last executing test programs: 2m37.803953236s ago: executing program 3 (id=1219): socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x3d, 0x0, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x19040) semtimedop(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) lsm_set_self_attr(0x69, &(0x7f00000000c0)={0x65, 0x1, 0x20}, 0x20, 0x0) 2m36.571320991s ago: executing program 3 (id=1224): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1d, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x2130b322, 0x4, 0x20005, 0xc69}}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffffffffff3, 0x2) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) request_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_usb_connect(0x2, 0x51, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) mmap(&(0x7f000045e000/0x1000)=nil, 0x1000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c2", 0x17) accept$alg(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300001c, 0x100010, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udplite(0x2, 0x2, 0x88) 2m33.444314092s ago: executing program 3 (id=1234): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000300)=@hci={0x1f, 0x5965, 0x31}, 0x80, &(0x7f0000002340)=[{&(0x7f0000000480)="e512c4760000000000000000892f", 0xe}], 0x1}, 0x45) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x2603c0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="9e", 0x1, 0x40011, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000900)="8d", 0x0, 0xf21bb4d410ace81, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x7}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m30.643297713s ago: executing program 3 (id=1239): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x1c}}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r2, &(0x7f0000000280)='\x00', 0x1) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f00000005c0)) 2m30.042126697s ago: executing program 3 (id=1242): openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xa27, 0x0, &(0x7f0000000280)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xbdc, 0x0, &(0x7f0000000240)="18b6b69679231c1d6907232584050f727a55379a7e949f277b491cac5ce65ea10fa5a0d33ceb72abe78724a7a8c8d26ff97cc6cdfd51046b39d2fbe38f8d5ab1b3c6c12cc15a29de7664f1da21b62c4ca139dbbdab1faafac1ae5b3530e2b0e8477e51", 0x0, 0x63}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x7, 0x1, 0xffff}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992", 0xc) sendmmsg$unix(r5, &(0x7f00000019c0)=[{{&(0x7f00000010c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x91}}, {{&(0x7f0000000a80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x2, 0x8000) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x125, 0x9}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r7, 0xc0046d00, &(0x7f0000000080)=0x81) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 2m29.192695968s ago: executing program 3 (id=1245): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x3, 0x4002) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}], 0x1c) write$sndseq(r5, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x2, 0x6, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf7, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x8}}], 0x54) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{r6}, &(0x7f0000000d80), 0x0}, 0x20) 2m13.937234056s ago: executing program 32 (id=1245): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x3, 0x4002) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}], 0x1c) write$sndseq(r5, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x2, 0x6, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf7, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x8}}], 0x54) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{r6}, &(0x7f0000000d80), 0x0}, 0x20) 19.681223542s ago: executing program 4 (id=1566): socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2282, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x10, 0x5, 0x0) sendmsg$inet(r1, 0x0, 0x300) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x4000000) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000000c0)={0xfffffff9, 0x0, {}, {}, 0x3, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 19.216775937s ago: executing program 2 (id=1569): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_connect$cdc_ncm(0x5, 0x86, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x7, 0x70, 0x10, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "4cc4a0"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x40, 0xc7, 0x2000, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@mdlm={0x15}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0x4, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x42, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3, 0x0, 0x2}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x5b, 0x86, 0x3, 0x8, 0x80}, 0xd0, &(0x7f0000000200)=ANY=[@ANYBLOB="050fd000038b1002501262c1deb49d251c3c2f711281dde00d90f56b7d641a47c286561922f89b3a6e723f27f544bedebd72013072320cd16a6ede7240879b7d244c1f6a4fb9d62d6b9b3210dba7e90f03c7fd6f2c612c373c571f3211df0647ddf69871720987a2a8cc41614dcbb4809f99e6a1d777db1bbaaf94538e4c97b50a07b88674b39b1df0f888dc81d8a7ea1c100a6c4400000000f008000f00ff0030ff0000303fff00003f000024100a0806000000000f0600cf0000000f3f00000000000000c00000c00000000000ff00"], 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x4046}}, {0x0, 0x0}, {0xb4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, {0x30, &(0x7f0000000180)=@string={0x30, 0x3, "457077320d638eb6a89d6d7c0ab4ffb153861d1022c86489e50a51f6adbd0f2a1afc3cbb73f9d9365d79bc1f15ea"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41e}}]}) r0 = socket$inet_sctp(0x2, 0x5, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x8d4, &(0x7f00000007c0)={{0x12, 0x1, 0x310, 0xa5, 0x80, 0x6d, 0x20, 0x6737, 0x1, 0xd6ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c2, 0x2, 0x6, 0xf, 0x70, 0xb7, "", [{{0x9, 0x4, 0x11, 0x3, 0xd, 0x2a, 0x95, 0xff, 0x4, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5, 0x8, 0x1}, {0x6, 0x24, 0x1a, 0x1645, 0xc8735f7c6b0df836}, [@obex={0x5}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x81, 0xd, 0x6}, @country_functional={0xe, 0x24, 0x7, 0x7, 0x5, [0x8, 0x7, 0x57fe, 0xb]}, @obex={0x5, 0x24, 0x15, 0x800}, @acm={0x4, 0x24, 0x2, 0x1}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "4c2bd5983a3f"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1, 0x6}, [@mdlm_detail={0x81, 0x24, 0x13, 0x9, "2ced86bf2fc21ea6e4e61c776d834389a85e4794cdfe3545a09b4763b543e351823ae121bcf912a3867cd88afac7ce2d46d09a5141770f32efc15aea30c546071992f49ca14c751060bc8d6ec5a0d8eee97d3093888c71d06c4d81cc2765a051e683b384f642620b42d410dc2590172156fd4af0558eb63b589f1e7f3c"}, @dmm={0x7, 0x24, 0x14, 0x7, 0x169c}]}], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0xff, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x8}]}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0x5, 0x3, 0x5f, [@generic={0x6c, 0x23, "8e076fe278e1e0ce139662529137cf337564a87c0d6aa176e9812f49e99a3eddc824b2a83f73f6a6a415689dcc179ba1a810752fe994e5e751769bbb4b9014c4a618fed323b7116eb87131346d86a24722a1cc3e5149e642964d0e0386417967e04666aea8b8f70cae8b"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x1, 0x4, 0x5}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x8, 0x7, 0x7, [@generic={0xda, 0x6, "0bc21d05f9c39112e5aa1836a69fabd893bc0083bc2f06c11a718f25b3ed61a53bb0b5525b78e1b412877c3712574744533b3f16471fbfb3cda0c131f6dad340f49c000151fb5e4fdb9fd8ce4d3a0ab78c509c09afced9814db58d3ac797628dec5f5962b27256b222f33e7e742c2b83fc743abd768eff84a663c406695a1286ae285f39d7d713c444f19e3e03668676b1dca3cce733c81b9f2ca47eb7e22e35e8e620294f035b6e2974bf43c59d907b691f979f36d42dc82651485382e781375359a93595f1c15842ae4ec06d48676c8748ab8ebb935def"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x9, 0x2, 0x9a, [@generic={0xa1, 0x6, "66b8352b1433db5ef2fabcb1c61f1c3937c1bb16b4d108241e8bb82eb431202897632d1a9e3394ee6c3a609a49a6e35f91006e2dcca1500639df2c65aa55e9887ae7682469e353616d446aaf095c57fc8a95f8537d1f6325fbc65002acff0e7d4d0f953dd41db492f8e35cfc1b441c8a3a1f295b91f83df7b11d0592f4929f6b14ef53ac90213620f6699f86acbdf22e7ec995358365598b2082e141f533ed"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3f7, 0x7, 0x4, 0xd}}, {{0x9, 0x5, 0x80, 0x4, 0x10, 0x6, 0x2e, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x47f1}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x8, 0xe, 0x7}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x0, 0x9, 0xff}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0x9a, 0x4, 0x1}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x3, 0x2, 0x5, [@generic={0xe, 0x11, "266defe80851098ad28366ab"}, @generic={0xc0, 0xd, "8f11b25faa988e8a350f454cf33ef8b406fba359c531c2ee760e0996312689c9b982dffc57475e6659141f230e9a965d184f8ac5f37f266e5d117fe85b36f4a95bebf963e1dd6bcb81ffe7a8b97d67a928620dc63b68cbdbacb9b0583c0e09b314affb338a1de1a5f4a6da2e6f651e53b341ea19925b8b42350091a219a83e847150303499f39c1b41593e0410cad40fc03c181798a181dd968f318a1877d12579835fc1c2f928ff8ee2b0260767589ade1b4815070df881763e7e9032d9"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0x4, 0x5f, 0x8}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x8, 0xf, 0x5d, [@generic={0xd0, 0x23, "6172d6817ebbef4a4f4a254e877d5e2a876e920c60900fc932d3305735520328740b7ca1fd28d1919db80d2f6f1e8d6755d0f99bcce100c81426ae850d2a4d0a47f13e53741c498cfba42e45f5e8bb43a28f7f3c9865a6edffbf95c8e526776c83311ff69863909b600e149108d479e8f7407150b0bf62245c57ca0c0a0729e189fdd96b2958be9da308235569d47d41d3e74ae517ed021009e79e9060b9234adf1fc557815006eff0a642ede5043119a01196ffcdf1d834174da554fa6bb55037bad7a9d80e4902329fc56a14db"}]}}]}}, {{0x9, 0x4, 0xe, 0xf4, 0x7, 0x58, 0x70, 0x37, 0x6, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "5934325742d7"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1ff, 0x1, 0x5}}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "96"}, {0x5, 0x24, 0x0, 0x6a7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x80, 0x33}, [@mdlm={0x15, 0x24, 0x12, 0x417}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x3, 0xf, 0x8, 0x8, 0x9}, @acm={0x4}, @mdlm_detail={0x34, 0x24, 0x13, 0x6, "1c0d578eef8d764579b1d5cb2fd65d5af3fb62ef8e17e865e3913bb528beec5a55e2ee10e84f33e0420c60955f4a55bf"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x5}]}], [{{0x9, 0x5, 0xc, 0x0, 0x400, 0x7, 0x57, 0x41}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0x8, 0x8, 0xc, [@generic={0xf7, 0x2, "4dce7382cffa040877510e15d19db5f253240bcd02370371d3ed8bef43b177802b59acdaa199a0e48b943d341943c03e053c08fba8b107bf2e9d2ef3f31df0fb814bece1fc64dad8e2127b34a9d973fc31bebdb25cb8aad6212b7b0d210226cc15f5af2796299cbfc9241535005902bf67371e807a88405371fdcf527114303fa54b67d10cb7e28d3bf36b684841b7238c6ece415bde0b4eb8fdb40bbd365c3f9f8f2e2452984292405d715f3338def9508a1262125e2f76b689b03ba72d7760136ae6eb31efbb4d95758a7deef0df10ec490c27d4f86ef18ae2d8420f66584582546bcd34da8c42350830168f6881242bb9c81830"}, @generic={0x9f, 0x21, "9c84d1576c82b26542c610377ff55fa375d2811ef1d796d739ce82494a3858fae88ab8025c0caa5d62f127bbb30c5046c5027e6f1b00efc7869dd1fd2ca6d434e73598721d8aad4fa31dbd106558059ccb2c39fdb4ebb14b113f10a49ea514dad0578848c2a7dd1e2c0abaca803da26c295c5bff6c378705818c326f1b8d32eed606a4e84798ba802cbe5c0b25715c10934c9f146d7bfdd6c6dab120ce"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x3, 0x95, 0x81, [@generic={0xc9, 0x23, "84fd18299e86825e949ea269674849e4d1162489804c45263c4d782132fe95085663b5c386e4370394ae0e3f3db59f764fcebcc2f175a8189a6cccb8266d7e819cb62919fa7dd12ee97714f6e7da919418644265ccf4a9761a72226ad520e91780d91d0e800fcb0c1d074b9a7ede643ac8000f292b7626b14cdc6eda545b3773baa2653e8983a70b73929aa21b45c45a76c26c36f913b5969ea47f5f4c7a087036bbab4f19b661b2b376b28fc3abac538faa14219ddda755708154e4a987b4ab46d920a56518c7"}, @generic={0x9, 0xf, "f042406c88eced"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x210, 0xa, 0x78, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xfe, 0xcab7}]}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x7, 0x7f, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xfc, 0x2}, @generic={0x4, 0x7, "e4ae"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x5, 0x9, 0x28, [@uac_iso={0x7, 0x25, 0x1, 0xc}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x9, 0x1, 0x11, [@generic={0x60, 0x21, "52e16a6bdf070ef47ad163019a0bae5e3d47c508b9feed0c06495991b4a6b746566218a2b59a0e60be7663446d81838eac4786286c9e92e48945fd53523fb530a63a8c82d6b29a89a1c1435b69b0dd5ce870bb780f62c53fc4f345de913b"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x3ff}]}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x200, 0x7, 0x2, 0xc, 0x40, 0x3}, 0x38, &(0x7f0000000500)={0x5, 0xf, 0x38, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "07cbaa4f40d126f1a7ae1e18acee72cb"}, @generic={0x5, 0x10, 0x3, "701f"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "0d16387c700bdd9015919bb2998c5d57"}]}, 0x3, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x80c}}, {0xae, &(0x7f0000001140)=@string={0xae, 0x3, "0be19e2e0ac8dd9dfb93f1f6bf147c2042fdb9915eeaa35723f60fdf626c1f931d0f08b977e6dda29b9b4e13900378ac4baf095c76b3da9550904939eeab4fba7d8797e1c32f1832afc24e5a27c129cc5dbdca88103d43657dd48daef8eb6eca40915a361f13d1db3dc8950b7c5d8f7b0b6cc79683accc59e4c8189a0f636a5983cc437b155555c36363bfa2d2e0a21a685094f45badec8f8ba918290f9c6f546c7514729db4299652231cd8"}}, {0x3e, &(0x7f00000005c0)=@string={0x3e, 0x3, "4c122406c314fde32df2e6683e46e2560ee660cb0e94f734820dd9dc2958103f7d8815fe4df33390259bb7811a27b0dcc1c0408bb01d807b41bf4c10"}}]}) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000003c0)={r2, 0x9}, &(0x7f0000000400)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000003000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) r3 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) sigaltstack(&(0x7f0000001240)={0x0}, &(0x7f00000001c0)={0x0}) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x2ff, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) 15.340246361s ago: executing program 4 (id=1577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x400000000010, 0x3, 0x0) write(r3, 0x0, 0x0) 15.098725247s ago: executing program 2 (id=1579): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002640)={'tunl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0xfffffffffffffffc, &(0x7f00000002c0)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r1, 0x3, &(0x7f0000002580)=0x7) socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_gettime(0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 14.298745781s ago: executing program 4 (id=1580): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) syz_usb_connect$cdc_ncm(0x0, 0xf8, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe6, 0x2, 0x1, 0xe, 0x40, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '\''}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x5, 0xf, 0x7}, {0x6, 0x24, 0x1a, 0x0, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}, @mdlm_detail={0x72, 0x24, 0x13, 0x6, "3e7deb6f2d5d4f8599ab55a2ac7cfa06b133e96124275bde0c682a1fb067eb7b361437c85d3407677c86eb6fa80601cbf563d78d5043ef1eb5be62151786c2e9eed84615dc2c346e054091fd040e7991a8029bd96dc7aae8eadf25283423db8d3dcc78fbc5b368f0445327fda9c5"}, @dmm={0x7, 0x24, 0x14, 0x800, 0x10}, @acm={0x4, 0x24, 0x2, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0xdd, 0xd9, 0xfa}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x3, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x1, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xf, 0xfd, 0x6}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x8, 0x8, 0x3, 0x10, 0xf9}, 0x97, &(0x7f0000000040)={0x5, 0xf, 0x97, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x6d, 0x4, 0xe, 0xf, 0x4, [0x3fc0, 0xff3fcf, 0x3f00, 0xff0000]}, @generic={0x34, 0x10, 0xa, "241456972a2df58c71e3f092e3452e88f3d380d91025f4a936cc223d1b25ca417bd0dd3d94d753db7a2cf85d3c2e93ff6a"}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x1ff, 0x0, 0x40, [0xffc030, 0xf]}, @ssp_cap={0x20, 0x10, 0xa, 0xa6, 0x5, 0x7, 0xf, 0x94, [0xc0, 0x180, 0x17, 0x3f30, 0x0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x66, 0xe, 0x88, 0x1, 0x2}]}, 0x8, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2401}}, {0xb3, &(0x7f0000000300)=@string={0xb3, 0x3, "f6454311e386bed369a81196c7825832a88840e84a528cfe2f94a8bab78d3fa9a509067eea9ebaedc6a1b6ff818af0449f5115bdf0dcfcaf92c7f90af9d4b23f9f414e93969085dedc0caa4c38c572b0388a6f8d35080ba50174735c47c60fab7eae264d55f64d7ec517c8125eb6c7ab550432a6e0debbef181e203548b82195475761733054ae2a559139bf376260acd94fd608d784bc0266ac18611d0ab9b7568fdfacceabeb28daeed7c6ee84959bbd"}}, {0x4b, &(0x7f00000003c0)=@string={0x4b, 0x3, "6f37ee770478771d652fe1729cbdae129a4fdbe703edb53739bc180f095af590b509fbae6eb6599a4f9d71cdb36a3ce0b3b48007c6996ac620151c1578e5bd620510fe4349deb93e26"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44b}}, {0x12, &(0x7f0000000480)=@string={0x12, 0x3, "b34e1bdf5aecddcc1cfcdc1d35547b3e"}}, {0x0, 0x0}, {0xa2, &(0x7f0000000500)=@string={0xa2, 0x3, "b47115692561db9c20df28b2102c68029d815f71b69ae385a1dab8bac33a8dbd91df2ff7f6686ef80f96d4a623e608d96e347a888290da7d6dc43521d89dca4b3a2778405c98854f14e6c8b0259c159e7db0b352a260a8d7eabca0ae7a18893d0b0cb17b8a0111c82cfe4f1d3b2be14d4179a3d48b5d5cfd53882bee5420b4466b5c10dee1d910be5a394db6c187ade83ecb7f7d00fd4c038ab918fc2e3bd3c5"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc54}}]}) syz_usb_connect(0x0, 0x139a, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0xd6, 0x18, 0xd6, 0x10, 0x1b5c, 0x103, 0x85de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1388, 0x4, 0x8, 0x6, 0x90, 0x7f, "", [{{0x9, 0x4, 0xb7, 0x4, 0xa, 0xb5, 0xaf, 0xd4, 0x7f, [@generic={0x6a, 0x7, "0822ace0e2c43ae4cce19e48977e643ea3cc6641312a1498519ebd2e8fa97acb08590a512aeb41f3c20c4f8c1ae934ca8f97419d239919585dd5a06dbe62c0e81cd738570ce91650138fbd8cd2b7a486b4586a765508a2e232c72f5bf2c337096539ba9e787594fa"}], [{{0x9, 0x5, 0xf, 0x2, 0x20, 0x1, 0x3, 0x7}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x4, 0x6, 0x3}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0x1, 0xcb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5b, 0x4}, @generic={0xee, 0x21, "d69e30e4e3f7465de54cc9eb491175b7fbc476149a02fe93b0759d12534cc08bd9acb04cd26b2035c114ba80e91af18de2d415d59453f01b5d525ebbd62ce8a85da5aaedf7bb5d0f6322a1a8dd64857b09ced678e748b8e743639b20d79096dd395dd21cf82d5936e610e7c5ecbddbf722ea745c32b3e6c6555a9d8deca27c6ec5b270f2b7709dff1fa72436b8dc2defec28830c7fe91f2c51f59a4569b195e0e38c0a7d4f11c17774a731a64ca8d840595503e6a4259852272c8fe4ca52ba1cd68d34bd95b6dd99f2ad5a55e90f33f8eeea46bf6be48935b81327bd32b657d5639dd4e261853a1ec779b9bf"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0x3, 0x10, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x7f}, @generic={0x3b, 0xf, "972eb01ebc478466b7f69100f1072f70be681307c0d0aa6578e5fecdc649e75a56bdbd635f2fe80159e0c6333c9955acede4c5850ccfd0df35"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x0, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2}]}}, {{0x9, 0x5, 0xb, 0x4, 0x40, 0x0, 0x40, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x1000}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x80, 0x8, 0x9, [@generic={0xd2, 0x22, "da21b2751a5da8c03f1e4ce25caa2cebd04a183f80f2f108e1394cd915b8c0110463d1d54fd80bc78c7cf504b4f496b124e498d5547bcdcfdc00d709d4a6f16f5283a55ff81a0ffb9fe22cd34c76cb867dc8fefe2ea304e8bfc9cb24a4a2e5578635697df92a121d58a3c5de7828c9d2bf4b8d90bc3311183d6190873dc06712378690d1dc0ce3f21b99cb7fd51b48e3964bcdd2f90271ebf410cebb58baea5539059846904d5a578c1b31d921f998cc29877e75aa70b6044fa31952765778c45dfd808bca995e5124de6b51effc650f"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x5, 0x10, 0x1}}, {{0x9, 0x5, 0x3, 0x0, 0x0, 0x1, 0xf5, 0x7, [@generic={0x42, 0x8, "93f28a0f78dac76851416a65b012df9882edf91966084976fae82b32f41c60bf566e116c3e58a12e8b3215bf7c3655c118089ee059984211448150c80fc7a05f"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xffe0}]}}, {{0x9, 0x5, 0x9, 0x1, 0x5f7, 0x4c, 0x6, 0xbe, [@generic={0x4c, 0x21, "b549f552ac0660bb4ac119c6f86eac4d511e04bc05012fa6e742802780453bd80a9f9f05a983df85b3f0cd714ae24610d7682e3159a211e1d7cf3ac84854b98bc474689365a07485b1bc"}, @generic={0x76, 0x0, "1ddc0192f631d0351a74d90dbd6492f7fe366e3a2f2240c0d170989418ed172251e9a4509ccf54a8a83ab541c39f6940f2d48153047ffb4930c95eb51134d2d24c37ac69ef852308c4df92d091ac9dd982416777f8e49c96923f7d575b4bec96f8b3356682fc210030de79010b0e5d6eec428fe7"}]}}]}}, {{0x9, 0x4, 0x49, 0x2, 0xc, 0x2c, 0x5d, 0x48, 0x3, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xe790}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3, 0x8, 0x6}, [@country_functional={0xc, 0x24, 0x7, 0x8, 0x36, [0x400, 0xfee, 0x7ff]}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x0, 0xfff7}, @obex={0x5, 0x24, 0x15, 0x2}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x31}, @acm={0x4, 0x24, 0x2, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x0, 0x7, 0x0, 0x1, 0x6c}]}], [{{0x9, 0x5, 0x9, 0x0, 0x8, 0x8, 0x2a, 0xe2}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0xbc, 0xa, 0x3, [@generic={0x78, 0x4, "035ff54048e94e54dc94c35b332eaed4fd85dc7a43419e192e34dcd72f3d6d97f8e6f8694b123def95c508f740a5e36cbddb22b6e447d58c863f551ed60127fc91689c0baf76a61d3a26dca95c63f06f9d0dc945c453ab83e40562a3aea304eaf88a0ef59729100730f430c09f2fb012e4c1018248f1"}, @generic={0xf0, 0x6, "9f4739312fc2a2b6076585475791b4c1917fa158dd67a735635a58d6b289c38fcec2e2076638e06ad2fe1e568b9300140d0405f3031580c1dc43ef89cdee3a673bad5b14306e1df4763a0c4e0d1ea5c70b19a24c082f9533084d88050618785bb48f19aed56825cdcf972048809367b1fdeed29f5d36b542b166e67f2aa6cf6658d91273c03408024fcfb749367a0476e5020d7199256388a91fc47529dc484b5100bda2d5794998e94654e475a077987e5f6b7a3afde8475b6eb8f37b192c137730a36944113b0750996b1810e6cb73daa93ef8df95f04b0d395cb87d37f549fae823d3744c41e554db615e076e"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x8, 0x81, 0x81}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x9, 0xb8, 0x6}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x2, 0x4, 0x62}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0xf4, 0x6, 0xf, [@generic={0xdb, 0xf, "36aea8599d76d2409dfaf95286cd16afb66dfa9e3b19be57ad70216edc4be6952ba3694e7c9085035acb1eb555aac2ad137992059483eda7fc20e1b5910a3e7f01fcd1a4cc24916609eaf7fd9ff76d11a1f6b5293c8f08289d711575b6f7f2bce849ea5ee140762bf04ac0c228b9f4d4d049dd093338287e3f9feace2014b166a31df76e004db78ddfff820f3d3636ac1fa20ad725f0bc7cdb84c88c9f45ae1236364001a63daaf7ab73049bcb492ce7f323b33d8b342f5db96d1ae8df7f5ef1e662e7ec95f58ac3a5a6608dc606f1e84e17301acf05955ad0"}]}}, {{0x9, 0x5, 0xa, 0xb, 0x8, 0x60, 0xbb, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0xc5a0}]}}, {{0x9, 0x5, 0xe, 0x4, 0x200, 0x6, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x8}, @generic={0xa8, 0x3, "df0ec31921af4aa8e7bba982993490157f79344a5f36a00b3f7e335f1e0f8fc9558773444ada045795a05dc75915c25c5e1f1548797bbf010af8a3be6ab9d3574fa3589bb1285e645ff7fc5dfcb7a4db99447996507625536785ddadcf2b7e0e851222d904d8493dbb07b971c28a66d9aa46b878b24845df1dabb2159fc29d61ab1d20247a6bf3cad2651774a7ebce86bb61e13770178107be9535b8fdfa3f44b78c3aa42a8d"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x51, 0x6, 0x9, [@generic={0xfa, 0x4, "95c1cda0f2891388e017504b148f0f0a8449cf94baa0aef1959c8baba7a59c38da7761bf5d81a0c336c445b1d796843a2e288c6cf4d13b313c45c6608ae68785a4f7c2ad699b2dad236ff5a65c5840c4deb947dceab2f64b75e85a2ff2910d95e2158c0a2e046e46cbf2bafc7233e086f2f3fc7e10d8eea419a345997556b4bb50d2e34cd8ebd3900098d10a14f569357c5ef88848a7bed6e0a03a6e23f35ef3ef4ec6e0a84b141a4b7675edbff4b3fa76590c75c5bbebbce369fc080708d79f86e6e9a0a795e4459f631955c1ebe7177d18c5e23d8608186f166f9a9145f4cbe2d7a005176aa849b680af56238312a9bbd7eb4d98e7df35"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0xfd, 0x7, 0xe}}, {{0x9, 0x5, 0x9, 0x0, 0x220, 0x80, 0xf, 0x13, [@generic={0x25, 0xf, "978ed7865609651e9bfa82812282e620217222935d5ce2b3d78baa884d8888857380d0"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x7f9}]}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x5, 0x21, 0x6, [@generic={0x9b, 0xc, "ef0e08c2db0935164045ada126be12fede8f362fbe5965267acc825f517b538b1c68d3e4d034355e29fd1300ab950a3fb940ef4aed80f6c7c27db4b9e8441335bca07c81009f69e63cc3011723a29b0d56ae8a298c814d8ec9ec122b3d836b463ec5f8df9f58e8945835b4bfa86468d033993b3486f8f6fb55e83569f59b35b74aaa70ee69b50f6307c5706e104efeed13a6b73ac44a6ed9fc"}]}}]}}, {{0x9, 0x4, 0x31, 0x9, 0xf, 0x5d, 0x67, 0xf8, 0x4, [@hid_hid={0x9, 0x21, 0xfff2, 0x5, 0x1, {0x22, 0x28f}}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "b11b18"}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0x0, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x1000}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x2, 0x2}]}], [{{0x9, 0x5, 0x2, 0x0, 0x8, 0x6, 0x6, 0x10}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0xfd, 0x3, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfe}, @generic={0xfd, 0x12, "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"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0xa1, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xd, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x1, 0x4, 0xfa}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0xa5, 0x7f, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x0, 0x2, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x9}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x8, 0xf1, 0x7}}, {{0x9, 0x5, 0x13, 0x0, 0x5ff, 0x9, 0xe, 0x6, [@generic={0xa5, 0x21, "ce77b0c949252251713aef4cd98937771ce48757fa95bf24ff0ab939c0f40122bf2103a06775e351601258141369f960ba42f936ed7b461c9976db94861deb08724149c049ae6cf9f67d1613d445493efc6e211b8eb383bbd2fecc094edc27969f8ab47bce69197587dc253bb889c95ab313bb210028c044e4383409f1a1f2de7be20d07b83056b639279c8bd08680c3a15ed1dd0d8edf80f376b18a80fe86218aca3d"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x5, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x3f}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0xfff2}]}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0x3, 0x8f, 0x5}}, {{0x9, 0x5, 0x1, 0x18, 0x8, 0xf, 0x85, 0x8, [@generic={0x44, 0x1, "b57a839a152d7d3895bb2f3c0695ec09d8fd166bd77fd753c92811aaff1543744e2385061d4aeb8042a1d896bc10c85e01f684a5325f65dd25aeefd89f5b43ecea98"}, @generic={0xf6, 0x5, "e5724b8ef89b2f7eb839f8638812386f7d7d5d26b542c81334ed804bc370b8f3ce8b510b675e81968323c09a6b7caa32a9e6b7f1ed7476ddf91d9d230bff1f2028edc8c52a07576c6670e35552bd65f12c5d7ceebdc96ca9bb174dc967738f6c70df82c085abf7a7c626d135b60ff78887926f8a3313e3cbc231bdcb6c003d11782aae224412543a74092ef5be46cbd32b0f0f8c48145a4f3ae7c54c3e49976375b628dff12a0760f0e280bc85a3b7e52a8f602bf0a328d68064f9e60e29a2bdccc61d49dfbf9df18e79d4a7df53db0097f5127bcb08468cbdd4a5be71926ea6acda4f42590e96aeb4e7d494fab4c968c32908f7"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x408, 0x4, 0x10, 0xb1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9c, 0x6}, @generic={0x96, 0x6, "0a5db564b8b6bdf7c253058fbd27d887ce89399e75a4eb65bfe035c123f61174bd8db17042b422c7ba0e9c9a922fd76e2bc0c22618a95c117c7d2789c82f06931d86670886e53bbd93e252e4bc8708a42caad7e497fb89f3834bfd34d9de5d008ec893b1e0177851dbd301626f9e27afff83612787022fb1a0ec1ff977e249802159e174a338c655aa1b46a6d45949f3d90d7670"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0xf6, 0xe2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x3}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0xfe, 0x1, 0x80}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0xd, 0x6, 0x7}}]}}, {{0x9, 0x4, 0x47, 0x3, 0xf, 0x82, 0x33, 0xff, 0x7f, [], [{{0x9, 0x5, 0xc, 0x10, 0x8, 0xe, 0x8, 0x2}}, {{0x9, 0x5, 0xc, 0x8, 0x208, 0xa, 0x0, 0xff, [@generic={0x7b, 0x31, "c78728c555979fa9c102e05feabce0892c9bc2f2ba260fa09ee0e5fb97ea4f2cd611b71b6f63e3e70cae27596613f02f2df14108a9eb51fed64caa216c4d0371405a870551372592995607a22f64bdfdbf4466be44a7ff48509222c661310b4d661fe469604187f9425a152e04642b019900cacaf3a9ab15c9"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x1, 0xe, 0x37, [@generic={0xd8, 0x38, "8629896bef81c6f69599eacee2137aefb35d920e68816b09fe9ad521e39941c0d1d92b5bdf7ada59f6c2c0cee455fa3aa588c2c117e1bab70e7a2a25d5b76c1c05a01dbd17e04e55b1fef30c439427c2c194abe0d69aa15950a42b68c4c3659bf397317d7f03453d77de967c8c441d2aa580efdc2036c00ec76fb272373994e08c7351098b7ae58631dc35cf201c8dda529f633e9c5bc0d32e51f58817c1a16ef5c8c4a1a975151f68cb87c88a28f4fa024dfedc0e4a1a2223ac674ce4dc1f6ef21d214940b543e3ae083ea62c042ee04a4b8eaa4bf1"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6b}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0xfe, 0x3, 0x8}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0xa9, 0x2, 0x57}}, {{0x9, 0x5, 0x8, 0x16, 0x3ff, 0x5, 0x6, 0x5, [@generic={0x8f, 0xe, "83af0c3bdbc2d08cdfe485945bb4c260bbae408aeeb417d41f93a836c3f2c9fc9423c52b46691410cce786d5348eace691ec2f6e8c6358d112a3aadbc97cde9123fcecc50f80ec6b371db28e54609526f8a69d05e017f078bb2c308fccae6fd5384f4d60163d2d09008b22cb0ffd6623318641db3f21928a9a3d4934e62ed140830bd10faf098c6a9057299a59"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x40, 0x4, 0x2, [@generic={0xad, 0x10, "eb99b0d5ec82914416c96f11c24ffcbb9a415bf82a4b2fac9247a17e8054174e56f61e4a4e62bb3639f375e7090c478ee30ae8d1457fa735a72e91e7a6f9f3707a7a280ca43fc3eb88096092be55cdc09bc7e525bb707a2675687286f47b6533f4726269cde92a52f8e9e31f6a7c975ba27c8019b64a9492ae78896af792d71ef7cfc84eed0781f5cb83f501ff5a636453aef2d08b4a7a39206854a9cfd6c073b9e5bd8171ef57870c916d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb3, 0xf}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xfc, 0xaf, 0x9, [@generic={0xa6, 0x0, "b9675c9d15ca468a3ebfa94531923dcf75341e547ea1e3b1ff41b4dd241c1bc47d5a8bcef635c34687fa787850697b01e97a8ca786d5962017e8f9226248bb5c5d45edb01210e31646827ba09448eb4d665f6b9138909d6c9c70541cba3b21b54ad4f1c531984cebc8cb79c83db3ca1f600d48e4fee6c6a837cc29de21ab09af0578271b16f8c421fa4a05416feff7c345518c3e0f69f1b6e4ad647d4990abea9763c0da"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x8, 0x7, 0xc}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0xf, 0x4, 0xd, [@generic={0xf4, 0x22, "032a4a50e488212a69c58ce6809f188519c0b01afd38a3484872e9ba226df16059dd05ddf1dadb25099094566c3cb5064201b66f4f75f4a067761fc3953491ababe33d220cc3db8b404c4abe36caf089bf5d84d12e5ea621a9fe0dba8a3bb0133f2678418352a28f5fb4c43297164c27398357c02b45543bc925696cdf30669f75bcfdcd2e2453a2990c4ffbaadd48c2dc63b537dd3b173a6f6460bc05722f2d9258efd94baa3339fa5fa524c2767dd22ffe146f310e4eb77edbce2d23d2bdb79e99e576950b773c012564c06f6419acbbd6ae194ef3909eab18a3a9749b68d4566e558893677d922345b78530ee836e9373"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x200, 0x2, 0xd2, 0x4}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0x8e, 0x84, 0xf1, [@generic={0x8f, 0x1, "97017e95242d8ba39a4cfa00f95a7e75bd2f545ada1491e626ef0f75f290b48a460f2bf75e5d7462129d972f7ff3f89815f50e775c6b2bfd2955fa698afebc1334397c181c20d0ace093b2784300065dd7920a3f5987c05dd24a5174fdb1ab52416f671667dacaa1120b09645d2daf2da4923b58deec638b47c54ea941e8fbadf2ee9657a592d4d58761e97581"}]}}, {{0x9, 0x5, 0xe67f0110e3ab6efe, 0x10, 0x20, 0x26, 0x4, 0x6}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x4, 0x39, 0x9, [@generic={0x45, 0x10, "9221803d671d10eac6f53dc435c58e938e1bb7a5c3a49f5f7aef4c915d128be27c22cf5f61520b5376113ce280d4479b07f0bc60a7dfc878417fd5d87f54f7953c4027"}]}}, {{0x9, 0x5, 0xd55909e2eb52fb1a, 0x0, 0x20, 0x3, 0x7, 0x5b}}]}}]}}]}}, &(0x7f0000001c80)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x310, 0x8, 0xd9, 0x6, 0x40, 0x8}, 0x10, &(0x7f0000001a80)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0xd, 0x9, 0x6, 0xf7}]}, 0x3, [{0xfd, &(0x7f0000001ac0)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4}}, {0x43, &(0x7f0000001c00)=@string={0x43, 0x3, "edb43f66526999f076c5a7d86fd7b96ac07b5ae988b4af3827403c09adf70d60b9f512783c704c4d15d3b48a9f565af60c1c114546d86d3d277b6bad088b026e9e"}}]}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000500)=ANY=[], 0x8) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) 13.55832711s ago: executing program 2 (id=1581): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4004800) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x440) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x9637b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400", @ANYRES16=r7, @ANYBLOB="090300000000000000002e"], 0x14}}, 0x0) 13.118383361s ago: executing program 0 (id=1582): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000100)={0x9, 0x5ccbc3f8, 0x1, {0x8, @sdr={0x36314d4e}}, 0x1}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)=0x8) write(r5, &(0x7f0000000240)="92", 0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 12.134391014s ago: executing program 0 (id=1584): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="ae46bc2fa9cb201922fe82a5c7562897", 0x10) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0xe, 0x5, 0x1}, 0x50) r4 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x34, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0xff7f, 0x57, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x66, 0x64}}}}}]}}]}}, &(0x7f00000000c0)={0xfffffe9a, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x260) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0x9362, 0x0) read$FUSE(r5, &(0x7f0000003ac0)={0x2020}, 0x2023) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) 10.663800254s ago: executing program 5 (id=1586): r0 = socket(0x28, 0x5, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x4, @private1, 0x15c2}}]}, 0x60}, 0x1, 0x7}, 0x0) prlimit64(r1, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1c}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000072000010000000000fbdbdf250a400000000000081a000300140001002001000066049b6e7469a13596a8c2094cb3ba0000000000000400000002"], 0x30}}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0xfffd, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) getsockopt(r0, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) 9.575022369s ago: executing program 5 (id=1587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0xb, 0xc}, {0x7, 0xb}}}, 0x24}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}], 0x10) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x6, @loopback, 0x2}, 0x1c, &(0x7f0000000340)}, 0x48043) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sigaltstack(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r4, 0x0, 0x44004) r5 = dup(r0) write$P9_RREAD(r2, &(0x7f0000000600)=ANY=[@ANYBLOB], 0xb) write$tcp_mem(r5, &(0x7f00000004c0)={0x7, 0x20, 0x1000000000000, 0x20, 0x9}, 0x48) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xc, 0xe652, 0x2, 0xcc, 0x4a, 0xff}, 0x9c) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0xf) 9.529909945s ago: executing program 1 (id=1588): socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2282, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x10, 0x5, 0x0) sendmsg$inet(r1, 0x0, 0x300) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x4000000) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000000c0)={0xfffffff9, 0x0, {}, {}, 0x3, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 8.997789887s ago: executing program 4 (id=1589): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_connect$cdc_ncm(0x5, 0x86, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x7, 0x70, 0x10, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "4cc4a0"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x40, 0xc7, 0x2000, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@mdlm={0x15}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0x4, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x42, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3, 0x0, 0x2}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x5b, 0x86, 0x3, 0x8, 0x80}, 0xd0, &(0x7f0000000200)=ANY=[@ANYBLOB="050fd000038b1002501262c1deb49d251c3c2f711281dde00d90f56b7d641a47c286561922f89b3a6e723f27f544bedebd72013072320cd16a6ede7240879b7d244c1f6a4fb9d62d6b9b3210dba7e90f03c7fd6f2c612c373c571f3211df0647ddf69871720987a2a8cc41614dcbb4809f99e6a1d777db1bbaaf94538e4c97b50a07b88674b39b1df0f888dc81d8a7ea1c100a6c4400000000f008000f00ff0030ff0000303fff00003f000024100a0806000000000f0600cf0000000f3f00000000000000c00000c00000000000ff00"], 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x4046}}, {0x0, 0x0}, {0xb4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, {0x30, &(0x7f0000000180)=@string={0x30, 0x3, "457077320d638eb6a89d6d7c0ab4ffb153861d1022c86489e50a51f6adbd0f2a1afc3cbb73f9d9365d79bc1f15ea"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41e}}]}) r0 = socket$inet_sctp(0x2, 0x5, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x8d4, &(0x7f00000007c0)={{0x12, 0x1, 0x310, 0xa5, 0x80, 0x6d, 0x20, 0x6737, 0x1, 0xd6ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c2, 0x2, 0x6, 0xf, 0x70, 0xb7, "", [{{0x9, 0x4, 0x11, 0x3, 0xd, 0x2a, 0x95, 0xff, 0x4, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5, 0x8, 0x1}, {0x6, 0x24, 0x1a, 0x1645, 0xc8735f7c6b0df836}, [@obex={0x5}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x81, 0xd, 0x6}, @country_functional={0xe, 0x24, 0x7, 0x7, 0x5, [0x8, 0x7, 0x57fe, 0xb]}, @obex={0x5, 0x24, 0x15, 0x800}, @acm={0x4, 0x24, 0x2, 0x1}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "4c2bd5983a3f"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1, 0x6}, [@mdlm_detail={0x81, 0x24, 0x13, 0x9, "2ced86bf2fc21ea6e4e61c776d834389a85e4794cdfe3545a09b4763b543e351823ae121bcf912a3867cd88afac7ce2d46d09a5141770f32efc15aea30c546071992f49ca14c751060bc8d6ec5a0d8eee97d3093888c71d06c4d81cc2765a051e683b384f642620b42d410dc2590172156fd4af0558eb63b589f1e7f3c"}, @dmm={0x7, 0x24, 0x14, 0x7, 0x169c}]}], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0xff, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x8}]}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0x5, 0x3, 0x5f, [@generic={0x6c, 0x23, "8e076fe278e1e0ce139662529137cf337564a87c0d6aa176e9812f49e99a3eddc824b2a83f73f6a6a415689dcc179ba1a810752fe994e5e751769bbb4b9014c4a618fed323b7116eb87131346d86a24722a1cc3e5149e642964d0e0386417967e04666aea8b8f70cae8b"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x1, 0x4, 0x5}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x8, 0x7, 0x7, [@generic={0xda, 0x6, "0bc21d05f9c39112e5aa1836a69fabd893bc0083bc2f06c11a718f25b3ed61a53bb0b5525b78e1b412877c3712574744533b3f16471fbfb3cda0c131f6dad340f49c000151fb5e4fdb9fd8ce4d3a0ab78c509c09afced9814db58d3ac797628dec5f5962b27256b222f33e7e742c2b83fc743abd768eff84a663c406695a1286ae285f39d7d713c444f19e3e03668676b1dca3cce733c81b9f2ca47eb7e22e35e8e620294f035b6e2974bf43c59d907b691f979f36d42dc82651485382e781375359a93595f1c15842ae4ec06d48676c8748ab8ebb935def"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x9, 0x2, 0x9a, [@generic={0xa1, 0x6, "66b8352b1433db5ef2fabcb1c61f1c3937c1bb16b4d108241e8bb82eb431202897632d1a9e3394ee6c3a609a49a6e35f91006e2dcca1500639df2c65aa55e9887ae7682469e353616d446aaf095c57fc8a95f8537d1f6325fbc65002acff0e7d4d0f953dd41db492f8e35cfc1b441c8a3a1f295b91f83df7b11d0592f4929f6b14ef53ac90213620f6699f86acbdf22e7ec995358365598b2082e141f533ed"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3f7, 0x7, 0x4, 0xd}}, {{0x9, 0x5, 0x80, 0x4, 0x10, 0x6, 0x2e, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x47f1}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x8, 0xe, 0x7}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x0, 0x9, 0xff}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0x9a, 0x4, 0x1}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x3, 0x2, 0x5, [@generic={0xe, 0x11, "266defe80851098ad28366ab"}, @generic={0xc0, 0xd, "8f11b25faa988e8a350f454cf33ef8b406fba359c531c2ee760e0996312689c9b982dffc57475e6659141f230e9a965d184f8ac5f37f266e5d117fe85b36f4a95bebf963e1dd6bcb81ffe7a8b97d67a928620dc63b68cbdbacb9b0583c0e09b314affb338a1de1a5f4a6da2e6f651e53b341ea19925b8b42350091a219a83e847150303499f39c1b41593e0410cad40fc03c181798a181dd968f318a1877d12579835fc1c2f928ff8ee2b0260767589ade1b4815070df881763e7e9032d9"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0x4, 0x5f, 0x8}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x8, 0xf, 0x5d, [@generic={0xd0, 0x23, "6172d6817ebbef4a4f4a254e877d5e2a876e920c60900fc932d3305735520328740b7ca1fd28d1919db80d2f6f1e8d6755d0f99bcce100c81426ae850d2a4d0a47f13e53741c498cfba42e45f5e8bb43a28f7f3c9865a6edffbf95c8e526776c83311ff69863909b600e149108d479e8f7407150b0bf62245c57ca0c0a0729e189fdd96b2958be9da308235569d47d41d3e74ae517ed021009e79e9060b9234adf1fc557815006eff0a642ede5043119a01196ffcdf1d834174da554fa6bb55037bad7a9d80e4902329fc56a14db"}]}}]}}, {{0x9, 0x4, 0xe, 0xf4, 0x7, 0x58, 0x70, 0x37, 0x6, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "5934325742d7"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1ff, 0x1, 0x5}}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "96"}, {0x5, 0x24, 0x0, 0x6a7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x80, 0x33}, [@mdlm={0x15, 0x24, 0x12, 0x417}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x3, 0xf, 0x8, 0x8, 0x9}, @acm={0x4}, @mdlm_detail={0x34, 0x24, 0x13, 0x6, "1c0d578eef8d764579b1d5cb2fd65d5af3fb62ef8e17e865e3913bb528beec5a55e2ee10e84f33e0420c60955f4a55bf"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x5}]}], [{{0x9, 0x5, 0xc, 0x0, 0x400, 0x7, 0x57, 0x41}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0x8, 0x8, 0xc, [@generic={0xf7, 0x2, "4dce7382cffa040877510e15d19db5f253240bcd02370371d3ed8bef43b177802b59acdaa199a0e48b943d341943c03e053c08fba8b107bf2e9d2ef3f31df0fb814bece1fc64dad8e2127b34a9d973fc31bebdb25cb8aad6212b7b0d210226cc15f5af2796299cbfc9241535005902bf67371e807a88405371fdcf527114303fa54b67d10cb7e28d3bf36b684841b7238c6ece415bde0b4eb8fdb40bbd365c3f9f8f2e2452984292405d715f3338def9508a1262125e2f76b689b03ba72d7760136ae6eb31efbb4d95758a7deef0df10ec490c27d4f86ef18ae2d8420f66584582546bcd34da8c42350830168f6881242bb9c81830"}, @generic={0x9f, 0x21, "9c84d1576c82b26542c610377ff55fa375d2811ef1d796d739ce82494a3858fae88ab8025c0caa5d62f127bbb30c5046c5027e6f1b00efc7869dd1fd2ca6d434e73598721d8aad4fa31dbd106558059ccb2c39fdb4ebb14b113f10a49ea514dad0578848c2a7dd1e2c0abaca803da26c295c5bff6c378705818c326f1b8d32eed606a4e84798ba802cbe5c0b25715c10934c9f146d7bfdd6c6dab120ce"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x3, 0x95, 0x81, [@generic={0xc9, 0x23, "84fd18299e86825e949ea269674849e4d1162489804c45263c4d782132fe95085663b5c386e4370394ae0e3f3db59f764fcebcc2f175a8189a6cccb8266d7e819cb62919fa7dd12ee97714f6e7da919418644265ccf4a9761a72226ad520e91780d91d0e800fcb0c1d074b9a7ede643ac8000f292b7626b14cdc6eda545b3773baa2653e8983a70b73929aa21b45c45a76c26c36f913b5969ea47f5f4c7a087036bbab4f19b661b2b376b28fc3abac538faa14219ddda755708154e4a987b4ab46d920a56518c7"}, @generic={0x9, 0xf, "f042406c88eced"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x210, 0xa, 0x78, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xfe, 0xcab7}]}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x7, 0x7f, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xfc, 0x2}, @generic={0x4, 0x7, "e4ae"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x5, 0x9, 0x28, [@uac_iso={0x7, 0x25, 0x1, 0xc}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x9, 0x1, 0x11, [@generic={0x60, 0x21, "52e16a6bdf070ef47ad163019a0bae5e3d47c508b9feed0c06495991b4a6b746566218a2b59a0e60be7663446d81838eac4786286c9e92e48945fd53523fb530a63a8c82d6b29a89a1c1435b69b0dd5ce870bb780f62c53fc4f345de913b"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x3ff}]}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x200, 0x7, 0x2, 0xc, 0x40, 0x3}, 0x38, &(0x7f0000000500)={0x5, 0xf, 0x38, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "07cbaa4f40d126f1a7ae1e18acee72cb"}, @generic={0x5, 0x10, 0x3, "701f"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "0d16387c700bdd9015919bb2998c5d57"}]}, 0x3, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x80c}}, {0xae, &(0x7f0000001140)=@string={0xae, 0x3, "0be19e2e0ac8dd9dfb93f1f6bf147c2042fdb9915eeaa35723f60fdf626c1f931d0f08b977e6dda29b9b4e13900378ac4baf095c76b3da9550904939eeab4fba7d8797e1c32f1832afc24e5a27c129cc5dbdca88103d43657dd48daef8eb6eca40915a361f13d1db3dc8950b7c5d8f7b0b6cc79683accc59e4c8189a0f636a5983cc437b155555c36363bfa2d2e0a21a685094f45badec8f8ba918290f9c6f546c7514729db4299652231cd8"}}, {0x3e, &(0x7f00000005c0)=@string={0x3e, 0x3, "4c122406c314fde32df2e6683e46e2560ee660cb0e94f734820dd9dc2958103f7d8815fe4df33390259bb7811a27b0dcc1c0408bb01d807b41bf4c10"}}]}) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000003c0)={r2, 0x9}, &(0x7f0000000400)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000003000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) r3 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) sigaltstack(&(0x7f0000001240)={0x0}, &(0x7f00000001c0)={0x0}) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x2ff, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) 8.849186893s ago: executing program 0 (id=1590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x400000000010, 0x3, 0x0) write(r3, 0x0, 0x0) 8.817094053s ago: executing program 5 (id=1591): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x204001) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0xa2242) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f0000000040)={0xdf, ""/223}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 7.802785456s ago: executing program 0 (id=1592): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x11) sched_setscheduler(0x0, 0x2, 0x0) gettid() socket$inet_sctp(0x2, 0x4, 0x84) timer_create(0x3, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000800)="69bb740d25629d97780902062ead65bb7729cf4bd6d005c6e4d651e32e1acc6f72ebb905b6c3b2d2b6b5f80be062a7573943f1b7f337d34fb4415077edfe8407790362b1f0c645b5b7e5a87a8efa30cac97fd6bad410022d30604f268c6476cafb450efbacefd5014348b5cf8614265791787cd38f", &(0x7f0000000940)="38040193cfa2feab59acd6f7d6562bfdbabca6c57586e8ddb785119b64c28744dfcfba02801ba76fe1c3de1115208eeaace29536b744a7aa46d4bf0b10fd4978f1b925"}}, &(0x7f0000001080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) pipe2$9p(0x0, 0x84880) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x48101) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000300)={[], [], 0x2f}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') read$FUSE(r4, 0x0, 0x0) syz_clone3(&(0x7f0000000480)={0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x28}, &(0x7f0000000340)=""/130, 0x82, &(0x7f0000000400)=""/27, &(0x7f0000000440)=[r0], 0x1, {r4}}, 0x58) mount$overlay(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000180), 0x40001, &(0x7f0000000700)={[], [{@fsname={'fsname', 0x3d, '\xaa\xf9N\xbcSU\x8c^s[\x1f\x8ekOk\xbb1Vo8\xfe\a\x05\xe3\xe7xK \x89u]\xb6\xa0\"\xf5\x82\x00x\xaf\xbe6\xfa\x96\x03\xc1\x02\xddf\xd3R\x1d\\ \xc4\x1d\xf8\xfbNDP\x03\xc7\x9c\x92\xcd\xa14?\xfb\xc0\x86\xa3kcV7\xee\x8d\x19\x98Qy\x10\x1b\x91k\b\xb6\x1f\xd1\x1e\xaf\xfd`)\x8b\xedk\xbai\xb2#o\xd1G\x17~(\x19\x18\xc2\xf4;\x1b|\x12\x8d\xcc!\xbd\x05\xc3d\xa2\xbc\xc5\x10\x1c\x88U\xee\xef\xe7\x8c\xec\xcf\x9b\x83\xfe\xb0\xca\x95\xed\xa6\x7f\xe13 \xd6[\xc3D\xa8\xe3\xda\xc0\xc2\a6\xca\x7f\xff\xb4;\xefgs\x83o\xe8 _^\"\xa9O\xd5\xc2q\xd8\'\x96\xe5\x0eQ:\xe5\xd7\xcb'}}], 0x2f}) 7.654783606s ago: executing program 2 (id=1593): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b142010400000109"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x1, 0x0) syz_io_uring_setup(0x5675, &(0x7f0000000240)={0x0, 0x12c5, 0x2, 0x3, 0x3a}, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000001000000050001000700000014000880100007e19400120073797a32000000000900020073797a32000000000800094000"/68], 0x44}}, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 6.649352032s ago: executing program 0 (id=1594): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000100)={0x9, 0x5ccbc3f8, 0x1, {0x8, @sdr={0x36314d4e}}, 0x1}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)=0x8) write(r5, &(0x7f0000000240)="92", 0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 6.054464721s ago: executing program 1 (id=1595): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08008c"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) socket$key(0xf, 0x3, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0xc0, &(0x7f0000000180)=0x633e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0xf23, 0x0, 0xc, 0x0, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000140)="93d90400000300", 0x7}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r7, 0x0) write$cgroup_netprio_ifpriomap(r7, 0x0, 0x12) 5.979070471s ago: executing program 4 (id=1596): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x7fffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x651, 0xfffffffffffffff8, 0x1000000000000, 0x0, 0x7fffffff, 0x0, 0x1000000000000008, 0xb, 0x0, 0xcc6, 0xfffffffffffffffc, 0x1, 0x80008, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r2, 0x1, 0x0, 0x1000000000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000900)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000940)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x2000) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x94) 5.142411076s ago: executing program 5 (id=1597): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002640)={'tunl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0xfffffffffffffffc, &(0x7f00000002c0)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r1, 0x3, &(0x7f0000002580)=0x7) socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_gettime(0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 4.960765234s ago: executing program 1 (id=1598): r0 = socket(0x28, 0x5, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x4, @private1, 0x15c2}}]}, 0x60}, 0x1, 0x7}, 0x0) prlimit64(r1, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1c}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000072000010000000000fbdbdf250a400000000000081a000300140001002001000066049b6e7469a13596a8c2094cb3ba0000000000000400000002"], 0x30}}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0xfffd, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) getsockopt(r0, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) 4.246251772s ago: executing program 2 (id=1599): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1f, 0x800000000004, @tid=r0}, &(0x7f0000000080)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000482000/0x2000)=nil, 0x2000, 0x300000d, 0x4000010, 0xffffffffffffffff, 0x20560000) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x77359400}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a", @ANYRES64=0x0], 0x54}}, 0x20004810) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a240104000502010207240705000005082408050400049604000000010302000100060006092403050503060581092403060101040505072404"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) 3.974831921s ago: executing program 5 (id=1600): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="ae46bc2fa9cb201922fe82a5c7562897", 0x10) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0xe, 0x5, 0x1}, 0x50) r4 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x34, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0xff7f, 0x57, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x66, 0x64}}}}}]}}]}}, &(0x7f00000000c0)={0xfffffe9a, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x260) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0x9362, 0x0) read$FUSE(r5, &(0x7f0000003ac0)={0x2020}, 0x2023) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) 3.521062481s ago: executing program 1 (id=1601): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) r1 = gettid() recvfrom$packet(r0, 0x0, 0x0, 0x2, 0x0, 0x700) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.623292081s ago: executing program 1 (id=1602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x400000000010, 0x3, 0x0) write(r3, 0x0, 0x0) 1.566647549s ago: executing program 1 (id=1603): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4004800) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x440) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x9637b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400", @ANYRES16=r7, @ANYBLOB="090300000000000000002e"], 0x14}}, 0x0) 1.409163413s ago: executing program 0 (id=1604): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, 0x0, 0x0) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0) connect$ax25(r1, &(0x7f0000000180)={{0x3, @bcast, 0x8}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast]}, 0x48) timer_create(0x3, 0x0, &(0x7f0000000240)) r4 = syz_open_procfs(0x0, 0x0) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 429.295245ms ago: executing program 5 (id=1605): socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2282, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x10, 0x5, 0x0) sendmsg$inet(r1, 0x0, 0x300) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x4000000) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000000c0)={0xfffffff9, 0x0, {}, {}, 0x3, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 56.109744ms ago: executing program 4 (id=1606): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_connect$cdc_ncm(0x5, 0x86, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x7, 0x70, 0x10, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "4cc4a0"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x40, 0xc7, 0x2000, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@mdlm={0x15}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0x4, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x42, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3, 0x0, 0x2}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x5b, 0x86, 0x3, 0x8, 0x80}, 0xd0, &(0x7f0000000200)=ANY=[@ANYBLOB="050fd000038b1002501262c1deb49d251c3c2f711281dde00d90f56b7d641a47c286561922f89b3a6e723f27f544bedebd72013072320cd16a6ede7240879b7d244c1f6a4fb9d62d6b9b3210dba7e90f03c7fd6f2c612c373c571f3211df0647ddf69871720987a2a8cc41614dcbb4809f99e6a1d777db1bbaaf94538e4c97b50a07b88674b39b1df0f888dc81d8a7ea1c100a6c4400000000f008000f00ff0030ff0000303fff00003f000024100a0806000000000f0600cf0000000f3f00000000000000c00000c00000000000ff00"], 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x4046}}, {0x0, 0x0}, {0xb4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, {0x30, &(0x7f0000000180)=@string={0x30, 0x3, "457077320d638eb6a89d6d7c0ab4ffb153861d1022c86489e50a51f6adbd0f2a1afc3cbb73f9d9365d79bc1f15ea"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41e}}]}) r0 = socket$inet_sctp(0x2, 0x5, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x8d4, &(0x7f00000007c0)={{0x12, 0x1, 0x310, 0xa5, 0x80, 0x6d, 0x20, 0x6737, 0x1, 0xd6ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c2, 0x2, 0x6, 0xf, 0x70, 0xb7, "", [{{0x9, 0x4, 0x11, 0x3, 0xd, 0x2a, 0x95, 0xff, 0x4, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5, 0x8, 0x1}, {0x6, 0x24, 0x1a, 0x1645, 0xc8735f7c6b0df836}, [@obex={0x5}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x81, 0xd, 0x6}, @country_functional={0xe, 0x24, 0x7, 0x7, 0x5, [0x8, 0x7, 0x57fe, 0xb]}, @obex={0x5, 0x24, 0x15, 0x800}, @acm={0x4, 0x24, 0x2, 0x1}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "4c2bd5983a3f"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1, 0x6}, [@mdlm_detail={0x81, 0x24, 0x13, 0x9, "2ced86bf2fc21ea6e4e61c776d834389a85e4794cdfe3545a09b4763b543e351823ae121bcf912a3867cd88afac7ce2d46d09a5141770f32efc15aea30c546071992f49ca14c751060bc8d6ec5a0d8eee97d3093888c71d06c4d81cc2765a051e683b384f642620b42d410dc2590172156fd4af0558eb63b589f1e7f3c"}, @dmm={0x7, 0x24, 0x14, 0x7, 0x169c}]}], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0xff, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x8}]}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0x5, 0x3, 0x5f, [@generic={0x6c, 0x23, "8e076fe278e1e0ce139662529137cf337564a87c0d6aa176e9812f49e99a3eddc824b2a83f73f6a6a415689dcc179ba1a810752fe994e5e751769bbb4b9014c4a618fed323b7116eb87131346d86a24722a1cc3e5149e642964d0e0386417967e04666aea8b8f70cae8b"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x1, 0x4, 0x5}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x8, 0x7, 0x7, [@generic={0xda, 0x6, "0bc21d05f9c39112e5aa1836a69fabd893bc0083bc2f06c11a718f25b3ed61a53bb0b5525b78e1b412877c3712574744533b3f16471fbfb3cda0c131f6dad340f49c000151fb5e4fdb9fd8ce4d3a0ab78c509c09afced9814db58d3ac797628dec5f5962b27256b222f33e7e742c2b83fc743abd768eff84a663c406695a1286ae285f39d7d713c444f19e3e03668676b1dca3cce733c81b9f2ca47eb7e22e35e8e620294f035b6e2974bf43c59d907b691f979f36d42dc82651485382e781375359a93595f1c15842ae4ec06d48676c8748ab8ebb935def"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x9, 0x2, 0x9a, [@generic={0xa1, 0x6, "66b8352b1433db5ef2fabcb1c61f1c3937c1bb16b4d108241e8bb82eb431202897632d1a9e3394ee6c3a609a49a6e35f91006e2dcca1500639df2c65aa55e9887ae7682469e353616d446aaf095c57fc8a95f8537d1f6325fbc65002acff0e7d4d0f953dd41db492f8e35cfc1b441c8a3a1f295b91f83df7b11d0592f4929f6b14ef53ac90213620f6699f86acbdf22e7ec995358365598b2082e141f533ed"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3f7, 0x7, 0x4, 0xd}}, {{0x9, 0x5, 0x80, 0x4, 0x10, 0x6, 0x2e, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x47f1}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x8, 0xe, 0x7}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x0, 0x9, 0xff}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0x9a, 0x4, 0x1}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x3, 0x2, 0x5, [@generic={0xe, 0x11, "266defe80851098ad28366ab"}, @generic={0xc0, 0xd, "8f11b25faa988e8a350f454cf33ef8b406fba359c531c2ee760e0996312689c9b982dffc57475e6659141f230e9a965d184f8ac5f37f266e5d117fe85b36f4a95bebf963e1dd6bcb81ffe7a8b97d67a928620dc63b68cbdbacb9b0583c0e09b314affb338a1de1a5f4a6da2e6f651e53b341ea19925b8b42350091a219a83e847150303499f39c1b41593e0410cad40fc03c181798a181dd968f318a1877d12579835fc1c2f928ff8ee2b0260767589ade1b4815070df881763e7e9032d9"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0x4, 0x5f, 0x8}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x8, 0xf, 0x5d, [@generic={0xd0, 0x23, "6172d6817ebbef4a4f4a254e877d5e2a876e920c60900fc932d3305735520328740b7ca1fd28d1919db80d2f6f1e8d6755d0f99bcce100c81426ae850d2a4d0a47f13e53741c498cfba42e45f5e8bb43a28f7f3c9865a6edffbf95c8e526776c83311ff69863909b600e149108d479e8f7407150b0bf62245c57ca0c0a0729e189fdd96b2958be9da308235569d47d41d3e74ae517ed021009e79e9060b9234adf1fc557815006eff0a642ede5043119a01196ffcdf1d834174da554fa6bb55037bad7a9d80e4902329fc56a14db"}]}}]}}, {{0x9, 0x4, 0xe, 0xf4, 0x7, 0x58, 0x70, 0x37, 0x6, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "5934325742d7"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1ff, 0x1, 0x5}}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "96"}, {0x5, 0x24, 0x0, 0x6a7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x80, 0x33}, [@mdlm={0x15, 0x24, 0x12, 0x417}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x3, 0xf, 0x8, 0x8, 0x9}, @acm={0x4}, @mdlm_detail={0x34, 0x24, 0x13, 0x6, "1c0d578eef8d764579b1d5cb2fd65d5af3fb62ef8e17e865e3913bb528beec5a55e2ee10e84f33e0420c60955f4a55bf"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x5}]}], [{{0x9, 0x5, 0xc, 0x0, 0x400, 0x7, 0x57, 0x41}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0x8, 0x8, 0xc, [@generic={0xf7, 0x2, "4dce7382cffa040877510e15d19db5f253240bcd02370371d3ed8bef43b177802b59acdaa199a0e48b943d341943c03e053c08fba8b107bf2e9d2ef3f31df0fb814bece1fc64dad8e2127b34a9d973fc31bebdb25cb8aad6212b7b0d210226cc15f5af2796299cbfc9241535005902bf67371e807a88405371fdcf527114303fa54b67d10cb7e28d3bf36b684841b7238c6ece415bde0b4eb8fdb40bbd365c3f9f8f2e2452984292405d715f3338def9508a1262125e2f76b689b03ba72d7760136ae6eb31efbb4d95758a7deef0df10ec490c27d4f86ef18ae2d8420f66584582546bcd34da8c42350830168f6881242bb9c81830"}, @generic={0x9f, 0x21, "9c84d1576c82b26542c610377ff55fa375d2811ef1d796d739ce82494a3858fae88ab8025c0caa5d62f127bbb30c5046c5027e6f1b00efc7869dd1fd2ca6d434e73598721d8aad4fa31dbd106558059ccb2c39fdb4ebb14b113f10a49ea514dad0578848c2a7dd1e2c0abaca803da26c295c5bff6c378705818c326f1b8d32eed606a4e84798ba802cbe5c0b25715c10934c9f146d7bfdd6c6dab120ce"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x3, 0x95, 0x81, [@generic={0xc9, 0x23, "84fd18299e86825e949ea269674849e4d1162489804c45263c4d782132fe95085663b5c386e4370394ae0e3f3db59f764fcebcc2f175a8189a6cccb8266d7e819cb62919fa7dd12ee97714f6e7da919418644265ccf4a9761a72226ad520e91780d91d0e800fcb0c1d074b9a7ede643ac8000f292b7626b14cdc6eda545b3773baa2653e8983a70b73929aa21b45c45a76c26c36f913b5969ea47f5f4c7a087036bbab4f19b661b2b376b28fc3abac538faa14219ddda755708154e4a987b4ab46d920a56518c7"}, @generic={0x9, 0xf, "f042406c88eced"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x210, 0xa, 0x78, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xfe, 0xcab7}]}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x7, 0x7f, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xfc, 0x2}, @generic={0x4, 0x7, "e4ae"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x5, 0x9, 0x28, [@uac_iso={0x7, 0x25, 0x1, 0xc}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x9, 0x1, 0x11, [@generic={0x60, 0x21, "52e16a6bdf070ef47ad163019a0bae5e3d47c508b9feed0c06495991b4a6b746566218a2b59a0e60be7663446d81838eac4786286c9e92e48945fd53523fb530a63a8c82d6b29a89a1c1435b69b0dd5ce870bb780f62c53fc4f345de913b"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x3ff}]}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x200, 0x7, 0x2, 0xc, 0x40, 0x3}, 0x38, &(0x7f0000000500)={0x5, 0xf, 0x38, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "07cbaa4f40d126f1a7ae1e18acee72cb"}, @generic={0x5, 0x10, 0x3, "701f"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "0d16387c700bdd9015919bb2998c5d57"}]}, 0x3, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x80c}}, {0xae, &(0x7f0000001140)=@string={0xae, 0x3, "0be19e2e0ac8dd9dfb93f1f6bf147c2042fdb9915eeaa35723f60fdf626c1f931d0f08b977e6dda29b9b4e13900378ac4baf095c76b3da9550904939eeab4fba7d8797e1c32f1832afc24e5a27c129cc5dbdca88103d43657dd48daef8eb6eca40915a361f13d1db3dc8950b7c5d8f7b0b6cc79683accc59e4c8189a0f636a5983cc437b155555c36363bfa2d2e0a21a685094f45badec8f8ba918290f9c6f546c7514729db4299652231cd8"}}, {0x3e, &(0x7f00000005c0)=@string={0x3e, 0x3, "4c122406c314fde32df2e6683e46e2560ee660cb0e94f734820dd9dc2958103f7d8815fe4df33390259bb7811a27b0dcc1c0408bb01d807b41bf4c10"}}]}) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000003c0)={r2, 0x9}, &(0x7f0000000400)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000003000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) r3 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) sigaltstack(&(0x7f0000001240)={0x0}, &(0x7f00000001c0)={0x0}) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x2ff, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) 0s ago: executing program 2 (id=1607): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x10}}, 0x0) kernel console output (not intermixed with test programs): 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.870421][T10754] RSP: 002b:00007fe2c8895028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.870438][T10754] RAX: ffffffffffffffda RBX: 00007fe2c7c16090 RCX: 00007fe2c799c799 [ 497.870449][T10754] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000006 [ 497.870459][T10754] RBP: 00007fe2c8895090 R08: 0000000000000000 R09: 0000000000000000 [ 497.870468][T10754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.870476][T10754] R13: 00007fe2c7c16128 R14: 00007fe2c7c16090 R15: 00007ffeb45e5018 [ 497.870496][T10754] [ 497.970555][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 498.320626][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 498.600574][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.636786][ T5863] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 498.710683][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 498.769958][ T5863] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=9f.7a [ 498.810575][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=4 [ 498.818624][ T5863] usb 4-1: Product: syz [ 498.834479][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 498.882377][ T5863] usb 4-1: Manufacturer: syz [ 498.887016][ T5863] usb 4-1: SerialNumber: syz [ 498.951473][ T5863] usb 4-1: config 0 descriptor?? [ 499.060729][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 499.379299][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 499.515657][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 499.685682][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 499.744134][ T5871] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 499.787822][ T5871] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 499.854545][ T5871] usb 5-1: USB disconnect, device number 35 [ 500.367909][T10766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1134'. [ 500.779286][ T6269] usb 4-1: USB disconnect, device number 41 [ 501.350512][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 501.358550][ C1] lec:lec_tx_timeout: lec0 [ 501.365345][T10782] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.434547][T10783] lo speed is unknown, defaulting to 1000 [ 501.470571][ T5864] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 501.571799][T10791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 502.042767][ T5864] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 502.123345][ T5864] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 502.166189][ T5864] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 502.204612][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.247225][T10776] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 502.276278][ T5864] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 502.790812][T10790] siw: device registration error -23 [ 502.850705][ T5864] usb 1-1: USB disconnect, device number 28 [ 503.090648][T10807] siw: device registration error -23 [ 503.120625][ T6269] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 503.431365][ T6331] net_ratelimit: 19 callbacks suppressed [ 503.431381][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 504.608931][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 504.640569][ T6269] usb 4-1: Using ep0 maxpacket: 32 [ 504.648451][ T6269] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 504.661610][ T6269] usb 4-1: config 1 interface 0 has no altsetting 0 [ 504.672571][ T6269] usb 4-1: New USB device found, idVendor=0486, idProduct=0185, bcdDevice= 0.40 [ 504.690847][ T6269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.727106][ T6269] usb 4-1: Product: ї [ 504.747324][ T6269] usb 4-1: Manufacturer: ⁒ꈋኘⅽ䭹૬診忆ꠦ釺㞱បᤡ郇뉁䚪銣㙭꽳儙돛ጵ౱䑩諁睾鉺 [ 504.788839][ T6269] usb 4-1: SerialNumber: 壶뉨蟙霑㚩࢈햵癜構輿턧휢縡ኁ䡎ᗂ姲퐝妇㲀㠿➥삅꿌齫৞榒≾㧞렂핿冲㵰猬ⅎ [ 504.942191][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 505.061058][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 505.093779][T10823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1152'. [ 505.180755][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 505.193639][ T30] audit: type=1400 audit(1772561562.687:443): avc: denied { read } for pid=10822 comm="syz.0.1152" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 505.345542][ T6269] usbhid 4-1:1.0: can't add hid device: -71 [ 505.351749][ T30] audit: type=1400 audit(1772561562.687:444): avc: denied { open } for pid=10822 comm="syz.0.1152" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 505.382301][ T6269] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 505.401896][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 505.452067][ T30] audit: type=1400 audit(1772561562.817:445): avc: denied { ioctl } for pid=10822 comm="syz.0.1152" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 505.530549][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 505.616039][ T6269] usb 4-1: USB disconnect, device number 42 [ 505.730684][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 505.852387][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 505.947639][T10827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 506.141266][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 506.210119][T10830] 9p: Bad value for 'rfdno' [ 506.630718][ T5863] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 506.991133][T10839] lo speed is unknown, defaulting to 1000 [ 507.162857][ T5863] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 507.185232][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 507.234607][ T5863] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 507.277799][ T5863] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 507.313643][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.366015][ T5863] usb 4-1: Product: syz [ 507.386326][ T5863] usb 4-1: Manufacturer: syz [ 507.404024][ T5863] usb 4-1: SerialNumber: syz [ 507.450835][ T5863] usb 4-1: config 0 descriptor?? [ 507.456248][T10830] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 507.463430][T10830] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 507.501538][ T5863] usb 4-1: ucan: probing device on interface #0 [ 507.874532][ T5863] usb 4-1: ucan: failed to retrieve device info [ 507.886788][ T5863] usb 4-1: ucan: probe failed; try to update the device firmware [ 508.015522][ T5863] usb 4-1: USB disconnect, device number 43 [ 508.661594][ T6331] net_ratelimit: 17 callbacks suppressed [ 508.661612][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 508.821205][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 508.930677][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 509.144958][T10868] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1161'. [ 509.265334][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 509.710608][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 510.162459][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 510.420304][T10877] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1163'. [ 510.443661][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 510.602534][ T5864] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 510.839548][T10881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.893077][ T5864] usb 3-1: device descriptor read/64, error -71 [ 510.928579][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 511.250545][ T5864] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 511.575168][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 511.690633][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 511.734945][ T5864] usb 3-1: device descriptor read/64, error -71 [ 511.894758][ T5864] usb usb3-port1: attempt power cycle [ 511.894914][T10892] tipc: Enabling of bearer rejected, failed to enable media [ 512.022471][ T5863] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 512.212421][ T5863] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 512.237644][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.272705][ T5863] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 512.300540][ T5863] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 512.330663][ T5863] usb 1-1: Manufacturer: syz [ 512.348722][ T5863] usb 1-1: config 0 descriptor?? [ 512.380613][ T5864] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 512.423415][ T5864] usb 3-1: device descriptor read/8, error -71 [ 512.440694][ T5863] rc_core: IR keymap rc-hauppauge not found [ 512.446589][ T5863] Registered IR keymap rc-empty [ 512.472508][ T5863] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 512.513877][ T5863] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input38 [ 512.579058][T10889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.592059][T10889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.607746][ T6269] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 512.685403][T10889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.731097][T10889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.818725][ T5863] usb 1-1: USB disconnect, device number 29 [ 512.902151][ T6269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.929797][ T6269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.956287][ T6269] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 512.971810][ T6269] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 512.981439][ T6269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.078969][ T6269] usb 5-1: config 0 descriptor?? [ 513.428428][T10904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.439838][T10904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.473478][T10904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.518508][T10904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.745437][ T70] net_ratelimit: 15 callbacks suppressed [ 513.745456][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 513.976058][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 514.261633][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 514.871134][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 514.882170][T10904] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 514.969808][T10929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1174'. [ 515.242478][ T5809] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 515.341117][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 515.401161][ T6269] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 515.464388][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 515.631826][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 515.873053][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 515.883049][T10937] CUSE: DEVNAME unspecified [ 515.982496][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 516.110849][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 516.935492][T10951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.044190][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'. [ 517.080649][T10952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1183'. [ 518.757681][ T13] net_ratelimit: 10 callbacks suppressed [ 518.757724][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 519.230684][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 519.327924][T10978] dvmrp9: entered allmulticast mode [ 519.408881][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 519.522671][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 519.631009][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 519.760103][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 519.911152][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 520.020617][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 520.191409][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 520.339991][T10958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 520.365964][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 520.951040][ T5809] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 520.951110][ T5807] Bluetooth: hci5: command 0x1003 tx timeout [ 521.449727][T10990] lo speed is unknown, defaulting to 1000 [ 521.459649][T10995] tipc: Enabling of bearer rejected, failed to enable media [ 522.360552][ T5913] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 522.369804][T11009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.483502][ T6269] usb 5-1: USB disconnect, device number 36 [ 522.540632][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 522.576402][ T5913] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 522.606775][ T5913] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 522.635365][ T5913] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 522.640367][T11013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.920630][ T5913] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 522.936727][ T5913] usb 1-1: config 0 interface 0 has no altsetting 0 [ 523.003536][ T5913] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 523.020624][ T5913] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 523.029205][ T5913] usb 1-1: Product: syz [ 523.033497][ T5913] usb 1-1: Manufacturer: syz [ 523.038109][ T5913] usb 1-1: SerialNumber: syz [ 523.074966][ T5913] usb 1-1: config 0 descriptor?? [ 523.128135][ T5913] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 523.160411][ T5913] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 523.247593][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 523.258834][T11024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1199'. [ 523.297387][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 523.328848][T11024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1199'. [ 523.420120][ T5913] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 523.572117][ T5913] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 523.609493][ T5913] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 523.726105][ T5913] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 523.749436][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.246976][T10515] net_ratelimit: 16 callbacks suppressed [ 524.246995][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 524.285460][T11020] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 524.299851][ T5913] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 524.370958][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 524.511506][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 524.557377][ T9] usb 1-1: USB disconnect, device number 30 [ 524.900941][ T9] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 524.991640][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 526.201315][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 526.395291][ T9] usb 3-1: USB disconnect, device number 40 [ 526.451346][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 526.555199][T11045] tipc: Enabling of bearer rejected, failed to enable media [ 526.720554][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 527.150547][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 527.467203][T11066] lo speed is unknown, defaulting to 1000 [ 527.565554][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 527.756753][T11072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 528.030589][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 529.279570][ T1708] net_ratelimit: 2 callbacks suppressed [ 529.279588][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 529.400733][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 529.691164][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1213'. [ 529.830989][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 530.220543][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 530.769517][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 530.901527][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 531.513379][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 531.661088][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 531.824353][T11118] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 532.261223][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 532.412878][T11126] lo speed is unknown, defaulting to 1000 [ 532.494464][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 533.850697][T11146] FAULT_INJECTION: forcing a failure. [ 533.850697][T11146] name failslab, interval 1, probability 0, space 0, times 0 [ 533.863365][T11146] CPU: 0 UID: 0 PID: 11146 Comm: syz.2.1226 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.863392][T11146] Tainted: [L]=SOFTLOCKUP [ 533.863397][T11146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.863407][T11146] Call Trace: [ 533.863414][T11146] [ 533.863421][T11146] dump_stack_lvl+0x100/0x190 [ 533.863453][T11146] should_fail_ex.cold+0x5/0xa [ 533.863476][T11146] should_failslab+0xc2/0x120 [ 533.863504][T11146] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 533.863528][T11146] ? vm_area_dup+0x27/0x8e0 [ 533.863547][T11146] ? __lock_acquire+0x4a5/0x2630 [ 533.863579][T11146] vm_area_dup+0x27/0x8e0 [ 533.863601][T11146] __split_vma+0x18c/0xd90 [ 533.863622][T11146] ? lock_acquire+0x1cf/0x380 [ 533.863648][T11146] ? find_held_lock+0x2b/0x80 [ 533.863670][T11146] ? __pfx___split_vma+0x10/0x10 [ 533.863697][T11146] ? finish_task_switch.isra.0+0x205/0xb80 [ 533.863721][T11146] ? rcu_is_watching+0x12/0xc0 [ 533.863741][T11146] ? trace_sched_exit_tp+0x13a/0x180 [ 533.863769][T11146] vms_gather_munmap_vmas+0x1c6/0x1500 [ 533.863798][T11146] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 533.863825][T11146] ? __pfx___schedule+0x10/0x10 [ 533.863866][T11146] do_vmi_align_munmap+0x287/0x5f0 [ 533.863892][T11146] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 533.863951][T11146] do_vmi_munmap+0x1f8/0x3e0 [ 533.863977][T11146] __vm_munmap+0x196/0x390 [ 533.864002][T11146] ? __pfx___vm_munmap+0x10/0x10 [ 533.864034][T11146] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 533.864060][T11146] ? rcu_is_watching+0x12/0xc0 [ 533.864084][T11146] __x64_sys_munmap+0x59/0x80 [ 533.864102][T11146] do_syscall_64+0x106/0xf80 [ 533.864120][T11146] ? clear_bhb_loop+0x40/0x90 [ 533.864142][T11146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.864159][T11146] RIP: 0033:0x7fe54a39c799 [ 533.864174][T11146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.864191][T11146] RSP: 002b:00007fe54b245028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 533.864208][T11146] RAX: ffffffffffffffda RBX: 00007fe54a616180 RCX: 00007fe54a39c799 [ 533.864219][T11146] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 000020000053c000 [ 533.864228][T11146] RBP: 00007fe54b245090 R08: 0000000000000000 R09: 0000000000000000 [ 533.864238][T11146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.864247][T11146] R13: 00007fe54a616218 R14: 00007fe54a616180 R15: 00007ffd0f397078 [ 533.864271][T11146] [ 534.172918][ T5913] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 534.432235][ T5913] usb 4-1: device descriptor read/64, error -71 [ 534.443540][ T78] net_ratelimit: 11 callbacks suppressed [ 534.443555][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 534.805121][T11114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 534.956121][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 534.963609][ T5913] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 535.101562][ T5913] usb 4-1: device descriptor read/64, error -71 [ 535.290279][ T5913] usb usb4-port1: attempt power cycle [ 535.385379][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 535.540618][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 535.640639][ T5913] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 535.720972][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 535.831523][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 535.880645][ T5913] usb 4-1: device not accepting address 46, error -71 [ 535.950664][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 536.114240][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 536.311904][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 536.643691][T11178] lo speed is unknown, defaulting to 1000 [ 536.656139][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 537.450594][T10916] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 537.579478][T11186] siw: device registration error -23 [ 538.039759][T10916] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 538.070189][T10916] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 538.080775][T10916] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 538.112752][T10916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.159374][T11181] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 538.316153][T10916] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 538.541990][ T5913] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 538.746238][ T5913] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 538.886692][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.917934][ T5913] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 538.962383][ T6269] usb 1-1: USB disconnect, device number 31 [ 538.973486][ T5913] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 538.998635][ T5913] usb 3-1: Manufacturer: syz [ 539.039327][ T5913] usb 3-1: config 0 descriptor?? [ 539.763072][ T70] net_ratelimit: 19 callbacks suppressed [ 539.763088][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 539.788236][T11188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.804818][T11188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.817767][T11206] lo: entered allmulticast mode [ 539.837814][T11188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.846526][ T5913] rc_core: IR keymap rc-hauppauge not found [ 539.860554][ T5913] Registered IR keymap rc-empty [ 539.871421][ T5913] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 539.885166][T11188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.920627][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 540.019827][ T5913] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input40 [ 540.030712][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 540.106475][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1243'. [ 540.231237][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 541.212876][T11204] lo: left allmulticast mode [ 541.260680][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 541.691032][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 541.740787][T11211] syz.2.1238 (11211): drop_caches: 2 [ 541.773237][ T6936] lec:lec_start_xmit: lec0:No lecd attached [ 541.812119][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 541.925428][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 542.064827][T11233] siw: device registration error -23 [ 542.610780][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 542.740559][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 543.887418][ T5913] usb 3-1: USB disconnect, device number 41 [ 544.786998][ T1708] net_ratelimit: 10 callbacks suppressed [ 544.787018][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 544.830828][ T6269] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 544.930654][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 545.011075][ T6269] usb 1-1: Using ep0 maxpacket: 32 [ 545.028143][ T6269] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 545.044048][ T6269] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 545.055222][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 545.063097][ T6269] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 545.074310][ T6269] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 545.087989][ T6269] usb 1-1: config 0 interface 0 has no altsetting 0 [ 545.098183][ T6269] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 545.107464][ T6269] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 545.117429][ T6269] usb 1-1: Product: syz [ 545.125569][ T6269] usb 1-1: Manufacturer: syz [ 545.130278][ T6269] usb 1-1: SerialNumber: syz [ 545.140950][ T6269] usb 1-1: config 0 descriptor?? [ 545.150905][ T6269] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 545.163757][ T6269] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 545.172200][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 545.240539][ T5913] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 545.280642][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 545.390754][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 545.412611][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 545.869168][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 545.904951][ T5913] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 545.932895][ T5913] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 545.960553][ T5913] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 545.980708][ T5913] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 545.997054][ T5913] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 546.023066][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 546.045443][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.057777][ T5913] usb 5-1: Product: syz [ 546.065344][ T5913] usb 5-1: Manufacturer: syz [ 546.074327][ T5913] usb 5-1: SerialNumber: syz [ 546.092286][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 546.104188][T11269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 546.116373][ T5913] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input41 [ 546.141165][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 546.319069][ T5913] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 546.337654][ T5913] (id 0x00) [ 546.400640][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 546.409069][ T5913] rc_core: IR keymap rc-imon-pad not found [ 546.422779][ T5913] Registered IR keymap rc-empty [ 546.435481][ T5913] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 546.456093][ T5913] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 546.513180][ T5913] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 546.550693][ T5913] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input42 [ 546.579224][ T5913] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:37> initialized [ 546.950760][T11279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 546.962763][ T5913] usb 5-1: USB disconnect, device number 37 [ 547.004394][ T6269] usb 1-1: USB disconnect, device number 32 [ 547.106960][ T6269] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 547.350478][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms [ 547.358486][ C1] lec:lec_tx_timeout: lec0 [ 548.650621][ T5913] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 548.828306][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.902365][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.040603][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 549.088008][ T5913] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 549.349577][T11308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 549.587414][T11309] lo speed is unknown, defaulting to 1000 [ 549.625455][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.851369][ T36] net_ratelimit: 24 callbacks suppressed [ 549.851388][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 550.000604][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 550.011467][ T5913] usb 1-1: config 0 descriptor?? [ 550.224734][T11297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.290992][T11297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.321791][T11297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.749254][T11297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.781389][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 550.940943][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 550.960697][ T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 551.671347][T11297] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 551.887813][ T5913] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 552.139274][ T5864] usb 1-1: USB disconnect, device number 33 [ 552.181873][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 552.206190][ T24] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 552.229589][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 552.246012][ T24] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 552.260871][T11331] syzkaller0: entered promiscuous mode [ 552.266352][T11331] syzkaller0: entered allmulticast mode [ 552.296937][ T24] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 552.297533][T11332] fido_id[11332]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 552.311869][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 552.350562][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 552.480889][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 552.496575][ T24] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 552.505551][ T24] usb 3-1: Product: syz [ 552.509778][ T24] usb 3-1: Manufacturer: syz [ 552.514728][ T24] usb 3-1: SerialNumber: syz [ 552.549710][ T24] usb 3-1: config 0 descriptor?? [ 552.560669][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 552.578342][ T24] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 552.621339][ T24] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 552.671512][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 552.813858][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 553.300749][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 553.440765][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 553.833816][ T24] usb 3-1: USB disconnect, device number 42 [ 553.920875][ T24] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 554.920601][ T13] net_ratelimit: 9 callbacks suppressed [ 554.920619][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 555.085882][T11353] FAULT_INJECTION: forcing a failure. [ 555.085882][T11353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.098972][T11353] CPU: 0 UID: 0 PID: 11353 Comm: syz.1.1278 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.098996][T11353] Tainted: [L]=SOFTLOCKUP [ 555.099001][T11353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 555.099011][T11353] Call Trace: [ 555.099016][T11353] [ 555.099022][T11353] dump_stack_lvl+0x100/0x190 [ 555.099053][T11353] should_fail_ex.cold+0x5/0xa [ 555.099074][T11353] _copy_from_user+0x2e/0xd0 [ 555.099099][T11353] copy_msghdr_from_user+0x9f/0x4f0 [ 555.099123][T11353] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 555.099158][T11353] ___sys_sendmsg+0x106/0x1e0 [ 555.099182][T11353] ? __pfx____sys_sendmsg+0x10/0x10 [ 555.099231][T11353] __sys_sendmsg+0x170/0x220 [ 555.099248][T11353] ? __pfx___sys_sendmsg+0x10/0x10 [ 555.099280][T11353] do_syscall_64+0x106/0xf80 [ 555.099298][T11353] ? clear_bhb_loop+0x40/0x90 [ 555.099320][T11353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.099337][T11353] RIP: 0033:0x7efe67b9c799 [ 555.099351][T11353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.099366][T11353] RSP: 002b:00007efe68995028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.099382][T11353] RAX: ffffffffffffffda RBX: 00007efe67e15fa0 RCX: 00007efe67b9c799 [ 555.099393][T11353] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 555.099403][T11353] RBP: 00007efe68995090 R08: 0000000000000000 R09: 0000000000000000 [ 555.099412][T11353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.099422][T11353] R13: 00007efe67e16038 R14: 00007efe67e15fa0 R15: 00007fffafe992b8 [ 555.099444][T11353] [ 555.102323][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 555.348658][T11358] FAULT_INJECTION: forcing a failure. [ 555.348658][T11358] name failslab, interval 1, probability 0, space 0, times 0 [ 555.362282][T11358] CPU: 1 UID: 0 PID: 11358 Comm: syz.0.1273 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.362312][T11358] Tainted: [L]=SOFTLOCKUP [ 555.362318][T11358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 555.362328][T11358] Call Trace: [ 555.362335][T11358] [ 555.362342][T11358] dump_stack_lvl+0x100/0x190 [ 555.362382][T11358] should_fail_ex.cold+0x5/0xa [ 555.362405][T11358] should_failslab+0xc2/0x120 [ 555.362431][T11358] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 555.362454][T11358] ? ima_inode_get+0x11f/0x580 [ 555.362479][T11358] ima_inode_get+0x11f/0x580 [ 555.362501][T11358] process_measurement+0x1213/0x2350 [ 555.362527][T11358] ? __rcu_read_unlock+0x27f/0x5e0 [ 555.362555][T11358] ? __pfx_process_measurement+0x10/0x10 [ 555.362573][T11358] ? avc_has_perm_noaudit+0x145/0x3b0 [ 555.362605][T11358] ? __pfx_avc_has_perm+0x10/0x10 [ 555.362628][T11358] ? find_held_lock+0x2b/0x80 [ 555.362651][T11358] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 555.362694][T11358] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 555.362726][T11358] ? file_map_prot_check+0x236/0x3f0 [ 555.362755][T11358] ima_file_mmap+0x1bb/0x1e0 [ 555.362775][T11358] ? __pfx_ima_file_mmap+0x10/0x10 [ 555.362796][T11358] ? proc_fail_nth_write+0x9f/0x220 [ 555.362823][T11358] security_mmap_file+0x278/0x9b0 [ 555.362846][T11358] vm_mmap_pgoff+0xec/0x470 [ 555.362865][T11358] ? find_held_lock+0x2b/0x80 [ 555.362887][T11358] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 555.362902][T11358] ? __fget_files+0x215/0x3d0 [ 555.362924][T11358] ? __fget_files+0x21f/0x3d0 [ 555.362945][T11358] ksys_mmap_pgoff+0x3c8/0x650 [ 555.362976][T11358] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 555.363001][T11358] ? fput+0x79/0x100 [ 555.363020][T11358] ? ksys_write+0x1ac/0x250 [ 555.363045][T11358] ? __pfx_ksys_write+0x10/0x10 [ 555.363073][T11358] __x64_sys_mmap+0x125/0x190 [ 555.363094][T11358] do_syscall_64+0x106/0xf80 [ 555.363111][T11358] ? clear_bhb_loop+0x40/0x90 [ 555.363133][T11358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.363151][T11358] RIP: 0033:0x7f91ef19c799 [ 555.363166][T11358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.363182][T11358] RSP: 002b:00007f91effaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 555.363199][T11358] RAX: ffffffffffffffda RBX: 00007f91ef416180 RCX: 00007f91ef19c799 [ 555.363210][T11358] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 555.363221][T11358] RBP: 00007f91effaa090 R08: 0000000000000005 R09: 0000000000000000 [ 555.363231][T11358] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001 [ 555.363240][T11358] R13: 00007f91ef416218 R14: 00007f91ef416180 R15: 00007ffdeab3c528 [ 555.363265][T11358] [ 555.698563][ T30] audit: type=1400 audit(1772561612.837:446): avc: denied { watch } for pid=11354 comm="syz.0.1273" path="/240/file1" dev="tmpfs" ino=1371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 555.753224][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 555.775176][ T30] audit: type=1400 audit(1772561612.837:447): avc: denied { watch_sb } for pid=11354 comm="syz.0.1273" path="/240/file1" dev="tmpfs" ino=1371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 555.881298][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 555.891395][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 555.903886][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 555.954547][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 556.000682][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 556.108550][ T5913] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 556.131506][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 556.149653][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 556.162730][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 556.271207][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 556.389366][T11363] lo speed is unknown, defaulting to 1000 [ 556.433296][ T5913] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 556.464716][ T5913] usb 5-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 556.627284][ T5913] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 556.674972][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.771370][ T5913] usb 5-1: Product: syz [ 556.928588][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 557.350882][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.358223][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.372162][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 557.508142][ T5913] usb 5-1: Manufacturer: syz [ 557.512894][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 557.600547][ T5913] usb 5-1: SerialNumber: syz [ 557.649073][ T5913] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 557.652662][T11369] NFSD: Failed to start, no listeners configured. [ 558.027415][T11362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.079483][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 558.231702][ T5807] Bluetooth: hci5: command tx timeout [ 558.307059][T11362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.375436][ T5913] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 558.438904][ T5913] usb 5-1: USB disconnect, device number 38 [ 558.710632][ T5864] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 559.311453][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 559.411183][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.570518][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.610633][ T5864] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 559.619703][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.791366][ T5864] usb 1-1: config 0 descriptor?? [ 560.041832][ T1708] net_ratelimit: 6 callbacks suppressed [ 560.041866][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 560.260021][ T5864] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 560.286659][ T5864] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 560.316246][T11363] chnl_net:caif_netlink_parms(): no params data found [ 560.323482][ T5807] Bluetooth: hci5: command tx timeout [ 560.474733][ T5864] ft260 0003:0403:6030.0013: chip code: 0000 0000 [ 560.741003][ T5864] ft260 0003:0403:6030.0013: failed to retrieve system status [ 560.773442][ T5864] ft260 0003:0403:6030.0013: probe with driver ft260 failed with error -5 [ 560.798667][ T30] audit: type=1400 audit(1772561618.287:448): avc: denied { name_bind } for pid=11413 comm="syz.4.1291" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 560.890513][ T30] audit: type=1400 audit(1772561618.317:449): avc: denied { node_bind } for pid=11413 comm="syz.4.1291" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 560.923373][ T29] usb 1-1: USB disconnect, device number 34 [ 560.939690][T11363] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.216479][T11421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.224178][T11363] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.231742][T11363] bridge_slave_0: entered allmulticast mode [ 561.241590][T11363] bridge_slave_0: entered promiscuous mode [ 561.348022][T11425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.576743][T11363] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.584097][T11363] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.596150][T11363] bridge_slave_1: entered allmulticast mode [ 561.611990][T11363] bridge_slave_1: entered promiscuous mode [ 561.842812][T11436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1294'. [ 562.110954][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 562.148812][T11441] fuse: Bad value for 'fd' [ 562.380481][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 562.388493][ C1] lec:lec_tx_timeout: lec0 [ 562.394824][ T5807] Bluetooth: hci5: command tx timeout [ 562.731626][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 562.784231][T11363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.836770][T11363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.165611][T11456] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 564.175674][T11456] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 564.186447][T11456] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 564.215920][ T30] audit: type=1400 audit(1772561621.687:450): avc: denied { firmware_load } for pid=11448 comm="syz.1.1299" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 564.294891][T11363] team0: Port device team_slave_0 added [ 564.349156][T11363] team0: Port device team_slave_1 added [ 564.360800][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 564.420744][T11466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=11466 comm=syz.1.1303 [ 564.440613][T11363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.442877][ T30] audit: type=1400 audit(1772561621.907:451): avc: denied { create } for pid=11461 comm="syz.1.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 564.447610][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.511610][ T5807] Bluetooth: hci5: command tx timeout [ 564.519506][T11363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.544981][T11363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.552323][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.578372][ T29] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 564.587423][T11363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.640547][ T5913] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 564.670611][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 564.812475][ T29] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 564.831716][ T5913] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 564.847834][ T29] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 564.860425][ T5913] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 564.918490][T11471] hugetlbfs: syz.2.1304 (11471): Using mlock ulimits for SHM_HUGETLB is obsolete [ 565.270350][ T29] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 565.280018][ T5913] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 565.289189][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.297339][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.321124][T11460] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 565.332435][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 565.362075][T11465] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 565.365378][T11363] hsr_slave_0: entered promiscuous mode [ 565.407266][T11363] hsr_slave_1: entered promiscuous mode [ 565.451441][T11363] debugfs: 'hsr0' already exists in 'hsr' [ 565.482815][T11363] Cannot create hsr debugfs directory [ 565.875663][ T5913] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 566.255365][ T29] usb 5-1: USB disconnect, device number 39 [ 566.471439][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 566.497140][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 566.900945][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 567.207926][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 567.340650][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 567.386036][ T5913] usb 1-1: USB disconnect, device number 35 [ 567.488712][T11363] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 567.542687][T11363] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 567.588953][T11363] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 567.720313][T11363] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 568.179396][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1313'. [ 568.360518][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 568.427832][T11519] syzkaller0: entered promiscuous mode [ 568.444009][T11519] syzkaller0: entered allmulticast mode [ 568.510698][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 568.648221][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 568.706258][T11523] syz_tun: entered allmulticast mode [ 568.725228][T11363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.735072][T11522] syz_tun: left allmulticast mode [ 568.763936][T11363] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.799269][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.806488][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.840601][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 568.856607][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.863757][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.052820][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 569.513052][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 570.000196][T11540] lo speed is unknown, defaulting to 1000 [ 570.817122][T11363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.490852][ T6331] net_ratelimit: 12 callbacks suppressed [ 571.490874][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 571.688087][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 572.196778][ T1708] Bluetooth: hci7: Frame reassembly failed (-84) [ 572.242457][T11363] veth0_vlan: entered promiscuous mode [ 572.328209][T11363] veth1_vlan: entered promiscuous mode [ 572.460563][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 572.523244][T11363] veth0_macvtap: entered promiscuous mode [ 572.564303][T11363] veth1_macvtap: entered promiscuous mode [ 572.617694][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 572.810918][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 573.030729][ T5807] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 573.051446][T11363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.301277][T11363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.330663][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 573.455971][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.478449][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.517949][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.554083][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.721071][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 574.716965][T11564] Bluetooth: hci7: command 0x1003 tx timeout [ 574.770657][ T5809] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 574.882966][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 575.211085][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'. [ 575.220079][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 575.229587][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 575.300674][ T1708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.361377][ T1708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.441770][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 575.483612][ T1708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.607193][ T1708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.074934][ T30] audit: type=1400 audit(1772561633.117:452): avc: denied { mounton } for pid=11363 comm="syz-executor" path="/root/syzkaller.kF4TV7/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 576.149310][ T30] audit: type=1400 audit(1772561633.117:453): avc: denied { mounton } for pid=11363 comm="syz-executor" path="/root/syzkaller.kF4TV7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 576.255959][ T30] audit: type=1400 audit(1772561633.117:454): avc: denied { mounton } for pid=11363 comm="syz-executor" path="/root/syzkaller.kF4TV7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=35114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 576.400106][ T30] audit: type=1400 audit(1772561633.637:455): avc: denied { mounton } for pid=11363 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 576.533730][ T1708] net_ratelimit: 6 callbacks suppressed [ 576.533748][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 576.639962][T11598] NFSD: Failed to start, no listeners configured. [ 576.914670][ T30] audit: type=1326 audit(1772561634.407:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.2.1332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe54a39c799 code=0x0 [ 577.251310][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 577.361331][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 577.502153][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 577.650869][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 577.770559][ T5913] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 577.778119][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 577.964889][ T5913] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 577.978958][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.035160][ T5913] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 578.069412][ T5913] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 578.109602][ T5913] usb 6-1: Manufacturer: syz [ 578.114394][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 578.148083][ T5913] usb 6-1: config 0 descriptor?? [ 578.232695][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 578.311200][ T5913] rc_core: IR keymap rc-hauppauge not found [ 578.323100][ T5913] Registered IR keymap rc-empty [ 578.362325][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 578.378773][ T5913] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 578.396426][T11615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.426783][ T5913] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input44 [ 578.446193][T11615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.500548][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 578.593359][T11631] fuse: Unknown parameter '' [ 579.537759][T11615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.560900][T11615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.594973][ T13] net_ratelimit: 17 callbacks suppressed [ 581.594992][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 581.608617][T11634] syz.5.1334 (11634): drop_caches: 2 [ 581.990611][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 582.400481][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 582.530301][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 582.656614][ T30] audit: type=1400 audit(1772561640.147:457): avc: denied { getopt } for pid=11652 comm="syz.1.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 582.660585][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 582.719393][ T29] usb 6-1: USB disconnect, device number 2 [ 582.851423][T11657] lo: entered allmulticast mode [ 582.933615][T11657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1344'. [ 582.960537][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 583.100656][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 583.106239][T11662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.119096][T11654] lo: left allmulticast mode [ 583.296323][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 583.448589][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 583.725651][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 583.959061][ T30] audit: type=1326 audit(1772561641.437:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11666 comm="syz.2.1349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe54a39c799 code=0x0 [ 585.110575][ T5918] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 585.342294][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 585.357687][ T5918] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 585.380628][ T5918] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 585.445325][T11694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1351'. [ 585.500773][T11696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1351'. [ 586.094139][T11696] Can't find ip_set type hash:ip,p [ 586.099577][T11694] Can't find ip_set type hash:ip,p [ 586.719976][ T13] net_ratelimit: 12 callbacks suppressed [ 586.719996][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 586.743263][ T5918] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 586.793706][ T5918] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 586.820238][ T5918] usb 5-1: config 0 interface 0 has no altsetting 0 [ 586.834413][ T5918] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 586.857406][ T5918] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 586.866918][ T5918] usb 5-1: Product: syz [ 586.889010][ T5918] usb 5-1: Manufacturer: syz [ 587.094945][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 587.125851][ T5918] usb 5-1: SerialNumber: syz [ 587.161758][ T5918] usb 5-1: config 0 descriptor?? [ 587.190288][ T5918] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 587.221246][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 587.340621][ T30] audit: type=1400 audit(1772561644.817:459): avc: denied { write } for pid=11706 comm="syz.5.1354" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 587.837720][ T5918] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 587.895445][T11717] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1357'. [ 588.250131][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 588.360580][ T30] audit: type=1400 audit(1772561645.457:460): avc: denied { mount } for pid=11708 comm="syz.1.1355" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 588.492170][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 588.499795][T10916] usb 5-1: USB disconnect, device number 40 [ 588.597195][T11721] 8021q: VLANs not supported on ipvlan0 [ 588.624824][T11721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 588.647411][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 588.875014][T10916] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 589.033151][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 589.043359][ T30] audit: type=1400 audit(1772561645.477:461): avc: denied { remount } for pid=11708 comm="syz.1.1355" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 589.066347][ T30] audit: type=1400 audit(1772561646.107:462): avc: denied { mount } for pid=11716 comm="syz.0.1357" name="/" dev="ramfs" ino=35458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 589.525210][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 589.558164][ T30] audit: type=1400 audit(1772561647.047:463): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 589.661110][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 589.866331][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 590.232131][ T30] audit: type=1400 audit(1772561647.727:464): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 590.652449][ T30] audit: type=1326 audit(1772561648.137:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.0.1361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91ef19c799 code=0x0 [ 591.650584][ T5863] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 591.727152][ T70] net_ratelimit: 7 callbacks suppressed [ 591.727170][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 592.543676][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 592.594301][ T5863] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 592.640833][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.674030][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 592.781211][ T5863] usb 6-1: Product: syz [ 592.880564][ T5863] usb 6-1: Manufacturer: syz [ 592.890603][ T5863] usb 6-1: SerialNumber: syz [ 592.899596][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 592.917005][ T5863] usb 6-1: config 0 descriptor?? [ 593.030762][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 593.262313][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 593.297939][ T5863] usb 6-1: ignoring: probably an ADSL modem [ 593.400581][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 593.511722][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 593.523462][T11746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.622387][T11746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.780568][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 593.880729][T10916] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 593.910754][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 593.922432][ T5863] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 593.945856][ T5863] usb 6-1: USB disconnect, device number 3 [ 594.041232][T10916] usb 5-1: device descriptor read/64, error -71 [ 594.280557][T10916] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 594.450613][T10916] usb 5-1: device descriptor read/64, error -71 [ 594.599633][T10916] usb usb5-port1: attempt power cycle [ 594.816730][T11784] syz_tun: entered allmulticast mode [ 594.839518][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1372'. [ 594.912916][T11784] syz_tun (unregistering): left allmulticast mode [ 594.981365][T10916] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 595.023125][T10916] usb 5-1: device descriptor read/8, error -71 [ 595.290661][T10916] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 595.321110][T10916] usb 5-1: device descriptor read/8, error -71 [ 595.445639][T10916] usb usb5-port1: unable to enumerate USB device [ 596.101533][ T5913] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 596.223728][T11802] FAULT_INJECTION: forcing a failure. [ 596.223728][T11802] name failslab, interval 1, probability 0, space 0, times 0 [ 596.263987][T11802] CPU: 1 UID: 0 PID: 11802 Comm: syz.2.1377 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.264017][T11802] Tainted: [L]=SOFTLOCKUP [ 596.264023][T11802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 596.264033][T11802] Call Trace: [ 596.264038][T11802] [ 596.264045][T11802] dump_stack_lvl+0x100/0x190 [ 596.264077][T11802] should_fail_ex.cold+0x5/0xa [ 596.264099][T11802] should_failslab+0xc2/0x120 [ 596.264127][T11802] __kmalloc_cache_noprof+0x7a/0x6f0 [ 596.264148][T11802] ? iopt_reserve_iova+0x12b/0x330 [ 596.264177][T11802] iopt_reserve_iova+0x12b/0x330 [ 596.264205][T11802] iommufd_test+0x120d/0x6610 [ 596.264233][T11802] ? __lock_acquire+0x4a5/0x2630 [ 596.264261][T11802] ? __pfx_iommufd_test+0x10/0x10 [ 596.264285][T11802] ? tomoyo_path_number_perm+0x188/0x580 [ 596.264312][T11802] ? find_held_lock+0x2b/0x80 [ 596.264332][T11802] ? __might_fault+0xc5/0x140 [ 596.264353][T11802] ? __might_fault+0xc5/0x140 [ 596.264385][T11802] iommufd_fops_ioctl+0x358/0x520 [ 596.264403][T11802] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 596.264422][T11802] ? __fget_files+0x215/0x3d0 [ 596.264438][T11802] ? hook_file_ioctl_common+0x146/0x410 [ 596.264468][T11802] ? selinux_file_ioctl+0x139/0x290 [ 596.264487][T11802] ? selinux_file_ioctl+0xb4/0x290 [ 596.264508][T11802] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 596.264526][T11802] __x64_sys_ioctl+0x18e/0x210 [ 596.264553][T11802] do_syscall_64+0x106/0xf80 [ 596.264571][T11802] ? clear_bhb_loop+0x40/0x90 [ 596.264592][T11802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.264609][T11802] RIP: 0033:0x7fe54a39c799 [ 596.264624][T11802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.264641][T11802] RSP: 002b:00007fe54b287028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.264658][T11802] RAX: ffffffffffffffda RBX: 00007fe54a615fa0 RCX: 00007fe54a39c799 [ 596.264669][T11802] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000009 [ 596.264679][T11802] RBP: 00007fe54b287090 R08: 0000000000000000 R09: 0000000000000000 [ 596.264688][T11802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.264697][T11802] R13: 00007fe54a616038 R14: 00007fe54a615fa0 R15: 00007ffd0f397078 [ 596.264721][T11802] [ 596.552358][ T5913] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 596.564263][ T5913] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 596.574124][ T5913] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 596.583159][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.594373][T11800] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 596.603183][ T5913] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 596.842554][ T78] net_ratelimit: 22 callbacks suppressed [ 596.842570][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 596.893528][T11804] syzkaller0: entered promiscuous mode [ 597.005678][T11804] syzkaller0: entered allmulticast mode [ 597.850812][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 597.972372][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 598.180978][ T5863] usb 1-1: USB disconnect, device number 36 [ 598.380650][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 598.510509][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 598.560661][T10916] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 598.620508][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 598.747388][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 598.947062][T10916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.962663][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 598.992849][T10916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.029387][T10916] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 599.077521][T10916] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 599.110557][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 599.112600][T10916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.168974][T10916] usb 3-1: config 0 descriptor?? [ 599.260593][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 599.421314][T11818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.443390][T11829] lo: entered allmulticast mode [ 599.449225][T11818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.488266][T11818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.523003][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1384'. [ 599.526207][T11818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.668740][T11828] lo: left allmulticast mode [ 599.761881][ T5918] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 600.109179][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'. [ 600.118525][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1386'. [ 600.629426][T11818] : rxe_newlink: already configured on veth0_vlan [ 600.653174][T10916] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 600.946619][ T30] audit: type=1400 audit(1772561658.437:466): avc: denied { write } for pid=11844 comm="syz.4.1387" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 601.259754][ T29] usb 3-1: USB disconnect, device number 43 [ 601.280521][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 601.287267][ T5918] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.300694][ T5918] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.310493][ T5918] usb 6-1: config 0 interface 0 has no altsetting 0 [ 601.319407][ T5918] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 601.332069][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.363291][ T5918] usb 6-1: config 0 descriptor?? [ 601.761321][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 601.863746][ T5918] hid (null): global environment stack underflow [ 601.893356][ T5918] nzxt-smart2 0003:1E71:2009.0015: global environment stack underflow [ 601.920641][ T5918] nzxt-smart2 0003:1E71:2009.0015: item 0 1 1 11 parsing failed [ 601.932978][ T36] net_ratelimit: 16 callbacks suppressed [ 601.932994][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 601.962183][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 601.971375][ T5918] nzxt-smart2 0003:1E71:2009.0015: probe with driver nzxt-smart2 failed with error -22 [ 601.990946][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 602.030507][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 602.059958][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.101699][T11852] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 602.110569][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 602.111564][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 602.157199][ T5918] usb 6-1: USB disconnect, device number 4 [ 602.160473][ T30] audit: type=1400 audit(1772561659.637:467): avc: denied { ioctl } for pid=11830 comm="syz.5.1385" path="socket:[35960]" dev="sockfs" ino=35960 ioctlcmd=0x6629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 602.240576][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 602.370599][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 602.941768][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 603.080940][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 603.180881][ T9] usb 5-1: USB disconnect, device number 45 [ 603.260627][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 603.380888][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 603.500977][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 603.692852][T11874] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 603.809839][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 604.522401][T11878] lo: entered allmulticast mode [ 604.598178][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1396'. [ 604.829036][T11877] lo: left allmulticast mode [ 605.557919][T11893] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1399'. [ 606.171475][ T6936] lec:lec_start_xmit: lec0:No lecd attached [ 606.851280][ T29] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 606.941160][ T70] net_ratelimit: 21 callbacks suppressed [ 606.941180][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 607.077122][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 607.123343][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 607.447768][ T29] usb 1-1: config 4 has an invalid interface number: 43 but max is 0 [ 607.485113][ T29] usb 1-1: config 4 has no interface number 0 [ 607.517496][ T29] usb 1-1: config 4 interface 43 has no altsetting 0 [ 607.550681][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 607.587284][ T29] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=3d.37 [ 607.627338][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.658544][ T29] usb 1-1: Product: syz [ 607.675782][ T29] usb 1-1: Manufacturer: syz [ 607.755807][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 607.776363][ T29] usb 1-1: SerialNumber: syz [ 607.881764][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 608.020579][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 608.026361][ T29] cx82310_eth 1-1:4.43: probe with driver cx82310_eth failed with error -22 [ 608.069155][ T29] cxacru 1-1:4.43: usbatm_usb_probe: bind failed: -19! [ 608.100215][ T29] usb 1-1: USB disconnect, device number 37 [ 608.150517][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 608.200650][ T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 608.284315][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 608.380087][ T30] audit: type=1400 audit(1772561665.867:468): avc: denied { map } for pid=11908 comm="syz.2.1404" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 608.406654][ T24] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 608.407651][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 608.426599][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.488085][ T24] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 608.520522][ T24] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 608.553909][ T24] usb 5-1: Manufacturer: syz [ 608.571277][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 608.595612][ T24] usb 5-1: config 0 descriptor?? [ 608.751436][ T24] rc_core: IR keymap rc-hauppauge not found [ 608.776346][ T24] Registered IR keymap rc-empty [ 608.819386][T11912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.838505][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 608.865674][T11912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.888219][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input46 [ 608.906906][T11912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.946123][T11912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.217566][ T24] usb 5-1: USB disconnect, device number 46 [ 610.627348][T11936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 611.350491][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 611.358559][ C1] lec:lec_tx_timeout: lec0 [ 611.630878][T10916] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 611.870550][T10916] usb 5-1: Using ep0 maxpacket: 16 [ 611.963312][T10916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.982807][T10916] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 612.455576][ T36] net_ratelimit: 11 callbacks suppressed [ 612.455598][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 612.553322][T10916] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 612.580519][T10916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.580531][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 613.110561][T10916] usb 5-1: config 0 descriptor?? [ 613.152580][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 613.153582][T10916] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 613.161577][T11966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.302045][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 613.310628][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 613.604919][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 613.693697][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1420'. [ 613.706557][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1420'. [ 614.051020][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 614.067282][ T24] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 614.076534][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 614.089156][ T24] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 614.101144][ T24] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 614.115278][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 614.124890][ T24] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 614.140647][ T24] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 614.149086][ T24] usb 6-1: Product: syz [ 614.183548][ T24] usb 6-1: Manufacturer: syz [ 614.345032][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 614.506499][ T24] usb 6-1: SerialNumber: syz [ 614.521198][ T24] usb 6-1: config 0 descriptor?? [ 614.547702][ T24] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 614.694427][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 614.721139][ T24] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 615.258884][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 615.269794][ T5863] usb 5-1: USB disconnect, device number 47 [ 615.850741][ T24] usb 6-1: USB disconnect, device number 5 [ 615.862088][T11990] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 615.880992][ T24] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 615.963346][T11990] bond2 (unregistering): Released all slaves [ 616.013830][T12002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 616.500543][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 617.080569][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 617.178671][T12012] NFSD: Failed to start, no listeners configured. [ 617.470293][T12018] lo: entered allmulticast mode [ 617.500645][ T70] net_ratelimit: 2 callbacks suppressed [ 617.500660][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 617.551716][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1432'. [ 617.803195][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 617.954181][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 617.988518][T12014] lo: left allmulticast mode [ 618.437529][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 618.560546][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 618.630557][ T5809] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 618.630623][T11564] Bluetooth: hci6: command 0x1003 tx timeout [ 618.670530][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 618.720913][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.727319][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.735787][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 618.765086][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 618.784607][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 619.091145][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 619.118202][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 619.137172][ T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 619.158044][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.241237][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 619.278758][ T24] usb 6-1: Product: syz [ 619.380636][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 619.415273][ T24] usb 6-1: Manufacturer: syz [ 619.441948][ T24] usb 6-1: SerialNumber: syz [ 619.492427][ T24] usb 6-1: config 0 descriptor?? [ 619.517761][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 619.530619][ T5863] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 619.555952][T12044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 619.751102][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 619.788606][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 619.839746][ T5863] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 619.867155][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.344790][ T24] gspca_sonixj: reg_r err -110 [ 620.374258][ T5863] usb 1-1: Product: syz [ 620.386748][ T24] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 620.391425][ T5863] usb 1-1: Manufacturer: syz [ 620.412670][ T5863] usb 1-1: SerialNumber: syz [ 620.430395][ T5863] usb 1-1: config 0 descriptor?? [ 620.448184][T12039] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 620.720758][ T5863] powermate: unknown product id 0240 [ 620.726058][ T5863] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 621.113016][ T5863] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input47 [ 621.173968][ C0] powermate: config urb returned -71 [ 621.179614][ C0] powermate: config urb returned -71 [ 621.185106][ C0] powermate: config urb returned -71 [ 621.190772][ C0] powermate: config urb returned -71 [ 621.205236][ T5863] usb 1-1: USB disconnect, device number 38 [ 621.211414][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 621.950602][T10916] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 622.240886][T10916] usb 1-1: Using ep0 maxpacket: 32 [ 622.304044][T10916] usb 1-1: config 0 has an invalid interface number: 90 but max is 0 [ 622.322240][T10916] usb 1-1: config 0 has no interface number 0 [ 622.347097][T10916] usb 1-1: config 0 interface 90 altsetting 6 endpoint 0x3 has an invalid bInterval 67, changing to 10 [ 622.415695][T10916] usb 1-1: config 0 interface 90 has no altsetting 0 [ 622.467514][T12070] NFSD: Failed to start, no listeners configured. [ 622.489312][T10916] usb 1-1: New USB device found, idVendor=66f8, idProduct=ab5c, bcdDevice=4f.2b [ 622.511271][T10916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.529953][ T36] net_ratelimit: 19 callbacks suppressed [ 622.529970][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 622.684805][ T24] usb 6-1: USB disconnect, device number 6 [ 622.692071][T10916] usb 1-1: Product: syz [ 622.905991][T10916] usb 1-1: Manufacturer: syz [ 622.930465][T10916] usb 1-1: SerialNumber: syz [ 622.983891][T10916] usb 1-1: config 0 descriptor?? [ 623.002502][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 623.402029][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 623.588502][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 623.720750][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 624.046208][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 624.080914][ T30] audit: type=1400 audit(1772561681.577:469): avc: denied { read } for pid=12065 comm="syz.0.1443" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 624.081067][ T24] usb 6-1: config 5 has an invalid interface number: 245 but max is 0 [ 624.132435][T12081] befs: (nbd0): No write support. Marking filesystem read-only [ 624.151104][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 624.183617][ T30] audit: type=1400 audit(1772561681.627:470): avc: denied { mounton } for pid=12065 comm="syz.0.1443" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 624.184511][T12084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 624.222338][ T24] usb 6-1: config 5 has no interface number 0 [ 624.238870][ T24] usb 6-1: config 5 interface 245 has no altsetting 0 [ 624.265067][ T24] usb 6-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=ba.d2 [ 624.276181][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.284304][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 624.292533][ T24] usb 6-1: Product: syz [ 624.296767][ T24] usb 6-1: Manufacturer: syz [ 624.303017][ T24] usb 6-1: SerialNumber: syz [ 624.310482][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 624.318537][ C1] lec:lec_tx_timeout: lec0 [ 624.418886][T12089] lo speed is unknown, defaulting to 1000 [ 624.539155][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 624.697032][ T24] gspca_main: mars-2.14.0 probing 093a:050f [ 624.863794][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 624.893820][ T24] usb 6-1: USB disconnect, device number 7 [ 624.928988][T10916] usb 1-1: USB disconnect, device number 39 [ 624.970616][ T29] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 625.025161][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 625.190640][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 625.198564][ T5809] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 625.210570][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 625.520160][ T29] usb 3-1: no configurations [ 625.546169][ T29] usb 3-1: can't read configurations, error -22 [ 625.711182][ T29] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 625.969555][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 626.030518][ T5918] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 626.120162][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 626.461958][ T24] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 626.470946][ T29] usb 3-1: no configurations [ 626.475609][ T29] usb 3-1: can't read configurations, error -22 [ 626.481996][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.493307][ T29] usb usb3-port1: attempt power cycle [ 626.500851][ T24] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 626.510945][ T24] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 626.520791][ T24] usb 6-1: Manufacturer: syz [ 626.528156][ T24] usb 6-1: config 0 descriptor?? [ 626.542219][ T5918] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 626.560544][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.584416][ T5918] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 626.598395][ T5918] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 626.609594][ T5918] usb 1-1: Manufacturer: syz [ 626.620484][ T24] rc_core: IR keymap rc-hauppauge not found [ 626.626386][ T24] Registered IR keymap rc-empty [ 626.640993][ T5918] usb 1-1: config 0 descriptor?? [ 626.649669][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 626.753224][T12100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.781364][T12100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.781957][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input48 [ 626.870789][ T29] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 626.872109][T12112] tmpfs: Unknown parameter 'smackfsroot' [ 626.892742][T12102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.923123][T12102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.932157][T12100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.940788][ T5918] rc_core: IR keymap rc-hauppauge not found [ 626.972035][T12100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.025717][T12102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.074992][T12102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.085553][ T5918] Registered IR keymap rc-empty [ 627.091436][ T5918] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 627.105000][ T5918] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input49 [ 627.118710][ T24] usb 6-1: USB disconnect, device number 8 [ 627.125018][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 627.133535][ T29] usb 3-1: no configurations [ 627.138132][ T29] usb 3-1: can't read configurations, error -22 [ 627.169039][ T5918] usb 1-1: USB disconnect, device number 40 [ 627.282406][ T29] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 627.322409][ T29] usb 3-1: device descriptor read/8, error -71 [ 627.544138][ T29] usb usb3-port1: unable to enumerate USB device [ 627.680511][ T36] net_ratelimit: 17 callbacks suppressed [ 628.148559][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 628.304456][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 628.406113][T12130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 628.451835][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 629.640938][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 629.755549][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 630.004189][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 630.324531][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 630.567115][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 631.894443][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 632.200509][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 632.228687][ T24] usb 5-1: no configurations [ 632.293057][T12168] lo speed is unknown, defaulting to 1000 [ 632.326773][ T24] usb 5-1: can't read configurations, error -22 [ 632.340921][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 632.790675][T12183] NFSD: Failed to start, no listeners configured. [ 632.851025][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 633.133678][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 633.149462][ T24] usb 5-1: no configurations [ 633.163816][ T24] usb 5-1: can't read configurations, error -22 [ 633.209575][ T24] usb usb5-port1: attempt power cycle [ 633.350783][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 633.473329][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 633.571258][ T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 633.615352][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 633.646194][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 633.661710][ T24] usb 5-1: no configurations [ 633.700813][ T24] usb 5-1: can't read configurations, error -22 [ 633.764691][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 633.854594][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 633.911441][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 634.140613][ T24] usb 5-1: device not accepting address 51, error -71 [ 634.148224][ T24] usb usb5-port1: unable to enumerate USB device [ 634.285002][T12199] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 634.330651][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 634.481386][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 634.600929][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 634.650733][ T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 634.892015][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 635.008660][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 635.085728][T12210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 635.098254][ T24] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 635.151585][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.228379][ T24] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 635.364413][ T24] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 635.401047][ T24] usb 5-1: Manufacturer: syz [ 635.454472][ T24] usb 5-1: config 0 descriptor?? [ 635.882627][T12197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.900548][ T24] rc_core: IR keymap rc-hauppauge not found [ 635.906461][ T24] Registered IR keymap rc-empty [ 635.942973][T12197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.100588][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 636.112994][T12197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.118807][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input50 [ 636.162438][T12197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.642556][T12197] syz.4.1475 (12197): drop_caches: 2 [ 636.905663][T12233] syz_tun: entered allmulticast mode [ 636.942162][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1482'. [ 637.021993][T12233] syz_tun (unregistering): left allmulticast mode [ 637.115848][ T6269] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 637.339184][ T6269] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 637.375428][ T6269] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.700524][ T6269] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 637.727395][ T6269] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 637.790833][ T6269] usb 6-1: Manufacturer: syz [ 637.822873][ T6269] usb 6-1: config 0 descriptor?? [ 638.261782][T12231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.276984][T12231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.290505][T12231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.329276][ T6269] rc_core: IR keymap rc-hauppauge not found [ 638.336724][T12231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.346354][ T6269] Registered IR keymap rc-empty [ 638.360392][ T6269] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 638.449424][ T6269] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input51 [ 638.461927][ T6331] net_ratelimit: 21 callbacks suppressed [ 638.461944][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 638.744379][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 638.904533][ T6269] usb 6-1: USB disconnect, device number 9 [ 638.998497][T12253] lo speed is unknown, defaulting to 1000 [ 639.114728][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 639.358103][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1487'. [ 639.402921][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 639.415228][T12257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1487'. [ 639.543983][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 639.683030][T12262] lo speed is unknown, defaulting to 1000 [ 639.710059][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 639.852769][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 640.010783][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 640.260372][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 640.400751][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 640.620578][ T6269] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 640.851863][ T6269] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 640.860379][ T6269] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.892356][ T6269] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 640.936978][ T6269] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 640.964187][ T6269] usb 6-1: Manufacturer: syz [ 641.003915][ T6269] usb 6-1: config 0 descriptor?? [ 641.155732][ T6269] rc_core: IR keymap rc-hauppauge not found [ 641.171481][ T6269] Registered IR keymap rc-empty [ 641.197086][ T6269] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 641.286534][ T6269] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input52 [ 641.315332][T12271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.360796][T12271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.883481][T12271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.901323][T12271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.920953][T12278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.988529][T12283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1493'. [ 642.570318][T12278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.339568][ T6269] usb 5-1: USB disconnect, device number 52 [ 643.511071][ T6331] net_ratelimit: 16 callbacks suppressed [ 643.511093][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 643.739397][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 643.834137][T12271] syz.5.1490 (12271): drop_caches: 2 [ 644.113806][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 644.312552][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 644.431457][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 644.849149][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 645.160867][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 645.339551][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 645.526903][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 645.694172][T12314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 645.742388][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 645.792837][T12317] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 646.125307][ T5863] usb 6-1: USB disconnect, device number 10 [ 646.402262][T12321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 647.003188][T12329] syzkaller0: entered promiscuous mode [ 647.020764][T12329] syzkaller0: entered allmulticast mode [ 647.099058][T12336] lo speed is unknown, defaulting to 1000 [ 647.200592][ T5863] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 647.413930][ T5863] usb 6-1: device descriptor read/64, error -71 [ 647.821011][ T5863] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 647.870515][ T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 647.963189][ T5863] usb 6-1: device descriptor read/64, error -71 [ 648.041368][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 648.053210][ T24] usb 5-1: no configurations [ 648.060637][T10916] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 648.080597][ T24] usb 5-1: can't read configurations, error -22 [ 648.088603][ T5863] usb usb6-port1: attempt power cycle [ 648.394099][T10916] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 648.444857][T10916] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 648.470539][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 648.480193][T10916] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 648.519950][T10916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.521322][ T1708] net_ratelimit: 18 callbacks suppressed [ 648.521335][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 648.560556][ T5863] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 648.592767][T12342] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 648.604499][T10916] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 648.611674][ T5863] usb 6-1: device descriptor read/8, error -71 [ 648.690731][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 648.713019][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 648.719463][ T24] usb 5-1: no configurations [ 648.738415][ T24] usb 5-1: can't read configurations, error -22 [ 648.772459][ T24] usb usb5-port1: attempt power cycle [ 648.800538][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 649.084980][ T5863] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 649.141027][T10916] usb 1-1: USB disconnect, device number 41 [ 649.161412][ T24] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 649.171337][ T5863] usb 6-1: device descriptor read/8, error -71 [ 649.280840][ T5863] usb usb6-port1: unable to enumerate USB device [ 649.309913][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 649.331797][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 649.337446][ T24] usb 5-1: no configurations [ 649.342274][ T24] usb 5-1: can't read configurations, error -22 [ 649.568647][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 649.680541][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 649.704744][ T24] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 650.074849][ T24] usb 5-1: device not accepting address 56, error -71 [ 650.100336][ T24] usb usb5-port1: unable to enumerate USB device [ 651.660553][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 651.832042][T12374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 651.871186][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 652.055738][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 652.230643][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 653.061246][T12380] NFSD: Failed to start, no listeners configured. [ 653.111511][ T5809] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 653.593702][ T5864] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 653.602115][T10515] net_ratelimit: 6 callbacks suppressed [ 653.602133][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 653.770537][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 653.822780][ T5864] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 653.856972][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.989872][ T5864] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 653.999422][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 654.030340][ T5864] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 654.066205][T12396] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 654.073350][ T5864] usb 6-1: Manufacturer: syz [ 654.099341][ T5864] usb 6-1: config 0 descriptor?? [ 654.131430][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 654.280594][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 654.290601][ T5864] rc_core: IR keymap rc-hauppauge not found [ 654.306223][ T5864] Registered IR keymap rc-empty [ 654.346412][ T5864] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 654.362894][T12388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.390562][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 654.672131][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 654.690969][T12388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.718719][T12388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.883854][ T5864] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input53 [ 654.902137][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 654.925069][T12388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.081853][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 655.241441][T11382] usb 6-1: USB disconnect, device number 15 [ 655.757311][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 656.110131][T12419] NFSD: Failed to start, no listeners configured. [ 657.442222][T12443] NFSD: Failed to start, no listeners configured. [ 658.658494][ T49] net_ratelimit: 11 callbacks suppressed [ 658.658515][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 658.831057][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 659.216208][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 659.417644][T12469] lo speed is unknown, defaulting to 1000 [ 659.430568][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 659.551796][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 659.620555][ T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 659.750088][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 659.860546][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 659.877075][ T24] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 659.958456][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.992345][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 660.004185][ T24] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 660.041580][ T24] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 660.074131][ T24] usb 1-1: Manufacturer: syz [ 660.140545][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 660.253126][ T24] usb 1-1: config 0 descriptor?? [ 660.260498][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 660.735092][T12472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.750506][ T24] rc_core: IR keymap rc-hauppauge not found [ 660.765115][T12472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.783183][ T24] Registered IR keymap rc-empty [ 660.804474][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 660.827319][T12472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.856902][T12472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.886322][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input54 [ 661.027201][ T24] usb 1-1: USB disconnect, device number 42 [ 661.860438][ T5864] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 662.502149][ T5864] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 662.552383][ T5864] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 662.671931][ T5864] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 662.760230][T12504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 662.925475][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.061438][T12492] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 663.071418][T12509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.080003][T12509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.081430][ T30] audit: type=1400 audit(1772561720.547:471): avc: denied { ioctl } for pid=12507 comm="syz.1.1551" path="socket:[37663]" dev="sockfs" ino=37663 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 663.102792][ T5864] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 663.200571][ T24] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 663.553579][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.630138][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.661515][ T6269] usb 6-1: USB disconnect, device number 16 [ 663.667548][ T1708] net_ratelimit: 19 callbacks suppressed [ 663.667564][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 663.745059][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 663.837382][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 663.915913][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 663.983645][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.000838][ T24] usb 1-1: config 0 descriptor?? [ 664.438815][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 664.473904][T12521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 664.826102][T12506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.868481][T12506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.934264][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 665.047031][T12506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.080969][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 665.087506][T12506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.202308][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 665.320601][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 665.457201][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 665.550563][ T5864] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 665.660755][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 666.282118][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 666.331849][ T5864] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 666.384863][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 666.397017][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 666.431999][ T5864] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 666.446686][ T5864] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 666.498277][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.498488][ T24] usb 1-1: USB disconnect, device number 43 [ 666.532128][T12536] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 666.550539][T11564] Bluetooth: hci6: command 0x1003 tx timeout [ 666.550558][ T5809] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 666.627577][ T5864] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 667.942911][ T9] usb 5-1: USB disconnect, device number 57 [ 668.309806][T12562] NFSD: Failed to start, no listeners configured. [ 668.921741][T12568] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1565'. [ 669.320638][ T49] net_ratelimit: 16 callbacks suppressed [ 669.322420][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 669.442805][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 669.570687][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 669.704238][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 669.830738][T10916] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 669.915179][ T6936] lec:lec_start_xmit: lec0:No lecd attached [ 670.065478][T10916] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 670.169261][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 670.216616][T10916] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 670.310113][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 670.344592][T10916] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 670.474696][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 670.576807][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 670.584499][T10916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.647640][T12570] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 670.682146][T10916] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 670.780933][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 671.335832][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 671.515643][ T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 671.543466][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.626953][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 671.725185][ T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 671.738338][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 671.777030][ T9] usb 3-1: Manufacturer: syz [ 671.802043][ T9] usb 3-1: config 0 descriptor?? [ 672.043589][T12580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.141083][T12594] siw: device registration error -23 [ 672.589324][T12580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.600582][ T9] rc_core: IR keymap rc-hauppauge not found [ 672.606563][ T9] Registered IR keymap rc-empty [ 672.642930][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 672.647432][T12580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.676919][T12580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.809161][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input55 [ 672.920264][ T9] usb 3-1: USB disconnect, device number 48 [ 673.648856][T12611] lo speed is unknown, defaulting to 1000 [ 673.708415][ T6269] usb 5-1: USB disconnect, device number 58 [ 673.920533][T10916] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 674.379305][ T78] net_ratelimit: 12 callbacks suppressed [ 674.379324][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 674.392760][T10916] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 674.445907][T10916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.476355][T10916] usb 6-1: Product: syz [ 674.725709][T10916] usb 6-1: Manufacturer: syz [ 674.750666][T10916] usb 6-1: SerialNumber: syz [ 675.065172][T10916] usb 6-1: config 0 descriptor?? [ 675.171313][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 675.280602][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 675.350458][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 675.358522][ C1] lec:lec_tx_timeout: lec0 [ 675.590609][T10916] usb 6-1: ignoring: probably an ADSL modem [ 675.700570][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 675.796519][T10916] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 675.803482][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 675.832878][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 675.860792][T10916] usb 6-1: USB disconnect, device number 17 [ 676.002215][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 676.040513][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.041815][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 676.197422][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 676.219955][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 676.712546][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 676.733712][ T9] usb 5-1: Manufacturer: syz [ 676.799919][ T9] usb 5-1: config 0 descriptor?? [ 676.851183][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 677.082178][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 677.105983][T12626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.144471][ T9] rc_core: IR keymap rc-hauppauge not found [ 677.201864][T10515] bond1: (slave bridge2): failed to get link speed/duplex [ 677.222644][ T9] Registered IR keymap rc-empty [ 677.226206][T12626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.870919][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 677.896073][T12626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.916503][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input56 [ 678.081873][T12650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.126640][T12626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.785334][T12626] syz.4.1580 (12626): drop_caches: 2 [ 678.859278][T12662] siw: device registration error -23 [ 679.422215][ T78] net_ratelimit: 9 callbacks suppressed [ 679.422230][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 679.555511][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 679.900647][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 680.050752][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 680.230286][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 680.237993][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.244404][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.252717][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 680.339910][T12673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.361599][T12673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.370565][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 680.534008][ T1708] bond1: (slave bridge2): failed to get link speed/duplex [ 681.020388][ T70] bond1: (slave bridge2): failed to get link speed/duplex [ 681.044888][T12673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.131432][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 681.340757][T12673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.403690][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 681.426828][T12675] NFSD: Failed to start, no listeners configured. [ 681.545853][T12673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.644075][T12673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.230529][T11564] Bluetooth: hci5: command 0x0406 tx timeout [ 682.401713][T12693] lo speed is unknown, defaulting to 1000 [ 682.780556][ T5871] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 683.040760][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 683.050873][ T5871] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 683.058479][ T5871] usb 3-1: can't read configurations, error -61 [ 683.550564][ T5871] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 684.485091][ T36] net_ratelimit: 12 callbacks suppressed [ 684.485126][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 684.611545][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 684.624025][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 684.822828][ T5871] usb 3-1: device descriptor read/all, error -71 [ 684.930184][T12717] siw: device registration error -23 [ 685.342443][ T5871] usb usb3-port1: attempt power cycle [ 685.350456][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 685.358495][ C1] lec:lec_tx_timeout: lec0 [ 685.600492][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 685.743830][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 685.912547][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 686.361014][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 686.502894][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 686.670920][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 686.750711][ T5871] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 686.813557][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 686.843968][ T5871] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 687.178251][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 687.221909][ T5871] usb 3-1: config 0 has no interface number 0 [ 687.254200][ T5871] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 687.277800][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.305916][ T5871] usb 3-1: Product: syz [ 687.321623][ T5871] usb 3-1: Manufacturer: syz [ 687.321623][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 687.321662][ T5871] usb 3-1: SerialNumber: syz [ 687.565238][ T5871] usb 3-1: config 0 descriptor?? [ 688.191711][ T5871] uvcvideo 3-1:0.31: Found Unit with invalid ID 0 [ 688.213144][ T5871] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 688.240497][ T5871] uvcvideo 3-1:0.31: No valid video chain found. [ 688.278002][T12739] lo speed is unknown, defaulting to 1000 [ 688.295686][ T5871] usb 3-1: USB disconnect, device number 51 [ 689.070578][T11382] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 689.111029][ T31] INFO: task syz.3.1245:11222 blocked for more than 143 seconds. [ 689.141198][ T31] Tainted: G L syzkaller #0 [ 689.180565][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 689.216086][ T31] task:syz.3.1245 state:D stack:28792 pid:11222 tgid:11213 ppid:5803 task_flags:0x400140 flags:0x00080002 [ 689.246326][T11382] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 689.258781][ T31] Call Trace: [ 689.283562][T12745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.296478][ T31] [ 689.301865][T11382] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 689.310703][ T31] __schedule+0xfee/0x6120 [ 689.334417][ T31] ? __lock_acquire+0x4a5/0x2630 [ 689.341098][T11382] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 689.351249][T12745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.359081][ T31] ? __pfx___schedule+0x10/0x10 [ 689.378690][ T31] ? find_held_lock+0x2b/0x80 [ 689.383033][T11382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.400523][ T31] ? schedule+0x2bf/0x390 [ 689.422171][T12745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.431548][ T31] schedule+0xdd/0x390 [ 689.443591][ T31] schedule_preempt_disabled+0x13/0x30 [ 689.459959][ T31] __mutex_lock+0xc9a/0x1b90 [ 689.475871][T12743] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 689.478840][ T31] ? do_raw_spin_lock+0x128/0x260 [ 689.492594][T12745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.516073][ T31] ? usbdev_open+0x1b6/0x870 [ 689.534705][T11382] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 689.540542][ T31] ? klist_put+0xcb/0x1d0 [ 689.553468][T12745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.574114][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 689.590494][ T31] ? _raw_spin_unlock+0x28/0x50 [ 689.610681][ T31] ? kobject_put+0xb9/0x640 [ 689.623817][T12745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.632460][ T31] ? __pfx_device_match_devt+0x10/0x10 [ 689.658333][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 689.888439][ T31] ? usbdev_open+0x1b6/0x870 [ 690.025677][ T31] usbdev_open+0x1b6/0x870 [ 690.060532][ T78] net_ratelimit: 13 callbacks suppressed [ 690.060549][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 690.090612][ T31] ? kobject_get_unless_zero+0x156/0x200 [ 690.133312][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 690.150667][ T31] ? chrdev_open+0x10b/0x6a0 [ 690.172574][T11382] usb 6-1: USB disconnect, device number 18 [ 690.180436][ T31] ? chrdev_open+0x10b/0x6a0 [ 690.199739][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 690.230444][ T31] chrdev_open+0x234/0x6a0 [ 690.237914][ T6269] usb 5-1: USB disconnect, device number 59 [ 690.270721][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 690.280065][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 690.309940][ T31] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 690.339941][ T31] do_dentry_open+0x6d8/0x1660 [ 690.372186][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 690.389645][ T31] vfs_open+0x82/0x3f0 [ 690.422925][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 690.435763][ T31] path_openat+0x208c/0x31a0 [ 690.449883][ T31] ? __pfx_path_openat+0x10/0x10 [ 690.468444][ T31] do_file_open+0x20e/0x430 [ 690.489282][ T31] ? __pfx_do_file_open+0x10/0x10 [ 690.511730][ T31] ? alloc_fd+0x476/0x790 [ 690.525103][ T31] ? do_getname+0x191/0x390 [ 690.544026][ T31] do_sys_openat2+0x10d/0x1e0 [ 690.548741][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 690.555816][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 690.589948][ T31] __x64_sys_openat+0x12d/0x210 [ 690.614464][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 690.637044][ T31] ? do_user_addr_fault+0x8d6/0x12f0 [ 690.678972][ T31] do_syscall_64+0x106/0xf80 [ 690.690493][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 690.704358][ T31] ? clear_bhb_loop+0x40/0x90 [ 690.727916][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.782424][ T31] RIP: 0033:0x7fd4db15cfce [ 690.807690][ T31] RSP: 002b:00007fd4dbfceb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 690.830536][ T6331] bond1: (slave bridge2): failed to get link speed/duplex [ 690.839914][ T31] RAX: ffffffffffffffda RBX: 00007fd4dbfcf6c0 RCX: 00007fd4db15cfce [ 690.874806][ T31] RDX: 0000000000103301 RSI: 00007fd4dbfcec00 RDI: ffffffffffffff9c [ 690.902405][ T31] RBP: 00007fd4dbfcec00 R08: 0000000000000000 R09: 0000000000000000 [ 690.940575][ T134] bond1: (slave bridge2): failed to get link speed/duplex [ 690.954346][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 690.979310][ T31] R13: 00007fd4db416218 R14: 00007fd4db416180 R15: 00007ffe0fb95568 [ 691.000481][ T31] [ 691.010198][ T31] [ 691.010198][ T31] Showing all locks held in the system: [ 691.080822][ T31] 6 locks held by kworker/0:1/10: [ 691.126700][ T31] 1 lock held by khungtaskd/31: [ 691.140508][ T31] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 691.160605][ T31] 2 locks held by getty/5567: [ 691.174872][ T31] #0: ffff8880347dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 691.205612][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 691.236527][ T31] 1 lock held by syz-executor/5790: [ 691.254780][ T31] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 691.284930][ T31] 1 lock held by syz.3.1245/11222: [ 691.302020][ T31] #0: ffff88802b3cf198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 691.333094][ T31] 3 locks held by syz.0.1604/12739: [ 691.354710][ T31] #0: ffffffff905f82f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 691.403254][ T31] #1: ffffffff90610c28 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 691.440446][ T31] #2: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 691.470636][ T31] 2 locks held by syz.2.1607/12749: [ 691.475855][ T31] #0: ffffffff8fa103e8 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xc2/0x2800 [ 691.510528][ T31] #1: ffffffff90610c28 (rtnl_mutex){+.+.}-{4:4}, at: ppp_ioctl+0x972/0x2800 [ 691.519342][ T31] [ 691.541441][ T31] ============================================= [ 691.541441][ T31] [ 691.541741][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 691.549875][ T31] NMI backtrace for cpu 0 [ 691.549890][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 691.549913][ T31] Tainted: [L]=SOFTLOCKUP [ 691.549918][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 691.549926][ T31] Call Trace: [ 691.549932][ T31] [ 691.549938][ T31] dump_stack_lvl+0x100/0x190 [ 691.549966][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 691.549983][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 691.550008][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 691.550032][ T31] sys_info+0x141/0x190 [ 691.550049][ T31] watchdog+0xd25/0x1050 [ 691.550076][ T31] ? __pfx_watchdog+0x10/0x10 [ 691.550096][ T31] ? __kthread_parkme+0x18c/0x230 [ 691.550119][ T31] ? kthread+0x13a/0x450 [ 691.550131][ T31] ? __pfx_watchdog+0x10/0x10 [ 691.550149][ T31] kthread+0x370/0x450 [ 691.550162][ T31] ? __pfx_kthread+0x10/0x10 [ 691.550177][ T31] ret_from_fork+0x754/0xd80 [ 691.550192][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 691.550209][ T31] ? __switch_to+0x7b4/0x1120 [ 691.550227][ T31] ? __pfx_kthread+0x10/0x10 [ 691.550243][ T31] ret_from_fork_asm+0x1a/0x30 [ 691.550270][ T31] [ 691.550276][ T31] Sending NMI from CPU 0 to CPUs 1: [ 691.682050][ C1] NMI backtrace for cpu 1 [ 691.682067][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.682085][ C1] Tainted: [L]=SOFTLOCKUP [ 691.682090][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 691.682097][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 691.682116][ C1] Code: 78 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 9f 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 691.682129][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 691.682141][ C1] RAX: 0000000003d4b59b RBX: ffff88801e6b24c0 RCX: ffffffff8b8fec75 [ 691.682150][ C1] RDX: 0000000000000000 RSI: ffffffff8de72ef9 RDI: ffffffff8c1af6a0 [ 691.682158][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795 [ 691.682166][ C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd6498 [ 691.682174][ C1] R13: 0000000000000001 R14: ffffffff90d98410 R15: 0000000000000000 [ 691.682182][ C1] FS: 0000000000000000(0000) GS:ffff888124445000(0000) knlGS:0000000000000000 [ 691.682196][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 691.682205][ C1] CR2: 00007fe2c7be82f8 CR3: 0000000033784000 CR4: 00000000003526f0 [ 691.682213][ C1] Call Trace: [ 691.682217][ C1] [ 691.682222][ C1] default_idle+0x9/0x10 [ 691.682236][ C1] default_idle_call+0x6c/0xb0 [ 691.682251][ C1] do_idle+0x35b/0x4b0 [ 691.682268][ C1] ? __pfx_do_idle+0x10/0x10 [ 691.682284][ C1] ? do_idle+0x2b8/0x4b0 [ 691.682308][ C1] cpu_startup_entry+0x4f/0x60 [ 691.682323][ C1] start_secondary+0x21d/0x2d0 [ 691.682342][ C1] ? __pfx_start_secondary+0x10/0x10 [ 691.682361][ C1] common_startup_64+0x13e/0x148 [ 691.682380][ C1] [ 691.690532][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 691.887574][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 691.894450][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 691.905125][ T31] Tainted: [L]=SOFTLOCKUP [ 691.909440][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 691.919486][ T31] Call Trace: [ 691.922754][ T31] [ 691.925660][ T31] dump_stack_lvl+0x100/0x190 [ 691.930320][ T31] vpanic+0x552/0x970 [ 691.934276][ T31] ? __pfx_vpanic+0x10/0x10 [ 691.938755][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 691.944888][ T31] panic+0xd1/0xe0 [ 691.948583][ T31] ? __pfx_panic+0x10/0x10 [ 691.952972][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 691.959120][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 691.965251][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 691.971379][ T31] ? watchdog.cold+0x198/0x1ca [ 691.976115][ T31] ? watchdog+0xd35/0x1050 [ 691.980548][ T31] watchdog.cold+0x1a9/0x1ca [ 691.985143][ T31] ? __pfx_watchdog+0x10/0x10 [ 691.989808][ T31] ? __kthread_parkme+0x18c/0x230 [ 691.994811][ T31] ? kthread+0x13a/0x450 [ 691.999029][ T31] ? __pfx_watchdog+0x10/0x10 [ 692.003687][ T31] kthread+0x370/0x450 [ 692.007730][ T31] ? __pfx_kthread+0x10/0x10 [ 692.012302][ T31] ret_from_fork+0x754/0xd80 [ 692.016880][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 692.021977][ T31] ? __switch_to+0x7b4/0x1120 [ 692.026630][ T31] ? __pfx_kthread+0x10/0x10 [ 692.031193][ T31] ret_from_fork_asm+0x1a/0x30 [ 692.035948][ T31] [ 692.039215][ T31] Kernel Offset: disabled [ 692.043512][ T31] Rebooting in 86400 seconds..