last executing test programs: 20.968515856s ago: executing program 3 (id=118): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80000000000a, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x10040) syz_emit_ethernet(0x6e, &(0x7f0000002600)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000040), 0x2, 0x8}}, 0x20) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="17", 0x1) wait4(0x0, &(0x7f00000024c0), 0x0, &(0x7f0000002500)) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r6, &(0x7f0000000000), 0x0) mount(0x0, 0x0, 0x0, 0x8000, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r10, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) close_range(r7, 0xffffffffffffffff, 0x0) 18.242575157s ago: executing program 3 (id=120): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x49) open_by_handle_at(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x2241c2) add_key(&(0x7f0000003100)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) 16.56780667s ago: executing program 3 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) (fail_nth: 2) 15.552335495s ago: executing program 3 (id=130): r0 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xc}, 0x1c) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) unlinkat(r2, &(0x7f0000000180)='./file0\x00', 0x0) io_setup(0x5, &(0x7f00000001c0)=0x0) io_pgetevents(r3, 0xe, 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x77359400}, 0x0) io_submit(r3, 0x1, &(0x7f0000000880)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, r1, 0x0, 0x0, 0x5, 0x0, 0x2}]) 15.241892718s ago: executing program 3 (id=131): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x2) prlimit64(r1, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000280)) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}, {@nodevmap}, {@version_L}, {@aname={'aname', 0x3d, '&+^'}}, {@uname={'uname', 0x3d, '&f]('}}, {@version_L}]}}) 15.226947239s ago: executing program 0 (id=132): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000000000008500000097000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff80b702000008000000b70300000000000085000000170000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0x7, 0x0, &(0x7f00000000c0)="e0b9545dd30a37", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) memfd_create(0x0, 0x1) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000111401e325bd7000fddbdf25080006"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x7f, &(0x7f0000000080)=""/127}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syz_tun\x00', 0x1}, 0x18) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYRESDEC=r1, @ANYRES8=r2, @ANYBLOB="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", @ANYBLOB="ff010000000000000000000000000001000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00fe8800000000000000000000000000011c001700002000"/216], 0x120}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) r9 = msgget$private(0x0, 0x31) msgsnd(r9, &(0x7f00000035c0)=ANY=[@ANYBLOB], 0x1b, 0x5f005e4c1fdd0237) msgctl$IPC_STAT(r9, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x5, 0x2, 0x7fffffff, 0x10000, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x81003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0xe193, 0x7fffffff, 0x9ea, 0x10, 0x40000, 0x0, 0x5, 0x746f, 0x6, 0xffffff81, 0x8, 0x5, 0x4, 0x7ffd]}) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x105900, 0x0) 10.078386627s ago: executing program 3 (id=141): keyctl$reject(0x13, 0x0, 0x800, 0x0, 0x0) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x4) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0x0, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) recvmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)}, 0x40000140) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYRESHEX], 0xa0}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000700)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x54, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x800, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x2, 0xc, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x7, 0xf989, "3138ee"}, @md5sig={0x13, 0x12, "6171cffc515318c1c852cc0ce8dbc955"}, @sack={0x5, 0x12, [0x1, 0x0, 0xfffffffa, 0x9fd]}, @md5sig={0x13, 0x12, "9829e5b8831b669841f72541c6efc910"}]}}}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1bf) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xb9dc, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x28, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9.161016368s ago: executing program 32 (id=141): keyctl$reject(0x13, 0x0, 0x800, 0x0, 0x0) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x4) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0x0, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) recvmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)}, 0x40000140) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYRESHEX], 0xa0}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000700)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x54, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x800, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x2, 0xc, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x7, 0xf989, "3138ee"}, @md5sig={0x13, 0x12, "6171cffc515318c1c852cc0ce8dbc955"}, @sack={0x5, 0x12, [0x1, 0x0, 0xfffffffa, 0x9fd]}, @md5sig={0x13, 0x12, "9829e5b8831b669841f72541c6efc910"}]}}}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1bf) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xb9dc, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x28, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9.152382921s ago: executing program 0 (id=143): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8152}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') linkat(r2, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x139) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x5) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x241, 0x81) faccessat2(r4, &(0x7f0000000180)='./file0\x00', 0x20, 0x2000) 9.014581344s ago: executing program 4 (id=146): syz_emit_vhci(0x0, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_notify(r0, &(0x7f0000000100)={0x0, 0x17}) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) eventfd2(0x0, 0x0) io_setup(0x85, &(0x7f0000000400)) ioctl$FS_IOC_SETFLAGS(r4, 0x40046f41, &(0x7f0000000040)=0x1f) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100000000000800034000000001140000001100010000000000000000000200000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$netlink(0x10, 0x3, 0x14) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 7.999877754s ago: executing program 1 (id=148): syz_open_procfs(0x0, &(0x7f00000003c0)='net/rt_acct\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x80, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x80}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x7, 0x40000043, 0x31435641, 0x8, 0x9, 0xfffffff3, 0x0, 0xfeedcafe, 0x2, 0x6, 0x1}}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) setsockopt$RDS_FREE_MR(r10, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r9, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_emit_vhci(&(0x7f0000002280)=ANY=[@ANYBLOB="040e04"], 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x1366) 7.867462018s ago: executing program 0 (id=149): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000080), &(0x7f0000000840)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000010c0)={{0x1, 0x1, 0x4a, r1}, './file0\x00'}) recvmsg$kcm(r2, &(0x7f0000002680)={&(0x7f0000001100)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002540)=[{&(0x7f0000001180)=""/113, 0x71}, {&(0x7f0000001200)=""/75, 0x4b}, {&(0x7f0000001280)=""/16, 0x10}, {&(0x7f00000012c0)=""/132, 0x84}, {&(0x7f0000001380)=""/187, 0xbb}, {&(0x7f00000026c0)=""/169, 0xa9}, {&(0x7f0000001500)=""/27, 0x1b}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x8, &(0x7f00000025c0)=""/169, 0xa9}, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000280)={[0xb, 0x100003, 0x0, 0x5, 0x5d9, 0x4, 0xc9, 0x5, 0x82, 0x2, 0x401, 0x7, 0x76, 0xea, 0x8, 0x3], 0x10000, 0x285f40}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, 0xffffffffffffffff, 0x1}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, 0xffffffffffffffff, 0x1}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x20, 0x31, 0xc, "8c1cc804f8a6a4d1ec378806"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, &(0x7f0000000d80)={0x14, &(0x7f0000000c40)={0x20, 0x9, 0xeb, {0xeb, 0x5, "f7f54043eadc5bd497d737928d172d3d41a2d219f8e2b784b488993861cdf5df6a590a4636d06bd4cece3bfd99696255a647cd3f52c3a7fe747471327094236b9d59ff77933ea93a5ea115cc1c7a7d91d54fda18bd9417f6f618b50c89d8967a6b3edb50f54728e5ca66e039cbe8af54b10fd45833745fd10a69713e392a03265f84e3bc6f808525bd2c7547c14349a9689504ad1bf9b2f9024fe27e9d182d27be4f4aa72d3c5529d92ae0976ba3d38d8dc77434a9017b5960e254b19b767ac2ffd81c2516b64aa9f0d44413bb77f3618a13f42503a134b36d3e8a842413522072bafc41afa921eb66"}}, &(0x7f0000000d40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}}, &(0x7f0000001040)={0x44, &(0x7f0000000dc0)={0x40, 0xf, 0x81, "bc36e58459132a7b15ed01a436a107fdff004e7324e198d73c5d8829310df39b994aff94f351ebd146b3083d611ed1089bbb592a80cb651329c5d80c740769ba3b13d6785b9dd9a2b7c75e32b960179fa927364984cd0804f1033ff841006b6969e45a17198e6be9c7ef5793d9a05c839e14a9a991570c56e29fc7e2753aefba65"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000f00)={0x20, 0x81, 0x3, "905fb4"}, &(0x7f0000000f40)={0x20, 0x82, 0x3, "1286d6"}, &(0x7f0000000f80)={0x20, 0x83, 0x1, "15"}, &(0x7f0000000fc0)={0x20, 0x84, 0x1, "c0"}, &(0x7f0000001000)={0x20, 0x85, 0x3, '\r4R'}}) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="40174d00000046dd"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r3, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x20, 0x31, 0x47, {0x47, 0xf, "ae3f4673f3f6cfecaf5b981fa31ad806d067fe78be7067c8f1576575be407b5287d951a4a7185312c14372e449340e893259b280a610f1504e24a726f8da444145d77127dc"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x20, 0xb}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000280)={0x20, 0x81, 0x1, "ee"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "77a9"}, &(0x7f0000000340)={0x20, 0x83, 0x2, "e1eb"}, &(0x7f0000000380)={0x20, 0x84, 0x3, "dcbcea"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "4db8d9"}}) syz_usb_control_io(r3, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x21, 0x79, {0x79, 0x24, "b2ee5419dc2b22b519261be2bc4dda606a59c0cf73c3feef00938343f947f443eb81b2e66b6c82c3c634d275700a8cdeef43256cb56a230154c2a356233e06a194984c25ba0a3ae7566c56ce28133bd7e164958830f0c3c3907461084a60dcd30853f20cb58d1d0063549a46f35a6855d92a4e14ab8e10"}}, &(0x7f0000000540)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "dd6705bb8b49c6a8c5bcd132d0461294afeaf80fded49b60f792335542bc45d7affaef54b7dc9cd5b873c7aa2c88a0b33ad93f5f53ebc14993b8f5b7680228f16ffc1294f2a4a53664d967"}}, &(0x7f00000005c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x8, 0x3, 0xffff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x0, 0x1, 0x100}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x4, 0x8, 0xcd, "224f5191", "d3293dfb"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x5, 0x5, 0x0, 0xab1b, 0x200}}}, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x0, 0x17, 0xc0, "07bce866b61049ff2dbb2686dd69496e62598b35a1610c09e38f08a0a0399b7e3d796d1606f792d577759a8bbbeba32e76b6a126182faf047970014e06a1c9539cc8df9a87b81c0eaf31c27be3aa43cd918bd01317ebce7a92aa7fba906f88d92be9ad37efd84c081bb5aecbab769e6252258ac4508d9a2eca66c3411d39e8253ad590772b1ecd4060195942fc99c12e6af1ca8aa176b5e8d5fa091c4d81d5314752881e645b21df6c2c64330d64d10fa69ec3411b66c7fdbe5a0a1da1b294cc"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x4, 0x10, [0xf000]}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000940)={0x40, 0xb, 0x2, "43de"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000009c0)={0x40, 0x13, 0x6}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "6c9d"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x101}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x7f}}) 7.208099052s ago: executing program 1 (id=150): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setrlimit(0x2, &(0x7f00000000c0)={0x9ee6, 0x5}) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f00000011c0)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x2f000000, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c005) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e3171f9736ec5b31348bd11c559d531fc5ad17bb24275fe9a24f69f4c0d44458071aff8d3c4783a7f1ccd3442264f6416fda9da7fe6f999f956700335e3e6a034413af8c4ba7c00"/195, 0xc3}, {&(0x7f0000000380)="248d7ac09ae9afb8954f66838ae5bb401e1c656014c4c8af25db88b25065cb5a4c7073b230eb916c6ff171fd78611ff70f30b9e77db814a1d43c7fa7a70c0df21e728ed51b836e0ce6f3faf0e4817093867621b5e0c03cf4638bc53de55de11380d10ae2775154c1069ae25d99ff710f4bbf7b5e76282c2df5a2d1f289179a74a84d8aceef5d869e05cc5117f25cd1e4d2461a95237c2fa3ba38e181e3f23a3cde974dfa75aecc3b2ce33369ad52580a6cd143f10ac7e783955969b8bd05a524f919a2fd9d3cbd055b5d2f7f00ca58f6b770492f471dc3b6b3b101d10f157ec9f68dac9b8d18cf8b", 0xbf}, {&(0x7f0000000240)="a3df552cfd633a6742d5c27a9fc4f4", 0xffffff53}], 0x3}, 0x4009800) 6.346839903s ago: executing program 4 (id=151): mmap(&(0x7f00003cb000/0x1000)=nil, 0x1000, 0xc, 0x50, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000900)={{&(0x7f00001eb000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000180)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}, 0x1}) 6.240464922s ago: executing program 4 (id=152): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000d40)={{r1, &(0x7f0000000300)='skcipher\x00', 0x0, 0x0, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x4, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740), 0x0, 0x10}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba06", 0x6, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0), 0x0, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80), 0x0, 0x32}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000006c0)={0x0, 0x0, 0xac1d, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7f, 0x9}) fcntl$lock(r0, 0x25, &(0x7f0000000600)={0x2, 0x0, 0x543117e1, 0x4}) r8 = socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mount$afs(&(0x7f00000000c0)=ANY=[@ANYBLOB='p'], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4080, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x11}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xd}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xe3d8}]}, 0x58}}, 0x0) 6.203580403s ago: executing program 1 (id=153): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000000000008500000097000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff80b702000008000000b70300000000000085000000170000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0x7, 0x0, &(0x7f00000000c0)="e0b9545dd30a37", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) memfd_create(0x0, 0x1) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000111401e325bd7000fddbdf25080006"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x7f, &(0x7f0000000080)=""/127}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syz_tun\x00', 0x1}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYRESDEC=r1, @ANYRES8=r2, @ANYBLOB="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", @ANYBLOB="ff010000000000000000000000000001000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00fe8800000000000000000000000000011c001700002000"/216], 0x120}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) r8 = msgget$private(0x0, 0x31) msgsnd(r8, &(0x7f00000035c0)=ANY=[@ANYBLOB], 0x1b, 0x5f005e4c1fdd0237) msgctl$IPC_STAT(r8, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x5, 0x2, 0x7fffffff, 0x10000, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x81003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0xe193, 0x7fffffff, 0x9ea, 0x10, 0x40000, 0x0, 0x5, 0x746f, 0x6, 0xffffff81, 0x8, 0x5, 0x4, 0x7ffd]}) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x105900, 0x0) 5.81877456s ago: executing program 2 (id=154): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000004f00007b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r3, 0x200, &(0x7f00000001c0)={&(0x7f00000002c0)="c94522e546f93f6dedf11f1509685636", 0x10}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 4.508098624s ago: executing program 2 (id=155): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0xab8cc7c5d91b29ea, 0x4) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect={0x800005}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESHEX=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0xffffffff) (fail_nth: 3) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_emit_ethernet(0x1e1, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "2701aa", 0x1ab, 0x84, 0x1, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, {[@routing={0x16, 0x2, 0x1, 0x6, 0x0, [@remote]}, @fragment={0x0, 0x0, 0xfa, 0x1, 0x0, 0x6, 0x68}, @hopopts={0x33, 0xc, '\x00', [@generic={0x1, 0x60, "4eb5b149b4a4f1d76f283ca08fa656b39c94d6755a3af4d394297128d989834ea131bef9c5abe479add737d0922fb3989810d88d1213d721bff3d17cfad47afe2a9663b35b8a24bcf2d7dcb09c30431ca9653ae30c59af6a3ae29d5b3e61c777"}]}, @hopopts={0x2b, 0x12, '\x00', [@hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x3, 0x10, 0x5, 0x8, [0x0, 0xd, 0x2, 0x9, 0x7, 0x2, 0x0, 0x9]}}, @generic={0xd, 0x27, "2f5f8a2186674fb889cb01067a65b1400eeecccd3bf59395f0370f4b8f3a34d2712a950d0b2ebb"}]}, @hopopts={0x1d, 0x2, '\x00', [@ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @mcast2}]}, @dstopts={0x3b, 0x3, '\x00', [@generic={0x7, 0x10, "5e206262a0e8a2c56d9ac422510b6fdf"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}], "a42efb14b7cb2f4f50675cbd74960bd5e70beb2fc8dc194f7cd69341e8686d6ee517121949f083a9eaebaa1ada9c64f2f7804ee71a2fd125a96b29"}}}}}, 0x0) 4.206054441s ago: executing program 0 (id=156): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x4, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x4e, 0xa, 0x2, "3258c5c0d651aa001b0000f4ff4000000000002000e926ba2800"}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x0, 0x384, 0xf0, 0x480, 0x20, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x1ff, 0x1}, {0x80}, {0x3, 0x0, 0x1}, 0x1, 0x10, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x2, 0x6}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f0000000080)) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000040)={0x60, 0x2, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4, 0x0, 0x0, 0x4, 0x8, 0x42, 0x10, 0x12}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)}], 0x1}}], 0x1, 0x40040) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x420400, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0x4bf6, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000008c0)={0xe, @meta={0x50353543, 0x4bec9d80, 0xb76b, 0x90aa, 0x1}}) 4.13865119s ago: executing program 4 (id=157): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) mount$9p_fd(0x0, 0x0, 0x0, 0x18082, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000010010c8013000c800ca3"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.215345263s ago: executing program 1 (id=158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x770d3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000100)='acl', &(0x7f0000000140)="96", 0x1) read(r6, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af83, &(0x7f0000000240)={0x1, 0x0, [{0x5000, 0x0, 0x0}]}) 2.68717562s ago: executing program 4 (id=159): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) fstat(r0, &(0x7f0000002980)) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0xab8cc7c5d91b29ea, 0x4) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect={0x800005}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESHEX=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0xffffffff) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_emit_ethernet(0x1e1, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "2701aa", 0x1ab, 0x84, 0x1, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, {[@routing={0x16, 0x2, 0x1, 0x6, 0x0, [@remote]}, @fragment={0x0, 0x0, 0xfa, 0x1, 0x0, 0x6, 0x68}, @hopopts={0x33, 0xc, '\x00', [@generic={0x1, 0x60, "4eb5b149b4a4f1d76f283ca08fa656b39c94d6755a3af4d394297128d989834ea131bef9c5abe479add737d0922fb3989810d88d1213d721bff3d17cfad47afe2a9663b35b8a24bcf2d7dcb09c30431ca9653ae30c59af6a3ae29d5b3e61c777"}]}, @hopopts={0x2b, 0x12, '\x00', [@hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x3, 0x10, 0x5, 0x8, [0x0, 0xd, 0x2, 0x9, 0x7, 0x2, 0x0, 0x9]}}, @generic={0xd, 0x27, "2f5f8a2186674fb889cb01067a65b1400eeecccd3bf59395f0370f4b8f3a34d2712a950d0b2ebb"}]}, @hopopts={0x1d, 0x2, '\x00', [@ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @mcast2}]}, @dstopts={0x3b, 0x3, '\x00', [@generic={0x7, 0x10, "5e206262a0e8a2c56d9ac422510b6fdf"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}], "a42efb14b7cb2f4f50675cbd74960bd5e70beb2fc8dc194f7cd69341e8686d6ee517121949f083a9eaebaa1ada9c64f2f7804ee71a2fd125a96b29"}}}}}, 0x0) 2.052235264s ago: executing program 1 (id=160): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x4000000}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1}, 0x6e) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x439, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffff952}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x88c4) (async) syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000011c0)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0xfffffdea}, 0x1, 0x0, 0x0, 0x801}, 0x4) (async) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xbecb) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 1.795830752s ago: executing program 1 (id=161): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r0, 0x4020aed2, &(0x7f0000000100)={0x2000, 0x1000}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x4) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="00214717", 0x4}], 0x1, 0x1, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '`\x00\x00\x00\x00\x00'}}}}}}}, 0x0) (fail_nth: 4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001000)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x1, 0x13, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x169, 0x2002, 0x7fff, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x1, 0x5, 0x6, 0xe, 0x300], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0x4, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x480dc}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x18, 0x3, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x6, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x6, 0x10}, 0xc) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000240)=[{&(0x7f0000000040)='d', 0x1}], 0x1, 0xf) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x21, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xce49, 0x0, 0x0, 0x0, 0xfc9f}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @map_fd={0x18, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0xc, 0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc}, @ringbuf_query, @exit]}, &(0x7f00000002c0)='GPL\x00', 0x8, 0xd2, &(0x7f00000004c0)=""/210, 0x41100, 0x0, '\x00', r6, @fallback=0x5, r5, 0x8, &(0x7f0000000300)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x5, 0x1, 0x80}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000840)=[0x1, r8, r9, r10, r11, r12, r13], &(0x7f0000000880)=[{0x1, 0x2, 0xc, 0x8}, {0x0, 0x2, 0xa}, {0x3, 0x1, 0x4, 0x6}, {0x3, 0x3, 0x7, 0x779ed5dfc4973647}, {0x2, 0x3, 0xb, 0x1}, {0x3, 0x3, 0x7, 0xb}], 0x10, 0x59}, 0x94) 1.77328565s ago: executing program 2 (id=162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0) (fail_nth: 4) 1.750280613s ago: executing program 4 (id=163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x57) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200001000000010001"], 0x20) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="80000000ffffffffffff0802110000010802110000000000000000000000004064000100050a0000"], 0x48) 1.614177194s ago: executing program 2 (id=164): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000004f00007b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) ptrace(0x10, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000001c0)={&(0x7f00000002c0)="c94522e546f93f6dedf11f1509685636", 0x10}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 1.194707036s ago: executing program 0 (id=165): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80000000000a, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x10040) syz_emit_ethernet(0x6e, &(0x7f0000002600)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000040), 0x2, 0x8}}, 0x20) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="17", 0x1) wait4(0x0, &(0x7f00000024c0), 0x0, &(0x7f0000002500)) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r6, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x8000, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 104.674347ms ago: executing program 0 (id=166): prctl$PR_SET_NAME(0xf, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000080), &(0x7f0000000840)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000010c0)={{0x1, 0x1, 0x4a, r1}, './file0\x00'}) recvmsg$kcm(r2, &(0x7f0000002680)={&(0x7f0000001100)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002540)=[{&(0x7f0000001180)=""/113, 0x71}, {&(0x7f0000001200)=""/75, 0x4b}, {&(0x7f0000001280)=""/16, 0x10}, {&(0x7f00000012c0)=""/132, 0x84}, {&(0x7f0000001380)=""/187, 0xbb}, {&(0x7f00000026c0)=""/169, 0xa9}, {&(0x7f0000001500)=""/27, 0x1b}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x8, &(0x7f00000025c0)=""/169, 0xa9}, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000280)={[0xb, 0x100003, 0x0, 0x5, 0x5d9, 0x4, 0xc9, 0x5, 0x82, 0x2, 0x401, 0x7, 0x76, 0xea, 0x8, 0x3], 0x10000, 0x285f40}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, 0xffffffffffffffff, 0x1}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, 0xffffffffffffffff, 0x1}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x20, 0x31, 0xc, "8c1cc804f8a6a4d1ec378806"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, &(0x7f0000000d80)={0x14, &(0x7f0000000c40)={0x20, 0x9, 0xeb, {0xeb, 0x5, "f7f54043eadc5bd497d737928d172d3d41a2d219f8e2b784b488993861cdf5df6a590a4636d06bd4cece3bfd99696255a647cd3f52c3a7fe747471327094236b9d59ff77933ea93a5ea115cc1c7a7d91d54fda18bd9417f6f618b50c89d8967a6b3edb50f54728e5ca66e039cbe8af54b10fd45833745fd10a69713e392a03265f84e3bc6f808525bd2c7547c14349a9689504ad1bf9b2f9024fe27e9d182d27be4f4aa72d3c5529d92ae0976ba3d38d8dc77434a9017b5960e254b19b767ac2ffd81c2516b64aa9f0d44413bb77f3618a13f42503a134b36d3e8a842413522072bafc41afa921eb66"}}, &(0x7f0000000d40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}}, &(0x7f0000001040)={0x44, &(0x7f0000000dc0)={0x40, 0xf, 0x81, "bc36e58459132a7b15ed01a436a107fdff004e7324e198d73c5d8829310df39b994aff94f351ebd146b3083d611ed1089bbb592a80cb651329c5d80c740769ba3b13d6785b9dd9a2b7c75e32b960179fa927364984cd0804f1033ff841006b6969e45a17198e6be9c7ef5793d9a05c839e14a9a991570c56e29fc7e2753aefba65"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000f00)={0x20, 0x81, 0x3, "905fb4"}, &(0x7f0000000f40)={0x20, 0x82, 0x3, "1286d6"}, &(0x7f0000000f80)={0x20, 0x83, 0x1, "15"}, &(0x7f0000000fc0)={0x20, 0x84, 0x1, "c0"}, &(0x7f0000001000)={0x20, 0x85, 0x3, '\r4R'}}) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="40174d00000046dd"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r3, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x20, 0x31, 0x47, {0x47, 0xf, "ae3f4673f3f6cfecaf5b981fa31ad806d067fe78be7067c8f1576575be407b5287d951a4a7185312c14372e449340e893259b280a610f1504e24a726f8da444145d77127dc"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x20, 0xb}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000280)={0x20, 0x81, 0x1, "ee"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "77a9"}, &(0x7f0000000340)={0x20, 0x83, 0x2, "e1eb"}, &(0x7f0000000380)={0x20, 0x84, 0x3, "dcbcea"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "4db8d9"}}) syz_usb_control_io(r3, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x21, 0x79, {0x79, 0x24, "b2ee5419dc2b22b519261be2bc4dda606a59c0cf73c3feef00938343f947f443eb81b2e66b6c82c3c634d275700a8cdeef43256cb56a230154c2a356233e06a194984c25ba0a3ae7566c56ce28133bd7e164958830f0c3c3907461084a60dcd30853f20cb58d1d0063549a46f35a6855d92a4e14ab8e10"}}, &(0x7f0000000540)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "dd6705bb8b49c6a8c5bcd132d0461294afeaf80fded49b60f792335542bc45d7affaef54b7dc9cd5b873c7aa2c88a0b33ad93f5f53ebc14993b8f5b7680228f16ffc1294f2a4a53664d967"}}, &(0x7f00000005c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x8, 0x3, 0xffff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x0, 0x1, 0x100}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x4, 0x8, 0xcd, "224f5191", "d3293dfb"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x5, 0x5, 0x0, 0xab1b, 0x200}}}, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x0, 0x17, 0xc0, "07bce866b61049ff2dbb2686dd69496e62598b35a1610c09e38f08a0a0399b7e3d796d1606f792d577759a8bbbeba32e76b6a126182faf047970014e06a1c9539cc8df9a87b81c0eaf31c27be3aa43cd918bd01317ebce7a92aa7fba906f88d92be9ad37efd84c081bb5aecbab769e6252258ac4508d9a2eca66c3411d39e8253ad590772b1ecd4060195942fc99c12e6af1ca8aa176b5e8d5fa091c4d81d5314752881e645b21df6c2c64330d64d10fa69ec3411b66c7fdbe5a0a1da1b294cc"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x4, 0x10, [0xf000]}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000940)={0x40, 0xb, 0x2, "43de"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000009c0)={0x40, 0x13, 0x6}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "6c9d"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x101}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x7f}}) 4.313659ms ago: executing program 2 (id=167): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000000000008500000097000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff80b702000008000000b70300000000000085000000170000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0x7, 0x0, &(0x7f00000000c0)="e0b9545dd30a37", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) memfd_create(0x0, 0x1) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000111401e325bd7000fddbdf25080006"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x7f, &(0x7f0000000080)=""/127}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syz_tun\x00', 0x1}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYRESDEC=r1, @ANYRES8=r2, @ANYBLOB="02b872031bc02f9fef2d15a25c24cdbb792629828fe1086bbbfbe4d1a3c81745c4aaf883ac8bc79b94cf5e1766b9cebd137ff74ba2c5e56965da94427d37cc46ce65d70a5e2a659e1efabb2011303364bd4e482b29c8eaadf047389ade3694cca9de0569eb56a241aff3b88969bf4e398243f7a1321baadedf8c4a56793276bf2ac44bd95d81439986cde5fd0b8998a240b5285deea3a32e47c169b0d2143c3158adee21efc062bfa3289e43e6e420a328c14aa6f1b9b5e501f100784791a0a305e04872cf04a61bf9291b2ad0936e39306e34e1236608052b2a1a2818fae383ca9af716964616ec3aa95cc55e4aafed7c30a17e734ac5c02024a2c9acb722c4870707f6294d72cb929d991acdbef65b528bef6d67237f2c2aa936f25ff928ea18dca9667508648607e1425b561facf3553f69fad06b250c2325182961853c3565c0528ff283b693e01e2eba5db324149c0797d51d0c0b6e2870e856ea2eb66312c905acb2fe15e623feea928908ad9b697500fe4552548fdecd95db1a0ce40116b136ffbea57567e1ab3c54b3a9ef1bf5a5b1c6c561c9e7a65dcfbb5395855e63ed8379226be1f1dddc14ec5ad9189a06ee2fb90256c3828d429cbd1bc597fa489e76a0c295ed467e26a4d1c1720a96fa02a8fe5120f4800a955c59febf3e0b3a4f89562f33ac905c2080db5e6783788494616c47dc1dc4ee16638c4a27dc2c67ea59f8ed32048ab0e0086de830816ba2252a2f8189c6e016bcb90919ca8e1050063b7bcf35c2b681b8778fbd5df10753586f5470592dc9060cd1f563b4845920c5be7983e188d9104ab2a10f6ca1de810da5bcaca5f5bcfbbe231054210b27cd0f0bb3964cacfa9b3e12457ab8e930893b4c948eba69d1e207d08d5aa04e724562f9ad8a0ceee95f3ce4fc94e9c9f7800efdd9c4a40fda4175eeba8c7fefbd80ccaf10f12a00e7e1627ee0eb86f943adab19ac410c18d2381576f223efa6c2790c571a0fa497727646cc067d69ff1a3e4040a9bb6d73ccd3c87d1e043832355b46db057f94ba7a4ef09267e396617fc062ac78f9d262f451c5d052ef9b99db2573b6512caa9cc0ec8d5a4a716aca05eeb2904ab2a317057cb15950fe88d4864beb97f93428a5c00a31e6899d8704be7e85e75fe2d73aeee19be1908aa0e1bba14a6f069b8746687362d1303f12a10189c24331c349a2a9fdb3145f59313129e58904ce091e71875a94d9f1ce4b7d5db3bc7d72d61578d7a3d231723fa2a2020c33a2c19df24071b2246226ad0794a3b1af5cca19b019110f77664681d01e2fb7d29df05c7b37eff870304c6db1938cc517a2cc1dfc992857cab8680ea2e90b0cb258cbaa57f33cd123a800fbd18a0f38790a9c6d6434753f0b21e612616b15cb753fff4e30d455780f1d30c8f35427db0d0ca067497c61d81eabe5fd68f5c56c43dbcfe4dbc43fd165b22a2c08359fca542cb9a7ef2c2a03894b7510086413a3645253e09fea952b20821bc3091fce88f3e9e91a28a9af55668be448db923e0d08dc17928f68970e617740f80e18655003b7b6e3b84b347ed6ef1c571c3f08ebe2bb3163c8d3528a0620fc8fda9cd44f10b98657d0fe8743139df2bc5c5cce64ef384ca899cbfa901b61eed030a9f55a7c88121bcbbc467d831ac6da3260b5687028e0aba289295cc11976b223aea03c5c8f4995513732ae1c80856e78d9609cd1ca3918c9f634666a0f3221f8d273475847e6851428d543a1b002a04943cf72312795a95b4d93b22407b5d0dc58ec24c84e04a35d0b16cb67c9a9b0b8b1d4f48a1efdcb68305ec356fe976bf7aca27086f01ddbfdaefd554858d519d2cbafab216f3c5d3f62a370cf90c8df0f22a353e30e0dc0546cbd5ea83f8754f63f7b1464f9697ed5a3f8a0e8ce6f7baa5a53a0ba80d6eaf583ba5cdeb367db91ea3ed80754e3607f7938c2d921608622212dba7c2d6dd47bcd4f04e3571e856361e8bfe70aeeaefc9109b9299c3b7ac01bdb544c4e1a24e287ac9671acec8eb1ec4b40c982239a61332fa94eb35ad97c33ea77aca1ec294d4b87dd712172a7e34c942a402b996806d991c6880d4fd1ebd68c1d1944a14e91a19a0798dc4fd4c3fbdea6e91ae5d9c685dafaa6c85d0a35edf47ecffc4145c26d5c0a196a8986ee0b10bfc1b8ab7fdb4d0487fcb3365b434477ec97573bfa659088287bbf0d395503b855c8519b75cf397f20fd4853a7a3e20329b6bddca092b5a2ae92b6a3294b25ed1893e25c3e95a9e5cc7bd9077ba81d1a89210461b2fa367b164ccdccd8706fc7977c8965b2ae3455200f08df701131b49205c0fcd38da97cc20d4f3169eb36c5920ccf0e0dbf11f97087ff1a28a532e9dca9d0241657ace66f440ee5170dfe29e33063e1a98c7a950d0db1a4faa7173c4ef78066dce596b206996a0b7619841ecd33dd05b4fda0d68efd6eb14d43b79ba5e3c68369678d1ca4647ac9ac2db93a7c5666ec3a1a8b31b56886ac7f7eb9565a2ffc35b1950d035e146ca38f6bea5664a7afa7e3cfecc91e238f1dac358f486d4f0b4dfdb70dfb20088121ae34a4e148b7d07005f099f7f338aee0060cc84a119dafd7b09da47c20d000e99dea735435504b6738ee2567c6b6488680823849b6669886ba49ab754c952589bf2c7d12a4a71fd0c9e358fad215e339c38413df4d889a656260ab8a9e78e522b23bc0ddd502411e3b35301a4c52d62e418c8e89a9a01a8f62797c6fa2af0e53106721474dd6124ef9b94f4ccf3eb3898f72619ee364074ed62d46d674c1758c36e4e5ef43a3dbe0e5551e588b27faf12e98473f9afba1b280824ca5bae51cf415ae2c7782afd1757ffa70464641a0f589c8080e86ca708acfc2c722a36155145e6bc9f91fdd529696e4c4b651126e461fc35562020693d9f52f56c93b40963600f8cab98999e87354d649d4832d57520d85c0c2fa8c591f02a68ba18fcf8882a401ea6f332b82889d36789f22e82e0a1e8bdff22431919029a64b3081303fce748c93f70b6e121861074d337100cc80cc04a46aaafce219355a6b817692231d8fc63c69a89f240f349bdfcc87e6cc8cc5943fe99493dfe2b0f1d7dfad02f5007a667aa71d8bfd58250c5e49eb7bb78afb2e81aa695237c548303566989d0a8cfafe39f81b6dc9b9fd0b8366e67da1e59e689978f5049fae6e8fd2e065db5963dd645dd94b6909ae71917bbd2cb900449a4898082053d4e8cc2ce1e08b5426b70288f1ec3eeaac1a164958d52f540650bc75a818f1a0432e7c2c97ca50bc1ee45fa4e12395e00b48d69605e5c7a9f1e37ab8946f9c4f1c51dbe1f2ed39fef70480c7bf3c18607894398ed7400a157c07015d57459e3060341eaa39d7b38f8bbe7508e14499d3d9756016706a54104eeb0404d4004616bc0fcf6f036d3bf3227bb471e5ec227b6ce709cf515eba2473292a57104d065776d4add917009c87d06a7639e9753adffa17d0d6599e96f5887582b2b0300eb512b7a2d182abdf100476b779412652882301a8a12a087b7cd6ce100ede8781b5d32c1aa89521dfcb9f53215e456e7a3622dbe49eaa1e323c0a9aef6ced067a66f96c27ee011d6d3b0d11abbb8fe6de33a1cda21c78b01e3fdeb6296326d551463982475d20cc96a4e13c34a265ecbbcc8129849a8423f24aae4c7da6e37c1e36928cca233bbfcae49e0691a630161e6ec49c4c4b28392fd9f381cc89d5460788ea485601b07aa25f2ada73cb577723f1c6f718e2618bea22d5ab81cb6be44a2dadcfa4b6e0abaaea474ee4cebd5d9a2e8a10e61844879b934530007533df797b9a6e8e9570e12e42a6182b15c7447989df140a26783ae8cb92eff5562b0da6cc7024bd1b06dacfd5c4fd0116a9bb9e20ce74bff004f3acab90d17a5be3ec2234a1595b1423a09b9e9a66944c788627a5c408c7f9751d08ac5865e76047da015918d3ccbc7d5720283c840169130b9277be1e798637ec9824c509402d66f93916f8eafed783114d29cbd9b5625c42431bff368ecbc4064a37897fa4ce1a5af05b7befb9577beafe4bae8cb0da802fe528e4041e46e16779cb28384e29af5069f35791c82e2bb48d5690f509bd751431b3a30191afd6dfcfa8afe74f1ce3481767204323afadb2470807354f62ee00c556758365aa9ba7559bcdc207783d5aadb68065f2d8067d869297c6f7c0b24b40f210d4fc65d57af7ab4aa776835a6674d9bdfebf43fd2cca748907f8d79ac4e18041d03a2d855aeb1dc1c801d517f0d25b309ee3c35d3fe6cf264542604705678e1cab29ad73ddc40ec8c4bda59a7fde9d7972e1dff911a5d816cf9ed0d581bafc71e9a9265a134da99dbf36b19a21c0a42f61f0fb3216fc9d9b7c828253b8815c17a18b28e0fe8e24f7dbe794eaddf7164719df23eca4d2e98babddea3d949112365f8d6476ad2708e59df89ee0fa95df950cf21f644ea286ddd4f3de0f8d830bc1f9ae41df4af36c0cb9593093c75a6a36eb5fb17b6c84b1e5e489b5089f159991a5dea8d29ffcf65484db32de0d3757e23fa7a169668bf3a25e68378f5cc97252cdb11a1236577913644fcd07b9d42b3a66d5ace078da2286be72cdfb7e573bd0d6e120cee84ea01f0ad363bce5f28e4fe5871ad93045336ca697be33b11f5c6b16b6284bf9d32cff27ba753fc18101fdab409a8fa21f6b26f4d985e91409beb184985a1ae2dc37c80c25cadd7c4e2a202f04b0002ae911a69fd5e06c38428f19ef51f4efdec28c6e16d7666e75ed23b673b5afc97b9d288a8c285f1a1182bc1e0e135441f4502a4f720b25c43eeeaae5031c0bbb97d5638ce7070ca9737253fe0f932a0bfd73688f1d015ad748a37cf5bfd131532d74bf45c21cb572d6e25aa0c4b623b7c5a40e308ab2a30ff9fa90884afc5993d1ebaa82055e5b61c4361c5c00868809e332b42cf0881788f94f20041afcddcf9f8ce76f1d22c4e1386d772dcb15ab8cb0218909d6da561612e5777ef4868ed316f055d56e6dc163813b6712b58f23c22ecb12f5731ed418e067a0c25defbda6d18c6bf2f7e76cc180b391d6fa111615864d6a139c7734eb5eedc7bc70c79686e457663fc0e3bf8ebffc8ffb5b5c8a0aec47abd9a775ecd13f94722dfdb3af34d5ade9d1b0761f6bd50409cee021288c8d8a65ec4831c3def9affb2f00ee0d65e6cd67f9ee43e1a77e3b60938f29761f08407322c398a12e6a18a1b4ee0ac541079a0fe4129f551259a5bb1d81e8b130e1516b9b2d5607926aec29747fe8a2c789af2fb90e74ef38a00b31f016af7307bad9d1487aa43f56f7a4cc284e1fead6ac6a0f8920cf97a50c051119b25cdb28c30c99a1c94db58b3ca3a3628c7c91181161066e928be3f52bac771c5d9c592ecf0c45d9b1a14ccf9ad81ea7b957f98a4e226d715eabae31e152b96e747801f4fd4ba0cf41c4ee2696aceef8aba6f18fefa9d328856a72b2429abe9d9d91967ed485767012239fa4814d4c75837536ba5020b3517165a89df09cff88e425fea80702ad108c26b6e0ecd701b40f7ab1cbacf9b059c6ce1bd7e8b7607fc75b08ef421d95731eb8215df5a95b8f983f2aa0091ae612f7a305da70f9319006e3f9a303940825bc780dcaff7c5b2fd330b12dcd09dcf7c48d711914270b3887d3299718b3fea2c534392e274af1340c226a0add1d65b850874db2c84aa3dbbb792be74a14fa2c8b7aa7e04988fad0eae4af089c82515cbe7ebf8b6e97446718b03457bc1f929020369adcf0bc34c119b6302a197a8f4b370d031106", @ANYBLOB="ff010000000000000000000000000001000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00fe8800000000000000000000000000011c001700002000"/216], 0x120}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) r8 = msgget$private(0x0, 0x31) msgsnd(r8, &(0x7f00000035c0)=ANY=[@ANYBLOB], 0x1b, 0x5f005e4c1fdd0237) msgctl$IPC_STAT(r8, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x5, 0x2, 0x7fffffff, 0x10000, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x81003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0xe193, 0x7fffffff, 0x9ea, 0x10, 0x40000, 0x0, 0x5, 0x746f, 0x6, 0xffffff81, 0x8, 0x5, 0x4, 0x7ffd]}) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x105900, 0x0) 0s ago: executing program 2 (id=168): keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504", @ANYRES8, @ANYRESDEC], 0x0) lstat(&(0x7f00000027c0)='./file0\x00', &(0x7f0000002800)) gettid() newfstatat(0xffffffffffffff9c, &(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0), 0x2000) read$FUSE(0xffffffffffffffff, &(0x7f0000002b40)={0x2020}, 0x2020) creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f00000019c0)={0xa, 0x4e20, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af", 0x32}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x58}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004b80)) syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000004cc0)={0xffffffffffffffff, &(0x7f0000004bc0)='\'\xb2.-!]\x00', 0x200000, &(0x7f0000004c00)={@_ha_fsid={[0x6, 0x8]}, {0x2, 0xd51b, 0x80000001}}, 0x9, &(0x7f0000004c40), &(0x7f0000004c80)=0x3}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000004d00)) newfstatat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) chown(&(0x7f00000003c0)='./file0\x00', r1, r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000004d40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) fcntl$setown(r4, 0x8, r3) getgroups(0x3, &(0x7f0000000180)=[0x0, 0x0, 0xee01]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b2c, &(0x7f0000000040)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r6) socket$inet(0xa, 0x801, 0x84) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. [ 70.306135][ T5782] cgroup: Unknown subsys name 'net' [ 70.545839][ T5782] cgroup: Unknown subsys name 'cpuset' [ 70.601858][ T5782] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.399988][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.400072][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.168178][ T5782] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.418513][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.441187][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.453019][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.454172][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.455661][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.456786][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.457827][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.462003][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.463886][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.468649][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.469391][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.470157][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.470518][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.472633][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.475031][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.476586][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.483174][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.489294][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.502483][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.503206][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.509634][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.510302][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.525242][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.540843][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.554866][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.335146][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 75.394684][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 75.437583][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 75.466959][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 75.474391][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 75.689678][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.690634][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.690961][ T5804] bridge_slave_0: entered allmulticast mode [ 75.694282][ T5804] bridge_slave_0: entered promiscuous mode [ 75.754464][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.754576][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.754736][ T5804] bridge_slave_1: entered allmulticast mode [ 75.756078][ T5804] bridge_slave_1: entered promiscuous mode [ 75.758655][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.758753][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.759022][ T5796] bridge_slave_0: entered allmulticast mode [ 75.760353][ T5796] bridge_slave_0: entered promiscuous mode [ 75.856518][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.856604][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.856740][ T5796] bridge_slave_1: entered allmulticast mode [ 75.858060][ T5796] bridge_slave_1: entered promiscuous mode [ 75.875813][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.875941][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.876090][ T5794] bridge_slave_0: entered allmulticast mode [ 75.879653][ T5794] bridge_slave_0: entered promiscuous mode [ 75.932563][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.932704][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.933211][ T5798] bridge_slave_0: entered allmulticast mode [ 75.934591][ T5798] bridge_slave_0: entered promiscuous mode [ 75.936173][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.936288][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.936744][ T5794] bridge_slave_1: entered allmulticast mode [ 75.938254][ T5794] bridge_slave_1: entered promiscuous mode [ 75.939135][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.939215][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.939477][ T5797] bridge_slave_0: entered allmulticast mode [ 75.940767][ T5797] bridge_slave_0: entered promiscuous mode [ 75.947544][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.968422][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.968551][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.968697][ T5798] bridge_slave_1: entered allmulticast mode [ 75.970983][ T5798] bridge_slave_1: entered promiscuous mode [ 75.995092][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.995215][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.995402][ T5797] bridge_slave_1: entered allmulticast mode [ 75.997784][ T5797] bridge_slave_1: entered promiscuous mode [ 76.003786][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.007408][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.089035][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.111782][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.153204][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.155842][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.158340][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.160525][ T5804] team0: Port device team_slave_0 added [ 76.207689][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.229083][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.230703][ T5804] team0: Port device team_slave_1 added [ 76.503627][ T5796] team0: Port device team_slave_0 added [ 76.514126][ T5801] Bluetooth: hci0: command tx timeout [ 76.522134][ T5801] Bluetooth: hci1: command tx timeout [ 76.569888][ T5796] team0: Port device team_slave_1 added [ 76.589017][ T5794] team0: Port device team_slave_0 added [ 76.601555][ T5801] Bluetooth: hci4: command tx timeout [ 76.601569][ T5807] Bluetooth: hci3: command tx timeout [ 76.601803][ T5808] Bluetooth: hci2: command tx timeout [ 76.639470][ T5798] team0: Port device team_slave_0 added [ 76.642418][ T5794] team0: Port device team_slave_1 added [ 76.645054][ T5797] team0: Port device team_slave_0 added [ 76.647574][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.647588][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.647611][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.673005][ T5798] team0: Port device team_slave_1 added [ 76.695726][ T5797] team0: Port device team_slave_1 added [ 76.696682][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.696694][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.696719][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.698103][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.698114][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.698137][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.770539][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.770555][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.770578][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.791584][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.791600][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.791623][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.828921][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.828938][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.828962][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.830433][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.830445][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.830468][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.833726][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.833740][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.833763][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.852143][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.852158][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.852182][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.872635][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.872650][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.872674][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.976648][ T5804] hsr_slave_0: entered promiscuous mode [ 76.978277][ T5804] hsr_slave_1: entered promiscuous mode [ 77.066947][ T5794] hsr_slave_0: entered promiscuous mode [ 77.068162][ T5794] hsr_slave_1: entered promiscuous mode [ 77.069265][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 77.069382][ T5794] Cannot create hsr debugfs directory [ 77.117257][ T5796] hsr_slave_0: entered promiscuous mode [ 77.118472][ T5796] hsr_slave_1: entered promiscuous mode [ 77.119634][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 77.119656][ T5796] Cannot create hsr debugfs directory [ 77.132985][ T5797] hsr_slave_0: entered promiscuous mode [ 77.134256][ T5797] hsr_slave_1: entered promiscuous mode [ 77.135092][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 77.135114][ T5797] Cannot create hsr debugfs directory [ 77.145427][ T5798] hsr_slave_0: entered promiscuous mode [ 77.146683][ T5798] hsr_slave_1: entered promiscuous mode [ 77.147876][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 77.147898][ T5798] Cannot create hsr debugfs directory [ 78.136590][ T5804] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.170416][ T5804] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.207517][ T5804] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.258408][ T5804] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.354449][ T5794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.397662][ T5794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.438881][ T5794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.489547][ T5794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.592795][ T5808] Bluetooth: hci1: command tx timeout [ 78.592803][ T5801] Bluetooth: hci0: command tx timeout [ 78.624989][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.669495][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.672398][ T5808] Bluetooth: hci4: command tx timeout [ 78.672427][ T5808] Bluetooth: hci2: command tx timeout [ 78.672444][ T5808] Bluetooth: hci3: command tx timeout [ 78.720529][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.773765][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.895064][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.943172][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.979748][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.034193][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.121943][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.150161][ T5797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.196514][ T5797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.228852][ T5797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.269024][ T5797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.338546][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.376594][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.381055][ T3831] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.383983][ T3831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.428263][ T3831] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.428389][ T3831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.480189][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.511774][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.511899][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.525463][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.559425][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.559555][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.628464][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.663009][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.680190][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.680317][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.737587][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.738460][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.790178][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.839374][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.846111][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.846334][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.901167][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.904264][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.976808][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.017262][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.018123][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.056972][ T3831] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.058434][ T3831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.135763][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.362539][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.430705][ T5804] veth0_vlan: entered promiscuous mode [ 80.528890][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.543291][ T5804] veth1_vlan: entered promiscuous mode [ 80.625542][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.676447][ T5801] Bluetooth: hci0: command tx timeout [ 80.676482][ T5801] Bluetooth: hci1: command tx timeout [ 80.728307][ T5804] veth0_macvtap: entered promiscuous mode [ 80.752497][ T5808] Bluetooth: hci3: command tx timeout [ 80.752534][ T5808] Bluetooth: hci2: command tx timeout [ 80.752549][ T5808] Bluetooth: hci4: command tx timeout [ 80.787369][ T5804] veth1_macvtap: entered promiscuous mode [ 80.847182][ T5796] veth0_vlan: entered promiscuous mode [ 80.884708][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.913544][ T5798] veth0_vlan: entered promiscuous mode [ 80.914432][ T5796] veth1_vlan: entered promiscuous mode [ 80.928835][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.962629][ T1010] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.965959][ T1010] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.967224][ T5798] veth1_vlan: entered promiscuous mode [ 80.977842][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.992425][ T1010] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.006781][ T1010] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.215103][ T5796] veth0_macvtap: entered promiscuous mode [ 81.249622][ T5796] veth1_macvtap: entered promiscuous mode [ 81.289692][ T5794] veth0_vlan: entered promiscuous mode [ 81.292118][ T5798] veth0_macvtap: entered promiscuous mode [ 81.313491][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.313512][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.350841][ T5798] veth1_macvtap: entered promiscuous mode [ 81.376279][ T5794] veth1_vlan: entered promiscuous mode [ 81.404922][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.405108][ T5797] veth0_vlan: entered promiscuous mode [ 81.431378][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.431395][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.435449][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.450765][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.475125][ T5797] veth1_vlan: entered promiscuous mode [ 81.494657][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.506696][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.516903][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.521994][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.540485][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.587342][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.590436][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.598106][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.623285][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.646806][ T9] cfg80211: failed to load regulatory.db [ 81.685407][ T5794] veth0_macvtap: entered promiscuous mode [ 81.819024][ T5919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.872622][ T5919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.875631][ T5919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.882346][ T5919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.987859][ T5794] veth1_macvtap: entered promiscuous mode [ 82.150036][ T5797] veth0_macvtap: entered promiscuous mode [ 82.167323][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.167353][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.204598][ T5797] veth1_macvtap: entered promiscuous mode [ 82.230516][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.233429][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.233448][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.287567][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.302428][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.302447][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.327076][ T1010] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.354139][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.354209][ T1010] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.368925][ T1010] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.378631][ T1010] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.384502][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.384521][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.436075][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.534205][ T1010] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.539152][ T1010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.541451][ T1010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.574361][ T1010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.754836][ T5801] Bluetooth: hci1: command tx timeout [ 82.754864][ T5801] Bluetooth: hci0: command tx timeout [ 82.841697][ T5808] Bluetooth: hci4: command tx timeout [ 82.841717][ T5801] Bluetooth: hci2: command tx timeout [ 82.841741][ T5801] Bluetooth: hci3: command tx timeout [ 83.725845][ T5888] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 83.902128][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.902139][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.949500][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 83.964678][ T5888] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 83.964696][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.964706][ T5888] usb 3-1: Product: syz [ 83.964713][ T5888] usb 3-1: Manufacturer: syz [ 83.964720][ T5888] usb 3-1: SerialNumber: syz [ 84.020060][ T5888] usb 3-1: config 0 descriptor?? [ 84.094619][ T5888] hub 3-1:0.0: bad descriptor, ignoring hub [ 84.094659][ T5888] hub 3-1:0.0: probe with driver hub failed with error -5 [ 84.195637][ T5888] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 84.289593][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.289612][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.392995][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.393015][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.529581][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.529602][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.716206][ T5888] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.912406][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 85.987550][ T5944] Zero length message leads to an empty skb [ 86.126690][ T5888] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 86.126747][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.591930][ T5888] usb 2-1: config 0 descriptor?? [ 86.806078][ T5878] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.918716][ T5888] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 87.333099][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 90.926147][ T5878] usb 4-1: unable to get BOS descriptor or descriptor too short [ 90.947092][ T5878] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 90.947128][ T5878] usb 4-1: can't read configurations, error -71 [ 91.671663][ T5888] usb 2-1: Detected FT232A [ 91.699384][ T5888] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 91.743395][ T5888] usb 2-1: USB disconnect, device number 2 [ 91.776034][ T5888] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 91.776850][ T5888] ftdi_sio 2-1:0.0: device disconnected [ 91.834004][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 92.060656][ T5964] ======================================================= [ 92.060656][ T5964] WARNING: The mand mount option has been deprecated and [ 92.060656][ T5964] and is ignored by this kernel. Remove the mand [ 92.060656][ T5964] option from the mount to silence this warning. [ 92.060656][ T5964] ======================================================= [ 92.116576][ T5959] option changes via remount are deprecated (pid=5957 comm=syz.3.13) [ 92.144844][ T5968] FAULT_INJECTION: forcing a failure. [ 92.144844][ T5968] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.144893][ T5968] CPU: 1 UID: 0 PID: 5968 Comm: syz.1.14 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 92.144919][ T5968] Tainted: [L]=SOFTLOCKUP [ 92.144926][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 92.144944][ T5968] Call Trace: [ 92.144952][ T5968] [ 92.144959][ T5968] dump_stack_lvl+0xe8/0x150 [ 92.144998][ T5968] should_fail_ex+0x46b/0x600 [ 92.145027][ T5968] _copy_from_user+0x2d/0xb0 [ 92.145055][ T5968] ___sys_sendmsg+0x1c6/0x360 [ 92.145082][ T5968] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.145135][ T5968] ? __fget_files+0x2a/0x420 [ 92.145158][ T5968] ? __fget_files+0x3a6/0x420 [ 92.145190][ T5968] __x64_sys_sendmsg+0x1c3/0x2a0 [ 92.145213][ T5968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 92.145243][ T5968] ? __pfx_ksys_write+0x10/0x10 [ 92.145279][ T5968] do_syscall_64+0x14d/0xf80 [ 92.145298][ T5968] ? trace_irq_disable+0x3b/0x150 [ 92.145320][ T5968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.145338][ T5968] ? clear_bhb_loop+0x40/0x90 [ 92.145368][ T5968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.145386][ T5968] RIP: 0033:0x7ff7372bc799 [ 92.145408][ T5968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.145423][ T5968] RSP: 002b:00007ff7354ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.145443][ T5968] RAX: ffffffffffffffda RBX: 00007ff737536090 RCX: 00007ff7372bc799 [ 92.145457][ T5968] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000008 [ 92.145468][ T5968] RBP: 00007ff7354ed090 R08: 0000000000000000 R09: 0000000000000000 [ 92.145480][ T5968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.145491][ T5968] R13: 00007ff737536128 R14: 00007ff737536090 R15: 00007ffff1ec90a8 [ 92.145521][ T5968] [ 92.241583][ T5888] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 92.460352][ T31] usb 3-1: USB disconnect, device number 2 [ 92.465275][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 92.468998][ T5888] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 92.469026][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.469045][ T5888] usb 5-1: Product: syz [ 92.469058][ T5888] usb 5-1: Manufacturer: syz [ 92.469072][ T5888] usb 5-1: SerialNumber: syz [ 92.544921][ T5888] usb 5-1: config 0 descriptor?? [ 92.568438][ T5888] hub 5-1:0.0: bad descriptor, ignoring hub [ 92.568471][ T5888] hub 5-1:0.0: probe with driver hub failed with error -5 [ 92.622153][ T5888] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 92.818670][ T5974] netlink: 'syz.0.17': attribute type 5 has an invalid length. [ 93.031474][ T5799] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.112822][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.141572][ T5888] input: failed to attach handler mousedev to device input6, error: -5 [ 93.191566][ T5799] usb 4-1: Using ep0 maxpacket: 32 [ 93.207388][ T5799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 93.207421][ T5799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 93.239494][ T5799] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 93.239523][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.239543][ T5799] usb 4-1: Product: syz [ 93.239556][ T5799] usb 4-1: Manufacturer: syz [ 93.239570][ T5799] usb 4-1: SerialNumber: syz [ 93.263515][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 93.268130][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.268162][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 93.268211][ T31] usb 3-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 93.268232][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.272966][ T5888] usb 5-1: USB disconnect, device number 2 [ 93.390767][ T5979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19'. [ 93.434167][ T5799] usb 4-1: config 0 descriptor?? [ 93.478318][ T31] usb 3-1: config 0 descriptor?? [ 93.500094][ T5799] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 93.681437][ T5973] warning: `syz.3.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.681839][ T5973] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.686392][ T1143] usb 4-1: Failed to submit usb control message: -71 [ 93.686428][ T1143] usb 4-1: unable to send the bmi data to the device: -71 [ 93.686444][ T1143] usb 4-1: unable to get target info from device [ 93.686468][ T1143] usb 4-1: could not get target info (-71) [ 93.687398][ T1143] usb 4-1: could not probe fw (-71) [ 93.731383][ T5799] usb 4-1: USB disconnect, device number 4 [ 93.936873][ T5991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.938122][ T5991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.989050][ T5966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.005414][ T5966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.052592][ T5975] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.214514][ T5966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.215029][ T5966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.231442][ T5975] usb 2-1: Using ep0 maxpacket: 8 [ 94.254149][ T5975] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 94.259990][ T5975] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 94.260232][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.260253][ T5975] usb 2-1: Product: syz [ 94.260267][ T5975] usb 2-1: Manufacturer: syz [ 94.260281][ T5975] usb 2-1: SerialNumber: syz [ 94.339566][ T5975] usb 2-1: config 0 descriptor?? [ 94.387099][ T5975] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 94.387169][ T5975] usb 2-1: setting power ON [ 94.393689][ T5975] dvb-usb: bulk message failed: -22 (2/0) [ 94.476752][ T6001] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.500160][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.624224][ T5975] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 94.634987][ T5975] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 94.635141][ T5975] usb 2-1: media controller created [ 94.692519][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 94.712110][ T10] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 94.712140][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.715663][ T31] ortek 0003:05A4:1700.0001: unknown main item tag 0x0 [ 94.715705][ T31] ortek 0003:05A4:1700.0001: unknown main item tag 0x0 [ 94.715730][ T31] ortek 0003:05A4:1700.0001: unknown main item tag 0x0 [ 94.715754][ T31] ortek 0003:05A4:1700.0001: unknown main item tag 0x0 [ 94.715780][ T31] ortek 0003:05A4:1700.0001: unknown main item tag 0x0 [ 94.715804][ T31] ortek 0003:05A4:1700.0001: unknown main item tag 0x0 [ 94.715830][ T31] ortek 0003:05A4:1700.0001: unknown main item tag 0x0 [ 94.715864][ T31] ortek 0003:05A4:1700.0001: unknown main item tag 0x0 [ 94.715889][ T31] ortek 0003:05A4:1700.0001: unknown main item tag 0x0 [ 94.715915][ T31] ortek 0003:05A4:1700.0001: unknown main item tag 0x0 [ 94.798757][ T5975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.831544][ T10] usb 5-1: config 0 descriptor?? [ 94.836804][ T10] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 94.851775][ T31] ortek 0003:05A4:1700.0001: hidraw0: USB HID v0.04 Device [HID 05a4:1700] on usb-dummy_hcd.2-1/input0 [ 94.959357][ T5975] usb 2-1: selecting invalid altsetting 6 [ 94.959392][ T5975] usb 2-1: digital interface selection failed (-22) [ 94.959411][ T5975] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 94.964608][ T5975] usb 2-1: setting power OFF [ 94.964721][ T5975] dvb-usb: bulk message failed: -22 (2/0) [ 94.964746][ T5975] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 94.964758][ T5975] (NULL device *): no alternate interface [ 95.018252][ T5888] usb 3-1: USB disconnect, device number 3 [ 95.082130][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23'. [ 95.170237][ T5975] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 95.227441][ T5975] usb 2-1: USB disconnect, device number 3 [ 95.295819][ T10] usb 5-1: Detected FT232A [ 95.340156][ T6009] fido_id[6009]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 95.370721][ T10] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 95.396459][ T10] usb 5-1: USB disconnect, device number 3 [ 95.431651][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 95.438457][ T10] ftdi_sio 5-1:0.0: device disconnected [ 97.654232][ T6036] syz.1.33 uses obsolete (PF_INET,SOCK_PACKET) [ 98.104367][ T6034] binder: 6032:6034 unknown command 0 [ 98.104387][ T6034] binder: 6032:6034 ioctl c0306201 2000000001c0 returned -22 [ 98.228917][ T6042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.370292][ T6048] sock: sock_timestamping_bind_phc: sock not bind to device [ 98.404100][ T6049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.457408][ T6049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.484869][ T6049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.490191][ T6049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.893217][ T5877] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.021507][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.042363][ T5877] usb 1-1: Using ep0 maxpacket: 16 [ 99.048457][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.048489][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 99.048529][ T5877] usb 1-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 99.048549][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.101211][ T5877] usb 1-1: config 0 descriptor?? [ 99.171351][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 99.175540][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 99.175571][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 99.202591][ T43] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 99.202680][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.202700][ T43] usb 2-1: Product: syz [ 99.202714][ T43] usb 2-1: Manufacturer: syz [ 99.202728][ T43] usb 2-1: SerialNumber: syz [ 99.300910][ T43] usb 2-1: config 0 descriptor?? [ 99.534058][ T43] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 99.580755][ T6054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.583220][ T6054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.589620][ T6054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.590112][ T6054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.644235][ T89] usb 2-1: Failed to submit usb control message: -71 [ 99.644270][ T89] usb 2-1: unable to send the bmi data to the device: -71 [ 99.645293][ T89] usb 2-1: unable to get target info from device [ 99.645309][ T89] usb 2-1: could not get target info (-71) [ 99.654580][ T89] usb 2-1: could not probe fw (-71) [ 100.291663][ T5975] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.479018][ T6054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.489757][ T5975] usb 3-1: Using ep0 maxpacket: 32 [ 100.499267][ T5975] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 100.499687][ T5975] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 100.499735][ T5975] usb 3-1: config 0 interface 0 has no altsetting 0 [ 100.511524][ T6054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.543143][ T5975] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 100.543170][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.543188][ T5975] usb 3-1: Product: syz [ 100.543260][ T5975] usb 3-1: Manufacturer: syz [ 100.543273][ T5975] usb 3-1: SerialNumber: syz [ 100.590438][ T43] usb 2-1: USB disconnect, device number 4 [ 100.660075][ T5975] usb 3-1: config 0 descriptor?? [ 100.661025][ T6066] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 100.841398][ T5888] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.881408][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 100.947520][ T5877] hid_parser_main: 28 callbacks suppressed [ 100.947544][ T5877] ortek 0003:05A4:1700.0002: unknown main item tag 0x0 [ 100.947575][ T5877] ortek 0003:05A4:1700.0002: unknown main item tag 0x0 [ 100.947600][ T5877] ortek 0003:05A4:1700.0002: unknown main item tag 0x0 [ 100.947681][ T5877] ortek 0003:05A4:1700.0002: unknown main item tag 0x0 [ 100.947707][ T5877] ortek 0003:05A4:1700.0002: unknown main item tag 0x0 [ 100.947732][ T5877] ortek 0003:05A4:1700.0002: unknown main item tag 0x0 [ 100.947759][ T5877] ortek 0003:05A4:1700.0002: unknown main item tag 0x0 [ 100.947831][ T5877] ortek 0003:05A4:1700.0002: unknown main item tag 0x0 [ 100.947857][ T5877] ortek 0003:05A4:1700.0002: unknown main item tag 0x0 [ 100.947882][ T5877] ortek 0003:05A4:1700.0002: unknown main item tag 0x0 [ 100.991382][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 100.994197][ T5888] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.994224][ T5888] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 100.994245][ T5888] usb 5-1: config 0 interface 0 has no altsetting 0 [ 100.999153][ T5888] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 100.999181][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.999199][ T5888] usb 5-1: Product: syz [ 100.999213][ T5888] usb 5-1: Manufacturer: syz [ 100.999226][ T5888] usb 5-1: SerialNumber: syz [ 101.009891][ T5888] usb 5-1: config 0 descriptor?? [ 101.052637][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 101.054671][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 101.054707][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 101.057381][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 101.057407][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.057426][ T10] usb 4-1: Product: syz [ 101.057439][ T10] usb 4-1: Manufacturer: syz [ 101.057451][ T10] usb 4-1: SerialNumber: syz [ 101.157866][ T5975] gs_usb 3-1:0.0: Configuring for 5 interfaces [ 101.200380][ T5877] ortek 0003:05A4:1700.0002: hidraw0: USB HID v0.04 Device [HID 05a4:1700] on usb-dummy_hcd.0-1/input0 [ 101.244725][ T10] usb 4-1: config 0 descriptor?? [ 101.251191][ T5877] usb 1-1: USB disconnect, device number 2 [ 101.330170][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 101.330203][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 101.462917][ T6079] fido_id[6079]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 101.541475][ T5888] gs_usb 5-1:0.0: Configuring for 5 interfaces [ 101.676318][ T5878] IPVS: starting estimator thread 0... [ 101.731582][ T5975] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EREMOTEIO) [ 101.762337][ T6084] IPVS: using max 10 ests per chain, 24000 per kthread [ 102.332127][ T6085] comedi comedi0: Minor 5 could not be opened [ 102.681790][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 102.683135][ T10] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 102.683859][ T10] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 102.683871][ T10] em28xx 4-1:0.0: No AC97 audio processor [ 102.831731][ T5888] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 1 (-EREMOTEIO) [ 102.872208][ T10] usb 4-1: USB disconnect, device number 5 [ 102.874372][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 102.936983][ T10] em28xx 4-1:0.0: Freeing device [ 102.950908][ T5975] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 103.067626][ T5975] usb 3-1: USB disconnect, device number 4 [ 103.126997][ T5888] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 103.288163][ T6094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.294457][ T43] usb 5-1: USB disconnect, device number 4 [ 103.365802][ T6095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.387493][ T6094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.409030][ T6094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.325801][ T5870] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 105.770767][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 106.195728][ T5870] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 106.195759][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.195779][ T5870] usb 3-1: Product: syz [ 106.195793][ T5870] usb 3-1: Manufacturer: syz [ 106.195808][ T5870] usb 3-1: SerialNumber: syz [ 106.271614][ T5870] usb 3-1: config 0 descriptor?? [ 106.556224][ T5870] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 106.690217][ T6138] misc userio: No port type given on /dev/userio [ 106.781807][ T5870] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 106.905466][ T6145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.946144][ T6146] 9p: Bad value for 'wfdno' [ 106.985414][ T6147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.019867][ T6145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.043725][ T6145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.364131][ T6155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.67'. [ 107.573833][ T6157] fuse: Unknown parameter 'fIs%|ŒFEe' [ 107.583723][ T6157] fuse: Unknown parameter 'fd}0xffffffffffffffff' [ 109.556522][ T5888] usb 3-1: USB disconnect, device number 5 [ 109.767483][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 112.684281][ T6195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.78'. [ 115.804313][ T5888] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.071394][ T43] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.116661][ T5888] usb 1-1: device descriptor read/all, error -71 [ 116.233951][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 116.238681][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.238713][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.238734][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 116.238775][ T43] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 116.238806][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.266242][ T43] usb 5-1: config 0 descriptor?? [ 116.579641][ T5870] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 117.167358][ T6241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.90'. [ 117.302061][ T43] hid_parser_main: 28 callbacks suppressed [ 117.302083][ T43] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 117.302111][ T43] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 117.302135][ T43] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 117.302160][ T43] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 117.302183][ T43] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 117.307681][ T43] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 117.465350][ T5870] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 117.465381][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.465400][ T5870] usb 3-1: Product: syz [ 117.465412][ T5870] usb 3-1: Manufacturer: syz [ 117.465426][ T5870] usb 3-1: SerialNumber: syz [ 117.526592][ T5870] usb 3-1: config 0 descriptor?? [ 117.537475][ T6246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'. [ 117.577331][ T43] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 117.577671][ T43] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 117.620677][ T6239] random: crng reseeded on system resumption [ 117.754495][ T5870] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 117.961705][ T5870] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 120.667304][ T808] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 120.667797][ T808] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 120.703522][ T808] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 121.122998][ T43] usb 3-1: USB disconnect, device number 6 [ 122.125305][ T6290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.103'. [ 122.289673][ T5990] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 122.449503][ T5990] usb 5-1: device reset changed ep0 maxpacket size! [ 122.531160][ T6295] FAULT_INJECTION: forcing a failure. [ 122.531160][ T6295] name failslab, interval 1, probability 0, space 0, times 1 [ 122.531236][ T6295] CPU: 0 UID: 0 PID: 6295 Comm: syz.0.104 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 122.531260][ T6295] Tainted: [L]=SOFTLOCKUP [ 122.531266][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 122.531277][ T6295] Call Trace: [ 122.531285][ T6295] [ 122.531293][ T6295] dump_stack_lvl+0xe8/0x150 [ 122.531332][ T6295] should_fail_ex+0x46b/0x600 [ 122.531361][ T6295] should_failslab+0xa8/0x100 [ 122.531381][ T6295] __kmalloc_noprof+0xdf/0x7b0 [ 122.531398][ T6295] ? kfree+0x4d/0x6c0 [ 122.531413][ T6295] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 122.531429][ T6295] tomoyo_realpath_from_path+0xe3/0x5d0 [ 122.531441][ T6295] ? kmem_cache_free+0x185/0x6b0 [ 122.531456][ T6295] tomoyo_mount_permission+0x918/0x9d0 [ 122.531470][ T6295] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 122.531482][ T6295] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 122.531520][ T6295] security_sb_mount+0xe4/0x320 [ 122.531536][ T6295] path_mount+0xbc/0x10e0 [ 122.531548][ T6295] ? user_path_at+0xd4/0x160 [ 122.531565][ T6295] ? user_path_at+0xd4/0x160 [ 122.531579][ T6295] __se_sys_mount+0x31d/0x420 [ 122.531595][ T6295] ? __pfx___se_sys_mount+0x10/0x10 [ 122.531611][ T6295] ? __x64_sys_mount+0x20/0xc0 [ 122.531624][ T6295] do_syscall_64+0x14d/0xf80 [ 122.531635][ T6295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.531646][ T6295] ? clear_bhb_loop+0x40/0x90 [ 122.531658][ T6295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.531668][ T6295] RIP: 0033:0x7fe3b6d4c799 [ 122.531683][ T6295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.531695][ T6295] RSP: 002b:00007fe3b4f7d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 122.531709][ T6295] RAX: ffffffffffffffda RBX: 00007fe3b6fc6090 RCX: 00007fe3b6d4c799 [ 122.531716][ T6295] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000140 [ 122.531722][ T6295] RBP: 00007fe3b4f7d090 R08: 0000000000000000 R09: 0000000000000000 [ 122.531728][ T6295] R10: 0000000002000802 R11: 0000000000000246 R12: 0000000000000002 [ 122.531734][ T6295] R13: 00007fe3b6fc6128 R14: 00007fe3b6fc6090 R15: 00007ffe25822958 [ 122.531749][ T6295] [ 122.531824][ T6295] ERROR: Out of memory at tomoyo_realpath_from_path. [ 122.821384][ T10] usb 5-1: USB disconnect, device number 5 [ 124.081395][ T5990] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 124.243941][ T5990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 124.246570][ T5990] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 124.246597][ T5990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.246616][ T5990] usb 1-1: Product: syz [ 124.246629][ T5990] usb 1-1: Manufacturer: syz [ 124.246642][ T5990] usb 1-1: SerialNumber: syz [ 124.323759][ T5990] usb 1-1: config 0 descriptor?? [ 124.337341][ T5990] hub 1-1:0.0: bad descriptor, ignoring hub [ 124.337378][ T5990] hub 1-1:0.0: probe with driver hub failed with error -5 [ 124.358575][ T5990] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 124.451393][ T5877] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.606639][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 124.617321][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.617352][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.617373][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 124.617413][ T5877] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 124.617436][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.675881][ T6315] netlink: 88 bytes leftover after parsing attributes in process `syz.4.113'. [ 124.677326][ T6315] tipc: Can't bind to reserved service type 2 [ 124.745366][ T5877] usb 2-1: config 0 descriptor?? [ 124.881763][ T5990] input: failed to attach handler mousedev to device input8, error: -5 [ 124.988947][ T6321] input: syz0 as /devices/virtual/input/input9 [ 125.025723][ T6324] 9p: Bad value for 'rfdno' [ 125.030575][ T6319] mkiss: ax0: crc mode is auto. [ 125.084229][ T5990] usb 1-1: USB disconnect, device number 5 [ 125.178658][ T5877] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 125.178693][ T5877] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 125.178718][ T5877] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 125.178743][ T5877] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 125.178767][ T5877] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 125.219175][ T5870] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 125.253827][ T5877] input: HID 0955:7214 Haptics as /devices/virtual/input/input10 [ 125.315238][ T5877] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 125.315428][ T5877] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 125.371401][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 125.373701][ T5870] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.374914][ T5870] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32 [ 125.400553][ T5870] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 125.402980][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.403003][ T5870] usb 3-1: Product: syz [ 125.403018][ T5870] usb 3-1: Manufacturer: syz [ 125.403031][ T5870] usb 3-1: SerialNumber: syz [ 125.420224][ T6328] random: crng reseeded on system resumption [ 125.450952][ T6330] misc userio: No port type given on /dev/userio [ 125.530346][ T6325] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 125.696581][ T5975] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 125.696983][ T5975] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 125.697301][ T5975] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 125.714709][ T5960] usb 2-1: USB disconnect, device number 5 [ 125.849080][ T6321] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 125.974447][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 128.421803][ T5870] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 128.421880][ T5870] usb 3-1: MIDIStreaming interface descriptor not found [ 128.423090][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 128.456832][ T10] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 128.456861][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.456880][ T10] usb 1-1: Product: syz [ 128.456893][ T10] usb 1-1: Manufacturer: syz [ 128.456907][ T10] usb 1-1: SerialNumber: syz [ 128.507908][ T10] usb 1-1: config 0 descriptor?? [ 128.519599][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 128.519638][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 128.547111][ T10] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 128.607524][ T6346] netlink: 'syz.3.120': attribute type 4 has an invalid length. [ 128.607546][ T6346] netlink: 152 bytes leftover after parsing attributes in process `syz.3.120'. [ 128.657821][ T6346] .`: renamed from bond0 (while UP) [ 129.814943][ T5870] usb 3-1: USB disconnect, device number 7 [ 129.874726][ T5878] usb 1-1: USB disconnect, device number 6 [ 130.068394][ T6361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.090812][ T6361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.093949][ T6361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.135137][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.168656][ T6359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.474058][ T5870] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 130.932623][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 130.940266][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 130.940299][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 130.973755][ T5870] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 130.973785][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.973808][ T5870] usb 3-1: Product: syz [ 130.973821][ T5870] usb 3-1: Manufacturer: syz [ 130.973835][ T5870] usb 3-1: SerialNumber: syz [ 131.149985][ T5870] usb 3-1: config 0 descriptor?? [ 131.198457][ T5870] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 131.271458][ T5990] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 131.352447][ T5878] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 131.421372][ T5990] usb 5-1: Using ep0 maxpacket: 8 [ 131.427800][ T5990] usb 5-1: config 5 has an invalid interface number: 187 but max is 0 [ 131.427825][ T5990] usb 5-1: config 5 has an invalid descriptor of length 24, skipping remainder of the config [ 131.427843][ T5990] usb 5-1: config 5 has no interface number 0 [ 131.427930][ T5990] usb 5-1: config 5 interface 187 altsetting 12 endpoint 0x3 has invalid maxpacket 72, setting to 64 [ 131.427945][ T5990] usb 5-1: config 5 interface 187 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.427964][ T5990] usb 5-1: config 5 interface 187 has no altsetting 0 [ 131.443977][ T5990] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0122, bcdDevice=f0.2d [ 131.444005][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.444240][ T5990] usb 5-1: Product: syz [ 131.444254][ T5990] usb 5-1: Manufacturer: syz [ 131.444267][ T5990] usb 5-1: SerialNumber: syz [ 131.495580][ T43] usb 3-1: USB disconnect, device number 8 [ 131.495682][ T742] usb 3-1: Failed to submit usb control message: -71 [ 131.495709][ T742] usb 3-1: unable to send the bmi data to the device: -71 [ 131.495725][ T742] usb 3-1: unable to get target info from device [ 131.495739][ T742] usb 3-1: could not get target info (-71) [ 131.495889][ T742] usb 3-1: could not probe fw (-71) [ 131.581373][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 131.583646][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.583676][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.583697][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 131.583735][ T5878] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 131.583756][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.656792][ T5878] usb 2-1: config 0 descriptor?? [ 131.697805][ T6369] capability: warning: `syz.4.128' uses 32-bit capabilities (legacy support in use) [ 131.698779][ T6369] netlink: 'syz.4.128': attribute type 1 has an invalid length. [ 131.921397][ T5975] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 132.072052][ T5975] usb 1-1: Using ep0 maxpacket: 16 [ 132.076237][ T5975] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 132.076257][ T5975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 132.080218][ T5975] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 132.080287][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.080298][ T5975] usb 1-1: Product: syz [ 132.080305][ T5975] usb 1-1: Manufacturer: syz [ 132.080313][ T5975] usb 1-1: SerialNumber: syz [ 132.100933][ T5975] usb 1-1: config 0 descriptor?? [ 132.156924][ T5878] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 132.156960][ T5878] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 132.156984][ T5878] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 132.157007][ T5878] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 132.157030][ T5878] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 132.198813][ T5975] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 132.201905][ T5975] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 132.235798][ T5878] input: HID 0955:7214 Haptics as /devices/virtual/input/input12 [ 132.296685][ T5878] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 132.297143][ T5878] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 132.326822][ T6375] random: crng reseeded on system resumption [ 133.334813][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.334897][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.415683][ T10] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 133.415835][ T10] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 133.415923][ T10] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 133.416009][ T10] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 133.569243][ T6383] netlink: 'syz.0.132': attribute type 6 has an invalid length. [ 133.602067][ T5960] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 133.691806][ T5975] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 133.692371][ T5975] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 133.692855][ T5975] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 133.692871][ T5975] em28xx 1-1:0.0: No AC97 audio processor [ 133.866435][ T6394] netlink: 56 bytes leftover after parsing attributes in process `syz.2.134'. [ 133.906725][ T6390] comedi comedi0: Minor 5 could not be opened [ 134.105411][ T5990] qmi_wwan 5-1:5.187: probe with driver qmi_wwan failed with error -22 [ 134.249447][ T5990] usb 5-1: USB disconnect, device number 7 [ 134.530349][ T5878] usb 2-1: USB disconnect, device number 6 [ 134.691521][ T5990] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 134.822287][ T89] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.831518][ T5990] usb 5-1: device descriptor read/64, error -71 [ 134.895344][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.137'. [ 134.895361][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'. [ 134.963158][ T6406] netlink: 'syz.1.137': attribute type 13 has an invalid length. [ 135.172173][ T5990] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 136.041369][ T5990] usb 5-1: device descriptor read/64, error -71 [ 136.151685][ T5990] usb usb5-port1: attempt power cycle [ 136.232532][ T89] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.321406][ T5878] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 136.491493][ T5990] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 136.512092][ T5990] usb 5-1: device descriptor read/8, error -71 [ 136.527179][ T5878] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.527194][ T5878] usb 3-1: config 0 has no interface number 0 [ 136.529030][ T5878] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 136.529045][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.529055][ T5878] usb 3-1: Product: syz [ 136.529062][ T5878] usb 3-1: Manufacturer: syz [ 136.529069][ T5878] usb 3-1: SerialNumber: syz [ 136.536432][ T5878] usb 3-1: config 0 descriptor?? [ 136.543840][ T89] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.751338][ T5990] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 136.776043][ T5990] usb 5-1: device descriptor read/8, error -71 [ 136.884701][ T5990] usb usb5-port1: unable to enumerate USB device [ 136.979353][ T6413] loop6: detected capacity change from 0 to 2640 [ 137.134389][ T5870] usb 1-1: USB disconnect, device number 7 [ 137.136375][ T5870] em28xx 1-1:0.0: Disconnecting em28xx [ 137.160995][ T5870] em28xx 1-1:0.0: Freeing device [ 137.207888][ T5878] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 137.237694][ T5878] usb 3-1: USB disconnect, device number 9 [ 137.364542][ T89] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.601029][ T6421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.143'. [ 137.601057][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 137.675436][ T6421] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 137.820035][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.842919][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.847016][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.852950][ T6421] bond1 (unregistering): Released all slaves [ 137.862158][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.868095][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.611373][ T5990] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 138.771336][ T5990] usb 5-1: Using ep0 maxpacket: 16 [ 138.779048][ T5990] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 138.779076][ T5990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.841347][ T5870] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 138.843936][ T5990] usb 5-1: config 0 descriptor?? [ 138.848740][ T5990] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 138.883628][ T89] bridge_slave_1: left allmulticast mode [ 138.883760][ T89] bridge_slave_1: left promiscuous mode [ 138.913995][ T89] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.994980][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 138.998922][ T5870] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 138.998950][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.999332][ T5870] usb 3-1: Product: syz [ 138.999348][ T5870] usb 3-1: Manufacturer: syz [ 138.999373][ T5870] usb 3-1: SerialNumber: syz [ 139.062245][ T5870] usb 3-1: config 0 descriptor?? [ 139.070259][ T5870] hub 3-1:0.0: bad descriptor, ignoring hub [ 139.070297][ T5870] hub 3-1:0.0: probe with driver hub failed with error -5 [ 139.111700][ T5870] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 139.151488][ T5960] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 139.301527][ T5960] usb 1-1: Using ep0 maxpacket: 32 [ 139.304685][ T5960] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 139.304716][ T5960] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 139.304739][ T5960] usb 1-1: config 0 interface 0 has no altsetting 0 [ 139.309979][ T5960] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 139.310006][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.310024][ T5960] usb 1-1: Product: syz [ 139.310036][ T5960] usb 1-1: Manufacturer: syz [ 139.310047][ T5960] usb 1-1: SerialNumber: syz [ 139.354763][ T89] bridge_slave_0: left allmulticast mode [ 139.354790][ T89] bridge_slave_0: left promiscuous mode [ 139.355128][ T89] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.370666][ T5990] usb 5-1: Detected FT232A [ 139.418435][ T5990] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 139.437099][ T5990] usb 5-1: USB disconnect, device number 12 [ 139.483806][ T5960] usb 1-1: config 0 descriptor?? [ 139.488581][ T5990] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 139.489311][ T5990] ftdi_sio 5-1:0.0: device disconnected [ 139.491034][ T6440] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 139.953176][ T5807] Bluetooth: hci2: command tx timeout [ 140.156521][ T5960] gs_usb 1-1:0.0: Configuring for 5 interfaces [ 140.390415][ T6444] syz.1.150 (6444) used greatest stack depth: 18376 bytes left [ 140.562215][ T6455] kAFS: unparsable volume name [ 140.751498][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 140.895766][ T5878] usb 3-1: USB disconnect, device number 10 [ 140.901714][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 140.911783][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 140.911814][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 140.932568][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 140.932597][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.932668][ T9] usb 2-1: Product: syz [ 140.932683][ T9] usb 2-1: Manufacturer: syz [ 140.932696][ T9] usb 2-1: SerialNumber: syz [ 140.954782][ T9] usb 2-1: config 0 descriptor?? [ 140.975290][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 140.975311][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 141.243758][ T89] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.313542][ T89] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.342585][ T89] .` (unregistering): Released all slaves [ 141.443838][ T6454] netlink: 'syz.1.153': attribute type 6 has an invalid length. [ 141.799338][ T6461] comedi comedi0: Minor 5 could not be opened [ 142.042732][ T5807] Bluetooth: hci2: command tx timeout [ 142.215371][ T6465] fuse: Unknown parameter 'user_i0x0000000000000004' [ 142.223175][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 142.224454][ T9] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 142.225186][ T9] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 142.225202][ T9] em28xx 2-1:0.0: No AC97 audio processor [ 142.268053][ T9] usb 2-1: USB disconnect, device number 7 [ 142.297936][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 142.319652][ T9] em28xx 2-1:0.0: Freeing device [ 142.413010][ T5960] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 142.436608][ T6455] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 142.959963][ T5807] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 142.965219][ T5807] Bluetooth: hci1: Injecting HCI hardware error event [ 143.013038][ T5808] Bluetooth: hci1: hardware error 0x00 [ 143.745107][ T6473] netlink: 'syz.4.157': attribute type 12 has an invalid length. [ 143.745124][ T6473] netlink: 248 bytes leftover after parsing attributes in process `syz.4.157'. [ 144.113319][ T5807] Bluetooth: hci2: command tx timeout [ 144.563987][ T6483] fuse: Unknown parameter 'user_i0x0000000000000005' [ 144.608372][ T5960] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 144.666084][ T5960] usb 1-1: USB disconnect, device number 8 [ 144.756239][ T6486] bond0: option min_links: invalid value (18446744073709549906) [ 144.756262][ T6486] bond0: option min_links: allowed values 0 - 2147483647 [ 144.919699][ T6493] FAULT_INJECTION: forcing a failure. [ 144.919699][ T6493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.919741][ T6493] CPU: 0 UID: 0 PID: 6493 Comm: syz.2.162 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 144.919766][ T6493] Tainted: [L]=SOFTLOCKUP [ 144.919772][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.919782][ T6493] Call Trace: [ 144.919789][ T6493] [ 144.919798][ T6493] dump_stack_lvl+0xe8/0x150 [ 144.919828][ T6493] should_fail_ex+0x46b/0x600 [ 144.919856][ T6493] _copy_from_iter+0x1d3/0x1670 [ 144.919887][ T6493] ? trace_kmem_cache_alloc+0x29/0xf0 [ 144.919913][ T6493] ? __alloc_skb+0x27d/0x7d0 [ 144.919929][ T6493] ? __pfx__copy_from_iter+0x10/0x10 [ 144.919951][ T6493] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 144.919975][ T6493] ? __alloc_skb+0x27d/0x7d0 [ 144.919996][ T6493] ? netlink_sendmsg+0x650/0xb40 [ 144.920019][ T6493] ? skb_put+0x11b/0x210 [ 144.920040][ T6493] netlink_sendmsg+0x6c0/0xb40 [ 144.920073][ T6493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.920099][ T6493] ? unwind_get_return_address+0x4d/0x90 [ 144.920122][ T6493] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 144.920151][ T6493] ____sys_sendmsg+0x94c/0x9c0 [ 144.920176][ T6493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.920204][ T6493] ? import_iovec+0x73/0xa0 [ 144.920231][ T6493] ___sys_sendmsg+0x2a5/0x360 [ 144.920256][ T6493] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.920308][ T6493] ? __fget_files+0x2a/0x420 [ 144.920330][ T6493] ? __fget_files+0x3a6/0x420 [ 144.920360][ T6493] __x64_sys_sendmsg+0x1c3/0x2a0 [ 144.920383][ T6493] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 144.920412][ T6493] ? __pfx_ksys_write+0x10/0x10 [ 144.920448][ T6493] do_syscall_64+0x14d/0xf80 [ 144.920467][ T6493] ? trace_irq_disable+0x3b/0x150 [ 144.920486][ T6493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.920504][ T6493] ? clear_bhb_loop+0x40/0x90 [ 144.920526][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.920544][ T6493] RIP: 0033:0x7f6277fac799 [ 144.920561][ T6493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.920575][ T6493] RSP: 002b:00007f6276206028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.920595][ T6493] RAX: ffffffffffffffda RBX: 00007f6278225fa0 RCX: 00007f6277fac799 [ 144.920608][ T6493] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 144.920619][ T6493] RBP: 00007f6276206090 R08: 0000000000000000 R09: 0000000000000000 [ 144.920630][ T6493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.920641][ T6493] R13: 00007f6278226038 R14: 00007f6278225fa0 R15: 00007ffcb70b3898 [ 144.920670][ T6493] [ 144.965414][ T6494] FAULT_INJECTION: forcing a failure. [ 144.965414][ T6494] name failslab, interval 1, probability 0, space 0, times 0 [ 144.965448][ T6494] CPU: 0 UID: 0 PID: 6494 Comm: syz.1.161 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 144.965473][ T6494] Tainted: [L]=SOFTLOCKUP [ 144.965479][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.965489][ T6494] Call Trace: [ 144.965496][ T6494] [ 144.965503][ T6494] dump_stack_lvl+0xe8/0x150 [ 144.965534][ T6494] should_fail_ex+0x46b/0x600 [ 144.965564][ T6494] should_failslab+0xa8/0x100 [ 144.965586][ T6494] kmem_cache_alloc_noprof+0x87/0x680 [ 144.965612][ T6494] ? dst_alloc+0x105/0x170 [ 144.965633][ T6494] ? __pfx_ip6_dst_gc+0x10/0x10 [ 144.965659][ T6494] dst_alloc+0x105/0x170 [ 144.965684][ T6494] ip6_pol_route+0xafb/0x13d0 [ 144.965717][ T6494] ? ip6_pol_route+0x160/0x13d0 [ 144.965746][ T6494] ? __pfx_ip6_pol_route+0x10/0x10 [ 144.965783][ T6494] ? __lock_acquire+0x6b5/0x2cf0 [ 144.965807][ T6494] fib6_rule_lookup+0x556/0x730 [ 144.965826][ T6494] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 144.965844][ T6494] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 144.965868][ T6494] ? ipv6_ext_hdr+0x5d/0x80 [ 144.965888][ T6494] ? nf_ct_frag6_gather+0x621/0x2440 [ 144.965922][ T6494] ip6_route_input+0x730/0xad0 [ 144.965947][ T6494] ? __pfx_ip6_route_input+0x10/0x10 [ 144.965996][ T6494] ? ip6_rcv_finish_core+0x222/0x420 [ 144.966021][ T6494] ip6_rcv_finish+0x141/0x280 [ 144.966045][ T6494] NF_HOOK+0x336/0x3c0 [ 144.966064][ T6494] ? skb_orphan+0x4f/0xd0 [ 144.966086][ T6494] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 144.966106][ T6494] ? NF_HOOK+0x9e/0x3c0 [ 144.966125][ T6494] ? __pfx_NF_HOOK+0x10/0x10 [ 144.966149][ T6494] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 144.966177][ T6494] ? netif_receive_skb+0x102/0xc50 [ 144.966201][ T6494] netif_receive_skb+0x278/0xc50 [ 144.966231][ T6494] ? __pfx_netif_receive_skb+0x10/0x10 [ 144.966252][ T6494] ? rcu_is_watching+0x15/0xb0 [ 144.966270][ T6494] ? __local_bh_disable_ip+0x3c/0x420 [ 144.966296][ T6494] ? tun_rx_batched+0x191/0x760 [ 144.966312][ T6494] ? tun_rx_batched+0x191/0x760 [ 144.966331][ T6494] tun_rx_batched+0x1ee/0x760 [ 144.966356][ T6494] ? __pfx_tun_rx_batched+0x10/0x10 [ 144.966372][ T6494] ? __virtio_net_hdr_to_skb+0x9d2/0x13d0 [ 144.966388][ T6494] ? trace_kmem_cache_alloc+0x29/0xf0 [ 144.966432][ T6494] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 144.966455][ T6494] ? lockdep_hardirqs_on+0x7a/0x110 [ 144.966479][ T6494] ? tun_get_user+0x2669/0x3de0 [ 144.966495][ T6494] tun_get_user+0x2a88/0x3de0 [ 144.966536][ T6494] ? __pfx_tun_get_user+0x10/0x10 [ 144.966576][ T6494] ? ref_tracker_alloc+0x332/0x4a0 [ 144.966601][ T6494] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 144.966630][ T6494] ? tun_get+0x1c/0x2f0 [ 144.966654][ T6494] ? tun_get+0x1c/0x2f0 [ 144.966670][ T6494] ? tun_get+0x1c/0x2f0 [ 144.966692][ T6494] tun_chr_write_iter+0x119/0x200 [ 144.966727][ T6494] vfs_write+0x629/0xba0 [ 144.966762][ T6494] ? __pfx_vfs_write+0x10/0x10 [ 144.966798][ T6494] ? __fget_files+0x2a/0x420 [ 144.966830][ T6494] ksys_write+0x156/0x270 [ 144.966858][ T6494] ? __pfx_ksys_write+0x10/0x10 [ 144.966896][ T6494] do_syscall_64+0x14d/0xf80 [ 144.966913][ T6494] ? trace_irq_disable+0x3b/0x150 [ 144.966932][ T6494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.966950][ T6494] ? clear_bhb_loop+0x40/0x90 [ 144.966972][ T6494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.966990][ T6494] RIP: 0033:0x7ff73727cfce [ 144.967007][ T6494] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 144.967020][ T6494] RSP: 002b:00007ff7354cbfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.967039][ T6494] RAX: ffffffffffffffda RBX: 00007ff7354cc6c0 RCX: 00007ff73727cfce [ 144.967052][ T6494] RDX: 000000000000004c RSI: 0000200000000040 RDI: 00000000000000c8 [ 144.967063][ T6494] RBP: 00007ff7354cc090 R08: 0000000000000000 R09: 0000000000000000 [ 144.967074][ T6494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.967084][ T6494] R13: 00007ff737536218 R14: 00007ff737536180 R15: 00007ffff1ec90a8 [ 144.967116][ T6494] [ 146.522574][ T5808] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 146.522680][ T5808] Bluetooth: hci2: command tx timeout [ 146.523407][ T6495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.662730][ T5960] ------------[ cut here ]------------ [ 146.662744][ T5960] in_task() && kcov_mode_enabled(mode) [ 146.662759][ T5960] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5d8/0x710, CPU#0: kworker/0:8/5960 [ 146.662800][ T5960] Modules linked in: [ 146.662820][ T5960] CPU: 0 UID: 0 PID: 5960 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 146.662849][ T5960] Tainted: [L]=SOFTLOCKUP [ 146.662856][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 146.662869][ T5960] Workqueue: usb_hub_wq hub_event [ 146.662894][ T5960] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 146.662919][ T5960] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e2 db d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 ba 3c 5f 09 89 c0 48 c7 c7 a8 33 4f [ 146.662936][ T5960] RSP: 0018:ffffc9000544f7c8 EFLAGS: 00010202 [ 146.662954][ T5960] RAX: 0000000000000002 RBX: ffff888026055b80 RCX: 0000000000000000 [ 146.662968][ T5960] RDX: 0000000000000000 RSI: ffffffff8ba673e0 RDI: ffffffff8ba673a0 [ 146.662982][ T5960] RBP: ffffc9000544fad0 R08: ffffffff8b2601d0 R09: ffffffff8ddcb9c0 [ 146.662997][ T5960] R10: dffffc0000000000 R11: fffffbfff1ed4c97 R12: ffff8880282e8000 [ 146.663012][ T5960] R13: dffffc0000000000 R14: 0100000000000001 R15: ffff8880293bc000 [ 146.663027][ T5960] FS: 0000000000000000(0000) GS:ffff888126336000(0000) knlGS:0000000000000000 [ 146.663042][ T5960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.663056][ T5960] CR2: 00007f6277fc7cc0 CR3: 0000000059392000 CR4: 00000000003526f0 [ 146.663073][ T5960] Call Trace: [ 146.663081][ T5960] [ 146.663094][ T5960] hub_event+0x150/0x4f60 [ 146.663127][ T5960] ? __lock_acquire+0x6b5/0x2cf0 [ 146.663155][ T5960] ? look_up_lock_class+0x57/0x110 [ 146.663178][ T5960] ? register_lock_class+0x31/0x2e0 [ 146.663196][ T5960] ? update_load_avg+0x1b0/0x1ec0 [ 146.663221][ T5960] ? __lock_acquire+0x6b5/0x2cf0 [ 146.663257][ T5960] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 146.663289][ T5960] ? __pfx_hub_event+0x10/0x10 [ 146.663323][ T5960] ? process_scheduled_works+0xa8d/0x18c0 [ 146.663350][ T5960] ? process_scheduled_works+0xa8d/0x18c0 [ 146.663380][ T5960] process_scheduled_works+0xb6e/0x18c0 [ 146.663441][ T5960] ? __pfx_process_scheduled_works+0x10/0x10 [ 146.663475][ T5960] ? assign_work+0x3d5/0x5e0 [ 146.663508][ T5960] worker_thread+0xa53/0xfc0 [ 146.663580][ T5960] kthread+0x388/0x470 [ 146.663603][ T5960] ? __pfx_worker_thread+0x10/0x10 [ 146.663630][ T5960] ? __pfx_kthread+0x10/0x10 [ 146.663652][ T5960] ret_from_fork+0x51e/0xb90 [ 146.663682][ T5960] ? __pfx_ret_from_fork+0x10/0x10 [ 146.663708][ T5960] ? __switch_to+0xc7d/0x1450 [ 146.663738][ T5960] ? __pfx_kthread+0x10/0x10 [ 146.663761][ T5960] ret_from_fork_asm+0x1a/0x30 [ 146.663799][ T5960] [ 146.663817][ T5960] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 146.663835][ T5960] CPU: 0 UID: 0 PID: 5960 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 146.663863][ T5960] Tainted: [L]=SOFTLOCKUP [ 146.663870][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 146.663883][ T5960] Workqueue: usb_hub_wq hub_event [ 146.663906][ T5960] Call Trace: [ 146.663913][ T5960] [ 146.663921][ T5960] vpanic+0x56c/0xa60 [ 146.663951][ T5960] ? __pfx__printk+0x10/0x10 [ 146.663973][ T5960] ? __pfx_vpanic+0x10/0x10 [ 146.664000][ T5960] ? is_bpf_text_address+0x292/0x2b0 [ 146.664028][ T5960] ? is_bpf_text_address+0x26/0x2b0 [ 146.664064][ T5960] panic+0xc5/0xd0 [ 146.664093][ T5960] ? __pfx_panic+0x10/0x10 [ 146.664131][ T5960] ? ret_from_fork_asm+0x1a/0x30 [ 146.664156][ T5960] __warn+0x315/0x4f0 [ 146.664183][ T5960] ? kcov_remote_start+0x5d8/0x710 [ 146.664209][ T5960] ? kcov_remote_start+0x5d8/0x710 [ 146.664234][ T5960] __report_bug+0x29a/0x540 [ 146.664260][ T5960] ? kcov_remote_start+0x5d8/0x710 [ 146.664284][ T5960] ? __pfx___report_bug+0x10/0x10 [ 146.664302][ T5960] ? lockdep_hardirqs_on+0x7a/0x110 [ 146.664327][ T5960] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 146.664359][ T5960] ? do_raw_spin_lock+0x12b/0x2f0 [ 146.664397][ T5960] ? kcov_remote_start+0x5d8/0x710 [ 146.664420][ T5960] report_bug+0x16a/0x220 [ 146.664440][ T5960] ? kcov_remote_start+0x5d8/0x710 [ 146.664462][ T5960] ? kcov_remote_start+0x5da/0x710 [ 146.664485][ T5960] handle_bug+0x9c/0x200 [ 146.664510][ T5960] exc_invalid_op+0x1a/0x50 [ 146.664548][ T5960] asm_exc_invalid_op+0x1a/0x20 [ 146.664572][ T5960] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 146.664594][ T5960] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e2 db d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 ba 3c 5f 09 89 c0 48 c7 c7 a8 33 4f [ 146.664610][ T5960] RSP: 0018:ffffc9000544f7c8 EFLAGS: 00010202 [ 146.664625][ T5960] RAX: 0000000000000002 RBX: ffff888026055b80 RCX: 0000000000000000 [ 146.664639][ T5960] RDX: 0000000000000000 RSI: ffffffff8ba673e0 RDI: ffffffff8ba673a0 [ 146.664652][ T5960] RBP: ffffc9000544fad0 R08: ffffffff8b2601d0 R09: ffffffff8ddcb9c0 [ 146.664664][ T5960] R10: dffffc0000000000 R11: fffffbfff1ed4c97 R12: ffff8880282e8000 [ 146.664677][ T5960] R13: dffffc0000000000 R14: 0100000000000001 R15: ffff8880293bc000 [ 146.664697][ T5960] ? rt_spin_lock+0x1e0/0x400 [ 146.664729][ T5960] ? kcov_remote_start+0xe0/0x710 [ 146.664755][ T5960] hub_event+0x150/0x4f60 [ 146.664786][ T5960] ? __lock_acquire+0x6b5/0x2cf0 [ 146.664811][ T5960] ? look_up_lock_class+0x57/0x110 [ 146.664833][ T5960] ? register_lock_class+0x31/0x2e0 [ 146.664852][ T5960] ? update_load_avg+0x1b0/0x1ec0 [ 146.664876][ T5960] ? __lock_acquire+0x6b5/0x2cf0 [ 146.664909][ T5960] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 146.664938][ T5960] ? __pfx_hub_event+0x10/0x10 [ 146.664971][ T5960] ? process_scheduled_works+0xa8d/0x18c0 [ 146.664994][ T5960] ? process_scheduled_works+0xa8d/0x18c0 [ 146.665020][ T5960] process_scheduled_works+0xb6e/0x18c0 [ 146.665077][ T5960] ? __pfx_process_scheduled_works+0x10/0x10 [ 146.665112][ T5960] ? assign_work+0x3d5/0x5e0 [ 146.665145][ T5960] worker_thread+0xa53/0xfc0 [ 146.665201][ T5960] kthread+0x388/0x470 [ 146.665222][ T5960] ? __pfx_worker_thread+0x10/0x10 [ 146.665247][ T5960] ? __pfx_kthread+0x10/0x10 [ 146.665270][ T5960] ret_from_fork+0x51e/0xb90 [ 146.665300][ T5960] ? __pfx_ret_from_fork+0x10/0x10 [ 146.665328][ T5960] ? __switch_to+0xc7d/0x1450 [ 146.665355][ T5960] ? __pfx_kthread+0x10/0x10 [ 146.665377][ T5960] ret_from_fork_asm+0x1a/0x30 [ 146.665414][ T5960] [ 146.665844][ T5960] Kernel Offset: disabled