 8 [ 600.590452][ T6186] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 600.590484][ T6186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.595732][ T6186] usb 4-1: config 0 descriptor?? [ 600.900081][T12643] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 600.900105][T12643] PKCS7: Only support pkcs7_signedData type [ 600.905549][ T6186] usb 4-1: string descriptor 0 read error: -71 [ 600.905632][ T6186] uvcvideo 4-1:0.0: Found UVC 0.00 device (2833:0201) [ 600.905663][ T6186] uvcvideo 4-1:0.0: No valid video chain found. [ 600.919624][ T6186] usb 4-1: USB disconnect, device number 24 [ 601.080938][T12588] chnl_net:caif_netlink_parms(): no params data found [ 601.230240][T12671] netlink: 'syz.4.2366': attribute type 21 has an invalid length. [ 601.230265][T12671] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2366'. [ 601.357624][T12671] netlink: 'syz.4.2366': attribute type 4 has an invalid length. [ 601.357648][T12671] netlink: 'syz.4.2366': attribute type 3 has an invalid length. [ 601.357663][T12671] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2366'. [ 601.528384][ T6186] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 601.679252][ T6186] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 601.681061][ T6186] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 601.681120][ T6186] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 601.681151][ T6186] usb 1-1: config 64 interface 0 has no altsetting 0 [ 601.682769][ T6186] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 601.682826][ T6186] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 601.682857][ T6186] usb 1-1: config 64 interface 0 has no altsetting 0 [ 601.685999][ T6186] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 601.686061][ T6186] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 601.686091][ T6186] usb 1-1: config 64 interface 0 has no altsetting 0 [ 601.725240][ T6186] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 601.725301][ T6186] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 601.725329][ T6186] usb 1-1: config 64 interface 0 has no altsetting 0 [ 601.732732][ T6186] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 601.732975][ T6186] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 601.733057][ T6186] usb 1-1: config 64 interface 0 has no altsetting 0 [ 601.745526][T12686] Bluetooth: MGMT ver 1.23 [ 601.751970][ T6186] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 601.752028][ T6186] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 601.752058][ T6186] usb 1-1: config 64 interface 0 has no altsetting 0 [ 601.967542][ T6186] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 601.967611][ T6186] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 601.967642][ T6186] usb 1-1: config 64 interface 0 has no altsetting 0 [ 602.029280][ T6186] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 602.029338][ T6186] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 602.029367][ T6186] usb 1-1: config 64 interface 0 has no altsetting 0 [ 602.036998][ T6186] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 602.037029][ T6186] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 602.037051][ T6186] usb 1-1: Product: syz [ 602.037066][ T6186] usb 1-1: Manufacturer: syz [ 602.037081][ T6186] usb 1-1: SerialNumber: syz [ 602.276776][T12588] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.276986][T12588] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.277249][T12588] bridge_slave_0: entered allmulticast mode [ 602.304671][T12588] bridge_slave_0: entered promiscuous mode [ 602.384969][T12588] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.385096][T12588] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.385315][T12588] bridge_slave_1: entered allmulticast mode [ 602.411159][T12588] bridge_slave_1: entered promiscuous mode [ 602.460415][ T6186] yurex 1-1:64.0: USB YUREX device now attached to Yurex #0 [ 602.598726][ T61] Bluetooth: hci0: command tx timeout [ 602.948306][ T6186] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 603.028361][ T6364] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 603.101186][ T6186] usb 5-1: config index 0 descriptor too short (expected 1316, got 36) [ 603.101216][ T6186] usb 5-1: config 7 has an invalid interface number: 204 but max is -1 [ 603.101238][ T6186] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 0 [ 603.101312][ T6186] usb 5-1: config 7 has no interface number 0 [ 603.101364][ T6186] usb 5-1: config 7 interface 204 altsetting 129 endpoint 0x4 has invalid wMaxPacketSize 0 [ 603.101389][ T6186] usb 5-1: config 7 interface 204 has no altsetting 0 [ 603.112081][ T6186] usb 5-1: New USB device found, idVendor=0424, idProduct=9904, bcdDevice=d1.ce [ 603.112161][ T6186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.112183][ T6186] usb 5-1: Product: syz [ 603.112208][ T6186] usb 5-1: Manufacturer: syz [ 603.112224][ T6186] usb 5-1: SerialNumber: syz [ 603.238189][ T6364] usb 2-1: Using ep0 maxpacket: 32 [ 603.243540][ T6364] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.243796][ T6364] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 603.248028][ T6364] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 603.248058][ T6364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.290206][ T6364] usb 2-1: Product: ዸ뷦椐➠른푡˿訾ᱎ옦騨ⷯฤ嶉䪡┰韓톩٣ꉦ潒늋㧭먚嬀쨦哴싮⵿㹕䧴⭃參Ჴﮤ뎪ꎷ䢮 [ 603.315772][ T6364] usb 2-1: Manufacturer: 埛⩦룁婐֫䄷ߘ壆໚햬ᢺ쥿Ɥ帻ࣛ䵣୼荬蕏㬮裰䌰Ⳛ釫䲋纶 [ 603.315800][ T6364] usb 2-1: SerialNumber: 栐఼暸츫浚撔叾ₖᥳȯ瘬珗礲욭ﮮ淠酐繢ܗ纃᱆ᗄ貮ꨤ俟ꦑ [ 603.831985][ T6186] smsc95xx v2.0.0 [ 603.832008][ T6186] smsc95xx 5-1:7.204 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 603.832394][ T6186] smsc95xx 5-1:7.204: probe with driver smsc95xx failed with error -22 [ 603.915318][ T6186] usbhid 5-1:7.204: couldn't find an input interrupt endpoint [ 603.975167][ T6186] usb 5-1: USB disconnect, device number 59 [ 604.073562][ T6364] usb 2-1: 0:2 : does not exist [ 604.221227][ T6364] usb 2-1: USB disconnect, device number 25 [ 604.345272][T12702] udevd[12702]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 604.458277][ T6186] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 604.618202][ T6186] usb 5-1: Using ep0 maxpacket: 32 [ 604.621682][ T6186] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.621699][ T6186] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 604.648562][ T61] Bluetooth: hci0: command tx timeout [ 604.711787][ T6186] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 604.711807][ T6186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.711818][ T6186] usb 5-1: Product: ዸ뷦椐➠른푡˿訾ᱎ옦騨ⷯฤ嶉䪡┰韓톩٣ꉦ潒늋㧭먚嬀쨦哴싮⵿㹕䧴⭃參Ჴﮤ뎪ꎷ䢮 [ 604.711868][ T6186] usb 5-1: Manufacturer: 埛⩦룁婐֫䄷ߘ壆໚햬ᢺ쥿Ɥ帻ࣛ䵣୼荬蕏㬮裰䌰Ⳛ釫䲋纶 [ 604.711879][ T6186] usb 5-1: SerialNumber: 栐఼暸츫浚撔叾ₖᥳȯ瘬珗礲욭ﮮ淠酐繢ܗ纃᱆ᗄ貮ꨤ俟ꦑ [ 604.885660][T12704] netlink: 'syz.1.2374': attribute type 3 has an invalid length. [ 605.138871][ T6364] usb 1-1: USB disconnect, device number 61 [ 605.143939][ T6364] yurex 1-1:64.0: USB YUREX #0 now disconnected [ 605.169594][ T6186] usb 5-1: 0:2 : does not exist [ 605.230124][ T6186] usb 5-1: USB disconnect, device number 60 [ 605.360857][T12702] udevd[12702]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.414994][T12712] kernel read not supported for file / 7âW)sPmQfsl{Tr)rO2:" (pid: 12712 comm: syz.0.2377) [ 605.415158][ T37] audit: type=1800 audit(1768508609.931:99): pid=12712 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2377" name=20019C1437B1CFFCC3A25729EB7350C86DE0518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C099 dev="mqueue" ino=12144 res=0 errno=0 [ 606.939419][T12718] overlayfs: failed to clone lowerpath [ 608.328513][T12617] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 608.448260][ T6364] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 608.497552][T12617] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 608.497581][T12617] usb 1-1: config 4 has no interface number 0 [ 608.514900][T12617] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 608.514932][T12617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.514954][T12617] usb 1-1: Product: syz [ 608.514970][T12617] usb 1-1: Manufacturer: syz [ 608.514985][T12617] usb 1-1: SerialNumber: syz [ 608.562754][T12617] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 608.755325][T12733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.770164][T12733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.988676][T12617] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 608.988715][T12617] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 609.042987][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.120956][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.155785][ T12] bond0 (unregistering): Released all slaves [ 609.195654][T12617] usb 1-1: USB disconnect, device number 62 [ 609.523008][T12736] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 609.539489][T12736] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 609.542810][ T12] tipc: Disabling bearer [ 609.603965][ T6364] usb 5-1: unable to get BOS descriptor or descriptor too short [ 609.604083][ T6364] usb 5-1: too many configurations: 16, using maximum allowed: 8 [ 609.605050][ T6364] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 609.605082][ T6364] usb 5-1: can't read configurations, error -71 [ 609.636814][ T12] tipc: Left network mode [ 609.649800][T12588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.661359][T12588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.785165][T12747] FAULT_INJECTION: forcing a failure. [ 609.785165][T12747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.785209][T12747] CPU: 1 UID: 0 PID: 12747 Comm: syz.0.2388 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 609.785237][T12747] Tainted: [L]=SOFTLOCKUP [ 609.785245][T12747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 609.785257][T12747] Call Trace: [ 609.785266][T12747] [ 609.785275][T12747] dump_stack_lvl+0xe8/0x150 [ 609.785305][T12747] should_fail_ex+0x46c/0x600 [ 609.785336][T12747] _copy_to_user+0x31/0xb0 [ 609.785359][T12747] simple_read_from_buffer+0xe1/0x170 [ 609.785385][T12747] proc_fail_nth_read+0x1b6/0x220 [ 609.785415][T12747] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 609.785445][T12747] ? rw_verify_area+0x2ac/0x4e0 [ 609.785468][T12747] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 609.785495][T12747] vfs_read+0x206/0xa30 [ 609.785528][T12747] ? __pfx_vfs_read+0x10/0x10 [ 609.785555][T12747] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 609.785576][T12747] ? lockdep_hardirqs_on+0x7b/0x110 [ 609.785594][T12747] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 609.785614][T12747] ? mutex_lock_nested+0x154/0x1d0 [ 609.785638][T12747] ? fdget_pos+0x253/0x320 [ 609.785666][T12747] ksys_read+0x14b/0x260 [ 609.785694][T12747] ? __pfx_ksys_read+0x10/0x10 [ 609.785730][T12747] do_syscall_64+0xec/0xf80 [ 609.785749][T12747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.785768][T12747] ? trace_irq_disable+0x37/0x100 [ 609.785787][T12747] ? clear_bhb_loop+0x60/0xb0 [ 609.785811][T12747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.785830][T12747] RIP: 0033:0x7fd74403e15c [ 609.785847][T12747] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 609.785864][T12747] RSP: 002b:00007fd74229e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 609.785885][T12747] RAX: ffffffffffffffda RBX: 00007fd744295fa0 RCX: 00007fd74403e15c [ 609.785900][T12747] RDX: 000000000000000f RSI: 00007fd74229e0a0 RDI: 0000000000000003 [ 609.785914][T12747] RBP: 00007fd74229e090 R08: 0000000000000000 R09: 0000000000000000 [ 609.785927][T12747] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 609.785940][T12747] R13: 00007fd744296038 R14: 00007fd744295fa0 R15: 00007ffd124a5b98 [ 609.785973][T12747] [ 609.832329][T12749] kernel read not supported for file / 7âW)sPmQfsl{Tr)rO2:" (pid: 12749 comm: syz.4.2389) [ 609.832878][ T37] audit: type=1800 audit(1768508614.351:100): pid=12749 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2389" name=20019C1437B1CFFCC3A25729EB7350C86DE0518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C099 dev="mqueue" ino=7818 res=0 errno=0 [ 610.196113][T12740] uprobe: syz.3.2385:12740 failed to unregister, leaking uprobe [ 610.310101][T12740] uprobe: syz.3.2385:12740 failed to unregister, leaking uprobe [ 610.477895][T12757] FAULT_INJECTION: forcing a failure. [ 610.477895][T12757] name failslab, interval 1, probability 0, space 0, times 0 [ 610.477965][T12757] CPU: 1 UID: 0 PID: 12757 Comm: syz.4.2391 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 610.477994][T12757] Tainted: [L]=SOFTLOCKUP [ 610.478002][T12757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 610.478015][T12757] Call Trace: [ 610.478024][T12757] [ 610.478033][T12757] dump_stack_lvl+0xe8/0x150 [ 610.478063][T12757] should_fail_ex+0x46c/0x600 [ 610.478094][T12757] ? security_inode_alloc+0x39/0x330 [ 610.478112][T12757] should_failslab+0xa8/0x100 [ 610.478130][T12757] ? security_inode_alloc+0x39/0x330 [ 610.478148][T12757] kmem_cache_alloc_noprof+0x84/0x6c0 [ 610.478182][T12757] security_inode_alloc+0x39/0x330 [ 610.478205][T12757] inode_init_always_gfp+0x9bf/0xd70 [ 610.478231][T12757] ? __pfx_proc_alloc_inode+0x10/0x10 [ 610.478256][T12757] alloc_inode+0x82/0x1b0 [ 610.478274][T12757] new_inode+0x22/0x170 [ 610.478294][T12757] proc_pid_make_inode+0x21/0x130 [ 610.478312][T12757] proc_fdinfo_instantiate+0x53/0x240 [ 610.478335][T12757] proc_fill_cache+0x2d6/0x3d0 [ 610.478353][T12757] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 610.478373][T12757] ? __pfx_proc_fill_cache+0x10/0x10 [ 610.478391][T12757] ? irqentry_exit+0x5e8/0x670 [ 610.478422][T12757] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 610.478446][T12757] proc_readfd_common+0x408/0x5a0 [ 610.478469][T12757] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 610.478488][T12757] ? __pfx_proc_readfd_common+0x10/0x10 [ 610.478507][T12757] ? __pfx_proc_fdinfo_iterate+0x10/0x10 [ 610.478526][T12757] ? shmem_partial_swap_usage+0x3d0/0x3d0 [ 610.478546][T12757] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 610.478566][T12757] ? proc_readfd_common+0x10/0x5a0 [ 610.478588][T12757] iterate_dir+0x3a5/0x580 [ 610.478613][T12757] __se_sys_getdents64+0xe4/0x260 [ 610.478634][T12757] ? irqentry_exit+0x5e8/0x670 [ 610.478650][T12757] ? __pfx___se_sys_getdents64+0x10/0x10 [ 610.478670][T12757] ? __pfx_filldir64+0x10/0x10 [ 610.478703][T12757] do_syscall_64+0xec/0xf80 [ 610.478717][T12757] ? rcu_is_watching+0x15/0xb0 [ 610.478731][T12757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.478746][T12757] ? clear_bhb_loop+0x60/0xb0 [ 610.478764][T12757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.478779][T12757] RIP: 0033:0x7f060c8af749 [ 610.478794][T12757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.478808][T12757] RSP: 002b:00007f060aad4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 610.478825][T12757] RAX: ffffffffffffffda RBX: 00007f060cb06180 RCX: 00007f060c8af749 [ 610.478837][T12757] RDX: 00000000000000d9 RSI: 0000200000000840 RDI: 0000000000000005 [ 610.478848][T12757] RBP: 00007f060aad4090 R08: 0000000000000000 R09: 0000000000000000 [ 610.478858][T12757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.478868][T12757] R13: 00007f060cb06218 R14: 00007f060cb06180 R15: 00007ffdd08d7d08 [ 610.478892][T12757] [ 612.117087][T12771] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2396'. [ 612.256928][ T6421] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 612.418284][ T6421] usb 1-1: Using ep0 maxpacket: 32 [ 612.424335][ T6421] usb 1-1: unable to get BOS descriptor or descriptor too short [ 612.426794][ T6421] usb 1-1: config 170 has an invalid interface number: 248 but max is 0 [ 612.426821][ T6421] usb 1-1: config 170 has no interface number 0 [ 612.426855][ T6421] usb 1-1: config 170 interface 248 has no altsetting 0 [ 612.448713][ T6421] usb 1-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=d3.3a [ 612.448744][ T6421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.448766][ T6421] usb 1-1: Product: syz [ 612.448780][ T6421] usb 1-1: Manufacturer: syz [ 612.448798][ T6421] usb 1-1: SerialNumber: syz [ 612.527881][T12777] FAULT_INJECTION: forcing a failure. [ 612.527881][T12777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.527917][T12777] CPU: 0 UID: 0 PID: 12777 Comm: syz.3.2398 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 612.527945][T12777] Tainted: [L]=SOFTLOCKUP [ 612.527952][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 612.527964][T12777] Call Trace: [ 612.527972][T12777] [ 612.527981][T12777] dump_stack_lvl+0xe8/0x150 [ 612.528004][T12777] should_fail_ex+0x46c/0x600 [ 612.528033][T12777] _copy_to_user+0x31/0xb0 [ 612.528054][T12777] simple_read_from_buffer+0xe1/0x170 [ 612.528084][T12777] proc_fail_nth_read+0x1b6/0x220 [ 612.528111][T12777] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 612.528138][T12777] ? rw_verify_area+0x2ac/0x4e0 [ 612.528160][T12777] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 612.528187][T12777] vfs_read+0x206/0xa30 [ 612.528218][T12777] ? __pfx_vfs_read+0x10/0x10 [ 612.528239][T12777] ? lockdep_hardirqs_on+0x7b/0x110 [ 612.528258][T12777] ? do_sys_openat2+0x15a/0x200 [ 612.528278][T12777] ? kmem_cache_free+0x18f/0x8d0 [ 612.528301][T12777] ? do_sys_openat2+0x15a/0x200 [ 612.528319][T12777] ? get_pipe_info+0xa6/0xe0 [ 612.528336][T12777] ? do_tee+0xc74/0xe20 [ 612.528364][T12777] ksys_read+0x14b/0x260 [ 612.528390][T12777] ? __pfx_ksys_read+0x10/0x10 [ 612.528423][T12777] do_syscall_64+0xec/0xf80 [ 612.528441][T12777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.528457][T12777] ? trace_irq_disable+0x37/0x100 [ 612.528472][T12777] ? clear_bhb_loop+0x60/0xb0 [ 612.528490][T12777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.528507][T12777] RIP: 0033:0x7f183ef0e15c [ 612.528522][T12777] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 612.528535][T12777] RSP: 002b:00007f183d16e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 612.528557][T12777] RAX: ffffffffffffffda RBX: 00007f183f165fa0 RCX: 00007f183ef0e15c [ 612.528569][T12777] RDX: 000000000000000f RSI: 00007f183d16e0a0 RDI: 0000000000000005 [ 612.528578][T12777] RBP: 00007f183d16e090 R08: 0000000000000000 R09: 0000000000000000 [ 612.528588][T12777] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000001 [ 612.528598][T12777] R13: 00007f183f166038 R14: 00007f183f165fa0 R15: 00007fffb6b73cf8 [ 612.528620][T12777] [ 612.613450][T12588] team0: Port device team_slave_0 added [ 612.648778][T12588] team0: Port device team_slave_1 added [ 612.800009][T12781] kernel read not supported for file / 7âW)sPmQfsl{Tr)rO2:" (pid: 12781 comm: syz.4.2400) [ 612.805041][ T37] audit: type=1800 audit(1768508617.321:101): pid=12781 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2400" name=20019C1437B1CFFCC3A25729EB7350C86DE0518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C099 dev="mqueue" ino=7818 res=0 errno=0 [ 613.192949][T12784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.194298][T12784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.678890][T12588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.678907][T12588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.678937][T12588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.777116][T10264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 613.795578][T10264] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 613.804446][T10264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 613.813237][T10264] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 613.824696][T10264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 613.827839][T12588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.827852][T12588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.827873][T12588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.798378][ T808] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 614.849032][ T6421] usb 1-1: USB disconnect, device number 63 [ 614.950221][ T808] usb 5-1: not running at top speed; connect to a high speed hub [ 614.953749][ T808] usb 5-1: config index 0 descriptor too short (expected 2560, got 147) [ 614.953776][ T808] usb 5-1: config 1 has too many interfaces: 36, using maximum allowed: 32 [ 614.953797][ T808] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 614.953813][ T808] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.953827][ T808] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 36 [ 614.956175][ T808] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 614.956204][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.956224][ T808] usb 5-1: Product: syz [ 614.956235][ T808] usb 5-1: Manufacturer: syz [ 614.956243][ T808] usb 5-1: SerialNumber: syz [ 615.178538][T12811] sock: sock_set_timeout: `syz.4.2407' (pid 12811) tries to set negative timeout [ 615.206747][T12811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.215787][T12811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.329180][T10264] Bluetooth: hci2: command tx timeout [ 616.517892][ T808] usb 5-1: USB disconnect, device number 63 [ 617.515104][T12588] hsr_slave_0: entered promiscuous mode [ 617.541554][T12588] hsr_slave_1: entered promiscuous mode [ 617.542570][T12588] debugfs: 'hsr0' already exists in 'hsr' [ 617.542595][T12588] Cannot create hsr debugfs directory [ 617.626367][T12853] kernel read not supported for file / 7âW)sPmQfsl{Tr)rO2:" (pid: 12853 comm: syz.4.2420) [ 617.626609][ T37] audit: type=1800 audit(1768508622.141:102): pid=12853 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2420" name=20019C1437B1CFFCC3A25729EB7350C86DE0518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C099 dev="mqueue" ino=7818 res=0 errno=0 [ 617.810192][ T808] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 617.928707][ T12] hsr_slave_0: left promiscuous mode [ 617.958260][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 617.960007][ T808] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 617.960025][ T808] usb 1-1: config 0 has no interface number 0 [ 617.960044][ T808] usb 1-1: config 0 interface 153 has no altsetting 0 [ 617.962098][ T808] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 617.962116][ T808] usb 1-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 617.962129][ T808] usb 1-1: Product: syz [ 617.962138][ T808] usb 1-1: Manufacturer: syz [ 617.962147][ T808] usb 1-1: SerialNumber: syz [ 617.965411][ T808] usb 1-1: config 0 descriptor?? [ 618.037662][ T12] hsr_slave_1: left promiscuous mode [ 618.056179][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.056215][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.090545][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.090578][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.184423][ T808] hub 1-1:0.153: bad descriptor, ignoring hub [ 618.184464][ T808] hub 1-1:0.153: probe with driver hub failed with error -5 [ 618.217630][ T808] sierra 1-1:0.153: Sierra USB modem converter detected [ 618.259054][ T808] usb 1-1: USB disconnect, device number 64 [ 618.260115][ T808] sierra 1-1:0.153: device disconnected [ 618.304634][ T12] veth1_macvtap: left promiscuous mode [ 618.304742][ T12] veth0_macvtap: left promiscuous mode [ 618.305001][ T12] veth1_vlan: left promiscuous mode [ 618.305134][ T12] veth0_vlan: left promiscuous mode [ 619.255886][T10264] Bluetooth: hci2: command tx timeout [ 620.018759][ T808] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 620.178771][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 620.486019][ T808] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 620.486109][ T808] usb 5-1: config 0 has no interface number 0 [ 620.486595][ T808] usb 5-1: config 0 interface 184 has no altsetting 0 [ 620.548870][ T808] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 620.548904][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.548916][ T808] usb 5-1: Product: syz [ 620.548924][ T808] usb 5-1: Manufacturer: syz [ 620.548933][ T808] usb 5-1: SerialNumber: syz [ 620.557214][ T808] usb 5-1: config 0 descriptor?? [ 620.615449][ T808] smsc75xx v1.0.0 [ 622.092917][T10264] Bluetooth: hci2: command tx timeout [ 622.521009][T12873] binder: 12872:12873 ioctl 400c620e 200000000100 returned -22 [ 623.152444][ T808] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 623.152477][ T808] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 623.153316][ T808] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 623.153344][ T808] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 623.153365][ T808] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 623.153389][ T808] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 623.153686][ T808] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 623.197400][T10264] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 623.253078][ T808] usb 5-1: USB disconnect, device number 64 [ 624.468308][T10264] Bluetooth: hci2: command tx timeout [ 624.469073][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.469141][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.848384][ T6364] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 630.998285][ T6364] usb 5-1: Using ep0 maxpacket: 16 [ 631.000605][ T6364] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 631.000635][ T6364] usb 5-1: config 0 has no interface number 0 [ 631.000681][ T6364] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 631.000707][ T6364] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 631.068995][ T6364] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 631.069030][ T6364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.069052][ T6364] usb 5-1: Product: syz [ 631.069068][ T6364] usb 5-1: Manufacturer: syz [ 631.069083][ T6364] usb 5-1: SerialNumber: syz [ 631.074336][ T6364] usb 5-1: config 0 descriptor?? [ 631.116312][ T6364] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 631.568946][ T6364] usb 5-1: USB disconnect, device number 65 [ 631.679093][T12981] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2466'. [ 631.895186][ T12] team0 (unregistering): Port device team_slave_1 removed [ 632.528980][ T12] team0 (unregistering): Port device team_slave_0 removed [ 632.735860][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 632.755664][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 632.769349][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 632.786520][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 632.930541][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 634.569464][ T6364] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 634.752727][ T6364] usb 4-1: Using ep0 maxpacket: 8 [ 634.755689][ T6364] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 634.755720][ T6364] usb 4-1: config 179 has no interface number 0 [ 634.755763][ T6364] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 634.755780][ T6364] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 634.755798][ T6364] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 634.755812][ T6364] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 634.755829][ T6364] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 634.755856][ T6364] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 634.755870][ T6364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.889307][T12999] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 635.347147][ T6421] usb 4-1: USB disconnect, device number 25 [ 635.347166][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 635.347226][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 635.407367][ T6364] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14 [ 635.848996][T10264] Bluetooth: hci5: command tx timeout [ 636.926234][ T37] audit: type=1326 audit(1768508641.441:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13003 comm="syz.3.2474" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x0 [ 637.913871][T12982] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2467'. [ 637.929324][T10264] Bluetooth: hci5: command tx timeout [ 638.053378][T12794] wg1 speed is unknown, defaulting to 1000 [ 638.525517][T12994] wg1 speed is unknown, defaulting to 1000 [ 640.305734][ T61] Bluetooth: hci5: command tx timeout [ 640.738369][T12319] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 640.923110][T12319] usb 5-1: Using ep0 maxpacket: 32 [ 640.925220][T12319] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 640.925261][T12319] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 640.925278][T12319] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 640.980759][T12319] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 640.980781][T12319] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 640.980794][T12319] usb 5-1: Product: syz [ 640.980802][T12319] usb 5-1: Manufacturer: syz [ 640.980811][T12319] usb 5-1: SerialNumber: syz [ 641.035036][T12319] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input15 [ 641.679814][ T6421] usb 5-1: USB disconnect, device number 66 [ 641.679901][ C1] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 642.431460][T10264] Bluetooth: hci5: command tx timeout [ 642.596219][T13047] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2483'. [ 642.649903][ T6421] appletouch 5-1:1.0: input: appletouch disconnected [ 643.135089][T12794] chnl_net:caif_netlink_parms(): no params data found [ 643.688248][T12588] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 643.801164][T12994] chnl_net:caif_netlink_parms(): no params data found [ 645.215194][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.215222][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.125363][T12588] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 648.125909][T12319] wg1 speed is unknown, defaulting to 1000 [ 648.126072][T12319] syz0: Port: 1 Link DOWN [ 648.235598][T12588] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 648.461849][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.461891][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.624905][T12588] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 649.445283][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.445307][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.936608][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.936647][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.009268][T12794] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.011664][T12794] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.011925][T12794] bridge_slave_0: entered allmulticast mode [ 652.014570][T12794] bridge_slave_0: entered promiscuous mode [ 652.174792][T12794] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.175135][T12794] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.175382][T12794] bridge_slave_1: entered allmulticast mode [ 652.177972][T12794] bridge_slave_1: entered promiscuous mode [ 652.407252][T12994] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.411387][T12994] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.411663][T12994] bridge_slave_0: entered allmulticast mode [ 652.414097][T12994] bridge_slave_0: entered promiscuous mode [ 652.559840][T12994] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.559959][T12994] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.560169][T12994] bridge_slave_1: entered allmulticast mode [ 652.590936][T12994] bridge_slave_1: entered promiscuous mode [ 652.651212][T12794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.741235][T12794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.590533][T12994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.832443][T12994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.928545][T12319] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 653.999979][T12794] team0: Port device team_slave_0 added [ 654.080244][T12319] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 654.080322][T12319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 654.080351][T12319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 654.080387][T12319] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 654.080432][T12319] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 654.080457][T12319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.087138][T12319] usb 5-1: config 0 descriptor?? [ 654.155499][T13160] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 654.369304][T12794] team0: Port device team_slave_1 added [ 654.373466][T12994] team0: Port device team_slave_0 added [ 654.483737][T12994] team0: Port device team_slave_1 added [ 654.592106][T12319] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xd [ 654.644100][T12319] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 654.890779][T12794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.890796][T12794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.890820][T12794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.160408][T12617] usb 5-1: USB disconnect, device number 67 [ 655.271042][T12794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.271060][T12794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.271087][T12794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.274346][T12994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.274371][T12994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.274398][T12994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.522555][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 655.545587][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 655.547330][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 655.565039][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 655.565965][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 655.693144][T12617] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 656.193575][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.242279][T12994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.242293][T12994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.242309][T12994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.248674][T12617] usb 5-1: Using ep0 maxpacket: 8 [ 656.254959][T12617] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 656.254984][T12617] usb 5-1: config 179 has no interface number 0 [ 656.255040][T12617] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 656.255068][T12617] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 656.255098][T12617] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 656.255128][T12617] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 656.255155][T12617] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 656.255197][T12617] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 656.255220][T12617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.423725][T13186] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 656.667195][T12617] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input17 [ 658.139423][T10264] Bluetooth: hci1: command tx timeout [ 658.326922][ T808] usb 5-1: USB disconnect, device number 68 [ 658.327007][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 658.327069][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 658.602172][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.091641][T12794] hsr_slave_0: entered promiscuous mode [ 660.105043][T12794] hsr_slave_1: entered promiscuous mode [ 660.106020][T12794] debugfs: 'hsr0' already exists in 'hsr' [ 660.106045][T12794] Cannot create hsr debugfs directory [ 660.170709][T10264] Bluetooth: hci1: command tx timeout [ 660.315478][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.392513][T12994] hsr_slave_0: entered promiscuous mode [ 660.393929][T12994] hsr_slave_1: entered promiscuous mode [ 660.394877][T12994] debugfs: 'hsr0' already exists in 'hsr' [ 660.394901][T12994] Cannot create hsr debugfs directory [ 660.438302][T12319] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 660.522636][T13187] wg1 speed is unknown, defaulting to 1000 [ 660.588195][T12319] usb 4-1: Using ep0 maxpacket: 16 [ 660.590344][T12319] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 660.590370][T12319] usb 4-1: config 0 has no interface number 0 [ 660.590446][T12319] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 660.590467][T12319] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 660.593671][T12319] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 660.593694][T12319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.593705][T12319] usb 4-1: Product: syz [ 660.593714][T12319] usb 4-1: Manufacturer: syz [ 660.593722][T12319] usb 4-1: SerialNumber: syz [ 660.597446][T12319] usb 4-1: config 0 descriptor?? [ 660.684225][T12319] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 660.703661][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.718388][ T5943] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 660.871017][ T5943] usb 5-1: unable to get BOS descriptor or descriptor too short [ 660.871542][ T5943] usb 5-1: not running at top speed; connect to a high speed hub [ 660.872626][ T5943] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 660.872649][ T5943] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 660.872688][ T5943] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 660.874982][ T5943] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 660.875007][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.875018][ T5943] usb 5-1: Product: syz [ 660.875026][ T5943] usb 5-1: Manufacturer: syz [ 660.875034][ T5943] usb 5-1: SerialNumber: syz [ 660.961970][ T5943] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 660.962000][ T5943] cdc_ncm 5-1:1.0: bind() failure [ 662.280570][ T61] Bluetooth: hci1: command tx timeout [ 662.303705][ T5943] usb 4-1: USB disconnect, device number 26 [ 662.324183][ T808] usb 5-1: USB disconnect, device number 69 [ 663.834719][ T12] vlan2: left promiscuous mode [ 663.835225][ T12] bridge0: port 3(vlan2) entered disabled state [ 663.908314][ T1232] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 663.921974][ T12] bridge_slave_1: left allmulticast mode [ 663.922003][ T12] bridge_slave_1: left promiscuous mode [ 663.922291][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.999697][ T12] bridge_slave_0: left promiscuous mode [ 664.001167][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.063044][ T1232] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.063079][ T1232] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 664.064629][ T1232] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 664.064662][ T1232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 664.064683][ T1232] usb 5-1: SerialNumber: syz [ 664.094393][ T12] bridge_slave_1: left allmulticast mode [ 664.094425][ T12] bridge_slave_1: left promiscuous mode [ 664.094683][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.201624][ T12] bridge_slave_0: left allmulticast mode [ 664.201666][ T12] bridge_slave_0: left promiscuous mode [ 664.201891][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.328909][ T61] Bluetooth: hci1: command tx timeout [ 664.361471][ T1232] usb 5-1: 0:2 : does not exist [ 664.378337][ T1232] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 664.416045][ T1232] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 664.439325][ T1232] usb 5-1: 5:0: cannot get min/max values for control 8 (id 5) [ 664.476594][ T1232] usb 5-1: USB disconnect, device number 70 [ 664.582151][T13217] udevd[13217]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.578411][ T6012] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 665.728318][ T6012] usb 4-1: Using ep0 maxpacket: 16 [ 665.730484][ T6012] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 665.730512][ T6012] usb 4-1: config 0 has no interface number 0 [ 665.730555][ T6012] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 665.730582][ T6012] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 665.732974][ T6012] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 665.733003][ T6012] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.733023][ T6012] usb 4-1: Product: syz [ 665.733038][ T6012] usb 4-1: Manufacturer: syz [ 665.733052][ T6012] usb 4-1: SerialNumber: syz [ 665.740266][ T6012] usb 4-1: config 0 descriptor?? [ 665.834571][ T6012] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 667.322245][ T5943] usb 4-1: USB disconnect, device number 27 [ 671.388364][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.438857][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.483460][ T12] bond0 (unregistering): Released all slaves [ 673.743382][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.799063][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.821160][ T12] bond0 (unregistering): Released all slaves [ 674.067498][ T37] audit: type=1326 audit(1768508678.581:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13293 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 674.067779][ T37] audit: type=1326 audit(1768508678.581:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13293 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 674.067908][ T37] audit: type=1326 audit(1768508678.581:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13293 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 674.134767][ T37] audit: type=1326 audit(1768508678.581:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13293 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 674.134823][ T37] audit: type=1326 audit(1768508678.591:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13293 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 674.134865][ T37] audit: type=1326 audit(1768508678.591:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13293 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 674.134902][ T37] audit: type=1326 audit(1768508678.591:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13293 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 674.134941][ T37] audit: type=1326 audit(1768508678.591:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13293 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 674.134977][ T37] audit: type=1326 audit(1768508678.591:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13293 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 674.135019][ T37] audit: type=1326 audit(1768508678.591:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13293 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 674.357276][T10264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 674.382965][T10264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 674.407536][T10264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 674.426070][T10264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 674.438751][T10264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 675.206494][ T808] hid-generic FFFF:0008:0003.0010: item fetching failed at offset 0/1 [ 675.206943][ T808] hid-generic FFFF:0008:0003.0010: probe with driver hid-generic failed with error -22 [ 676.798164][T10264] Bluetooth: hci0: command tx timeout [ 677.731084][T13187] chnl_net:caif_netlink_parms(): no params data found [ 678.121317][T13298] wg1 speed is unknown, defaulting to 1000 [ 678.808241][T10264] Bluetooth: hci0: command tx timeout [ 680.578279][T12617] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 680.681174][T13187] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.681511][T13187] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.681779][T13187] bridge_slave_0: entered allmulticast mode [ 680.683878][T13187] bridge_slave_0: entered promiscuous mode [ 680.701621][T13187] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.701742][T13187] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.702007][T13187] bridge_slave_1: entered allmulticast mode [ 680.704445][T13187] bridge_slave_1: entered promiscuous mode [ 680.744705][T12617] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.752220][T12617] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 680.752262][T12617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.752283][T12617] usb 5-1: Product: syz [ 680.752298][T12617] usb 5-1: Manufacturer: syz [ 680.752314][T12617] usb 5-1: SerialNumber: syz [ 680.804527][T12617] usb 5-1: config 0 descriptor?? [ 680.817353][T12617] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 680.817766][T12617] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 680.817855][T12617] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 680.849820][T12617] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 680.849880][T12617] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 680.849926][T12617] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 680.849971][T12617] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 680.850024][T12617] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 680.852630][T12617] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 680.854704][T12617] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 680.854788][T12617] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 680.854836][T12617] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 680.855425][T12617] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 680.855472][T12617] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 680.898508][T10264] Bluetooth: hci0: command tx timeout [ 680.950709][T12617] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 681.022809][T12319] usb 5-1: USB disconnect, device number 71 [ 681.037862][T12319] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 681.059055][T12319] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 681.060287][T12319] keyspan 5-1:0.0: device disconnected [ 681.173024][T12994] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 682.418306][ T12] hsr_slave_0: left promiscuous mode [ 682.458385][ T12] hsr_slave_1: left promiscuous mode [ 682.498311][ T12] dummy0: left promiscuous mode [ 682.538449][ T12] team0: left promiscuous mode [ 682.538472][ T12] team_slave_0: left promiscuous mode [ 682.538830][ T12] team_slave_1: left promiscuous mode [ 682.708359][ T12] hsr_slave_0: left promiscuous mode [ 682.748741][ T12] hsr_slave_1: left promiscuous mode [ 682.749400][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.749417][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.799428][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.799456][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.860189][T12617] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 682.968461][T10264] Bluetooth: hci0: command tx timeout [ 683.043285][T12617] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 683.043315][T12617] usb 5-1: config 0 has no interface number 0 [ 683.043348][T12617] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 683.043391][T12617] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 683.043426][T12617] usb 5-1: config 0 interface 255 has no altsetting 0 [ 683.043461][T12617] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 683.043485][T12617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.044011][ T12] veth1_macvtap: left promiscuous mode [ 683.044111][ T12] veth0_macvtap: left promiscuous mode [ 683.044595][ T12] veth1_vlan: left promiscuous mode [ 683.044804][ T12] veth0_vlan: left promiscuous mode [ 683.096372][T12617] usb 5-1: config 0 descriptor?? [ 683.150790][T12617] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 683.266190][ T12] veth1_macvtap: left promiscuous mode [ 683.266276][ T12] veth0_macvtap: left promiscuous mode [ 683.266488][ T12] veth1_vlan: left promiscuous mode [ 683.292756][ T12] veth0_vlan: left promiscuous mode [ 683.322777][T12617] usb 5-1: USB disconnect, device number 72 [ 685.781943][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.782015][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.171260][ T12] team0 (unregistering): Port device team_slave_1 removed [ 688.428862][ T12] team0 (unregistering): Port device team_slave_0 removed [ 693.076754][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 693.137011][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 693.140657][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 693.141921][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 693.142685][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 693.378852][ T12] team0 (unregistering): Port device team_slave_1 removed [ 693.638867][ T12] team0 (unregistering): Port device team_slave_0 removed [ 695.291450][T10264] Bluetooth: hci2: command tx timeout [ 696.441308][T13187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.447464][T12994] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 696.984854][T13187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.368546][T10264] Bluetooth: hci2: command tx timeout [ 697.845992][T13187] team0: Port device team_slave_0 added [ 697.861203][T13187] team0: Port device team_slave_1 added [ 697.988312][ T6012] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 698.152235][ T6012] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.152263][ T6012] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 698.154796][ T6012] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 698.154821][ T6012] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.154833][ T6012] usb 4-1: Product: syz [ 698.154841][ T6012] usb 4-1: Manufacturer: syz [ 698.154850][ T6012] usb 4-1: SerialNumber: syz [ 698.953716][ T6012] usb 4-1: 0:2 : does not exist [ 699.090498][T13187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.090516][T13187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.090543][T13187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.196048][T13187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.196067][T13187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.196094][T13187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.370822][T12319] usb 4-1: USB disconnect, device number 28 [ 699.466777][T10264] Bluetooth: hci2: command tx timeout [ 699.795821][T13298] chnl_net:caif_netlink_parms(): no params data found [ 701.520276][T13187] hsr_slave_0: entered promiscuous mode [ 701.521751][T13187] hsr_slave_1: entered promiscuous mode [ 701.547882][T10264] Bluetooth: hci2: command tx timeout [ 703.742310][T13298] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.746233][T13298] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.746508][T13298] bridge_slave_0: entered allmulticast mode [ 703.769863][T13298] bridge_slave_0: entered promiscuous mode [ 703.825061][T13298] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.825185][T13298] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.825376][T13298] bridge_slave_1: entered allmulticast mode [ 704.219922][T13298] bridge_slave_1: entered promiscuous mode [ 706.065438][ T12] IPVS: stop unused estimator thread 0... [ 706.349839][T13298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.426632][T13298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.040258][T13298] team0: Port device team_slave_0 added [ 707.040831][T13457] chnl_net:caif_netlink_parms(): no params data found [ 707.842165][T13298] team0: Port device team_slave_1 added [ 709.417659][T13298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.417677][T13298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.417704][T13298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.031384][T13298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.031396][T13298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.031413][T13298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.578370][ T5958] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 711.728320][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 711.730556][ T5958] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 711.730583][ T5958] usb 4-1: config 0 has no interface number 0 [ 711.730629][ T5958] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 711.730655][ T5958] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 711.785532][ T5958] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 711.785564][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.785586][ T5958] usb 4-1: Product: syz [ 711.785602][ T5958] usb 4-1: Manufacturer: syz [ 711.785617][ T5958] usb 4-1: SerialNumber: syz [ 711.822688][ T5958] usb 4-1: config 0 descriptor?? [ 711.837926][ T5958] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 712.039060][T13457] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.039795][T13457] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.039984][T13457] bridge_slave_0: entered allmulticast mode [ 712.047055][T13457] bridge_slave_0: entered promiscuous mode [ 713.132952][ T1232] usb 4-1: USB disconnect, device number 29 [ 713.298879][T13457] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.299036][T13457] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.299280][T13457] bridge_slave_1: entered allmulticast mode [ 713.301826][T13457] bridge_slave_1: entered promiscuous mode [ 713.436944][T13298] hsr_slave_0: entered promiscuous mode [ 713.437779][T13298] hsr_slave_1: entered promiscuous mode [ 713.450234][T13298] debugfs: 'hsr0' already exists in 'hsr' [ 713.450252][T13298] Cannot create hsr debugfs directory [ 713.617796][T13457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.634622][T13457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.989944][T13457] team0: Port device team_slave_0 added [ 714.060241][T13457] team0: Port device team_slave_1 added [ 715.042221][T13457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.042235][T13457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.042260][T13457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.113894][T13457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.113915][T13457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.113944][T13457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.328481][ T5958] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 715.389324][T13187] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 715.478230][ T6146] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 715.490705][ T5958] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.490737][ T5958] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 715.490792][ T5958] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 715.538959][ T5958] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 715.538988][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.538999][ T5958] usb 5-1: Product: syz [ 715.539008][ T5958] usb 5-1: Manufacturer: syz [ 715.539017][ T5958] usb 5-1: SerialNumber: syz [ 715.562213][ T5958] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 715.562261][ T5958] cdc_ncm 5-1:1.0: bind() failure [ 715.628960][ T6146] usb 4-1: Using ep0 maxpacket: 16 [ 715.630958][ T6146] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 715.630987][ T6146] usb 4-1: config 0 has no interface number 0 [ 715.631038][ T6146] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 715.631065][ T6146] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 715.633558][ T6146] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 715.633583][ T6146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.633596][ T6146] usb 4-1: Product: syz [ 715.633605][ T6146] usb 4-1: Manufacturer: syz [ 715.633614][ T6146] usb 4-1: SerialNumber: syz [ 715.639487][ T6146] usb 4-1: config 0 descriptor?? [ 715.711508][ T6146] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 715.751723][ T5958] usb 5-1: USB disconnect, device number 73 [ 715.784027][T13187] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 715.883930][T13457] hsr_slave_0: entered promiscuous mode [ 715.884778][T13457] hsr_slave_1: entered promiscuous mode [ 715.885330][T13457] debugfs: 'hsr0' already exists in 'hsr' [ 715.885345][T13457] Cannot create hsr debugfs directory [ 715.890195][T13187] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 717.248994][ T5958] usb 4-1: USB disconnect, device number 30 [ 717.391142][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 717.400125][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 717.411216][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 717.412797][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 717.418865][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 719.216865][T13708] binder: 13705:13708 ioctl 4018620d 0 returned -22 [ 720.659241][T10264] Bluetooth: hci5: command tx timeout [ 721.062456][ T12] bridge_slave_1: left allmulticast mode [ 721.062490][ T12] bridge_slave_1: left promiscuous mode [ 721.062770][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.149853][ T12] bridge_slave_0: left allmulticast mode [ 721.149889][ T12] bridge_slave_0: left promiscuous mode [ 721.150166][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.243944][ T12] bridge_slave_1: left allmulticast mode [ 721.243980][ T12] bridge_slave_1: left promiscuous mode [ 721.244225][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.268185][ T7855] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 721.349851][ T12] bridge_slave_0: left allmulticast mode [ 721.349874][ T12] bridge_slave_0: left promiscuous mode [ 721.350059][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.418483][ T7855] usb 5-1: Using ep0 maxpacket: 16 [ 721.421963][ T7855] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 721.421993][ T7855] usb 5-1: config 0 has no interface number 0 [ 721.422038][ T7855] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 721.422054][ T7855] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 721.426305][ T7855] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 721.426334][ T7855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.426402][ T7855] usb 5-1: Product: syz [ 721.426420][ T7855] usb 5-1: Manufacturer: syz [ 721.426436][ T7855] usb 5-1: SerialNumber: syz [ 721.435322][ T7855] usb 5-1: config 0 descriptor?? [ 721.533177][ T12] bridge_slave_1: left allmulticast mode [ 721.533213][ T12] bridge_slave_1: left promiscuous mode [ 721.533522][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.534909][ T7855] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 721.617199][ T12] bridge_slave_0: left allmulticast mode [ 721.617231][ T12] bridge_slave_0: left promiscuous mode [ 721.617992][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.945410][ T5958] usb 5-1: USB disconnect, device number 74 [ 722.031932][T13645] udevd[13645]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 724.088949][T10264] Bluetooth: hci5: command tx timeout [ 724.089335][ T5958] kernel read not supported for file /vcs (pid: 5958 comm: kworker/0:6) [ 724.251204][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.370071][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.466662][ T12] bond0 (unregistering): Released all slaves [ 724.788926][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.869552][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.898234][ T1232] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 724.930409][ T12] bond0 (unregistering): Released all slaves [ 725.068219][ T1232] usb 4-1: Using ep0 maxpacket: 16 [ 725.078238][ T1232] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 725.078267][ T1232] usb 4-1: config 0 has no interface number 0 [ 725.078310][ T1232] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 725.078337][ T1232] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 725.118285][ T1232] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 725.118306][ T1232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.118318][ T1232] usb 4-1: Product: syz [ 725.118327][ T1232] usb 4-1: Manufacturer: syz [ 725.118336][ T1232] usb 4-1: SerialNumber: syz [ 725.122179][ T1232] usb 4-1: config 0 descriptor?? [ 725.182258][ T1232] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 726.683699][T10264] Bluetooth: hci5: command tx timeout [ 726.691801][ T1232] usb 4-1: USB disconnect, device number 31 [ 726.929264][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.988746][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.050393][ T12] bond0 (unregistering): Released all slaves [ 728.198608][ T12] hsr_slave_0: left promiscuous mode [ 728.263243][ T12] hsr_slave_1: left promiscuous mode [ 728.264322][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 728.419306][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.598463][ T12] hsr_slave_0: left promiscuous mode [ 728.638374][ T12] hsr_slave_1: left promiscuous mode [ 728.639711][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 728.694017][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.710560][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 728.710580][ T37] audit: type=1326 audit(1768508733.231:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13772 comm="syz.3.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 728.711381][ T37] audit: type=1326 audit(1768508733.231:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13772 comm="syz.3.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 728.711528][ T37] audit: type=1326 audit(1768508733.231:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13772 comm="syz.3.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 728.711687][ T37] audit: type=1326 audit(1768508733.231:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13772 comm="syz.3.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 728.712144][ T37] audit: type=1326 audit(1768508733.231:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13772 comm="syz.3.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 728.712582][ T37] audit: type=1326 audit(1768508733.231:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13772 comm="syz.3.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 728.712700][ T37] audit: type=1326 audit(1768508733.231:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13772 comm="syz.3.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 728.712838][ T37] audit: type=1326 audit(1768508733.231:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13772 comm="syz.3.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 728.713152][ T37] audit: type=1326 audit(1768508733.231:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13772 comm="syz.3.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 728.713293][ T37] audit: type=1326 audit(1768508733.231:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13772 comm="syz.3.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183ef0f749 code=0x7ffc0000 [ 728.728888][T10264] Bluetooth: hci5: command tx timeout [ 729.215643][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2677'. [ 729.238161][ T12] hsr_slave_0: left promiscuous mode [ 729.280314][ T12] hsr_slave_1: left promiscuous mode [ 729.281204][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.329046][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.401136][T13786] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2676'. [ 730.858991][ T12] team0 (unregistering): Port device team_slave_1 removed [ 730.988887][ T12] team0 (unregistering): Port device team_slave_0 removed [ 731.990226][ T12] team0 (unregistering): Port device team_slave_1 removed [ 732.108895][ T12] team0 (unregistering): Port device team_slave_0 removed [ 733.169450][ T12] team0 (unregistering): Port device team_slave_1 removed [ 733.299029][ T12] team0 (unregistering): Port device team_slave_0 removed [ 734.115495][T13679] chnl_net:caif_netlink_parms(): no params data found [ 734.642591][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 734.670994][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 734.672679][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 734.673939][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 734.674788][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 735.220399][ T6012] kernel read not supported for file /vcs (pid: 6012 comm: kworker/1:10) [ 735.513148][T13679] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.519288][T13679] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.519531][T13679] bridge_slave_0: entered allmulticast mode [ 735.541966][T13679] bridge_slave_0: entered promiscuous mode [ 735.574948][T13679] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.575140][T13679] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.575366][T13679] bridge_slave_1: entered allmulticast mode [ 735.577824][T13679] bridge_slave_1: entered promiscuous mode [ 736.623392][T13815] ------------[ cut here ]------------ [ 736.623407][T13815] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x1, 0x0] s64=[0x1, 0x0] u32=[0x1, 0x0] s32=[0x1, 0x0] var_off=(0x0, 0x0) [ 736.623448][T13815] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x201/0xc30, CPU#1: syz.4.2686/13815 [ 736.623499][T13815] Modules linked in: [ 736.623524][T13815] CPU: 1 UID: 0 PID: 13815 Comm: syz.4.2686 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 736.623556][T13815] Tainted: [L]=SOFTLOCKUP [ 736.623565][T13815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 736.623580][T13815] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 736.623612][T13815] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 736.623633][T13815] RSP: 0018:ffffc90004c9eed0 EFLAGS: 00010246 [ 736.623652][T13815] RAX: dffffc0000000000 RBX: 1ffff110060a4e2e RCX: 0000000000000001 [ 736.623669][T13815] RDX: ffffffff8af1d3e0 RSI: ffffffff8af25ca0 RDI: ffffffff8edf0610 [ 736.623687][T13815] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 736.623700][T13815] R10: 0000000000000100 R11: 00000000000000d0 R12: ffff888030527170 [ 736.623716][T13815] R13: 0000000000000001 R14: 1ffff110060a4e2d R15: 0000000000000000 [ 736.623731][T13815] FS: 00007f060ab166c0(0000) GS:ffff888126dee000(0000) knlGS:0000000000000000 [ 736.623751][T13815] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 736.623766][T13815] CR2: 00007f060c892a60 CR3: 0000000056458000 CR4: 00000000003526f0 [ 736.623785][T13815] Call Trace: [ 736.623794][T13815] [ 736.623832][T13815] reg_set_min_max+0x2b4/0x340 [ 736.623871][T13815] check_cond_jmp_op+0x19c6/0x2e20 [ 736.623916][T13815] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 736.623950][T13815] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 736.623986][T13815] do_check+0x58f5/0xeba0 [ 736.624018][T13815] ? __pfx_stack_trace_save+0x10/0x10 [ 736.624109][T13815] ? __pfx_do_check+0x10/0x10 [ 736.624133][T13815] ? init_func_state+0x1ab2/0x28d0 [ 736.624169][T13815] do_check_common+0x19cc/0x25b0 [ 736.624211][T13815] bpf_check+0x5e87/0x1c300 [ 736.624259][T13815] ? __lock_acquire+0x6b6/0x2cf0 [ 736.624305][T13815] ? __lock_acquire+0x6b6/0x2cf0 [ 736.624336][T13815] ? do_raw_spin_lock+0x121/0x290 [ 736.624361][T13815] ? css_rstat_updated+0x239/0x520 [ 736.624402][T13815] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 736.624443][T13815] ? __pfx_bpf_check+0x10/0x10 [ 736.624467][T13815] ? ktime_get_with_offset+0x93/0x2a0 [ 736.624504][T13815] ? ktime_get_with_offset+0x93/0x2a0 [ 736.624534][T13815] ? __asan_memset+0x22/0x50 [ 736.624560][T13815] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 736.624580][T13815] ? security_bpf_prog_load+0x125/0x3f0 [ 736.624605][T13815] bpf_prog_load+0x13ba/0x1a10 [ 736.624642][T13815] ? __pfx_bpf_prog_load+0x10/0x10 [ 736.624667][T13815] ? __might_fault+0xb0/0x130 [ 736.624717][T13815] ? bpf_lsm_bpf+0x9/0x20 [ 736.624735][T13815] ? security_bpf+0x7e/0x300 [ 736.624767][T13815] __sys_bpf+0x507/0x860 [ 736.624793][T13815] ? __pfx___sys_bpf+0x10/0x10 [ 736.624837][T13815] ? rcu_is_watching+0x15/0xb0 [ 736.624866][T13815] __x64_sys_bpf+0x7c/0x90 [ 736.624888][T13815] do_syscall_64+0xec/0xf80 [ 736.624910][T13815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.624931][T13815] ? trace_irq_disable+0x37/0x100 [ 736.624953][T13815] ? clear_bhb_loop+0x60/0xb0 [ 736.624979][T13815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.625000][T13815] RIP: 0033:0x7f060c8af749 [ 736.625027][T13815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.625047][T13815] RSP: 002b:00007f060ab16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 736.625071][T13815] RAX: ffffffffffffffda RBX: 00007f060cb05fa0 RCX: 00007f060c8af749 [ 736.625088][T13815] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 736.625102][T13815] RBP: 00007f060c933f91 R08: 0000000000000000 R09: 0000000000000000 [ 736.625117][T13815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.625130][T13815] R13: 00007f060cb06038 R14: 00007f060cb05fa0 R15: 00007ffdd08d7d08 [ 736.625163][T13815] [ 736.625185][T13815] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 736.625205][T13815] CPU: 1 UID: 0 PID: 13815 Comm: syz.4.2686 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 736.625237][T13815] Tainted: [L]=SOFTLOCKUP [ 736.625246][T13815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 736.625259][T13815] Call Trace: [ 736.625268][T13815] [ 736.625277][T13815] vpanic+0x1e0/0x670 [ 736.625310][T13815] panic+0xb9/0xc0 [ 736.625338][T13815] ? __pfx_panic+0x10/0x10 [ 736.625382][T13815] __warn+0x317/0x4b0 [ 736.625410][T13815] ? reg_bounds_sanity_check+0x201/0xc30 [ 736.625442][T13815] ? reg_bounds_sanity_check+0x201/0xc30 [ 736.625473][T13815] __report_bug+0x288/0x500 [ 736.625495][T13815] ? reg_bounds_sanity_check+0x201/0xc30 [ 736.625530][T13815] ? __pfx___report_bug+0x10/0x10 [ 736.625548][T13815] ? do_check_common+0x19cc/0x25b0 [ 736.625591][T13815] report_bug_entry+0x19a/0x290 [ 736.625612][T13815] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 736.625641][T13815] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 736.625670][T13815] handle_bug+0xca/0x200 [ 736.625696][T13815] exc_invalid_op+0x1a/0x50 [ 736.625720][T13815] asm_exc_invalid_op+0x1a/0x20 [ 736.625741][T13815] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 736.625771][T13815] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 736.625790][T13815] RSP: 0018:ffffc90004c9eed0 EFLAGS: 00010246 [ 736.625809][T13815] RAX: dffffc0000000000 RBX: 1ffff110060a4e2e RCX: 0000000000000001 [ 736.625825][T13815] RDX: ffffffff8af1d3e0 RSI: ffffffff8af25ca0 RDI: ffffffff8edf0610 [ 736.625843][T13815] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 736.625857][T13815] R10: 0000000000000100 R11: 00000000000000d0 R12: ffff888030527170 [ 736.625872][T13815] R13: 0000000000000001 R14: 1ffff110060a4e2d R15: 0000000000000000 [ 736.625932][T13815] reg_set_min_max+0x2b4/0x340 [ 736.625971][T13815] check_cond_jmp_op+0x19c6/0x2e20 [ 736.626022][T13815] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 736.626057][T13815] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 736.626093][T13815] do_check+0x58f5/0xeba0 [ 736.626119][T13815] ? __pfx_stack_trace_save+0x10/0x10 [ 736.626207][T13815] ? __pfx_do_check+0x10/0x10 [ 736.626232][T13815] ? init_func_state+0x1ab2/0x28d0 [ 736.626267][T13815] do_check_common+0x19cc/0x25b0 [ 736.626308][T13815] bpf_check+0x5e87/0x1c300 [ 736.626355][T13815] ? __lock_acquire+0x6b6/0x2cf0 [ 736.626399][T13815] ? __lock_acquire+0x6b6/0x2cf0 [ 736.626431][T13815] ? do_raw_spin_lock+0x121/0x290 [ 736.626455][T13815] ? css_rstat_updated+0x239/0x520 [ 736.626495][T13815] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 736.626537][T13815] ? __pfx_bpf_check+0x10/0x10 [ 736.626560][T13815] ? ktime_get_with_offset+0x93/0x2a0 [ 736.626597][T13815] ? ktime_get_with_offset+0x93/0x2a0 [ 736.626626][T13815] ? __asan_memset+0x22/0x50 [ 736.626653][T13815] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 736.626673][T13815] ? security_bpf_prog_load+0x125/0x3f0 [ 736.626697][T13815] bpf_prog_load+0x13ba/0x1a10 [ 736.626733][T13815] ? __pfx_bpf_prog_load+0x10/0x10 [ 736.626757][T13815] ? __might_fault+0xb0/0x130 [ 736.626806][T13815] ? bpf_lsm_bpf+0x9/0x20 [ 736.626824][T13815] ? security_bpf+0x7e/0x300 [ 736.626857][T13815] __sys_bpf+0x507/0x860 [ 736.626882][T13815] ? __pfx___sys_bpf+0x10/0x10 [ 736.626926][T13815] ? rcu_is_watching+0x15/0xb0 [ 736.626955][T13815] __x64_sys_bpf+0x7c/0x90 [ 736.626976][T13815] do_syscall_64+0xec/0xf80 [ 736.626999][T13815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.627025][T13815] ? trace_irq_disable+0x37/0x100 [ 736.627048][T13815] ? clear_bhb_loop+0x60/0xb0 [ 736.627076][T13815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.627106][T13815] RIP: 0033:0x7f060c8af749 [ 736.627124][T13815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.627144][T13815] RSP: 002b:00007f060ab16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 736.627167][T13815] RAX: ffffffffffffffda RBX: 00007f060cb05fa0 RCX: 00007f060c8af749 [ 736.627184][T13815] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 736.627200][T13815] RBP: 00007f060c933f91 R08: 0000000000000000 R09: 0000000000000000 [ 736.627216][T13815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.627230][T13815] R13: 00007f060cb06038 R14: 00007f060cb05fa0 R15: 00007ffdd08d7d08 [ 736.627263][T13815] [ 736.627635][T13815] Kernel Offset: disabled