last executing test programs: 17m47.076123429s ago: executing program 32 (id=558): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)) statx(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f0000000400)={{0x3, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0x3, 0x1dc0000000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="170929bd7000ffdbdf2501000000"], 0x14}, 0x1, 0x620b, 0x0, 0x4}, 0x4000800) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000000c0)="01000000020001000003be8c5ee17688", 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)) 16m9.820194822s ago: executing program 33 (id=807): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f00000005c0)=[{0x0, 0x4, 0x5, 0x1, @tick=0x40001, {0x1, 0x10}, {0x3, 0x10}, @raw32={[0x0, 0x1, 0x81]}}, {0x2, 0x87, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x4, 0x9, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x3c}, @result={0xb4c, 0x8}}, {0x3, 0x5, 0xff, 0x0, @tick=0x6, {0x1}, {0x9, 0x81}, @connect={{0xd1, 0x83}, {0x1, 0x40}}}], 0x70) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4ddf, 0x1}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) socket(0x40000000015, 0x5, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 15m25.927203442s ago: executing program 4 (id=970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc", 0xe) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000002800)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29caa299c7583dd996ddbf29", 0x10}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x0) recvmsg$can_bcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 15m18.701498826s ago: executing program 4 (id=1008): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) 15m17.86633123s ago: executing program 34 (id=1008): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) 14m48.370801205s ago: executing program 35 (id=1067): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x17, &(0x7f0000000400)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594e70fa55360", 0x14}], 0x1}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x21, 0xc, {0xc, 0x23, "8e174d1a90c63f676fab"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x6, 0x6c, {0x6c, 0x6, "721ff7aca1ef2d79ab44d5067a1b85c699d2632aad45a77001a09b2fb4c83993e89b053612c03edc8d9618fc7084fe55614365f0b24f826c72332292632964ab1db133674d5ec59aaf4c2bb3f7f3d3e9f2884eb969c3be1b0eb977658f8089a4d7cd270c357c20609a76"}}, &(0x7f0000000180)={0x0, 0x3, 0xec, @string={0xec, 0x3, "e439a0d1d59556d44e6418df8a922c425a39d85ce4d04632e161ab09e7eca804c608626ae008561adaa212e2c310e53d900e5502ede438496a72490a8f13ec3078af96f3faac30524970262c48f682285b69f48dd16ea83fa1ac82a9f35a3b9f3fb153863f51a4b772daf328ee85f54a6f16f202fa3dd1852c821dddf4af3f19cd285a7490f2a667ca0f38d1453b7e5bbb83c1fd2bb0eda7abc4c2c533234cc79b4d252bb2353a3eda957ae9f792b241e4ca0a7257c30eec09ce2fa23acb4a260baf4255c45a96644b954b6ae972b52bac936972d15c239e14823328b57e4c4a8d8706372b558a82fdd0"}}, &(0x7f0000000280)={0x0, 0xf, 0x31, {0x5, 0xf, 0x31, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x2, 0xf0f, 0x78, [0xff0030, 0xffc0c0, 0xff0f]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a8fd8820646745bdcd922ff64337b403"}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x4, 0xff, 0x6, "7efb9778", "b13d68c1"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x9, 0x0, 0xd, 0x1, 0x294}}}, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x0, 0x12, 0x68, "c5aad6b5a7110fba5ab1b943508fd8f81816dbbbdbb180769873d8f93287806a92be81d074346d343a2699ddb07e6d6ff7d17cd082248c304a203f814f3bbd216fb247ecf357564ebc65bc27e6c064dd28b0afc35ab7c4e84c93ca6a3a93641bbcad7eb3d91a8204"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0xf6335d4c1223e611}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x1c00, 0x20, [0xf000]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000005c0)={0x40, 0xb, 0x2, 'c\\'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000640)={0x40, 0x13, 0x6}, &(0x7f0000000680)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "1dd1"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000007c0)={0x40, 0x21, 0x1}}) 13m41.322160633s ago: executing program 36 (id=1436): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendfile(r0, r1, 0x0, 0x10001) 9m31.467745414s ago: executing program 37 (id=2542): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f0000289000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000c67000/0x3000)=nil) mremap(&(0x7f00008fb000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f00009a7000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}, 0x3}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000d8a000/0x3000)=nil, 0x3000}) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 8m25.757565918s ago: executing program 38 (id=2959): r0 = syz_open_dev$vbi(&(0x7f0000000480), 0x3, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x8000) 8m4.921453072s ago: executing program 8 (id=2987): syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') syz_open_procfs(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100"/18], 0xa4}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 8m4.865081344s ago: executing program 8 (id=2988): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x4b, &(0x7f0000000640)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x14}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000001080)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 8m4.710278442s ago: executing program 8 (id=2989): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) pwritev(r0, 0x0, 0x0, 0xf39, 0xc) r1 = syz_io_uring_setup(0xf02, &(0x7f0000000040)={0x0, 0x191e, 0x800, 0x0, 0x2000000}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r2, r3, r4, 0x0) io_uring_enter(r1, 0xf, 0x7926, 0x1, 0x0, 0x0) 8m4.321251543s ago: executing program 8 (id=2990): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 8m4.092175536s ago: executing program 8 (id=2991): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002e0000001801000020786c2500000000002020077b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) setrlimit(0x9, &(0x7f0000000080)={0x860b, 0xffff}) io_setup(0x7, &(0x7f0000000200)=0x0) io_pgetevents(r3, 0xd075, 0x0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300), 0x8}) io_setup(0xffff, &(0x7f0000002400)) 8m0.119376087s ago: executing program 8 (id=2992): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x801) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c9", @ANYBLOB], 0x16) 7m59.627157613s ago: executing program 39 (id=2992): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x801) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c9", @ANYBLOB], 0x16) 7m32.023339823s ago: executing program 9 (id=3019): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000100000000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x3000000, [{0x0, 0x1, 0x20000000}]}]}}, 0x0, 0x3e}, 0x28) 7m30.605416436s ago: executing program 9 (id=3020): syz_emit_ethernet(0xe, &(0x7f0000000080)={@broadcast, @multicast, @void, {@generic={0x8864}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="14"], 0x18, 0x4000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0xcb}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @pid}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x19}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x44, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe51, 0xb, 0x8001}, {0x6, 0x11, 0x40}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r5, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40004}, 0x95) 7m30.352582551s ago: executing program 9 (id=3021): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000003e00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9}, 0x94) 7m30.11296909s ago: executing program 9 (id=3022): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 7m29.499934724s ago: executing program 9 (id=3023): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x4b, &(0x7f0000000640)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x14}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000001080)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 7m28.76495177s ago: executing program 3 (id=3024): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 7m28.08319457s ago: executing program 9 (id=3025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x17, 0x3, "91abc12404cf378042f26c43f91f68d8a90767"}]}], {0x14}}, 0x60}}, 0x0) (fail_nth: 1) 7m27.69497374s ago: executing program 40 (id=3025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x17, 0x3, "91abc12404cf378042f26c43f91f68d8a90767"}]}], {0x14}}, 0x60}}, 0x0) (fail_nth: 1) 7m22.128189515s ago: executing program 3 (id=3027): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8553}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0xa) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x1005, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r3, 0xd) landlock_restrict_self(r1, 0x4) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x7) landlock_restrict_self(r3, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (fail_nth: 1) 7m21.973156026s ago: executing program 3 (id=3028): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x2) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f0000000200)={0x6010, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x4) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (fail_nth: 1) 7m21.920302357s ago: executing program 3 (id=3029): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 7m21.733691092s ago: executing program 3 (id=3030): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0], [0x7fdfffff, 0x4, 0x0, 0x4], [0x0, 0x1001000, 0x8001], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, r5, 0x0, r5], [0x2b6, 0x1], [0x0, 0x1]}) r6 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x8, 0x30600) ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f00000001c0)={0x0, 0x0, r6}) (async) r7 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) (async) bind$alg(r7, 0x0, 0x0) (async) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) io_setup(0x1, &(0x7f0000000040)) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) (async) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) (async) tkill(0x0, 0x2f) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 7m19.857273761s ago: executing program 3 (id=3031): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8553}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0xa) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x1005, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r3, 0xd) landlock_restrict_self(r1, 0x4) landlock_restrict_self(r3, 0xd) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x7) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 7m19.622353361s ago: executing program 41 (id=3031): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8553}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0xa) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x1005, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r3, 0xd) landlock_restrict_self(r1, 0x4) landlock_restrict_self(r3, 0xd) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x7) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 7m4.992204759s ago: executing program 4 (id=2993): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000001c0)={0xffff, 0x7005}, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c311e2cb86c82d4873c6af6ddc7bde3c511a1315e4f85948a98ae388123b56361ed3cc4c3e5523eb70372d09d6bc2fb2"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x80) openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) accept4(r1, 0x0, &(0x7f0000000340), 0x80800) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000400)={0x38c, r8, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0xb4, 0x11d, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x40}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x77098c28}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x78}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x8}]}]}, @NL80211_ATTR_TID_CONFIG={0x2c4, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x30, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x2, 0x337, 0xd, 0x1, 0xfc00, 0x1, 0x9]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1bc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x3, 0x5, 0x7, 0xa, 0x1000, 0xc]}}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1000, 0x5, 0x9, 0x9e3, 0x1, 0xe4a, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0x8, 0x80, 0x5, 0x3, 0x4, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x9, 0x81, 0x510, 0x8, 0xff, 0x8]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x7, 0x7}, {0x2, 0x5}, {0x0, 0x5}, {0x5}, {0x5}, {0x6, 0x8}, {0x4, 0x2}, {0x0, 0x7}, {0x3, 0x5}, {0x0, 0x8}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0x5}, {0x6, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x4, 0x2}, {0x4, 0x6}, {0x6, 0x7}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0xa}, {0x5, 0x9}, {0x2, 0x6}, {0x6, 0x4}, {0x4, 0x7}, {0x7, 0x5}, {0x3, 0xa}, {0x1, 0xa}, {0x7, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x0, 0x4, 0x1, 0x2, 0x1, 0x9, 0xf45c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xb, 0x3, 0x3, 0x0, 0x401, 0xb, 0x9]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x0, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x2, 0x6}, {0x4, 0xa}, {0x1, 0x1}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x24, 0xb, 0x12, 0x4, 0xb, 0x67, 0x18, 0x6, 0x48, 0x5, 0x60, 0x1e, 0x1, 0x1a, 0xc, 0x1b, 0x1b, 0x16, 0x12, 0x4, 0xc, 0xa5, 0x1b, 0x48, 0x30, 0x6, 0xb, 0x9, 0x6c, 0x6c, 0x48]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x1}, {0x2, 0x3}, {0x7, 0x8}, {0x0, 0x1}, {0x5, 0x8}, {0x1, 0x6}, {0x7, 0x2}, {0x4, 0x5}, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x7}, {0x7}, {0x6, 0x9}, {0x5, 0x8}, {0x1, 0x6}, {0x5, 0x7}, {0x1, 0x8}, {0x7, 0x6}, {0x2, 0x8}, {0x2, 0x5}, {0x2, 0x7}, {0x0, 0x7}, {0x5, 0x6}, {0x5, 0x8}, {0x6, 0x8}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x8}, {0x4, 0x8}, {0x4, 0x5}, {0x5, 0x9}, {0x7, 0x5}, {0x0, 0x7}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x2}, {0x4, 0x5}, {0x0, 0x6}, {0x3, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x5, 0x5}, {0x0, 0xa}, {0x3, 0x1}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0x6}, {0x4, 0x2}, {0x1, 0x9}, {0x7, 0x1}, {0x7, 0x6}, {0x2, 0xa}]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x1, 0x7fff, 0x3, 0x0, 0x7fff, 0x1, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x96e, 0x3, 0xd5b, 0x8, 0x40, 0x5dac]}}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x1, 0x5, 0x8001, 0x56, 0x3ff, 0x4, 0xfff8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x3ff, 0x375, 0x6, 0x800, 0x800, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x2, 0x8, 0x1, 0x7fff, 0x3, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xae}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x59}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x16}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x38c}}, 0x44000) 7m2.361329186s ago: executing program 4 (id=3036): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 7m2.167576842s ago: executing program 4 (id=3037): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="180500000000de000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000010230000", @ANYRES32=0x0, @ANYBLOB="00000000000018901fcb87420066b153040000850000009500000095cbd0ace88fd5471ac595d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="68020000000501040000000000000000030000065402010002000000000200000909f4e015812c"], 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80) r1 = socket(0x2, 0x80805, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100"], 0x40}}, 0x80) sendmmsg$inet(r1, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) read$FUSE(r3, &(0x7f0000001740)={0x2020}, 0x2020) close(0x3) io_submit(r5, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='m', 0xffffff4c}]) r6 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8[\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x00\x00\x00\x00O\xda\x82v.\xf4J\"\xdd\xa4S\xf9\xe8\xf5\xd9\xb4\xe1G\xbf\xc9\xdd\x95l\x19\xe0\xa2\xee\xb8X\x12\xbd9\x16\xbd`\x83\xc2\xc3@\f\xc4\fv\xf0\xc4\xd8\xb0\xe0\xc0\xd0,\xf6tp\xb5c\xec\xb8\xb1\x9d\n\x18\x95\"\xb1\xa3_\xb5\xec\x93\xef\xe8\xda\xdb\x0e\xa7K\xce\x9a>\xae=\x06\x82xp+\xf0\xf9\xb7\xc0\x9a\x8c\v\x9d\xf6\xac(+D\x9a\x93\x85\x833\xfc1\xeb:\xe1\x03FMY\x10\xbeMq\xb0\xcf_\xd5\x12\x80\xe6cT\x0fV\xc5\x8d\x85z\xbc\x8aOgS\xfa:\xe4\x91\xdf\xb8c\x04W\xe0|\xa8\xf8\xe9\xc3\xa7\xf6\xac\x13\x13\t\xf3\x85U\xc0H\'\x82\xc9\x02\x1e3\x04\x03M\xc2\xb8\x19\x96\xda\f\x1d\xce\xd0', 0x3) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x2, 0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000840)={0x4, 0x0, [{0x0, 0xffffffffffffffe9, &(0x7f00000001c0)=""/115}, {0x50000, 0x9, &(0x7f00000005c0)=""/9}, {0xfec00000, 0xe4, &(0x7f00000006c0)=""/228}, {0xffff1000, 0x6e, &(0x7f00000007c0)=""/110}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x1) write$binfmt_script(r6, &(0x7f0000000600)={'#! ', './file0', [{}, {0x20, 'icmp6\x00'}], 0xa, "0c49980c"}, 0x17) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x8}, 0x8) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m54.922974032s ago: executing program 4 (id=3043): epoll_create1(0x0) epoll_create(0x7) r0 = io_uring_setup(0x62f5, &(0x7f00000002c0)={0x0, 0x2469, 0x10000, 0x0, 0x381}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 6m54.121476794s ago: executing program 42 (id=3043): epoll_create1(0x0) epoll_create(0x7) r0 = io_uring_setup(0x62f5, &(0x7f00000002c0)={0x0, 0x2469, 0x10000, 0x0, 0x381}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 2m52.59696219s ago: executing program 2 (id=3989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a8551", 0x6a}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000109000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000e5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000980)={&(0x7f0000000680), 0xc, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2cbd7000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ff0000003c00000004188e0004008700"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r7 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES8, @ANYRES32], 0x0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 2m50.877067828s ago: executing program 2 (id=4000): syz_emit_ethernet(0x15, &(0x7f0000000500)={@link_local={0x3}, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@mpls_uc={0x8847, {[], @llc={@llc={0x1, 0x2, "01"}}}}}}, 0x0) 2m50.72693038s ago: executing program 2 (id=4001): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x8000) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x5e031) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)="b2527459016cc113df6498935ed834139e44a24e652c8240701ac6925b78838fe71f58b35243ab94f53ef34d1398010df0fe51d80686a446bbee3ac50d581f270eead0e5409aface60609b96c63ca7030c8364cb32498391ec66f6bba8080659df4530c138061903b76631381263dfdc99dbec6e8d6f25b9dd03293213bba47f6a81494e1e741735", 0x88}, {&(0x7f0000000180)="566d54bcda9dee54c2b638f21294e5b676cb889994bac7881c92f8263b18e331af1374ee69f438bf", 0x28}, {0x0}], 0x3, &(0x7f0000000280)=[@rights={{0x28, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x40, 0xc0}, 0x40041) r1 = syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0x80000) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000340)={0x10, 0xc1e6, 0x5}) r2 = creat(&(0x7f0000000380)='./file0\x00', 0x1) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000400), 0x6, 0x800) ioctl$OCFS2_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000440)={0x0, 0x1, 0x4, 0xff, 0x800, 0x3}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0x26, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12ba}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1c}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ldst={0x0, 0x2, 0x1, 0x5, 0x9, 0xfffffffffffffffe}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}]}, &(0x7f0000000600)='syzkaller\x00', 0x3, 0x24, &(0x7f0000000640)=""/36, 0x40f00, 0x8, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x5, 0x5, 0x7e4, 0x10}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, &(0x7f00000006c0)=[r2, r2], &(0x7f0000000700)=[{0x0, 0x4, 0xa, 0x6}, {0x0, 0x4, 0xc, 0xc}, {0x3, 0x3, 0xf, 0x7}, {0x0, 0x1, 0x2, 0x3}, {0x1, 0x5, 0xf, 0x3}, {0x3, 0x4, 0x7, 0x9}, {0x0, 0x1, 0xf, 0x1}, {0x5, 0x5, 0x2, 0x3}, {0x3, 0x5, 0x2, 0x7}, {0x1, 0x5, 0xf, 0xa}], 0x10, 0x401}, 0x94) stat(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r5, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000b40)=0xe8) mount$9p_fd(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x12000, &(0x7f0000000b80)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@debug={'debug', 0x3d, 0x5}}, {@version_u}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@obj_type={'obj_type', 0x3d, '-'}}, {@uid_gt={'uid>', r6}}, {@euid_gt={'euid>', r8}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x64, 0x37, 0x63, 0x33, 0x61, 0x64, 0x37], 0x2d, [0x34, 0x30, 0x66, 0x36], 0x2d, [0x30, 0x35, 0x5a, 0x32], 0x2d, [0x35, 0x30, 0x34, 0x62], 0x2d, [0x61, 0x62, 0x30, 0x38, 0x64, 0x39, 0xce, 0x2]}}}, {@dont_appraise}, {@uid_lt={'uid<', r10}}]}}) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000cc0)={0x0, 0x0, 0xffffffffffffffff}) dup3(r11, r12, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000001080)=0x0) stat(&(0x7f0000001380)='./file1\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r2, &(0x7f0000001440)='./file0\x00', 0x0, 0x1, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getpid() r18 = fanotify_init(0x10, 0x1) r19 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001580), 0xd0040, 0x0) sendmsg$unix(r13, &(0x7f0000001680)={&(0x7f0000000d00)=@file={0x1, './file0/../file0\x00'}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000d80)="72fffc19e57b7f1ce2cc1c73f2a26e3f851e454a21f53dcfa683c33e42ec6ce98af57358b40e787f18ea3bdd5d0f0067c262b2e9288beb7559151ec4d68607d79ef3255cabe681c2f4effc6991b74bb63267e9cefdccd4f9614070c5ff7bfd6db4415e13bd20e7d06c29b376", 0x6c}, {&(0x7f0000000e00)="93db98c9cd6023cc28525346cbc45cf9e17effafedd7226d5c55219b6f35cf13507fd6e89cc6961b6417727e350d8c55915c0a8cc2c3b594c2248433f437cfbc48a730229cc5de28b4e040df88a125acde386efdeb07f92d68a19c88a9fed0ae71c1f2902f67dedf2c7d24efce65cc289396086c03474d707410463d4b9ca558521d5def6e6e4a701c8aaa23cd8e9434ad95bb92e20f46", 0x97}, {&(0x7f0000000ec0)="27a8972743166148d6485e09c349caa1d67cdf7df077a3743e64da55bbb9c86d4174ee8a481ec91d107016b5ddb311821c45186d778e3f488979c7910e27fb93b5f5d90d09fc7b5fe0f323c474a99536ccb870ae5da7208d0522a5ab686efa6ddf672c591643fbcf7ec5355dec80f8a15d29be1def472f0efa3b29777e0321f3b474b06c1c0f88396bc0dbdc64a093bc36033c57e5b5d2f71b942596045599d255a45a976f3dba34c1f0dc37133aeabd38994c53931c77eaeb6a1d3971aa49b117800cc6044e6af32b7b02ea3c13ea27655fae0b36a0", 0xd6}, {&(0x7f0000000fc0)="c3051d78d31db0e153c63d0624181a2dc35380d76ad132f24335c903eb6f505ebcd5d67614c11b4462e1769f89dfd01b1e44b306837faa04687f63178824cad48c1d94", 0x43}], 0x4, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {r14, r10, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r15, r16}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r17, r6, r9}}}, @rights={{0x30, 0x1, 0x1, [r18, r4, r2, r11, r12, r4, r0, r19]}}], 0xa0}, 0x800) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f00000016c0)=""/14) ioctl$BTRFS_IOC_GET_DEV_STATS(r11, 0xc4089434, &(0x7f0000001700)={0x0, 0x4, 0x0, [0xfff, 0x8000000000000001, 0x40, 0x8000, 0x8001], [0x40, 0x5, 0x3, 0x6000000000000, 0x8, 0x9, 0x2, 0x4, 0x6, 0xffffffffffff13d0, 0x1000000, 0x6, 0xffffffff, 0xc, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x81, 0xd, 0xffff, 0x1a3d111c, 0x5950, 0x7, 0xb, 0x2, 0x5, 0x2, 0x8, 0x2d5f, 0x5, 0x7fffffff, 0x7f32, 0xff, 0x84, 0xffffffff, 0x401, 0x1, 0x9, 0x5, 0x7, 0x9, 0x6, 0x3, 0x2, 0x36cb3cb5, 0x6, 0x80, 0x9, 0x9, 0x5, 0x1, 0x7, 0xa30, 0x3, 0x9, 0x5, 0xff, 0x0, 0x9, 0x4, 0x1, 0xbb4d, 0x36f, 0xe, 0x7, 0x7, 0x5, 0x6, 0x400, 0x7, 0x5, 0x0, 0x4, 0x8, 0x1, 0x2, 0xff, 0xff, 0x0, 0x3, 0x1, 0x1619, 0x5, 0x4, 0x7, 0x98, 0x4, 0xffffffffffffffff, 0x4, 0xbe1a, 0xe1, 0x6c, 0x36b, 0x200, 0x0, 0x9b, 0x2, 0xfffffffffffffffd, 0x9, 0x7c22, 0x89c, 0x3, 0x9, 0x2, 0x7, 0x5, 0xfffffffffffff48b, 0x4, 0x7, 0x2, 0xffffffffffffffff, 0x8001, 0x2, 0x65, 0xffffffff, 0x0, 0x6, 0x8, 0x4, 0x200]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000001b40)={r20, 0x400, 0x1, [0x7fffffffffffffff, 0x4, 0x3, 0x6, 0x4], [0x2, 0x6, 0x4, 0x5, 0xfffffffffffffffa, 0x2, 0x351e4d6c, 0x6, 0x3, 0x3, 0x5, 0x200, 0xc1, 0x1, 0x2, 0x7, 0x5, 0x4, 0x10, 0x2, 0x2, 0x1, 0x5, 0xd, 0x4, 0x7, 0xec, 0xffffffffffffff00, 0x7, 0x8, 0x4, 0x450, 0x7, 0x4, 0x9, 0xa000000000000000, 0x7, 0x4, 0x5, 0x639, 0x6, 0xfffffffffffffff7, 0x9, 0x10001, 0xad42, 0x5, 0x10000, 0x9, 0x4000000, 0x0, 0x7, 0x4, 0x8, 0x0, 0x9c88, 0x7, 0x9498, 0x7ff, 0x4, 0x7ff, 0x7, 0x0, 0x7, 0xfffffffffffffff9, 0x8, 0x6, 0x6, 0x47b73806, 0x69118000000000, 0x9, 0x4, 0x101, 0x80000001, 0x2, 0x7, 0xb200000000000000, 0x1529, 0x0, 0x7, 0x7a6341ca, 0x4, 0x1, 0x7, 0x0, 0xffffffffffffff00, 0x4, 0x1, 0x8000000000000001, 0x4, 0x7, 0x78, 0x3, 0x3ff, 0x58ee, 0x101, 0xfffffffffffffffa, 0x2, 0x8000000000000000, 0x8000000000000001, 0x9, 0x0, 0x8000, 0x6, 0x200, 0x1, 0x6, 0x1, 0x80000001, 0x13, 0x0, 0x7f, 0x9, 0x7751, 0x6, 0x9, 0xb62, 0x5, 0x2, 0x5, 0x1, 0x3]}) 2m50.193246472s ago: executing program 2 (id=4002): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32, @ANYBLOB="003000000000000014001a80100004800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 2m49.898932442s ago: executing program 2 (id=4006): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r0, &(0x7f00000039c0)=[{&(0x7f0000000500)="d807", 0x2}], 0x1, 0x7fffffff, 0x9) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2, 0x0, &(0x7f0000000480)='\a\x00', 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000140)={0x4, 0x7, 0x140, 0x200, 0xb, 0x5}) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r2) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904"], 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/reserved_size', 0x10000, 0x90) mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x8, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4) openat$cgroup_ro(r4, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x30, 0x40, 0x107, 0x70bd2b, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x8a}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x19}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x30f, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0xbd, 0x2a, 0xaa, 0x60, 0x2304, 0x237, 0xc150, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2fd, 0x2, 0x1, 0x7, 0x100, 0x1, "", [{{0x9, 0x4, 0x36, 0x4, 0xa, 0xa2, 0x21, 0x2e, 0x1, [], [{{0x9, 0x5, 0x9, 0x1, 0xfb335c69d412c474, 0x3, 0x8, 0x2, [@generic={0x37, 0x3, "c6664132275a3c0cced742a078b1b10fcb6c0b28afc6658fd3da26c18b71fbeba314200400f5777fb25cadedcad115baaa517c5bb2"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x10, 0x6, 0x6, 0x29, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x4480}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x41, 0x3}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xf8, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0xfa60}]}}, {{0x9, 0x5, 0xd, 0x4, 0x3ff, 0x71, 0x3, 0x27}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x1b, 0xd, 0xdc}}, {{0x9, 0x5, 0x6, 0x3, 0x200, 0x7, 0x2, 0x6, [@generic={0x7e, 0x31, "4f694fc1d023d372297c32b00a9146c0a3c508ceebcb5290aa59a90254c397393c761fce60df72093be912ef5e47434662196cb99b5c1253c50d726ee260a2afe750ab5690ebcb6a0c37a8a5a2c8e1ff49cb48a8da11e77ede9790a13087cc3f063b48573867a533b68c4f6b96a355a1746215248fc7de378cfc8cf3"}, @generic={0xba, 0x3, "7c86cfbfb090ac08fd9d9d266beb578ffeb0edb613b2832a150ebc64f48d535b798eaa3b2a65324c7862354a2a5d11fac422a841cd9ca482ab4428b33e319dee9f8e9ad724a8420470a44efed8b59320d1c622eabcb97423de2ea99206ef09968e0662561ba6c6e703a8dfbc8480bf27e1958ffe71c4a0455afe02a973f50e6de5170df1778809480d8d2df60855d492a8b8a5fdac982c0a55d5f733a80d17f550ffc1b64228bb5fd974112e4a4d31dec0b3f2ad0a8fed1a"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x81, 0x1, 0x9}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x2a, 0x80, 0xa0}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0x1, 0x6, 0xa, [@generic={0x8, 0x21, "703a0fcb2b3d"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xfa, 0xfff7}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x40, 0x2, 0x8}}]}}, {{0x9, 0x4, 0xe8, 0x4, 0x5, 0xca, 0x83, 0x88, 0xfd, [], [{{0x9, 0x5, 0x0, 0x0, 0x200, 0x9, 0xde, 0xd}}, {{0x9, 0x5, 0x0, 0x10, 0x2dac479760e1c42a, 0x1, 0x2, 0x9c, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0xd5}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x8, 0x0, 0x3, [@generic={0xac, 0x2, "7208c5e2ec2d0a8952aa35206295930040488c5d320611dd8b3c6608218407a02d959302432385eb3e0b35f2daefb7c044927309c4646f03f0032e0040918dabcfe1066485adb0cee4d056bdc0b4893e12007508951f014739dcc6bada5e8ba2c1a6bb3b82b7a63d2483576a43a0fe316f97cc5f1db159a1f32142e0709694ab1b401676889be0479953ed446c1810082a6193a826fbaca2ed28ba10ef88338a1337a0af6ab45a44f6ff"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0x3115}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x96, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2e, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x6, 0x0, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x2}]}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x310, 0x40, 0x1, 0x1e, 0xff, 0x4}, 0x20, &(0x7f0000000280)=ANY=[@ANYBLOB="050f2201000000021c77000014100a05820142c1d39368ee54000000f047010015c6e626c0bac0"], 0x8, [{0xb, &(0x7f0000000d00)=@string={0xb, 0x3, "c9b2445794081557b1"}}, {0xf8, &(0x7f0000000d40)=ANY=[@ANYBLOB="f803bc29098bfc210ae58baedd5b78fa2dbd6ee4af792d110c6d2012606e1dbf8fdf1b7afb1c4f27a6d81fd980e78d3f317567a62299b4678699fa1170697cd86014be0cdaa9372c76b71e3b00406dee128d338c26f191c4525c9f99dcf24eced23914ccdfbb805d2a1978b15b409d2edfeff6878a168d392c6d56a32ca7b19f77f2f7cdbdfa88da2dd6861ca1190d36f6dedbab0ed24f5911d786fc96307800cc58497b57d2a4e1028e10a1086516c15a2e6207eacfed1ebe8a74f6260025345b8ee12cfdb08e34840191e8db0a01c7de431f56c30a90769c8000100000dfb83bc8522e2f0660e775889b620deae27c1bc8a3fb232ad8e9"]}, {0xb0, &(0x7f0000000e40)=ANY=[@ANYBLOB="b003bff46722d216e31534b6e555c577ad241137ec8d894cde6ce9fb93b5b600cbc454e314da7456c2d1f3e54521159782a60894186c32cc43340b0bd85b30ec567930514299766b66ebab831a2417a640f2831786a7fec929ddfdac57188381073daaed6f4196f3cc941dd2ab58135afd4f6b660f8142b4ed9bd174e26cced64b1a3fdd0b4d543b29014a19555251597670b004bb25dc0ed03176c7aa59cdc458741217539448aa91a5eba8d74f3355"]}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x480a}}, {0x82, &(0x7f0000000fc0)=@string={0x82, 0x3, "b1ebf0e80419f79b22d534c7195ea9e03ad67a5b5dc8fdb0d404c59c45a4eb0139bd6480f8ec8b9151419d278caeaf0cea04707c75efb8ce04a346c8333253e64c69c7bee11d18e4fe2862c995970b439ad4975a013632ac2e79e98680771be01e562e51f8d0b6e5056625cedfde82384d9f6204df2fce84ad7ace032215828a"}}, {0xca, &(0x7f0000001080)=@string={0xca, 0x3, "d441362d70c829abe734f934351930021722396fd75a2db7ffdf6428d2b5da1eb73ca3315f62b6a41a2cb07aa245c12ede197825ba6b6d2bf6ee9cbdaf0aebf81bbb8ba75633a87e0f80b5fa5ec2b6b19fef4d63c9d0ec8958cfebe8e87a69a23d617708c598e2012ae0c7d4d08237b0fa34efcd3194c71ff40b28bccf481d722668fcd518878f1977ca67ab3b017d2230874e3e4f7de5669051a0adf8d10335c6d7b0be866949563b82c7ac488fb3da09c3128de77215285907f98841d6145e777ec86f0c085c8a"}}]}) read$FUSE(r1, &(0x7f0000001fc0)={0x2020}, 0x2020) 2m47.565666966s ago: executing program 2 (id=4019): creat(0x0, 0x109) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) 2m32.479621924s ago: executing program 43 (id=4019): creat(0x0, 0x109) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) 11.467390485s ago: executing program 6 (id=4708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) r5 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="2a0000f1280000", 0x7}], 0x1}}], 0x1, 0x20000054) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYBLOB=',group_id']) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r8, r9, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000440)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0xffffffff9046dce8, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) ioctl$BLKPG(0xffffffffffffffff, 0x40084d02, 0x0) 11.06297886s ago: executing program 1 (id=4709): unshare(0x2000100) r0 = fanotify_init(0x8, 0x400) fanotify_mark(r0, 0x80, 0x8000019, 0xffffffffffffffff, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000100)="11868a25ceae01000000000100000010", 0x10) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 11.013052905s ago: executing program 5 (id=4710): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4f, 0x4f, 0x3, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xe, 0x4}, {0xc, 0x4}]}, @float={0x1, 0x0, 0x0, 0x10, 0x1a}, @volatile={0x2, 0x0, 0x0, 0x9, 0x3}, @datasec={0xd, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x9, 0x7f}], "cd387a"}]}, {0x0, [0x30]}}, &(0x7f0000000340)=""/107, 0x6b, 0x6b, 0x1, 0x7}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1802000000080000850000002a000000000400"/33], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x16, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c0000000000002c0012800e000100697036677265746170"], 0x58}}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0xe, 0x0, &(0x7f0000000840)="4cc792df4026fe6eb181b231867b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x4d) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = geteuid() r7 = socket(0x3, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r8) write$FUSE_ATTR(r3, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x80000001, 0x5, 0x0, {0x1, 0x10, 0x1, 0x6, 0x5, 0x3ed, 0x2, 0x400, 0xffffffff, 0x2000, 0x5, r6, r8, 0x2b2, 0x7}}}, 0x78) setfsuid(r6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {r6}}, '.\x00'}) 9.51756395s ago: executing program 1 (id=4711): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) close(0xffffffffffffffff) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) unshare(0x24060400) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 8.730299573s ago: executing program 6 (id=4712): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) (fail_nth: 2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.595943216s ago: executing program 5 (id=4714): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x40, 0x313, 0x0, 0x25dfdbfc, {0x3, 0x7c}, [@typed={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (fail_nth: 2) 8.411748502s ago: executing program 1 (id=4716): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ffffff0000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) 7.987482559s ago: executing program 5 (id=4717): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x43, 0xb9) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@ipv6_newrule={0x58, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_DST={0x14, 0x1, @empty}, @FRA_SRC={0x14, 0x2, @loopback}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x58}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc000000000000004000000000000001"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000010900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000000001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400058008000480040001000900010073797a3000000000140000001100010000000000000000000700000a045c9e2b0c50572a48be525fd54349231fb8009a61cb2086e43b4898d9e7cb01dbc31a673d2410a732301aa7450eecf5f643e828202e48472a9dd7ed78e6d9b4dffd34a0d0f1aa5fff8d"], 0x10c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x148, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1e, 0x29}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x24}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2a}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3e9d}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x5, 0x4}]}) 7.545259935s ago: executing program 1 (id=4718): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000003800)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, 0x0}}], 0x2, 0x40) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @multicast2}}, [0x2, 0xec21, 0x7d68, 0x4, 0x8, 0xf, 0x1, 0x4bb0, 0x5, 0x1, 0x1, 0x2e23, 0x6e, 0xfff, 0x7]}, &(0x7f0000000300)=0x100) 7.30229704s ago: executing program 6 (id=4719): socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0xae, 0x3, 0x1}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r1], 0x20}}, 0x0) 7.135429293s ago: executing program 5 (id=4721): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0a01, 0x0) write$dsp(r0, &(0x7f0000002200)='D', 0x1) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) futex(&(0x7f0000000580), 0x189, 0x0, &(0x7f0000000600)={0x77359400}, 0x0, 0x2) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x1000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x7f) syz_usb_connect$uac1(0x2, 0x85, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8214, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x1, 0x0, 0x5c, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7bf9, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x206, 0x3, 0x1, 0x7, 0xff, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x80, 0x1, 0x6, {0x7, 0x25, 0x1, 0x4, 0x2, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x3, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xff, 0x6, 0x4, {0x7, 0x25, 0x1, 0xc, 0x10, 0x8}}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000200), 0x3) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c000000000000", 0x1b) 7.134047122s ago: executing program 6 (id=4722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be167", 0x66}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967", 0x9a}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a8551", 0x6a}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000109000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000e5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000980)={&(0x7f0000000680), 0xc, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2cbd7000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ff0000003c00000004188e0004008700"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r7 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES8, @ANYRES32], 0x0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 7.077141529s ago: executing program 1 (id=4723): r0 = syz_usb_connect$cdc_ecm(0x7, 0x83, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x1, 0x1, 0x1, 0x60, 0x6, "", [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x2, 0x6, 0x0, 0x28, {{0xa, 0x24, 0x6, 0x0, 0x0, "171b68d21d"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x5, 0x4, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x6, 0x22}, @mdlm={0x15, 0x24, 0x12, 0x4deb}, @obex={0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x6447, 0xff, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x3, 0xd7}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x3, 0xff, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x6, 0x8}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xf6, 0x6, 0x7, 0x18, 0x81}, 0x2d, &(0x7f0000000100)={0x5, 0xf, 0x2d, 0x6, [@generic={0x6, 0x10, 0x2, "e457f2"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x9a, 0x0, 0xa2, 0x0, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x7, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x5, 0xd}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x20, 0x2b, 0x94, {0x94, 0x9, "9849ceff2c913d4fe3111824c1a8d8bf85e03eb2043fea60e1394c4c8e006cb3d2e2c2ae96bdd94e761aa161735bf33aa48ed75bbea2ddaf847205a8b73ca33cf4520611f0195f0851a494fa55a2abf6cb8c25aa7486e7af662026d90ed2e21d5856f1ea7fb730e0628bf8e0ad80f0a229d8a4a8a25535bd67a1d26ac67c5830008ff58359edfa5ce074160ee6701d123f78"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000300)={0x20, 0x13, 0x21, "ab38772da422839a0e432e110a2b0952dbbb71a1b1239d164eb1e9c0e0384009e9"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1464, &(0x7f0000000400)={[{0x97, 0x4e00, "8ce02b143f038e78fd53301b67c87ed8415b6f80e156a9eb364bf372d679b8cbe96167b88a9d559fce1b8974779392215a62b5f8a92ed9032d8bf0e5ef64f7702be7ef4f83c2596bff73ecd0b60f2f341028181627ef2cbde0199d56b6ef2d6ee565245495664fc9f4923aa3218645d0a063c8f0801a405857fc3e065e221175e32429d585d6851946e288f67e666dca803f4d73ad0df1"}, {0x1f, 0x4e00, "57c65d556e447df9e51bbc0a592683b45a41c24cac663245645cd14bdf6c55"}, {0xd9, 0x4e00, "6ec8df7784e81eb77f31d029883b5ce45b2a77b74f3e4b48d09028b54a88862d2fa143f28f337667512aac646c60a754e49756f8a46e609e843530b0d7c7a39738e155f6bbfd1c82f6d01d52c72aea7b13a5e2459b4655ac38f08290a8a6624a06ce072b180ad74413d847106f02118da4cb42d472e257cfa78acde854ae3f4548d1c0fd8ae8d99711a42d70c5df533e7e93d7a357d73d3f839675c9209dde51a33e3fef726349ca5f62afbb1711f6cdf3a9f66670bbb9f658dea836ccddd698615e8481899dc1f41e99f20b36eef1a0ca3e32f05f6058f43c"}, {0x97, 0x4e00, "2dae449f26203afabd51cdacba8c9a02ad79a59c021974f4124793f314877d2f654c602843319c80ef8a15b7b86a05888882a84a59e07fb8f9d68d39c24c7a8772d47f06e909069efd9ffea46b6ea99efb9767e1dd1f1921fb226f96015f32d82d540e8a7ff88d39ab2d62d60171effcad0807c8328cbc3b42f017de909804b68d70d9696357c2ab7077141ff93103011b524f529ac234"}, {0x1000, 0x4e00, "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"}, {0xb4, 0x4e00, "547a869def9afba79bcccadcbe0c76055613c3dc91b768efb8dc91c305531551a180876743f050abc3ca2b90abbf9ea57ee468ab1c22839c7f16d9d78c693d6b25f20c508a050577b8cf43bbb7ea300e74713ae7ce1477fbfa9aa7a0d2fe0f55da31cbafd5fff6e407726dd6bbd07e4330626e793d6e582c8e2a8c99b3905423083a352a3d56f3a8abbfa97881e00d74f48a683b5e4566ccc56a17fa3e930c142a56d31cde5aebdb55062374f243098666ff4564"}, {0xa9, 0x4e00, "9424badbe804455872d06ceb75116546a6a4b504609e2bb1771eb471c532bac2aba793d53fd858d6ce3e8f5bfb151655226bda4341d994c74ba41ac2fc77e58d92b532825a19f9eeccc3e48fdc6719ed5682fc966e6e54f4fb2c01c8bafdc447549bc61db7a8a8b783a73bfe3475840a2f75b5cb594a358ca7f4383fc243e7fa76424eb9d60c40944b3ed86a32ef0ee805ec6fe6eb7e378cf7ee6a0bf5f94614117a8c820bdd828799"}, {0xb7, 0x4e00, "1f2f8def3abe118e25c764aed29b6c44dcf9a9b933f9209d20b8bdb232cb396688aa5269aa0c320b3c1d6374f756b9bc2c654f936a41c98a578519682d1ec91d8dbde5a90d32c780ad277113b0672eb42bf09ecfeaf44a689066623118a604e37e60e7085f5fc9a49b45e7ff82e88ec9a601d8ff8b0d62c30ea8d8ecb130df8927a6f8f00147f1191051637095ec10746ca31c1f4379621340fd8f6fc62e9059841fa5336959363a575d6f2757d6d42e5b0ac3c5221e00"}]}) syz_usb_connect$uac1(0x4, 0xd6, &(0x7f0000001880)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x6, 0x0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x101, 0x5, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0x8, 0x0, "", 'Q'}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xd, 0x4, 0x69, 0xfa, "3d0399", "57758b"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xfc01, 0x401, 0x76, "33af5b"}, @as_header={0x7, 0x24, 0x1, 0x5f, 0x1}, @as_header={0x7, 0x24, 0x1, 0xa, 0x5, 0x3}, @as_header={0x7, 0x24, 0x1, 0x81, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7, 0x80, 0x7, {0x7, 0x25, 0x1, 0x8, 0x7, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xa0, 0xfc, 0x9, 0x60, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0xa, 0x9, 0x7, 0x4}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xb3, 0x2, 0xfc, 0xe4, "a0c8"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x5, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0x2, 0x3, {0x7, 0x25, 0x1, 0xc, 0xa, 0x8}}}}}}}}]}}, &(0x7f0000001c00)={0xa, &(0x7f0000001980)={0xa, 0x6, 0x250, 0x0, 0x8, 0xff, 0xff, 0x6}, 0xc, &(0x7f00000019c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x0, 0x9}]}, 0x4, [{0x24, &(0x7f0000001a00)=@string={0x24, 0x3, "a9efcd0d621d2d4e64a970bcbe10a786ef57d6c342b226d70c12701e4dba83a21f40"}}, {0x6, &(0x7f0000001a40)=@string={0x6, 0x3, "e6586d6b"}}, {0x102, &(0x7f0000001a80)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x400a}}]}) r1 = syz_usb_connect$midi(0x5, 0x113, &(0x7f0000001c80)={{0x12, 0x1, 0x131, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x101, 0x1, 0x1, 0x9, 0x90, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x30, 0x0, [@midi_out_jack={0x13, 0x24, 0x3, 0x3, 0x36, 0x6, [{0xe, 0xfd}, {0x9, 0x5}, {0x7, 0x5}, {0x4c, 0xea}, {0x0, 0x2}, {0x3, 0x5}], 0x2d}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x5, 0x6}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0xc0}, @midi_out_jack={0x19, 0x24, 0x3, 0x2, 0xdd, 0x9, [{0x0, 0x1}, {0x0, 0x8}, {0x40}, {0x1}, {0xa, 0x1}, {0x0, 0x2}, {0x6, 0x9}, {0xff, 0x7}, {0x60, 0x9}], 0x6}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}], [{{0x9, 0x5, 0x9, 0x10, 0x400, 0x7, 0x8, 0x0, {0xe, 0x25, 0x1, 0xa, "c4127970ae4219fe5300"}}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x10, 0x67, 0x7, {0x14, 0x25, 0x1, 0x10, "231dbaf518a45c22a8efe3148e8f13cc"}}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0xd, 0x3, 0xff, {0x11, 0x25, 0x1, 0xd, "ed1a38ed7ac64b2ed792ca1b36"}}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x3, 0xfa, 0xb, {0x10, 0x25, 0x1, 0xc, "1f6cc0c368ca47fbb418f5ca"}}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x9, 0x3, 0xd, {0xb, 0x25, 0x1, 0x7, "85b543d142be66"}}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x3c, 0xe, 0x8, {0x13, 0x25, 0x1, 0xf, "e9c4a19878cc137068600503ba84da"}}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0x59, 0x5, 0x3, {0x10, 0x25, 0x1, 0xc, "eb24f5c9f51b03ea19e35831"}}}]}}}}}]}}, &(0x7f0000002380)={0xa, &(0x7f0000001dc0)={0xa, 0x6, 0x300, 0x1, 0xdd, 0xda, 0x20, 0x4}, 0x88, &(0x7f0000001e00)={0x5, 0xf, 0x88, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xff, 0xff, 0x4, 0x5}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x67, 0x10, 0x4, "f841176220cfe1bdd9c20fbc26c01ad6fb136361da45fd0300d5bf5da9c8c8d30f4b9b9da720613187a192854725ffc586a758cb7615305555f9924ad43a2ce58e89ecee4085297ccdaccaa33ff83b68e90b33db4a4916de04195bd6e7ae8ad432903f82"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x9, 0x9, 0x6, 0x7}]}, 0x9, [{0x9e, &(0x7f0000001ec0)=@string={0x9e, 0x3, "36331c23807d09ac3d0ccb195029475123a06a9023df43ec483f756f61c972d9a13b65961855cad0cabd732223c0a3f320db0eff6cdb2ba9d352efb159b768ce9aeeb8a56ff73146560ab0ba30c29a35733da7eab44593d263a044fbac35389f613cbee95e383ccf0037744dbbe74c1a4d9bc40c7dedfca761eae2a24a054907d00c31f4b77d1a861f216e88287715c4969fe8b794280c85072f3d03"}}, {0x1c, &(0x7f0000001f80)=@string={0x1c, 0x3, "fff31ca531e20699acdd619e5f67ac3e9dc44c0eca0107e83be7"}}, {0x4, &(0x7f0000001fc0)=@lang_id={0x4, 0x3, 0xc07}}, {0xf5, &(0x7f0000002000)=@string={0xf5, 0x3, "ffe8d5ed3371c9067ba425dcba4b75aaa43e94be75574787133733292e9d3b2525cb8c1ec150ed7e732fa6bcea8a6faf901e400a9cf133d57c0323e4353df5a2ce048bcad722c2dfc06f6d47c3d1552feb7672eddf8c8c6ecd67c040cd076672ac4e890b06404f8fcf59f163e834fc7747b34edd3c4bcd3b7c04e5ce43964e8595fa707ec41c783bb352f23034e10a5618aa72b2b6218c150d835d374377948a4847c9c63d4f45c3bdb2571654c6d8aaf897402361c5ca2d9050a5002f737f1f9b1f2a23e3e4b3f2c04ae54dede38eb5d5b481640ba7a6890d5e9ed795a7767e49274d8fd9d1fbfd320ea0db54289a9f39ad02"}}, {0x4, &(0x7f0000002100)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000002140)=@lang_id={0x4, 0x3, 0x3001}}, {0x91, &(0x7f0000002180)=@string={0x91, 0x3, "0b434efd684b6b1f8fab76cd1323fa087244ba68ad690b1ddec4f5bd782537b9616555d94c535bea75117827329e10e4837554e6955f391a11d6c71e1b1110421566660a6177da2d477a38158a92ee3418d9c6f7bcb04bcbaeaff2713f9e02f98eb66a28487598a2a8b10956ab0c80ce83353796db72dfcf523ea0cfb77eb6d533e37f4da8fc8963ac212df84dba0a"}}, {0x4, &(0x7f0000002240)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xd2, &(0x7f0000002280)=@string={0xd2, 0x3, "95c61b6668fe2ed795b31fefc2eda66537caae5be4e224ad288ab60f7cc4b524862531b8902c6ec34e6111ee1e38ed5150f498200b817f8c764bd4f736d4654b77b2b4e8db9b3324cde6c7ba155861bad0f8d44ad34e60338ebb20f37915f6aa67473f3d91e784fd71ead182573420306b231b9233859cc2d308eaafe84bedb624d8b246d94417b1858ccad9891cf23495f3888b5d60dccce26eea5d0989569221fa09781a4e4341c68a0e01c4f6fd9881bd1564e26820db431d4fa1f1b36f670057190b2bed92d70a050c37c1c32cef"}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000002440)=@conn_svc_rsp={0x0, 0x0, 0xa, "43408e4d", {0x3, 0x2, 0x0, 0x3, 0x0, 0x7, 0x6}}) syz_usb_connect$cdc_ncm(0x6, 0x98, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x9, 0x20, 0xc, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "ecbc97e9a4"}, {0x5, 0x24, 0x0, 0xd96}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x33f, 0x9}, {0x6, 0x24, 0x1a, 0x0, 0x20}, [@obex={0x5, 0x24, 0x15, 0x4}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim={0xc, 0x24, 0x1b, 0xf867, 0x3, 0x6, 0x0, 0x5, 0x4}, @acm={0x4, 0x24, 0x2, 0xd}, @dmm={0x7, 0x24, 0x14, 0x10, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0xff, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x4, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x2, 0xf7}}}}}}}]}}, &(0x7f0000002640)={0xa, &(0x7f0000002540)={0xa, 0x6, 0x351, 0xc9, 0xe, 0x6, 0x40, 0x8}, 0x5, &(0x7f0000002580)={0x5, 0xf, 0x5}, 0x2, [{0x23, &(0x7f00000025c0)=@string={0x23, 0x3, "db2114d363bf2fce44c2422513a86fca6c693edae64cb7b9c4e36adca606917945"}}, {0x4, &(0x7f0000002600)=@lang_id={0x4, 0x3, 0x180a}}]}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x10e8, &(0x7f0000002680)={[{0x92, 0x4e00, "e01d7e590e4f94210a4a91b76f5fd6ed919cafc762212e020bbf32b3647434ee615ace33362c3284ff2e7c4f8369cf3ad515666f8c5e0f91e09807c1ed22a4c82683eb4f5aa13108b3e7b3fba4adcae1cefa4aa7b75c7e630f38be3a65c1d14fb123ac733adf1897b6fadb15cb0103f669e6f9b459895c91e9213409410302db12f7d7c5bdff7246d77c91e59ef7d7940176"}, {0x1000, 0x4e00, "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"}, {0x48, 0x4e00, "61fbb99cffb5f715874273242b711765bb069d043683398a0c47d0420ec9b36c99a8e7fe46ea8772e63739d622d59bedcc80a7935f2f9c55caf5c2c4a815440468e0cac741c81cb5"}]}) syz_usb_control_io$uac3(r1, &(0x7f0000003880)={0x14, &(0x7f0000003780)={0x20, 0x23, 0xb2, {0xb2, 0x9, "da9cfef900aa5c6e6ff4908261a813bd5c650ba018d2e86c71e132049f8023fbe951e6cf1e3f05688461aa5ff4661211f085e10b39a4a48744e0daee61f56bee824c525ed2657e6f9d9132fd617f31bc9a3180b341892fdedf9a9dc4fc95fbfb1f148aeb8041ff044577d9921cb4231d2b037a909e8636bf080e214b41819acc07b7d47a35ac1d38cd98e3562a7fc978bf66dd4c863a9463887674d5908319fcafc240be9db088052aa8c1cdfbaa8cd3"}}, &(0x7f0000003840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}}, &(0x7f0000003ac0)={0x44, &(0x7f00000038c0)={0x20, 0xc, 0x15, "e776a11bc3c2abf4f5f82b1f37b1b4e574bf56c500"}, &(0x7f0000003900)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000003940)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000003980)={0x20, 0x81, 0x1, "a5"}, &(0x7f00000039c0)={0x20, 0x82, 0x1, "f2"}, &(0x7f0000003a00)={0x20, 0x83, 0x1, "d4"}, &(0x7f0000003a40)={0x20, 0x84, 0x2, 'es'}, &(0x7f0000003a80)={0x20, 0x85, 0x3, "87d89a"}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x16, &(0x7f0000003bc0)=@generic={0x5, 0x0, 0xe, "a91ddef0", "510c1582cd3422eee3e25cf56eec"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003c00)) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000004540)={0x14, &(0x7f0000004480)={0x20, 0x22, 0x65, {0x65, 0x1, "feaa168292608ba6eef410cda80f9908a862c11be422d2f8eba771d968273f4da6da1f1d6c438b9ad75cc73786afdcd8932d0791eeaa7553d7a78d74735a0d8cee6681759dc5c543d646cacb154ffb5b71b5095ddf37c84e29290cde1dbda302047e24"}}, &(0x7f0000004500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}}, &(0x7f0000004800)={0x44, &(0x7f0000004580)={0x40, 0x14, 0x7d, "12736a158f38d2f280af6db2ea4b65f990cfd22d25bfacfbb3086a072e457a052a5b83e23b48e6706a4594180ef24b1e0535d2d864f9550009427f99029c6461514f854e9fce3928d6403209922855073d14cf178c3f939e91744799b42ca7b43fef2a51abda280b1136e1b54dfcbded427dfefaf0e98d72abf4c135e2"}, &(0x7f0000004640)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000004680)={0x0, 0x8, 0x1, 0x71}, &(0x7f00000046c0)={0x20, 0x81, 0x3, "e3c8f4"}, &(0x7f0000004700)={0x20, 0x82, 0x1, 'M'}, &(0x7f0000004740)={0x20, 0x83, 0x2, "670e"}, &(0x7f0000004780)={0x20, 0x84, 0x3, "87f036"}, &(0x7f00000047c0)={0x20, 0x85, 0x3, "b467cd"}}) syz_usb_control_io$uac2(r1, &(0x7f0000004940)={0x14, &(0x7f0000004880)={0x40, 0xa, 0x56, {0x56, 0x9, "57b938ce1eab3e9dacfb66ac7e353b0e9a0ae0126dfdb03d02147ae717a27c9096fdf5c2a16566ac1a154eddf8fb5783de7fa01da4716e5ca94b525b8be2dc10eb218080fd27ec13aa44c3381afa62e9f6b16302"}}, &(0x7f0000004900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}}, &(0x7f0000004b80)={0x44, &(0x7f0000004980)={0x0, 0x15, 0x5, "edbf296557"}, &(0x7f00000049c0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000004a00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000004a40)={0x20, 0x81, 0x3, "170b66"}, &(0x7f0000004a80)={0x20, 0x82, 0x3, "177eca"}, &(0x7f0000004ac0)={0x20, 0x83, 0x2, "9eae"}, &(0x7f0000004b00)={0x20, 0x84, 0x1, "be"}, &(0x7f0000004b40)={0x20, 0x85, 0x3, "35d3b5"}}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x13c, &(0x7f0000004c00)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12a, 0x2, 0x1, 0x9, 0x50, 0x83, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "b9"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2, 0x7, 0x9}, {0x6, 0x24, 0x1a, 0xfff, 0x4}, [@mdlm_detail={0xc1, 0x24, 0x13, 0x9, "ba7d97b8e664d695cc3a74747b3d6fcf2bc9a5b453f5356c493b86f25a3a46d7a3544e47efd753e44a355830e792aff4f45835780211c639d6e0bfa6c03c7c2e17c75a881c202fb45bb2ba21c447c658e9b5c883f23e4d88ac91f6ac4a0835e1817920717f4f74b7a9eb5aae0b9fea0ce26b4088dc0e31b43ebb1741b56ec8f16aa09bcc455470cb68ac0867287369765025b99731d0a86017127bc4bcad5933649e900d55aaa7d23b5329aae35e2bd4b32de656e9a4c1da46271d34a5"}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x3e, 0x0, 0xa, 0x73, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x1, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x9, 0x30}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x60, 0x3, 0x4}}}}}}}]}}, &(0x7f0000004f00)={0xa, &(0x7f0000004d40)={0xa, 0x6, 0x300, 0xc, 0x1, 0x5, 0x20, 0xff}, 0x12d, &(0x7f0000004d80)={0x5, 0xf, 0x12d, 0x5, [@generic={0xda, 0x10, 0x2, "055d9d97084656d842501fba0968be4f61e399411b45830414d42cea26da53f0d5cabdd2abff9a86fb46d08c20e734ce7feacda0474cafa1a50df218704050974c07f19cd1ecbc3a472621a23f619cd11378c09628af83db2c2fe74116ba13e8a1297466babfdda1d97822f276a99eeff7811d8753451f955cdb8fe4dcb2803a706699043954c8aa53edd0ba50aa6455892f4bda07b12fb8e73dbd1ff6e359b473335f22e01ce63ba08da381661e2fccf62c0172ec644436865646b0d172438b21be8a9d4245a5f35de6df477bdf952de9d09487250fb9"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "011781e203f21f842d2ec0ff7bd6b56f"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4c, 0x3, 0xc0, 0x8, 0x47}, @wireless={0xb, 0x10, 0x1, 0xc, 0x29, 0x80, 0x80, 0x3, 0xcb}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x8, 0xf00, 0x6, [0x3f00, 0x0, 0xf, 0xc131, 0xffc0cf, 0xf0]}]}, 0x1, [{0x4, &(0x7f0000004ec0)=@lang_id={0x4, 0x3, 0x43e}}]}) mount$overlay(0x0, &(0x7f00000058c0)='./file0\x00', &(0x7f0000005900), 0x4002, &(0x7f0000005940)={[{@xino_off}, {@uuid_off}], [{@smackfshat={'smackfshat', 0x3d, '^*&+'}}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000005980)=@conn_svc_rsp={0x0, 0x0, 0xa, "b442ac9b", {0x3, 0x107, 0x0, 0x1, 0x900b, 0x1, 0x69}}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000005ec0)=[0x400]) 4.908837282s ago: executing program 7 (id=4729): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x3, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x121880, 0x141, 0x7}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0xea, &(0x7f00000000c0)=0x0) io_submit(r4, 0x2, &(0x7f0000000100)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x5ea, r3, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x5080, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xb7, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095", @ANYRESHEX, @ANYRES8=r4, @ANYRESHEX=r1], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xe9) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) io_cancel(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f00000001c0)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000880)="9141f9e13ccc56fbe520c82e62e57b8a494aca09d32d55462f57741fe014b7046a", 0x21}], 0x1}}], 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r10, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.802103978s ago: executing program 6 (id=4730): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000300)={0x28, 0x0, r2, 0x0, 0x0}) 4.635398991s ago: executing program 0 (id=4731): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003800)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x1, 0x40) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @multicast2}}, [0x2, 0xec21, 0x7d68, 0x4, 0x8, 0xf, 0x1, 0x4bb0, 0x5, 0x1, 0x1, 0x2e23, 0x6e, 0xfff, 0x7]}, &(0x7f0000000300)=0x100) 4.448547402s ago: executing program 0 (id=4732): socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0xae, 0x3, 0x1}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r1], 0x20}}, 0x0) 4.375138246s ago: executing program 0 (id=4733): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture'], 0x86) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) 4.082823426s ago: executing program 0 (id=4734): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r3, 0x101, 0x20}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000380)={r3, 0x7df6e11a}, &(0x7f00000003c0)=0x8) 4.08114132s ago: executing program 6 (id=4735): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = gettid() syz_open_dev$sndmidi(&(0x7f00000001c0), 0x40, 0x20000) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000021c0)={'wlan0\x00', 0x0}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x8a883, 0x2) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000005580)=""/102392, 0x18ff8) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x806}]}, 0x18}, 0x1, 0x0, 0x0, 0x24048010}, 0xc000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x1, 0x0, 0x3, {0x4, 0x21}, 0x14, 0x7}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r8, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000}) recvmmsg(0xffffffffffffffff, &(0x7f00000048c0), 0x1003, 0x12022, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000ffdbdf250c00000008000300", @ANYRES32=r5, @ANYBLOB="11000700e0a341dcffe65e0543439f4b060000001c0050800400050008000700020017"], 0x4c}, 0x1, 0x0, 0x0, 0x20000015}, 0x20004800) 4.080634675s ago: executing program 7 (id=4736): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80800) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000200)={0x69b38623ccbac5e0, 0xd0, "6627f6973a80ca74782455be20548e8370ce8c502b8eb8016a29f7224928d01102118fa2892d7f326e3dc484e9eb54a4b58946b9507e5274e09b16082e3591fc06e92ec948ff80d43e005d28b86341b01e7d35a4652e1586b0cc6095f2db5873b246a5a1922cb5a8855df70c5f482dc215f02eb09a326f4edf9089da508956b9d4685f5f4dd5d66ee51494f39335f1444b5b78466af40cdf3902b78cb657a91f94012fc5326b6223c98c69d4e20b3092cbeb9c070bf0e628b1b8df6eab325e90eb06f230647679c20142d9dacbe07d77"}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r4 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r4, &(0x7f0000caa000/0x3000)=nil, 0x4000) shmat(r4, &(0x7f0000007000/0x2000)=nil, 0x5000) syz_emit_ethernet(0x52, &(0x7f0000000280)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0xf, 0x4, 0x0, 0x0, 0x44, 0xffff, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x3, 0x17}, @timestamp_prespec={0x44, 0x24, 0x20, 0x3, 0x7, [{@loopback, 0x5}, {@private=0xa010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@private=0xa010101, 0x5}]}]}}, @info_request={0xf, 0x0, 0x0, 0x5, 0x6}}}}}, 0x0) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x1) r5 = getpid() futex(0x0, 0x85, 0x100002, 0x0, 0x0, 0xfffffffc) syz_clone3(&(0x7f0000000500)={0x20000, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340), {0x2}, &(0x7f0000000380)=""/233, 0xe9, &(0x7f0000000480)=""/53, &(0x7f00000004c0)=[r5], 0x1}, 0x58) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7ff, 0x2, 0xb6}) semop(0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4880}, 0x4040) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000800)={r2, &(0x7f0000000700)='pimreg0\x00', 0x26000, &(0x7f0000000740)={@align=0x67c, {0xd, 0x8, 0x4, 0x3ff}}, 0x9, &(0x7f0000000780), &(0x7f00000007c0)=0x9}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r9, 0xc018620b, &(0x7f0000000840)={0x3}) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000001c0)={0x4, 0xff, 0x80, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x1, '\x00', @value64=0x2}}) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x2, 0x40, '\x00', &(0x7f0000000040)=0x7}) 3.836923798s ago: executing program 0 (id=4737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) close(0xffffffffffffffff) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) unshare(0x24060400) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 3.834303416s ago: executing program 1 (id=4738): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e446, [{{0x9, 0x2, 0xffffffffffffffe1}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x42, &(0x7f0000000240)=ANY=[@ANYBLOB]) 2.389314187s ago: executing program 5 (id=4739): r0 = socket$kcm(0x29, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x800) 2.252418578s ago: executing program 0 (id=4740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be167", 0x66}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967", 0x9a}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a8551", 0x6a}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000109000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000e5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000980)={&(0x7f0000000680), 0xc, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2cbd7000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ff0000003c00000004188e0004008700"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r7 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES8, @ANYRES32], 0x0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 2.071385804s ago: executing program 5 (id=4741): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1eb42d00000000000109022400010000002209040000010300020009210000000122040009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) fanotify_init(0x200, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x202d) 2.036970703s ago: executing program 7 (id=4742): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003800)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x1, 0x40) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @multicast2}}, [0x2, 0xec21, 0x7d68, 0x4, 0x8, 0xf, 0x1, 0x4bb0, 0x5, 0x1, 0x1, 0x2e23, 0x6e, 0xfff, 0x7]}, &(0x7f0000000300)=0x100) 1.681715398s ago: executing program 7 (id=4743): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a8010"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 1.538432149s ago: executing program 7 (id=4744): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r6, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r8, 0x101, 0x20}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000380)={r8, 0x7df6e11a}, &(0x7f00000003c0)=0x8) 0s ago: executing program 7 (id=4745): syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x1385) r1 = socket(0x28, 0x5, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1240, 0x0) read(r3, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000001f0000000000000000008500000087000000b7080000000000007b8af8ff000000001f000000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_genetlink_get_family_id$devlink(0x0, r1) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): T5910] usb 7-1: Using ep0 maxpacket: 8 [ 1275.252629][ T5910] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1275.252742][ T5910] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1275.252772][ T5910] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1275.252801][ T5910] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1275.252911][ T5910] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1275.252939][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.498988][T17133] udevd[17133]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1275.626806][ T5910] usb 7-1: GET_CAPABILITIES returned 0 [ 1275.626925][ T5910] usbtmc 7-1:16.0: can't read capabilities [ 1275.795428][T20916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4263'. [ 1275.895673][T20917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.911753][T20917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.058929][ T31] usb 7-1: USB disconnect, device number 32 [ 1277.669333][T13842] team0 (unregistering): Port device team_slave_1 removed [ 1277.729581][T13842] team0 (unregistering): Port device team_slave_0 removed [ 1278.926911][ T37] vmk80xx 2-1:8.0: driver 'vmk80xx' failed to auto-configure device. [ 1279.111341][ T37] usb 2-1: USB disconnect, device number 43 [ 1279.532814][T20975] Bluetooth: MGMT ver 1.23 [ 1279.814377][T20970] FAULT_INJECTION: forcing a failure. [ 1279.814377][T20970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1279.814420][T20970] CPU: 0 UID: 0 PID: 20970 Comm: syz.6.4281 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1279.814453][T20970] Tainted: [L]=SOFTLOCKUP [ 1279.814462][T20970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1279.814477][T20970] Call Trace: [ 1279.814487][T20970] [ 1279.814498][T20970] dump_stack_lvl+0xe8/0x150 [ 1279.814547][T20970] should_fail_ex+0x46b/0x600 [ 1279.814575][T20970] _copy_to_user+0x31/0xb0 [ 1279.814601][T20970] simple_read_from_buffer+0xe1/0x170 [ 1279.814631][T20970] proc_fail_nth_read+0x1be/0x230 [ 1279.814659][T20970] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1279.814686][T20970] ? rw_verify_area+0x2ac/0x4e0 [ 1279.814719][T20970] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1279.814745][T20970] vfs_read+0x212/0xa80 [ 1279.814780][T20970] ? __pfx_vfs_read+0x10/0x10 [ 1279.814809][T20970] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1279.814857][T20970] ? lockdep_hardirqs_on+0x7a/0x110 [ 1279.814880][T20970] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1279.814906][T20970] ? mutex_lock_nested+0x152/0x1d0 [ 1279.814936][T20970] ? fdget_pos+0x252/0x320 [ 1279.814974][T20970] ksys_read+0x156/0x270 [ 1279.815004][T20970] ? __pfx_ksys_read+0x10/0x10 [ 1279.815038][T20970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.815059][T20970] do_syscall_64+0x15f/0xf80 [ 1279.815085][T20970] ? clear_bhb_loop+0x40/0x90 [ 1279.815108][T20970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.815126][T20970] RIP: 0033:0x7f686c80d04e [ 1279.815145][T20970] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1279.815162][T20970] RSP: 002b:00007f686aa9dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1279.815183][T20970] RAX: ffffffffffffffda RBX: 00007f686aa9e6c0 RCX: 00007f686c80d04e [ 1279.815197][T20970] RDX: 000000000000000f RSI: 00007f686aa9e0a0 RDI: 0000000000000005 [ 1279.815209][T20970] RBP: 00007f686aa9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1279.815221][T20970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1279.815233][T20970] R13: 00007f686cac6038 R14: 00007f686cac5fa0 R15: 00007ffe6133a048 [ 1279.815262][T20970] [ 1279.930565][ T31] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1280.120335][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 1280.123771][ T31] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1280.131003][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1280.131069][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.131093][ T31] usb 2-1: Product: syz [ 1280.131132][ T31] usb 2-1: Manufacturer: syz [ 1280.131176][ T31] usb 2-1: SerialNumber: syz [ 1280.458301][ T31] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1280.458330][ T31] r8152-cfgselector 2-1: config 0 descriptor?? [ 1281.170093][T21005] FAULT_INJECTION: forcing a failure. [ 1281.170093][T21005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1281.170133][T21005] CPU: 0 UID: 0 PID: 21005 Comm: syz.6.4291 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1281.170167][T21005] Tainted: [L]=SOFTLOCKUP [ 1281.170176][T21005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1281.170192][T21005] Call Trace: [ 1281.170203][T21005] [ 1281.170218][T21005] dump_stack_lvl+0xe8/0x150 [ 1281.170270][T21005] should_fail_ex+0x46b/0x600 [ 1281.170305][T21005] _copy_to_user+0x31/0xb0 [ 1281.170339][T21005] simple_read_from_buffer+0xe1/0x170 [ 1281.170376][T21005] proc_fail_nth_read+0x1be/0x230 [ 1281.170413][T21005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1281.170449][T21005] ? rw_verify_area+0x2ac/0x4e0 [ 1281.170483][T21005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1281.170517][T21005] vfs_read+0x212/0xa80 [ 1281.170562][T21005] ? __pfx_vfs_read+0x10/0x10 [ 1281.170599][T21005] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1281.170633][T21005] ? lockdep_hardirqs_on+0x7a/0x110 [ 1281.170662][T21005] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1281.170693][T21005] ? mutex_lock_nested+0x152/0x1d0 [ 1281.170731][T21005] ? fdget_pos+0x252/0x320 [ 1281.170772][T21005] ksys_read+0x156/0x270 [ 1281.170811][T21005] ? __pfx_ksys_read+0x10/0x10 [ 1281.170856][T21005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.170883][T21005] do_syscall_64+0x15f/0xf80 [ 1281.170912][T21005] ? trace_irq_disable+0x3b/0x140 [ 1281.170937][T21005] ? clear_bhb_loop+0x40/0x90 [ 1281.170968][T21005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.170993][T21005] RIP: 0033:0x7f686c80d04e [ 1281.171015][T21005] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1281.171036][T21005] RSP: 002b:00007f686aa7cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1281.171060][T21005] RAX: ffffffffffffffda RBX: 00007f686aa7d6c0 RCX: 00007f686c80d04e [ 1281.171078][T21005] RDX: 000000000000000f RSI: 00007f686aa7d0a0 RDI: 0000000000000009 [ 1281.171094][T21005] RBP: 00007f686aa7d090 R08: 0000000000000000 R09: 0000000000000000 [ 1281.171108][T21005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1281.171123][T21005] R13: 00007f686cac6128 R14: 00007f686cac6090 R15: 00007ffe6133a048 [ 1281.171162][T21005] [ 1281.418248][T20991] FAULT_INJECTION: forcing a failure. [ 1281.418248][T20991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1281.418351][T20991] CPU: 1 UID: 0 PID: 20991 Comm: syz.5.4287 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1281.418444][T20991] Tainted: [L]=SOFTLOCKUP [ 1281.418466][T20991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1281.418507][T20991] Call Trace: [ 1281.418531][T20991] [ 1281.418562][T20991] dump_stack_lvl+0xe8/0x150 [ 1281.418682][T20991] should_fail_ex+0x46b/0x600 [ 1281.418769][T20991] _copy_from_iter+0x1d3/0x1670 [ 1281.418882][T20991] ? __pfx__copy_from_iter+0x10/0x10 [ 1281.418947][T20991] ? trace_kmalloc+0x2a/0xf0 [ 1281.419053][T20991] ? rcu_is_watching+0x15/0xb0 [ 1281.419171][T20991] file_tty_write+0x4c9/0xa10 [ 1281.419291][T20991] vfs_write+0x629/0xba0 [ 1281.419431][T20991] ? __pfx_vfs_write+0x10/0x10 [ 1281.419583][T20991] ? __fget_files+0x2a/0x420 [ 1281.419691][T20991] ksys_write+0x156/0x270 [ 1281.419787][T20991] ? __pfx_ksys_write+0x10/0x10 [ 1281.419915][T20991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.419989][T20991] do_syscall_64+0x15f/0xf80 [ 1281.420067][T20991] ? trace_irq_disable+0x3b/0x140 [ 1281.420130][T20991] ? clear_bhb_loop+0x40/0x90 [ 1281.420206][T20991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.420271][T20991] RIP: 0033:0x7fc20bf2c819 [ 1281.420328][T20991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.420375][T20991] RSP: 002b:00007fc20a17e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1281.420440][T20991] RAX: ffffffffffffffda RBX: 00007fc20c1a5fa0 RCX: 00007fc20bf2c819 [ 1281.420485][T20991] RDX: 0000000000001006 RSI: 0000200000001080 RDI: 0000000000000007 [ 1281.420529][T20991] RBP: 00007fc20a17e090 R08: 0000000000000000 R09: 0000000000000000 [ 1281.420570][T20991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1281.420604][T20991] R13: 00007fc20c1a6038 R14: 00007fc20c1a5fa0 R15: 00007ffe685efc38 [ 1281.420701][T20991] [ 1281.733905][ T31] r8152-cfgselector 2-1: USB disconnect, device number 44 [ 1282.061746][T20323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1282.094112][T20323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1282.096293][T20323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1282.187464][T20323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1282.201438][T20323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1282.406445][T20323] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1282.426970][T20323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1282.547644][T20323] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1282.566874][T21022] netlink: 133536 bytes leftover after parsing attributes in process `syz.1.4297'. [ 1282.900580][T16159] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1283.090519][T21042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4300'. [ 1283.119645][T16159] usb 2-1: Using ep0 maxpacket: 16 [ 1283.126353][T16159] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.126384][T16159] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1283.126433][T16159] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1283.215190][T16159] usb 2-1: string descriptor 0 read error: -71 [ 1283.215294][T16159] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1283.215313][T16159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.310028][T16159] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 1283.310064][T16159] usb 2-1: no configuration chosen from 1 choice [ 1283.424524][T16159] usb 2-1: USB disconnect, device number 45 [ 1283.447930][T21051] FAULT_INJECTION: forcing a failure. [ 1283.447930][T21051] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.447971][T21051] CPU: 0 UID: 0 PID: 21051 Comm: syz.6.4302 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1283.448003][T21051] Tainted: [L]=SOFTLOCKUP [ 1283.448012][T21051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1283.448027][T21051] Call Trace: [ 1283.448036][T21051] [ 1283.448047][T21051] dump_stack_lvl+0xe8/0x150 [ 1283.448105][T21051] should_fail_ex+0x46b/0x600 [ 1283.448138][T21051] should_failslab+0xa8/0x100 [ 1283.448164][T21051] kmem_cache_alloc_noprof+0x87/0x680 [ 1283.448198][T21051] ? lockdep_hardirqs_on+0x7a/0x110 [ 1283.448225][T21051] ? do_getname+0x2e/0x250 [ 1283.448254][T21051] do_getname+0x2e/0x250 [ 1283.448278][T21051] ? getname_flags+0x11/0x20 [ 1283.448307][T21051] do_sys_openat2+0xca/0x200 [ 1283.448337][T21051] ? __pfx_do_sys_openat2+0x10/0x10 [ 1283.448366][T21051] ? ksys_write+0x248/0x270 [ 1283.448404][T21051] ? __pfx_ksys_write+0x10/0x10 [ 1283.448442][T21051] __x64_sys_openat+0x138/0x170 [ 1283.448475][T21051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.448501][T21051] do_syscall_64+0x15f/0xf80 [ 1283.448530][T21051] ? trace_irq_disable+0x3b/0x140 [ 1283.448554][T21051] ? clear_bhb_loop+0x40/0x90 [ 1283.448583][T21051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.448608][T21051] RIP: 0033:0x7f686c84c819 [ 1283.448631][T21051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.448652][T21051] RSP: 002b:00007f686aa9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1283.448677][T21051] RAX: ffffffffffffffda RBX: 00007f686cac5fa0 RCX: 00007f686c84c819 [ 1283.448695][T21051] RDX: 0000000000000000 RSI: 0000200000004280 RDI: ffffffffffffff9c [ 1283.448712][T21051] RBP: 00007f686aa9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1283.448727][T21051] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1283.448742][T21051] R13: 00007f686cac6038 R14: 00007f686cac5fa0 R15: 00007ffe6133a048 [ 1283.448777][T21051] [ 1283.856540][T20323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1284.099791][T20323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.153318][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.157065][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.244132][T13844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.244226][T13844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1285.149203][T21095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4317'. [ 1285.681558][T21112] FAULT_INJECTION: forcing a failure. [ 1285.681558][T21112] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.681598][T21112] CPU: 1 UID: 0 PID: 21112 Comm: syz.6.4324 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1285.681630][T21112] Tainted: [L]=SOFTLOCKUP [ 1285.681638][T21112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1285.681652][T21112] Call Trace: [ 1285.681662][T21112] [ 1285.681672][T21112] dump_stack_lvl+0xe8/0x150 [ 1285.681717][T21112] should_fail_ex+0x46b/0x600 [ 1285.681748][T21112] should_failslab+0xa8/0x100 [ 1285.681774][T21112] __kmalloc_noprof+0xdf/0x7b0 [ 1285.681809][T21112] ? tomoyo_encode+0x28b/0x550 [ 1285.681840][T21112] tomoyo_encode+0x28b/0x550 [ 1285.681873][T21112] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1285.681905][T21112] ? tomoyo_domain+0xd8/0x130 [ 1285.681936][T21112] ? tomoyo_path_number_perm+0x219/0x630 [ 1285.681971][T21112] tomoyo_path_number_perm+0x246/0x630 [ 1285.682014][T21112] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1285.682047][T21112] ? __lock_acquire+0x6b5/0x2cf0 [ 1285.682079][T21112] ? do_raw_spin_lock+0x12b/0x2f0 [ 1285.682138][T21112] ? __fget_files+0x2a/0x420 [ 1285.682172][T21112] ? __fget_files+0x2a/0x420 [ 1285.682200][T21112] ? __fget_files+0x3a6/0x420 [ 1285.682229][T21112] ? __fget_files+0x2a/0x420 [ 1285.682263][T21112] security_file_ioctl+0xc3/0x2a0 [ 1285.682301][T21112] __se_sys_ioctl+0x47/0x170 [ 1285.682347][T21112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.682374][T21112] do_syscall_64+0x15f/0xf80 [ 1285.682405][T21112] ? trace_irq_disable+0x3b/0x140 [ 1285.682430][T21112] ? clear_bhb_loop+0x40/0x90 [ 1285.682461][T21112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.682485][T21112] RIP: 0033:0x7f686c84c819 [ 1285.682509][T21112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.682531][T21112] RSP: 002b:00007f686aa9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1285.682556][T21112] RAX: ffffffffffffffda RBX: 00007f686cac5fa0 RCX: 00007f686c84c819 [ 1285.682575][T21112] RDX: 0000200000000080 RSI: 0000000000008b20 RDI: 0000000000000003 [ 1285.682591][T21112] RBP: 00007f686aa9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1285.682605][T21112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.682620][T21112] R13: 00007f686cac6038 R14: 00007f686cac5fa0 R15: 00007ffe6133a048 [ 1285.682658][T21112] [ 1285.685734][T21112] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1286.007197][T20323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1286.400864][T21089] FAULT_INJECTION: forcing a failure. [ 1286.400864][T21089] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.400907][T21089] CPU: 1 UID: 0 PID: 21089 Comm: syz.5.4314 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1286.400940][T21089] Tainted: [L]=SOFTLOCKUP [ 1286.400950][T21089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1286.400965][T21089] Call Trace: [ 1286.400975][T21089] [ 1286.400986][T21089] dump_stack_lvl+0xe8/0x150 [ 1286.401031][T21089] should_fail_ex+0x46b/0x600 [ 1286.401064][T21089] should_failslab+0xa8/0x100 [ 1286.401089][T21089] __kmalloc_noprof+0xdf/0x7b0 [ 1286.401126][T21089] ? tomoyo_encode+0x28b/0x550 [ 1286.401158][T21089] tomoyo_encode+0x28b/0x550 [ 1286.401189][T21089] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1286.401228][T21089] ? tomoyo_path_number_perm+0x219/0x630 [ 1286.401263][T21089] tomoyo_path_number_perm+0x246/0x630 [ 1286.401302][T21089] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1286.401336][T21089] ? __lock_acquire+0x6b5/0x2cf0 [ 1286.401369][T21089] ? do_raw_spin_lock+0x12b/0x2f0 [ 1286.401464][T21089] ? __fget_files+0x2a/0x420 [ 1286.401499][T21089] ? __fget_files+0x2a/0x420 [ 1286.401529][T21089] ? __fget_files+0x3a6/0x420 [ 1286.401558][T21089] ? __fget_files+0x2a/0x420 [ 1286.401593][T21089] security_file_ioctl+0xc3/0x2a0 [ 1286.401633][T21089] __se_sys_ioctl+0x47/0x170 [ 1286.401670][T21089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.401698][T21089] do_syscall_64+0x15f/0xf80 [ 1286.401728][T21089] ? trace_irq_disable+0x3b/0x140 [ 1286.401753][T21089] ? clear_bhb_loop+0x40/0x90 [ 1286.401782][T21089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.401807][T21089] RIP: 0033:0x7fc20bf2c819 [ 1286.401829][T21089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.401851][T21089] RSP: 002b:00007fc20a17e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1286.401876][T21089] RAX: ffffffffffffffda RBX: 00007fc20c1a5fa0 RCX: 00007fc20bf2c819 [ 1286.401896][T21089] RDX: 0000000000000000 RSI: 0000000000005522 RDI: 0000000000000003 [ 1286.401912][T21089] RBP: 00007fc20a17e090 R08: 0000000000000000 R09: 0000000000000000 [ 1286.401927][T21089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.401943][T21089] R13: 00007fc20c1a6038 R14: 00007fc20c1a5fa0 R15: 00007ffe685efc38 [ 1286.401983][T21089] [ 1286.408018][T21089] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1286.443694][T20323] veth0_vlan: entered promiscuous mode [ 1286.852188][T20323] veth1_vlan: entered promiscuous mode [ 1286.935584][T20323] veth0_macvtap: entered promiscuous mode [ 1286.954563][T20323] veth1_macvtap: entered promiscuous mode [ 1287.066700][T20323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1287.134540][T20323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1287.323292][ T991] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.325418][ T991] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.326603][ T991] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.361037][ T991] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.506685][T21148] FAULT_INJECTION: forcing a failure. [ 1287.506685][T21148] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.506734][T21148] CPU: 1 UID: 0 PID: 21148 Comm: syz.1.4338 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1287.506765][T21148] Tainted: [L]=SOFTLOCKUP [ 1287.506774][T21148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1287.506788][T21148] Call Trace: [ 1287.506798][T21148] [ 1287.506808][T21148] dump_stack_lvl+0xe8/0x150 [ 1287.506851][T21148] should_fail_ex+0x46b/0x600 [ 1287.506885][T21148] should_failslab+0xa8/0x100 [ 1287.506911][T21148] __kmalloc_noprof+0xdf/0x7b0 [ 1287.506948][T21148] ? tomoyo_encode+0x28b/0x550 [ 1287.506980][T21148] tomoyo_encode+0x28b/0x550 [ 1287.507013][T21148] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1287.507051][T21148] ? tomoyo_path_number_perm+0x219/0x630 [ 1287.507086][T21148] tomoyo_path_number_perm+0x246/0x630 [ 1287.507125][T21148] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1287.507159][T21148] ? __lock_acquire+0x6b5/0x2cf0 [ 1287.507191][T21148] ? do_raw_spin_lock+0x12b/0x2f0 [ 1287.507251][T21148] ? __fget_files+0x2a/0x420 [ 1287.507286][T21148] ? __fget_files+0x2a/0x420 [ 1287.507315][T21148] ? __fget_files+0x3a6/0x420 [ 1287.507344][T21148] ? __fget_files+0x2a/0x420 [ 1287.507381][T21148] security_file_ioctl+0xc3/0x2a0 [ 1287.507417][T21148] __se_sys_ioctl+0x47/0x170 [ 1287.507452][T21148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.507479][T21148] do_syscall_64+0x15f/0xf80 [ 1287.507508][T21148] ? trace_irq_disable+0x3b/0x140 [ 1287.507532][T21148] ? clear_bhb_loop+0x40/0x90 [ 1287.507561][T21148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.507585][T21148] RIP: 0033:0x7f22c577c819 [ 1287.507606][T21148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.507626][T21148] RSP: 002b:00007f22c39d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1287.507648][T21148] RAX: ffffffffffffffda RBX: 00007f22c59f5fa0 RCX: 00007f22c577c819 [ 1287.507665][T21148] RDX: 00002000000003c0 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 1287.507680][T21148] RBP: 00007f22c39d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1287.507694][T21148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.507715][T21148] R13: 00007f22c59f6038 R14: 00007f22c59f5fa0 R15: 00007ffc3bb0b128 [ 1287.507751][T21148] [ 1287.522527][T21148] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1288.166260][ T815] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1288.413412][ T815] usb 2-1: Using ep0 maxpacket: 16 [ 1288.415883][ T815] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 1288.415916][ T815] usb 2-1: config 0 has no interface number 0 [ 1288.415951][ T815] usb 2-1: config 0 interface 117 has no altsetting 0 [ 1288.428214][ T815] usb 2-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=d1.05 [ 1288.428248][ T815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.428277][ T815] usb 2-1: Product: syz [ 1288.428293][ T815] usb 2-1: Manufacturer: syz [ 1288.428309][ T815] usb 2-1: SerialNumber: syz [ 1288.498707][ T815] usb 2-1: config 0 descriptor?? [ 1288.821597][ T815] asix 2-1:0.117: probe with driver asix failed with error -22 [ 1288.907419][ T815] usb 2-1: USB disconnect, device number 46 [ 1289.452534][T13838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.452555][T13838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.708512][ T1518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.708537][ T1518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.806768][T16159] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 1289.979621][T16159] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1289.980156][T16159] usb 6-1: not running at top speed; connect to a high speed hub [ 1290.009903][T16159] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 1290.009942][T16159] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1290.009982][T16159] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 1290.016081][T16159] usb 6-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 1290.016114][T16159] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.016137][T16159] usb 6-1: Product: syz [ 1290.016175][T16159] usb 6-1: Manufacturer: syz [ 1290.016192][T16159] usb 6-1: SerialNumber: syz [ 1290.276418][T21191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4353'. [ 1293.733053][T16159] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1293.900349][T16159] usb 6-1: USB disconnect, device number 52 [ 1294.155693][T21231] FAULT_INJECTION: forcing a failure. [ 1294.155693][T21231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1294.155733][T21231] CPU: 0 UID: 0 PID: 21231 Comm: syz.6.4360 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1294.155764][T21231] Tainted: [L]=SOFTLOCKUP [ 1294.155773][T21231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1294.155788][T21231] Call Trace: [ 1294.155797][T21231] [ 1294.155809][T21231] dump_stack_lvl+0xe8/0x150 [ 1294.155857][T21231] should_fail_ex+0x46b/0x600 [ 1294.155889][T21231] _copy_to_user+0x31/0xb0 [ 1294.155922][T21231] simple_read_from_buffer+0xe1/0x170 [ 1294.155960][T21231] proc_fail_nth_read+0x1be/0x230 [ 1294.155997][T21231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1294.156033][T21231] ? rw_verify_area+0x2ac/0x4e0 [ 1294.156067][T21231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1294.156100][T21231] vfs_read+0x212/0xa80 [ 1294.156152][T21231] ? __pfx_vfs_read+0x10/0x10 [ 1294.156187][T21231] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1294.156220][T21231] ? lockdep_hardirqs_on+0x7a/0x110 [ 1294.156250][T21231] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1294.156280][T21231] ? mutex_lock_nested+0x152/0x1d0 [ 1294.156317][T21231] ? fdget_pos+0x252/0x320 [ 1294.156359][T21231] ksys_read+0x156/0x270 [ 1294.156397][T21231] ? __pfx_ksys_read+0x10/0x10 [ 1294.156443][T21231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.156470][T21231] do_syscall_64+0x15f/0xf80 [ 1294.156501][T21231] ? trace_irq_disable+0x3b/0x140 [ 1294.156526][T21231] ? clear_bhb_loop+0x40/0x90 [ 1294.156556][T21231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.156580][T21231] RIP: 0033:0x7f686c80d04e [ 1294.156603][T21231] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1294.156624][T21231] RSP: 002b:00007f686aa9dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1294.156649][T21231] RAX: ffffffffffffffda RBX: 00007f686aa9e6c0 RCX: 00007f686c80d04e [ 1294.156667][T21231] RDX: 000000000000000f RSI: 00007f686aa9e0a0 RDI: 0000000000000003 [ 1294.156682][T21231] RBP: 00007f686aa9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1294.156697][T21231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1294.156711][T21231] R13: 00007f686cac6038 R14: 00007f686cac5fa0 R15: 00007ffe6133a048 [ 1294.156748][T21231] [ 1296.377686][T15858] udevd[15858]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1297.228226][ T5791] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1297.517177][ T5791] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.517240][ T5791] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1297.517267][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.564226][ T5791] usb 1-1: config 0 descriptor?? [ 1297.593790][ T5791] pwc: Askey VC010 type 2 USB webcam detected. [ 1298.103531][ T5466] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1298.116653][ T5791] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1298.128955][ T5791] pwc: recv_control_msg error -32 req 02 val 2700 [ 1298.130902][ T5791] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1298.443501][ T5791] pwc: recv_control_msg error -71 req 04 val 1300 [ 1298.445736][ T5791] pwc: recv_control_msg error -71 req 04 val 1400 [ 1298.447096][ T5791] pwc: recv_control_msg error -71 req 02 val 2000 [ 1298.480798][ T5791] pwc: recv_control_msg error -71 req 02 val 2100 [ 1298.482574][ T5791] pwc: recv_control_msg error -71 req 04 val 1500 [ 1298.484174][ T5791] pwc: recv_control_msg error -71 req 02 val 2500 [ 1298.486471][ T5791] pwc: recv_control_msg error -71 req 02 val 2400 [ 1298.487007][ T5791] pwc: recv_control_msg error -71 req 02 val 2600 [ 1298.499992][ T5791] pwc: recv_control_msg error -71 req 02 val 2900 [ 1298.518195][ T5791] pwc: recv_control_msg error -71 req 02 val 2800 [ 1298.542561][ T5791] pwc: recv_control_msg error -71 req 04 val 1100 [ 1298.543101][ T5791] pwc: recv_control_msg error -71 req 04 val 1200 [ 1298.582875][ T5791] pwc: Registered as video103. [ 1298.598035][ T5791] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input58 [ 1298.621656][ T5791] usb 1-1: USB disconnect, device number 72 [ 1300.440646][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.440722][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.780228][T21368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4404'. [ 1302.825312][T21372] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4402'. [ 1303.064125][T15617] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1303.218898][T15617] usb 2-1: Using ep0 maxpacket: 8 [ 1303.224875][T15617] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1303.224950][T15617] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1303.224984][T15617] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1303.225015][T15617] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1303.225044][T15617] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1303.226368][T15617] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1303.226423][T15617] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1303.226548][T15617] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1303.226587][T15617] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1303.226618][T15617] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1303.268282][T15617] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1303.268344][T15617] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1303.268376][T15617] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1303.268406][T15617] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1303.268436][T15617] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1303.406095][T15617] usb 2-1: string descriptor 0 read error: -22 [ 1303.406261][T15617] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1303.406290][T15617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.506700][T21397] FAULT_INJECTION: forcing a failure. [ 1303.506700][T21397] name failslab, interval 1, probability 0, space 0, times 0 [ 1303.506736][T21397] CPU: 1 UID: 0 PID: 21397 Comm: syz.6.4411 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1303.506762][T21397] Tainted: [L]=SOFTLOCKUP [ 1303.506770][T21397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1303.506783][T21397] Call Trace: [ 1303.506792][T21397] [ 1303.506801][T21397] dump_stack_lvl+0xe8/0x150 [ 1303.506840][T21397] should_fail_ex+0x46b/0x600 [ 1303.506880][T21397] should_failslab+0xa8/0x100 [ 1303.506903][T21397] kmem_cache_alloc_noprof+0x87/0x680 [ 1303.506936][T21397] ? percpu_counter_add_batch+0xea/0x1d0 [ 1303.507053][T21397] ? ep_insert+0x285/0x1820 [ 1303.507087][T21397] ep_insert+0x285/0x1820 [ 1303.507133][T21397] ? __pfx_ep_insert+0x10/0x10 [ 1303.507166][T21397] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1303.507191][T21397] ? lockdep_hardirqs_on+0x7a/0x110 [ 1303.507213][T21397] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1303.507237][T21397] ? mutex_lock_nested+0x152/0x1d0 [ 1303.507265][T21397] ? do_epoll_ctl+0x3d2/0xe90 [ 1303.507293][T21397] do_epoll_ctl+0x7fd/0xe90 [ 1303.507328][T21397] __x64_sys_epoll_ctl+0x165/0x1b0 [ 1303.507362][T21397] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1303.507399][T21397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.507434][T21397] do_syscall_64+0x15f/0xf80 [ 1303.507458][T21397] ? trace_irq_disable+0x3b/0x140 [ 1303.507479][T21397] ? clear_bhb_loop+0x40/0x90 [ 1303.507503][T21397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.507522][T21397] RIP: 0033:0x7f686c84c819 [ 1303.507541][T21397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1303.507560][T21397] RSP: 002b:00007f686aa9e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1303.507585][T21397] RAX: ffffffffffffffda RBX: 00007f686cac5fa0 RCX: 00007f686c84c819 [ 1303.507602][T21397] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 1303.507615][T21397] RBP: 00007f686aa9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1303.507630][T21397] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1303.507645][T21397] R13: 00007f686cac6038 R14: 00007f686cac5fa0 R15: 00007ffe6133a048 [ 1303.507681][T21397] [ 1303.819210][T15617] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1304.051125][T15617] usb 2-1: USB disconnect, device number 47 [ 1304.081622][T16159] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1305.026176][T16159] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.026241][T16159] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1305.026271][T16159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.070534][T16159] usb 6-1: config 0 descriptor?? [ 1305.117836][T16159] pwc: Askey VC010 type 2 USB webcam detected. [ 1305.289215][T21424] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4418'. [ 1305.507828][T16159] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1307.001883][T16159] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1307.002403][T16159] pwc: recv_control_msg error -71 req 04 val 1000 [ 1307.006840][T16159] pwc: recv_control_msg error -71 req 04 val 1300 [ 1307.008948][T16159] pwc: recv_control_msg error -71 req 04 val 1400 [ 1307.009440][T16159] pwc: recv_control_msg error -71 req 02 val 2000 [ 1307.009957][T16159] pwc: recv_control_msg error -71 req 02 val 2100 [ 1307.012660][T16159] pwc: recv_control_msg error -71 req 04 val 1500 [ 1307.018231][T16159] pwc: recv_control_msg error -71 req 02 val 2500 [ 1307.022011][T16159] pwc: recv_control_msg error -71 req 02 val 2400 [ 1307.024513][T16159] pwc: recv_control_msg error -71 req 02 val 2600 [ 1307.027076][T16159] pwc: recv_control_msg error -71 req 02 val 2900 [ 1307.038515][T16159] pwc: recv_control_msg error -71 req 02 val 2800 [ 1307.044642][T16159] pwc: recv_control_msg error -71 req 04 val 1100 [ 1307.047713][T16159] pwc: recv_control_msg error -71 req 04 val 1200 [ 1307.242322][T16159] pwc: Registered as video103. [ 1307.248692][T15617] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1307.277707][T16159] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input59 [ 1307.361166][T16159] usb 6-1: USB disconnect, device number 53 [ 1307.365819][T21464] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4430'. [ 1307.428247][T15617] usb 2-1: Using ep0 maxpacket: 16 [ 1307.432032][T15617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.432082][T15617] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1307.432108][T15617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.653178][T15617] usb 2-1: config 0 descriptor?? [ 1307.717509][T15617] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1307.735904][T21475] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4435'. [ 1308.268415][T21490] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4439'. [ 1308.368308][T16159] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1308.519620][T16159] usb 6-1: Using ep0 maxpacket: 16 [ 1308.528015][T16159] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1308.555287][T16159] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1308.555323][T16159] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.555347][T16159] usb 6-1: Product: syz [ 1308.555364][T16159] usb 6-1: Manufacturer: syz [ 1308.555381][T16159] usb 6-1: SerialNumber: syz [ 1308.602588][T16159] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1308.602619][T16159] r8152-cfgselector 6-1: config 0 descriptor?? [ 1309.030229][T15617] r8152-cfgselector 6-1: USB disconnect, device number 54 [ 1309.588965][T21534] FAULT_INJECTION: forcing a failure. [ 1309.588965][T21534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1309.589005][T21534] CPU: 1 UID: 0 PID: 21534 Comm: syz.0.4451 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1309.589038][T21534] Tainted: [L]=SOFTLOCKUP [ 1309.589047][T21534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1309.589062][T21534] Call Trace: [ 1309.589071][T21534] [ 1309.589082][T21534] dump_stack_lvl+0xe8/0x150 [ 1309.589129][T21534] should_fail_ex+0x46b/0x600 [ 1309.589165][T21534] _copy_to_user+0x31/0xb0 [ 1309.589199][T21534] simple_read_from_buffer+0xe1/0x170 [ 1309.589238][T21534] proc_fail_nth_read+0x1be/0x230 [ 1309.589274][T21534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1309.589310][T21534] ? rw_verify_area+0x2ac/0x4e0 [ 1309.589354][T21534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1309.589387][T21534] vfs_read+0x212/0xa80 [ 1309.589430][T21534] ? __pfx_vfs_read+0x10/0x10 [ 1309.589468][T21534] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1309.589502][T21534] ? lockdep_hardirqs_on+0x7a/0x110 [ 1309.589532][T21534] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1309.589562][T21534] ? mutex_lock_nested+0x152/0x1d0 [ 1309.589598][T21534] ? fdget_pos+0x252/0x320 [ 1309.589639][T21534] ksys_read+0x156/0x270 [ 1309.589676][T21534] ? __pfx_ksys_read+0x10/0x10 [ 1309.589721][T21534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.589748][T21534] do_syscall_64+0x15f/0xf80 [ 1309.589777][T21534] ? trace_irq_disable+0x3b/0x140 [ 1309.589802][T21534] ? clear_bhb_loop+0x40/0x90 [ 1309.589832][T21534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.589856][T21534] RIP: 0033:0x7f165036d04e [ 1309.589881][T21534] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1309.589902][T21534] RSP: 002b:00007f164e5fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1309.589926][T21534] RAX: ffffffffffffffda RBX: 00007f164e5fe6c0 RCX: 00007f165036d04e [ 1309.589942][T21534] RDX: 000000000000000f RSI: 00007f164e5fe0a0 RDI: 0000000000000004 [ 1309.589956][T21534] RBP: 00007f164e5fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1309.589970][T21534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1309.589985][T21534] R13: 00007f1650626038 R14: 00007f1650625fa0 R15: 00007fff69c46858 [ 1309.590021][T21534] [ 1309.850484][T21536] FAULT_INJECTION: forcing a failure. [ 1309.850484][T21536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1309.850526][T21536] CPU: 1 UID: 0 PID: 21536 Comm: syz.6.4452 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1309.850559][T21536] Tainted: [L]=SOFTLOCKUP [ 1309.850568][T21536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1309.850583][T21536] Call Trace: [ 1309.850592][T21536] [ 1309.850603][T21536] dump_stack_lvl+0xe8/0x150 [ 1309.850647][T21536] should_fail_ex+0x46b/0x600 [ 1309.850680][T21536] _copy_from_user+0x2d/0xb0 [ 1309.850712][T21536] __copy_msghdr+0x3c5/0x5b0 [ 1309.850748][T21536] ___sys_sendmsg+0x213/0x360 [ 1309.850774][T21536] ? __lock_acquire+0x6b5/0x2cf0 [ 1309.850809][T21536] ? __pfx____sys_sendmsg+0x10/0x10 [ 1309.850874][T21536] ? __fget_files+0x2a/0x420 [ 1309.850905][T21536] ? __fget_files+0x3a6/0x420 [ 1309.850946][T21536] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1309.850976][T21536] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1309.851012][T21536] ? __pfx_ksys_write+0x10/0x10 [ 1309.851057][T21536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.851084][T21536] do_syscall_64+0x15f/0xf80 [ 1309.851114][T21536] ? trace_irq_disable+0x3b/0x140 [ 1309.851139][T21536] ? clear_bhb_loop+0x40/0x90 [ 1309.851169][T21536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.851194][T21536] RIP: 0033:0x7f686c84c819 [ 1309.851217][T21536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1309.851238][T21536] RSP: 002b:00007f686aa9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1309.851263][T21536] RAX: ffffffffffffffda RBX: 00007f686cac5fa0 RCX: 00007f686c84c819 [ 1309.851281][T21536] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1309.851297][T21536] RBP: 00007f686aa9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1309.851313][T21536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1309.851327][T21536] R13: 00007f686cac6038 R14: 00007f686cac5fa0 R15: 00007ffe6133a048 [ 1309.851365][T21536] [ 1310.543157][ T31] usb 2-1: USB disconnect, device number 48 [ 1310.631764][T15617] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1310.821741][T15617] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.821805][T15617] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1310.821834][T15617] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.870991][T15617] usb 6-1: config 0 descriptor?? [ 1310.906702][T15617] pwc: Askey VC010 type 2 USB webcam detected. [ 1311.058797][ T31] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1311.234408][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1311.235185][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 1311.237577][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 1311.237627][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1311.237670][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 1311.293627][ T31] usb 2-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 1311.293663][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.293801][ T31] usb 2-1: Product: syz [ 1311.293820][ T31] usb 2-1: Manufacturer: syz [ 1311.293838][ T31] usb 2-1: SerialNumber: syz [ 1311.334311][T15617] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1313.367242][T15617] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1313.367752][T15617] pwc: recv_control_msg error -71 req 04 val 1000 [ 1313.391263][T15617] pwc: recv_control_msg error -71 req 04 val 1300 [ 1313.393663][T15617] pwc: recv_control_msg error -71 req 04 val 1400 [ 1313.395115][T15617] pwc: recv_control_msg error -71 req 02 val 2000 [ 1313.396201][T15617] pwc: recv_control_msg error -71 req 02 val 2100 [ 1313.428238][T15617] pwc: recv_control_msg error -71 req 04 val 1500 [ 1313.428759][T15617] pwc: recv_control_msg error -71 req 02 val 2500 [ 1313.429989][T15617] pwc: recv_control_msg error -71 req 02 val 2400 [ 1313.431595][T15617] pwc: recv_control_msg error -71 req 02 val 2600 [ 1313.432110][T15617] pwc: recv_control_msg error -71 req 02 val 2900 [ 1313.433651][T15617] pwc: recv_control_msg error -71 req 02 val 2800 [ 1313.436353][T15617] pwc: recv_control_msg error -71 req 04 val 1100 [ 1313.436856][T15617] pwc: recv_control_msg error -71 req 04 val 1200 [ 1313.581332][T15617] pwc: Registered as video103. [ 1313.593602][T15617] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input60 [ 1313.638318][T15617] usb 6-1: USB disconnect, device number 55 [ 1313.961373][ T31] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1314.453619][ T31] usb 2-1: USB disconnect, device number 49 [ 1314.784141][T15858] udevd[15858]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1315.788207][T15617] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1315.958456][T15617] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1315.963814][T15617] usb 2-1: not running at top speed; connect to a high speed hub [ 1315.967454][T15617] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 1315.967493][T15617] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1315.967534][T15617] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 1316.023431][T15617] usb 2-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 1316.023466][T15617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.023489][T15617] usb 2-1: Product: syz [ 1316.023506][T15617] usb 2-1: Manufacturer: syz [ 1316.023523][T15617] usb 2-1: SerialNumber: syz [ 1316.175181][ T5466] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1316.922224][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1316.993249][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1316.997271][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1317.035623][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1317.181325][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1317.905884][T21668] lo speed is unknown, defaulting to 1000 [ 1317.909576][ T31] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1318.098251][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 1318.101475][ T31] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1318.107165][ T31] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1318.107194][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.107215][ T31] usb 6-1: Product: syz [ 1318.107231][ T31] usb 6-1: Manufacturer: syz [ 1318.107246][ T31] usb 6-1: SerialNumber: syz [ 1318.271252][ T31] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1318.271282][ T31] r8152-cfgselector 6-1: config 0 descriptor?? [ 1318.732386][ T815] r8152-cfgselector 6-1: USB disconnect, device number 56 [ 1318.820854][T15617] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1318.908595][T15617] usb 2-1: USB disconnect, device number 50 [ 1319.021859][T15858] udevd[15858]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1319.110952][T21704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4501'. [ 1319.290044][ T5121] Bluetooth: hci3: command tx timeout [ 1319.497439][T21712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4505'. [ 1319.647927][T13843] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1319.647959][T13843] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.870979][T15617] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1320.042066][T15617] usb 1-1: too many configurations: 70, using maximum allowed: 8 [ 1320.045799][T15617] usb 1-1: config index 0 descriptor too short (expected 65505, got 72) [ 1320.047050][T15617] usb 1-1: config index 1 descriptor too short (expected 65505, got 72) [ 1320.073317][T15617] usb 1-1: config index 2 descriptor too short (expected 65505, got 72) [ 1320.074744][T15617] usb 1-1: config index 3 descriptor too short (expected 65505, got 72) [ 1320.075938][T15617] usb 1-1: config index 4 descriptor too short (expected 65505, got 72) [ 1320.077301][T15617] usb 1-1: config index 5 descriptor too short (expected 65505, got 72) [ 1320.156465][T15617] usb 1-1: config index 6 descriptor too short (expected 65505, got 72) [ 1320.199214][T15617] usb 1-1: config index 7 descriptor too short (expected 65505, got 72) [ 1320.218950][T15617] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1320.218983][T15617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.219007][T15617] usb 1-1: Product: syz [ 1320.219022][T15617] usb 1-1: Manufacturer: syz [ 1320.219039][T15617] usb 1-1: SerialNumber: syz [ 1320.308693][T15617] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1320.764138][ T5890] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1321.206590][T13843] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1321.206632][T13843] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.250564][ T31] usb 1-1: USB disconnect, device number 73 [ 1321.275350][ T5890] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1321.366202][ T31] usb 1-1: ath9k_htc: USB layer deinitialized [ 1321.372351][ T5121] Bluetooth: hci3: command tx timeout [ 1321.770776][T21748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4512'. [ 1321.960192][T13843] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1321.960233][T13843] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.093052][ T5466] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1322.166326][T21668] chnl_net:caif_netlink_parms(): no params data found [ 1322.308669][ T31] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1322.442432][T21762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4516'. [ 1322.459651][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 1322.462092][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1322.462127][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1322.462170][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1322.462196][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.513033][ T31] usb 2-1: config 0 descriptor?? [ 1322.751309][T21768] FAULT_INJECTION: forcing a failure. [ 1322.751309][T21768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1322.751344][T21768] CPU: 1 UID: 0 PID: 21768 Comm: syz.5.4519 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1322.751370][T21768] Tainted: [L]=SOFTLOCKUP [ 1322.751380][T21768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1322.751392][T21768] Call Trace: [ 1322.751401][T21768] [ 1322.751409][T21768] dump_stack_lvl+0xe8/0x150 [ 1322.751446][T21768] should_fail_ex+0x46b/0x600 [ 1322.751472][T21768] _copy_to_user+0x31/0xb0 [ 1322.751499][T21768] simple_read_from_buffer+0xe1/0x170 [ 1322.751528][T21768] proc_fail_nth_read+0x1be/0x230 [ 1322.751557][T21768] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1322.751586][T21768] ? rw_verify_area+0x2ac/0x4e0 [ 1322.751613][T21768] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1322.751639][T21768] vfs_read+0x212/0xa80 [ 1322.751674][T21768] ? __pfx_vfs_read+0x10/0x10 [ 1322.751704][T21768] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1322.751731][T21768] ? lockdep_hardirqs_on+0x7a/0x110 [ 1322.751755][T21768] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1322.751780][T21768] ? mutex_lock_nested+0x152/0x1d0 [ 1322.751813][T21768] ? fdget_pos+0x252/0x320 [ 1322.751847][T21768] ksys_read+0x156/0x270 [ 1322.751877][T21768] ? __pfx_ksys_read+0x10/0x10 [ 1322.751912][T21768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.751933][T21768] do_syscall_64+0x15f/0xf80 [ 1322.751956][T21768] ? trace_irq_disable+0x3b/0x140 [ 1322.751975][T21768] ? clear_bhb_loop+0x40/0x90 [ 1322.751998][T21768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.752017][T21768] RIP: 0033:0x7fc20beed04e [ 1322.752035][T21768] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1322.752053][T21768] RSP: 002b:00007fc20a17dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1322.752074][T21768] RAX: ffffffffffffffda RBX: 00007fc20a17e6c0 RCX: 00007fc20beed04e [ 1322.752088][T21768] RDX: 000000000000000f RSI: 00007fc20a17e0a0 RDI: 0000000000000003 [ 1322.752100][T21768] RBP: 00007fc20a17e090 R08: 0000000000000000 R09: 0000000000000000 [ 1322.752113][T21768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1322.752124][T21768] R13: 00007fc20c1a6038 R14: 00007fc20c1a5fa0 R15: 00007ffe685efc38 [ 1322.752155][T21768] [ 1323.164545][T13843] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1323.164586][T13843] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.261613][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 1323.261756][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1323.407823][ T31] usb 2-1: USB disconnect, device number 51 [ 1323.449654][ T5121] Bluetooth: hci3: command tx timeout [ 1323.646564][T21668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.646792][T21668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.646959][T21668] bridge_slave_0: entered allmulticast mode [ 1323.673462][T21668] bridge_slave_0: entered promiscuous mode [ 1323.676859][T21668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.676944][T21668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.677150][T21668] bridge_slave_1: entered allmulticast mode [ 1323.683162][T21668] bridge_slave_1: entered promiscuous mode [ 1323.768545][ T5910] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1323.817329][T21668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1323.867307][T21668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1323.931728][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.931792][ T5910] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1323.931820][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.984002][ T5910] usb 1-1: config 0 descriptor?? [ 1324.003337][ T5910] pwc: Askey VC010 type 2 USB webcam detected. [ 1324.190740][T21668] team0: Port device team_slave_0 added [ 1324.226909][T21668] team0: Port device team_slave_1 added [ 1324.380872][T21785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4523'. [ 1324.462402][ T5910] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1324.465853][ T5910] pwc: recv_control_msg error -32 req 02 val 2700 [ 1324.636677][T21668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1324.636698][T21668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1324.636732][T21668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1324.666277][T21668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1324.666298][T21668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1324.666331][T21668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.730074][ T5910] pwc: recv_control_msg error -71 req 04 val 1000 [ 1324.730795][ T5910] pwc: recv_control_msg error -71 req 04 val 1300 [ 1324.731503][ T5910] pwc: recv_control_msg error -71 req 04 val 1400 [ 1324.732031][ T5910] pwc: recv_control_msg error -71 req 02 val 2000 [ 1324.732614][ T5910] pwc: recv_control_msg error -71 req 02 val 2100 [ 1324.733497][ T5910] pwc: recv_control_msg error -71 req 04 val 1500 [ 1324.734127][ T5910] pwc: recv_control_msg error -71 req 02 val 2500 [ 1324.736001][ T5910] pwc: recv_control_msg error -71 req 02 val 2400 [ 1324.736508][ T5910] pwc: recv_control_msg error -71 req 02 val 2600 [ 1324.736999][ T5910] pwc: recv_control_msg error -71 req 02 val 2900 [ 1324.737509][ T5910] pwc: recv_control_msg error -71 req 02 val 2800 [ 1324.778309][ T5910] pwc: recv_control_msg error -71 req 04 val 1100 [ 1324.823226][ T5910] pwc: recv_control_msg error -71 req 04 val 1200 [ 1324.866784][ T5910] pwc: Registered as video103. [ 1324.896574][ T5910] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input61 [ 1324.941179][ T5910] usb 1-1: USB disconnect, device number 74 [ 1325.529931][ T5121] Bluetooth: hci3: command tx timeout [ 1325.790155][T21807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4527'. [ 1325.871171][T21668] hsr_slave_0: entered promiscuous mode [ 1325.887417][T21668] hsr_slave_1: entered promiscuous mode [ 1325.897244][T21668] debugfs: 'hsr0' already exists in 'hsr' [ 1325.897266][T21668] Cannot create hsr debugfs directory [ 1325.928988][ T5910] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1326.078288][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 1326.082238][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.082274][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1326.083571][ T5910] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1326.083618][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.189486][ T5910] usb 6-1: config 0 descriptor?? [ 1326.640545][ T5910] konepure 0003:1E7D:2DB4.001A: item fetching failed at offset 0/4 [ 1326.660613][ T5910] konepure 0003:1E7D:2DB4.001A: parse failed [ 1326.660699][ T5910] konepure 0003:1E7D:2DB4.001A: probe with driver konepure failed with error -22 [ 1326.764349][T21823] FAULT_INJECTION: forcing a failure. [ 1326.764349][T21823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.764390][T21823] CPU: 1 UID: 0 PID: 21823 Comm: syz.1.4532 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1326.764422][T21823] Tainted: [L]=SOFTLOCKUP [ 1326.764430][T21823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1326.764445][T21823] Call Trace: [ 1326.764454][T21823] [ 1326.764464][T21823] dump_stack_lvl+0xe8/0x150 [ 1326.764509][T21823] should_fail_ex+0x46b/0x600 [ 1326.764542][T21823] _copy_from_iter+0x1d3/0x1670 [ 1326.764568][T21823] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1326.764603][T21823] ? __pfx_policy_nodemask+0x10/0x10 [ 1326.764631][T21823] ? __pfx__copy_from_iter+0x10/0x10 [ 1326.764662][T21823] ? alloc_pages_mpol+0x2ae/0x380 [ 1326.764695][T21823] copy_page_from_iter+0x220/0x2d0 [ 1326.764728][T21823] tun_get_user+0x1bfa/0x4400 [ 1326.764759][T21823] ? tun_get_user+0x8a1/0x4400 [ 1326.764806][T21823] ? __pfx_tun_get_user+0x10/0x10 [ 1326.764836][T21823] ? __lock_acquire+0x6b5/0x2cf0 [ 1326.764881][T21823] ? ref_tracker_alloc+0x332/0x4a0 [ 1326.764906][T21823] ? get_pid_task+0x20/0x1f0 [ 1326.764938][T21823] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1326.764977][T21823] ? tun_get+0x1c/0x2f0 [ 1326.765002][T21823] ? tun_get+0x1c/0x2f0 [ 1326.765033][T21823] ? tun_get+0x1c/0x2f0 [ 1326.765058][T21823] ? tun_get+0x1c/0x2f0 [ 1326.765088][T21823] tun_chr_write_iter+0x119/0x200 [ 1326.765117][T21823] vfs_write+0x629/0xba0 [ 1326.765162][T21823] ? __pfx_vfs_write+0x10/0x10 [ 1326.765209][T21823] ? __fget_files+0x2a/0x420 [ 1326.765250][T21823] ksys_write+0x156/0x270 [ 1326.765287][T21823] ? __pfx_ksys_write+0x10/0x10 [ 1326.765337][T21823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.765365][T21823] do_syscall_64+0x15f/0xf80 [ 1326.765395][T21823] ? trace_irq_disable+0x3b/0x140 [ 1326.765420][T21823] ? clear_bhb_loop+0x40/0x90 [ 1326.765450][T21823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.765474][T21823] RIP: 0033:0x7f22c573d04e [ 1326.765496][T21823] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1326.765518][T21823] RSP: 002b:00007f22c39d5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1326.765543][T21823] RAX: ffffffffffffffda RBX: 00007f22c39d66c0 RCX: 00007f22c573d04e [ 1326.765560][T21823] RDX: 0000000000000014 RSI: 0000200000007380 RDI: 00000000000000c8 [ 1326.765577][T21823] RBP: 00007f22c39d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1326.765592][T21823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1326.765607][T21823] R13: 00007f22c59f6038 R14: 00007f22c59f5fa0 R15: 00007ffc3bb0b128 [ 1326.765644][T21823] [ 1328.634226][ T5791] usb 6-1: USB disconnect, device number 57 [ 1329.215320][T21853] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4538'. [ 1329.433343][T13843] bridge_slave_1: left allmulticast mode [ 1329.433378][T13843] bridge_slave_1: left promiscuous mode [ 1329.433657][T13843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.599379][ T31] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1330.319396][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1330.320158][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 1330.327658][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 1330.327700][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1330.327742][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 1330.339642][ T31] usb 2-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 1330.339678][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.339703][ T31] usb 2-1: Product: syz [ 1330.339721][ T31] usb 2-1: Manufacturer: syz [ 1330.339738][ T31] usb 2-1: SerialNumber: syz [ 1330.572067][T13843] bridge_slave_0: left allmulticast mode [ 1330.572102][T13843] bridge_slave_0: left promiscuous mode [ 1330.572413][T13843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.184246][T21876] FAULT_INJECTION: forcing a failure. [ 1331.184246][T21876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1331.184390][T21876] CPU: 0 UID: 0 PID: 21876 Comm: syz.5.4543 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1331.184419][T21876] Tainted: [L]=SOFTLOCKUP [ 1331.184426][T21876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1331.184440][T21876] Call Trace: [ 1331.184448][T21876] [ 1331.184458][T21876] dump_stack_lvl+0xe8/0x150 [ 1331.184498][T21876] should_fail_ex+0x46b/0x600 [ 1331.184525][T21876] _copy_to_user+0x31/0xb0 [ 1331.184554][T21876] simple_read_from_buffer+0xe1/0x170 [ 1331.184585][T21876] proc_fail_nth_read+0x1be/0x230 [ 1331.184616][T21876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1331.184647][T21876] ? rw_verify_area+0x2ac/0x4e0 [ 1331.184678][T21876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1331.184705][T21876] vfs_read+0x212/0xa80 [ 1331.184744][T21876] ? __pfx_vfs_read+0x10/0x10 [ 1331.184776][T21876] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1331.184801][T21876] ? lockdep_hardirqs_on+0x7a/0x110 [ 1331.184824][T21876] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1331.184847][T21876] ? mutex_lock_nested+0x152/0x1d0 [ 1331.184874][T21876] ? fdget_pos+0x252/0x320 [ 1331.184905][T21876] ksys_read+0x156/0x270 [ 1331.184933][T21876] ? __pfx_ksys_read+0x10/0x10 [ 1331.184967][T21876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.184987][T21876] do_syscall_64+0x15f/0xf80 [ 1331.185011][T21876] ? clear_bhb_loop+0x40/0x90 [ 1331.185038][T21876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.185057][T21876] RIP: 0033:0x7fc20beed04e [ 1331.185076][T21876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1331.185093][T21876] RSP: 002b:00007fc20a17dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1331.185113][T21876] RAX: ffffffffffffffda RBX: 00007fc20a17e6c0 RCX: 00007fc20beed04e [ 1331.185126][T21876] RDX: 000000000000000f RSI: 00007fc20a17e0a0 RDI: 0000000000000004 [ 1331.185138][T21876] RBP: 00007fc20a17e090 R08: 0000000000000000 R09: 0000000000000000 [ 1331.185150][T21876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1331.185170][T21876] R13: 00007fc20c1a6038 R14: 00007fc20c1a5fa0 R15: 00007ffe685efc38 [ 1331.185200][T21876] [ 1333.088345][ T5890] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1333.238203][ T5890] usb 6-1: Using ep0 maxpacket: 8 [ 1333.272144][ T5890] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1333.272206][ T5890] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1333.272239][ T5890] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1333.274435][ T5890] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1333.274497][ T5890] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1333.274529][ T5890] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1333.276938][ T5890] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1333.276994][ T5890] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1333.277027][ T5890] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1333.427678][ T5890] usb 6-1: string descriptor 0 read error: -22 [ 1333.427845][ T5890] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1333.427874][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.570964][ T5890] adutux 6-1:168.0: interrupt endpoints not found [ 1333.855238][ T5890] usb 6-1: USB disconnect, device number 58 [ 1335.599264][T16766] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1335.788333][ T31] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1335.922080][T16766] usb 6-1: Using ep0 maxpacket: 16 [ 1335.924812][T16766] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.924846][T16766] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1335.924890][T16766] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1335.924913][T16766] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.997807][T16766] usb 6-1: config 0 descriptor?? [ 1336.380740][T13843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.439198][T13843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1336.461870][T13843] bond0 (unregistering): Released all slaves [ 1336.562945][ T5791] usb 2-1: USB disconnect, device number 52 [ 1336.799239][T16766] konepure 0003:1E7D:2DB4.001B: item fetching failed at offset 0/4 [ 1336.800299][T16766] konepure 0003:1E7D:2DB4.001B: parse failed [ 1336.800378][T16766] konepure 0003:1E7D:2DB4.001B: probe with driver konepure failed with error -22 [ 1337.345976][T21914] netlink: 236 bytes leftover after parsing attributes in process `syz.7.4554'. [ 1337.414204][ T815] usb 6-1: USB disconnect, device number 59 [ 1337.482406][T21914] netlink: 'syz.7.4554': attribute type 1 has an invalid length. [ 1337.482431][T21914] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4554'. [ 1339.983591][ T5466] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1340.140144][ T5890] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1340.292983][ T5890] usb 6-1: device descriptor read/64, error -71 [ 1340.538311][ T5890] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1341.488135][ T5890] usb 6-1: device descriptor read/64, error -71 [ 1341.598839][ T5890] usb usb6-port1: attempt power cycle [ 1341.644416][T21951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4561'. [ 1342.048194][ T5890] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1342.066690][ T5890] usb 6-1: device descriptor read/8, error -71 [ 1342.530105][ T5890] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1343.514343][ T5890] usb 6-1: device descriptor read/8, error -71 [ 1343.628710][ T5890] usb usb6-port1: unable to enumerate USB device [ 1343.840629][ T5121] Bluetooth: hci2: connection err: -111 [ 1344.869852][T21973] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1344.870023][T21973] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1344.870167][T21973] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1344.870313][T21973] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1344.870381][T21973] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1345.200235][T21973] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1345.369956][T13843] hsr_slave_0: left promiscuous mode [ 1345.401614][T21995] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4574'. [ 1345.426681][T21973] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1345.426791][T21973] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1345.443473][T13843] hsr_slave_1: left promiscuous mode [ 1345.474917][T13843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1345.474946][T13843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1345.687589][T13843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1345.687619][T13843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.715017][T21973] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1345.794792][T22002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4576'. [ 1345.992730][T13843] veth1_macvtap: left promiscuous mode [ 1345.992859][T13843] veth0_macvtap: left promiscuous mode [ 1345.993118][T13843] veth1_vlan: left promiscuous mode [ 1345.993286][T13843] veth0_vlan: left promiscuous mode [ 1346.088729][ T31] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1346.441092][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 1346.443396][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.443426][ T31] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1346.457524][ T31] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1346.457557][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.457579][ T31] usb 1-1: Product: syz [ 1346.457597][ T31] usb 1-1: Manufacturer: syz [ 1346.457612][ T31] usb 1-1: SerialNumber: syz [ 1347.058340][ T60] Bluetooth: hci5: command 0x0c1a tx timeout [ 1347.058675][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 1347.058711][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 1347.058759][ T60] Bluetooth: hci4: command 0x0c1a tx timeout [ 1347.110589][ T31] usb 1-1: config 0 descriptor?? [ 1347.342890][ T31] usb 1-1: USB disconnect, device number 75 [ 1347.448285][ T5121] Bluetooth: hci3: command 0x0c1a tx timeout [ 1347.749180][T13843] team0 (unregistering): Port device team_slave_1 removed [ 1347.800262][T13843] team0 (unregistering): Port device team_slave_0 removed [ 1348.907389][T22028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4583'. [ 1349.130833][ T5121] Bluetooth: hci5: command 0x0c1a tx timeout [ 1349.538230][ T5121] Bluetooth: hci3: command 0x0c1a tx timeout [ 1350.195675][T21668] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1350.459479][T21668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1350.471286][T22031] lo speed is unknown, defaulting to 1000 [ 1350.472875][T21668] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1350.579412][T21668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1350.580783][T21668] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1350.687999][T21668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1350.698272][ T31] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1350.744285][T21668] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1350.746759][T22051] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4590'. [ 1350.801587][T21668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1350.848261][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 1350.855086][ T31] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1350.855118][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.855141][ T31] usb 2-1: config 0 has no interface number 0 [ 1350.891162][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1350.891198][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.891221][ T31] usb 2-1: Product: syz [ 1350.891238][ T31] usb 2-1: Manufacturer: syz [ 1350.891256][ T31] usb 2-1: SerialNumber: syz [ 1350.972666][ T31] usb 2-1: config 0 descriptor?? [ 1351.092617][ T31] uvcvideo 2-1:0.105: probe with driver uvcvideo failed with error -22 [ 1351.216567][ T5121] Bluetooth: hci5: command 0x0c1a tx timeout [ 1351.620522][ T5121] Bluetooth: hci3: command 0x0c1a tx timeout [ 1351.748334][ T815] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1351.856350][T13843] IPVS: stop unused estimator thread 0... [ 1351.940769][ T815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.940843][ T815] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1351.940870][ T815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.945232][ T815] usb 1-1: config 0 descriptor?? [ 1351.979459][ T815] pwc: Askey VC010 type 2 USB webcam detected. [ 1352.248197][T18477] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1352.415700][ T815] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1352.425394][ T815] pwc: recv_control_msg error -32 req 02 val 2700 [ 1352.450555][T18477] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.450621][T18477] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1352.450649][T18477] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.521658][T18477] usb 6-1: config 0 descriptor?? [ 1352.655483][ T815] pwc: recv_control_msg error -71 req 04 val 1000 [ 1352.655927][ T815] pwc: recv_control_msg error -71 req 04 val 1300 [ 1352.657894][ T815] pwc: recv_control_msg error -71 req 04 val 1400 [ 1352.731425][T18477] pwc: Askey VC010 type 2 USB webcam detected. [ 1352.822792][T21668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1352.853964][ T815] pwc: recv_control_msg error -71 req 02 val 2000 [ 1352.856461][ T815] pwc: recv_control_msg error -71 req 02 val 2100 [ 1352.856902][ T815] pwc: recv_control_msg error -71 req 04 val 1500 [ 1352.857401][ T815] pwc: recv_control_msg error -71 req 02 val 2500 [ 1352.857867][ T815] pwc: recv_control_msg error -71 req 02 val 2400 [ 1352.858568][ T815] pwc: recv_control_msg error -71 req 02 val 2600 [ 1352.860680][ T815] pwc: recv_control_msg error -71 req 02 val 2900 [ 1352.927600][ T815] pwc: recv_control_msg error -71 req 02 val 2800 [ 1352.928594][ T815] pwc: recv_control_msg error -71 req 04 val 1100 [ 1352.937135][ T815] pwc: recv_control_msg error -71 req 04 val 1200 [ 1352.979371][T21668] 8021q: adding VLAN 0 to HW filter on device team0 [ 1353.058229][T18477] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1353.061205][T18477] pwc: recv_control_msg error -32 req 02 val 2700 [ 1353.138413][T11464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.138726][T11464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1353.470760][T13847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.470870][T13847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1353.475804][ T5791] usb 2-1: USB disconnect, device number 53 [ 1353.664202][ T815] pwc: Registered as video103. [ 1353.755836][ T815] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input62 [ 1353.821751][ T815] usb 1-1: USB disconnect, device number 76 [ 1354.970981][T18477] pwc: recv_control_msg error -71 req 04 val 1000 [ 1354.971549][T18477] pwc: recv_control_msg error -71 req 04 val 1300 [ 1354.972042][T18477] pwc: recv_control_msg error -71 req 04 val 1400 [ 1354.972534][T18477] pwc: recv_control_msg error -71 req 02 val 2000 [ 1354.973032][T18477] pwc: recv_control_msg error -71 req 02 val 2100 [ 1354.973500][T18477] pwc: recv_control_msg error -71 req 04 val 1500 [ 1354.973978][T18477] pwc: recv_control_msg error -71 req 02 val 2500 [ 1354.974460][T18477] pwc: recv_control_msg error -71 req 02 val 2400 [ 1354.974938][T18477] pwc: recv_control_msg error -71 req 02 val 2600 [ 1354.975411][T18477] pwc: recv_control_msg error -71 req 02 val 2900 [ 1354.975877][T18477] pwc: recv_control_msg error -71 req 02 val 2800 [ 1354.976531][T18477] pwc: recv_control_msg error -71 req 04 val 1100 [ 1354.977023][T18477] pwc: recv_control_msg error -71 req 04 val 1200 [ 1355.198671][ T5910] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 1355.198945][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 1355.281581][T18477] pwc: Registered as video103. [ 1355.301865][T18477] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input63 [ 1355.338243][ T5910] usb 2-1: device descriptor read/64, error -32 [ 1355.391692][T18477] usb 6-1: USB disconnect, device number 64 [ 1355.578282][ T5910] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1355.756675][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1355.756711][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1355.760829][ T5910] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1355.760862][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.760884][ T5910] usb 2-1: Product: syz [ 1355.760900][ T5910] usb 2-1: Manufacturer: syz [ 1355.760916][ T5910] usb 2-1: SerialNumber: syz [ 1355.893782][ T5910] usb 2-1: config 0 descriptor?? [ 1355.991564][T22092] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1356.385242][T21668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1356.399457][ T5910] rc_core: IR keymap rc-streamzap not found [ 1356.399480][ T5910] Registered IR keymap rc-empty [ 1356.405493][ T5910] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1356.441349][ T5910] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input64 [ 1356.613456][ T5910] usb 2-1: USB disconnect, device number 55 [ 1357.128299][ T815] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1357.345641][ T815] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1357.345686][ T815] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1357.345712][ T815] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 1357.345738][ T815] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1357.345767][ T815] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1357.345797][ T815] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 1357.359561][ T815] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1357.359596][ T815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.359619][ T815] usb 1-1: Product: ఇ [ 1357.359636][ T815] usb 1-1: Manufacturer: ꔜ餆鹡束㺬쒝์NJ [ 1357.359656][ T815] usb 1-1: SerialNumber: 焳ۉꑻ䮺ꩵ㺤뺔坵蝇㜓⤳鴮┻쬥Ẍ僁续⽳벦諪꽯Ẑੀ픳ͼ㴵ꋵӎ쪋⋗激䝭퇃⽕盫賟溌柍䃀ߍ牦京உ䀆轏姏揱㓨矼덇䬼㯍Ѽ컥陃蕎歹繰᳄㭸劳ヲ嘊ꨘ뉲↶ᖌ茍㝝睃誔䝈웉伽썅늽ᙗ왔꫘韸⍀액ⷊ傐¥猯὿ᾛ〉䫀䷥떎듕撁꜋覦帍힞ꞕ繶❉轍퇙ﷻา⡔龚괹 [ 1357.830664][ T815] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1357.830760][ T815] usb 1-1: MIDIStreaming interface descriptor not found [ 1357.989210][T22125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.995836][T22125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.077099][T21668] veth0_vlan: entered promiscuous mode [ 1358.166495][T21668] veth1_vlan: entered promiscuous mode [ 1358.385175][T22153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.385877][T22153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.386510][T21668] veth0_macvtap: entered promiscuous mode [ 1358.423775][T21668] veth1_macvtap: entered promiscuous mode [ 1358.544954][T21668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1358.583126][T21668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1358.627441][T13843] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.627898][T13843] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.651074][T13847] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.655596][T13847] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.718570][ T31] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 1358.939181][T16159] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1358.994688][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1358.995484][ T31] usb 6-1: not running at top speed; connect to a high speed hub [ 1358.997065][ T31] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 1358.997100][ T31] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1358.997142][ T31] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 1359.085193][ T31] usb 6-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 1359.085230][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.085253][ T31] usb 6-1: Product: syz [ 1359.085270][ T31] usb 6-1: Manufacturer: syz [ 1359.085287][ T31] usb 6-1: SerialNumber: syz [ 1359.166423][T16159] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 1359.184454][T16159] usb 2-1: config index 0 descriptor too short (expected 65505, got 72) [ 1359.214782][T16159] usb 2-1: config index 1 descriptor too short (expected 65505, got 72) [ 1359.218210][T16159] usb 2-1: config index 2 descriptor too short (expected 65505, got 72) [ 1359.259973][T16159] usb 2-1: config index 3 descriptor too short (expected 65505, got 72) [ 1359.266157][T16159] usb 2-1: config index 4 descriptor too short (expected 65505, got 72) [ 1359.267869][T16159] usb 2-1: config index 5 descriptor too short (expected 65505, got 72) [ 1359.332193][T16159] usb 2-1: config index 6 descriptor too short (expected 65505, got 72) [ 1359.335357][T16159] usb 2-1: config index 7 descriptor too short (expected 65505, got 72) [ 1359.383854][T16159] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1359.383951][T16159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.383976][T16159] usb 2-1: Product: syz [ 1359.383992][T16159] usb 2-1: Manufacturer: syz [ 1359.384010][T16159] usb 2-1: SerialNumber: syz [ 1359.553955][T16159] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1360.052324][T16159] usb 1-1: USB disconnect, device number 77 [ 1360.395714][ T5910] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1360.961499][ T10] usb 2-1: USB disconnect, device number 56 [ 1361.791071][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.822059][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.896481][T13843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1361.896527][T13843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1361.985884][ T31] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1362.014877][ T5910] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1362.198911][ T5910] ath9k_htc: Failed to initialize the device [ 1362.207728][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 1362.508897][T16159] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1362.641892][ T31] usb 6-1: USB disconnect, device number 65 [ 1363.019286][T22203] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4624'. [ 1363.059374][T22203] sctp: [Deprecated]: syz.7.4624 (pid 22203) Use of int in maxseg socket option. [ 1363.059374][T22203] Use struct sctp_assoc_value instead [ 1363.737804][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1363.881972][ T6993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.881994][ T6993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.083897][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1364.086560][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1364.086600][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1364.086643][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1364.086672][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.131524][T16159] usb 1-1: Using ep0 maxpacket: 16 [ 1364.216580][T16159] usb 1-1: device descriptor read/all, error -71 [ 1364.260305][ T10] usb 2-1: config 0 descriptor?? [ 1364.756359][ T10] konepure 0003:1E7D:2DB4.001C: item fetching failed at offset 0/4 [ 1364.757184][ T10] konepure 0003:1E7D:2DB4.001C: parse failed [ 1364.757287][ T10] konepure 0003:1E7D:2DB4.001C: probe with driver konepure failed with error -22 [ 1365.251957][T13500] usb 2-1: USB disconnect, device number 57 [ 1365.568583][T16159] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1365.719604][T16159] usb 6-1: too many configurations: 70, using maximum allowed: 8 [ 1365.724126][T16159] usb 6-1: config index 0 descriptor too short (expected 65505, got 72) [ 1365.727622][T16159] usb 6-1: config index 1 descriptor too short (expected 65505, got 72) [ 1365.759124][T16159] usb 6-1: config index 2 descriptor too short (expected 65505, got 72) [ 1365.762764][T16159] usb 6-1: config index 3 descriptor too short (expected 65505, got 72) [ 1365.817851][T16159] usb 6-1: config index 4 descriptor too short (expected 65505, got 72) [ 1365.833518][T16159] usb 6-1: config index 5 descriptor too short (expected 65505, got 72) [ 1365.859958][T16159] usb 6-1: config index 6 descriptor too short (expected 65505, got 72) [ 1365.866304][T16159] usb 6-1: config index 7 descriptor too short (expected 65505, got 72) [ 1365.892178][T16159] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1365.892220][T16159] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.892237][T16159] usb 6-1: Product: syz [ 1365.892249][T16159] usb 6-1: Manufacturer: syz [ 1365.892261][T16159] usb 6-1: SerialNumber: syz [ 1365.977319][T16159] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1365.998894][T22211] program syz.0.4628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1366.113598][ T5813] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1366.428686][T16159] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1366.809534][T13500] usb 6-1: USB disconnect, device number 66 [ 1366.829775][T16159] usb 1-1: Using ep0 maxpacket: 8 [ 1366.831850][T16159] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 1366.831878][T16159] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.831899][T16159] usb 1-1: config 135 has no interface number 0 [ 1366.831930][T16159] usb 1-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 1366.831976][T16159] usb 1-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 1366.832006][T16159] usb 1-1: config 135 interface 230 has no altsetting 0 [ 1367.568684][T16159] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1367.568722][T16159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.568746][T16159] usb 1-1: Product: syz [ 1367.568764][T16159] usb 1-1: Manufacturer: syz [ 1367.568781][T16159] usb 1-1: SerialNumber: syz [ 1367.620429][ T5813] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1367.620640][ T5813] ath9k_htc: Failed to initialize the device [ 1368.190431][T13500] usb 6-1: ath9k_htc: USB layer deinitialized [ 1368.212769][T16159] usb 1-1: can't set config #135, error -71 [ 1368.287582][T16159] usb 1-1: USB disconnect, device number 80 [ 1368.797962][T22273] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1369.238234][T16159] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1369.388323][T16159] usb 2-1: Using ep0 maxpacket: 32 [ 1369.391074][T16159] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1369.395654][T16159] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1369.395689][T16159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.395712][T16159] usb 2-1: Product: syz [ 1369.395730][T16159] usb 2-1: Manufacturer: syz [ 1369.395746][T16159] usb 2-1: SerialNumber: syz [ 1369.449146][ T37] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1369.471249][T16159] usb 2-1: config 0 descriptor?? [ 1369.588567][ T5466] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1369.598518][ T37] usb 6-1: Using ep0 maxpacket: 16 [ 1369.617745][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.617785][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1369.617827][ T37] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1369.617854][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.672746][ T37] usb 6-1: config 0 descriptor?? [ 1369.721788][T13500] usb 2-1: USB disconnect, device number 58 [ 1370.359097][ T37] konepure 0003:1E7D:2DB4.001D: item fetching failed at offset 0/4 [ 1370.363280][ T37] konepure 0003:1E7D:2DB4.001D: parse failed [ 1370.363366][ T37] konepure 0003:1E7D:2DB4.001D: probe with driver konepure failed with error -22 [ 1371.042759][ T37] usb 6-1: USB disconnect, device number 67 [ 1373.933123][ T815] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1374.043928][ T5466] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1374.092024][ T815] usb 1-1: Using ep0 maxpacket: 16 [ 1374.105821][ T815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1374.105861][ T815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1374.105906][ T815] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1374.105933][ T815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.196159][ T815] usb 1-1: config 0 descriptor?? [ 1374.314508][T22371] FAULT_INJECTION: forcing a failure. [ 1374.314508][T22371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1374.314552][T22371] CPU: 1 UID: 0 PID: 22371 Comm: syz.5.4673 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1374.314584][T22371] Tainted: [L]=SOFTLOCKUP [ 1374.314592][T22371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1374.314611][T22371] Call Trace: [ 1374.314618][T22371] [ 1374.314625][T22371] dump_stack_lvl+0xe8/0x150 [ 1374.314679][T22371] should_fail_ex+0x46b/0x600 [ 1374.314714][T22371] _copy_to_user+0x31/0xb0 [ 1374.314747][T22371] simple_read_from_buffer+0xe1/0x170 [ 1374.314783][T22371] proc_fail_nth_read+0x1be/0x230 [ 1374.314816][T22371] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1374.314858][T22371] ? rw_verify_area+0x2ac/0x4e0 [ 1374.314894][T22371] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1374.314927][T22371] vfs_read+0x212/0xa80 [ 1374.314969][T22371] ? __pfx_vfs_read+0x10/0x10 [ 1374.315004][T22371] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1374.315046][T22371] ? lockdep_hardirqs_on+0x7a/0x110 [ 1374.315077][T22371] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1374.315112][T22371] ? mutex_lock_nested+0x152/0x1d0 [ 1374.315146][T22371] ? fdget_pos+0x252/0x320 [ 1374.315184][T22371] ksys_read+0x156/0x270 [ 1374.315230][T22371] ? __pfx_ksys_read+0x10/0x10 [ 1374.315275][T22371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.315301][T22371] do_syscall_64+0x15f/0xf80 [ 1374.315329][T22371] ? trace_irq_disable+0x3b/0x140 [ 1374.315352][T22371] ? clear_bhb_loop+0x40/0x90 [ 1374.315380][T22371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.315405][T22371] RIP: 0033:0x7fc20beed04e [ 1374.315435][T22371] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1374.315458][T22371] RSP: 002b:00007fc20a17dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1374.315484][T22371] RAX: ffffffffffffffda RBX: 00007fc20a17e6c0 RCX: 00007fc20beed04e [ 1374.315501][T22371] RDX: 000000000000000f RSI: 00007fc20a17e0a0 RDI: 0000000000000004 [ 1374.315516][T22371] RBP: 00007fc20a17e090 R08: 0000000000000000 R09: 0000000000000000 [ 1374.315532][T22371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1374.315547][T22371] R13: 00007fc20c1a6038 R14: 00007fc20c1a5fa0 R15: 00007ffe685efc38 [ 1374.315585][T22371] [ 1374.720148][ T815] konepure 0003:1E7D:2DB4.001E: item fetching failed at offset 0/4 [ 1374.729804][ T815] konepure 0003:1E7D:2DB4.001E: parse failed [ 1374.729888][ T815] konepure 0003:1E7D:2DB4.001E: probe with driver konepure failed with error -22 [ 1374.979104][T22257] usb 1-1: USB disconnect, device number 81 [ 1375.031671][T22377] FAULT_INJECTION: forcing a failure. [ 1375.031671][T22377] name failslab, interval 1, probability 0, space 0, times 0 [ 1375.031713][T22377] CPU: 1 UID: 0 PID: 22377 Comm: syz.1.4675 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1375.031746][T22377] Tainted: [L]=SOFTLOCKUP [ 1375.031756][T22377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1375.031770][T22377] Call Trace: [ 1375.031780][T22377] [ 1375.031791][T22377] dump_stack_lvl+0xe8/0x150 [ 1375.031835][T22377] should_fail_ex+0x46b/0x600 [ 1375.031868][T22377] should_failslab+0xa8/0x100 [ 1375.031894][T22377] __kmalloc_noprof+0xdf/0x7b0 [ 1375.031932][T22377] ? tomoyo_encode+0x28b/0x550 [ 1375.031965][T22377] tomoyo_encode+0x28b/0x550 [ 1375.031997][T22377] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1375.032036][T22377] ? tomoyo_path_number_perm+0x219/0x630 [ 1375.032072][T22377] tomoyo_path_number_perm+0x246/0x630 [ 1375.032110][T22377] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1375.032144][T22377] ? __lock_acquire+0x6b5/0x2cf0 [ 1375.032176][T22377] ? do_raw_spin_lock+0x12b/0x2f0 [ 1375.032237][T22377] ? __fget_files+0x2a/0x420 [ 1375.032272][T22377] ? __fget_files+0x2a/0x420 [ 1375.032310][T22377] ? __fget_files+0x3a6/0x420 [ 1375.032339][T22377] ? __fget_files+0x2a/0x420 [ 1375.032373][T22377] security_file_ioctl+0xc3/0x2a0 [ 1375.032412][T22377] __se_sys_ioctl+0x47/0x170 [ 1375.032450][T22377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.032477][T22377] do_syscall_64+0x15f/0xf80 [ 1375.032508][T22377] ? trace_irq_disable+0x3b/0x140 [ 1375.032531][T22377] ? clear_bhb_loop+0x40/0x90 [ 1375.032561][T22377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.032585][T22377] RIP: 0033:0x7f22c577c819 [ 1375.032607][T22377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1375.032628][T22377] RSP: 002b:00007f22c39d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1375.032652][T22377] RAX: ffffffffffffffda RBX: 00007f22c59f5fa0 RCX: 00007f22c577c819 [ 1375.032668][T22377] RDX: fffffffffffffffa RSI: 000000000000ab02 RDI: 0000000000000003 [ 1375.032683][T22377] RBP: 00007f22c39d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1375.032697][T22377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1375.032711][T22377] R13: 00007f22c59f6038 R14: 00007f22c59f5fa0 R15: 00007ffc3bb0b128 [ 1375.032746][T22377] [ 1375.036265][T22377] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1376.383274][T22400] loop7: detected capacity change from 0 to 7 [ 1376.451543][T22401] FAULT_INJECTION: forcing a failure. [ 1376.451543][T22401] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.451584][T22401] CPU: 0 UID: 0 PID: 22401 Comm: syz.7.4682 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1376.451612][T22401] Tainted: [L]=SOFTLOCKUP [ 1376.451620][T22401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1376.451633][T22401] Call Trace: [ 1376.451641][T22401] [ 1376.451650][T22401] dump_stack_lvl+0xe8/0x150 [ 1376.451690][T22401] should_fail_ex+0x46b/0x600 [ 1376.451717][T22401] should_failslab+0xa8/0x100 [ 1376.451739][T22401] __kmalloc_noprof+0xdf/0x7b0 [ 1376.451770][T22401] ? tomoyo_encode+0x28b/0x550 [ 1376.451797][T22401] tomoyo_encode+0x28b/0x550 [ 1376.451825][T22401] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1376.451859][T22401] ? tomoyo_path_number_perm+0x219/0x630 [ 1376.451892][T22401] tomoyo_path_number_perm+0x246/0x630 [ 1376.451924][T22401] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1376.451952][T22401] ? __lock_acquire+0x6b5/0x2cf0 [ 1376.451980][T22401] ? do_raw_spin_lock+0x12b/0x2f0 [ 1376.452028][T22401] ? __fget_files+0x2a/0x420 [ 1376.452057][T22401] ? __fget_files+0x2a/0x420 [ 1376.452084][T22401] ? __fget_files+0x3a6/0x420 [ 1376.452106][T22401] ? __fget_files+0x2a/0x420 [ 1376.452132][T22401] security_file_ioctl+0xc3/0x2a0 [ 1376.452163][T22401] __se_sys_ioctl+0x47/0x170 [ 1376.452192][T22401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.452212][T22401] do_syscall_64+0x15f/0xf80 [ 1376.452235][T22401] ? trace_irq_disable+0x3b/0x140 [ 1376.452254][T22401] ? clear_bhb_loop+0x40/0x90 [ 1376.452277][T22401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.452308][T22401] RIP: 0033:0x7f10be16c819 [ 1376.452327][T22401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1376.452344][T22401] RSP: 002b:00007f10bc39d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1376.452365][T22401] RAX: ffffffffffffffda RBX: 00007f10be3e6090 RCX: 00007f10be16c819 [ 1376.452379][T22401] RDX: 0000000000000200 RSI: 0000000000004c09 RDI: 0000000000000003 [ 1376.452390][T22401] RBP: 00007f10bc39d090 R08: 0000000000000000 R09: 0000000000000000 [ 1376.452402][T22401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1376.452413][T22401] R13: 00007f10be3e6128 R14: 00007f10be3e6090 R15: 00007ffcaccbe138 [ 1376.452442][T22401] [ 1376.452464][T22401] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1376.561895][ C1] blk_print_req_error: 10 callbacks suppressed [ 1376.561918][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1376.561949][ C1] buffer_io_error: 10 callbacks suppressed [ 1376.561963][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1376.904123][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1376.904168][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1376.906160][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1376.906193][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1376.907466][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1376.907501][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1376.949400][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1376.949437][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1377.030196][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1377.030238][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1377.032373][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1377.032408][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1377.032594][T22400] ldm_validate_partition_table(): Disk read failed. [ 1377.032824][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1377.032854][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1377.041853][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1377.042196][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1377.043191][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1377.043271][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1377.046397][T22400] Dev loop7: unable to read RDB block 0 [ 1377.059376][T22400] loop7: unable to read partition table [ 1377.059986][T22400] loop7: partition table beyond EOD, truncated [ 1377.064264][T22400] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1377.608264][T13500] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1377.697766][ T5466] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1377.799008][T13500] usb 2-1: Using ep0 maxpacket: 32 [ 1377.815418][T13500] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1377.815453][T13500] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.815477][T13500] usb 2-1: Product: syz [ 1377.815494][T13500] usb 2-1: Manufacturer: syz [ 1377.815510][T13500] usb 2-1: SerialNumber: syz [ 1377.909132][T13500] usb 2-1: config 0 descriptor?? [ 1378.140257][T13500] airspy 2-1:0.0: usb_control_msg() failed -71 request 09 [ 1378.140289][T13500] airspy 2-1:0.0: Could not detect board [ 1378.140406][T13500] airspy 2-1:0.0: probe with driver airspy failed with error -71 [ 1378.171534][T13500] usb 2-1: USB disconnect, device number 59 [ 1379.176040][T22428] FAULT_INJECTION: forcing a failure. [ 1379.176040][T22428] name failslab, interval 1, probability 0, space 0, times 0 [ 1379.176084][T22428] CPU: 1 UID: 0 PID: 22428 Comm: syz.6.4689 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1379.176130][T22428] Tainted: [L]=SOFTLOCKUP [ 1379.176139][T22428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1379.176155][T22428] Call Trace: [ 1379.176164][T22428] [ 1379.176175][T22428] dump_stack_lvl+0xe8/0x150 [ 1379.176221][T22428] should_fail_ex+0x46b/0x600 [ 1379.176254][T22428] should_failslab+0xa8/0x100 [ 1379.176281][T22428] kmem_cache_alloc_noprof+0x87/0x680 [ 1379.176318][T22428] ? io_submit_one+0x130/0x14c0 [ 1379.176348][T22428] io_submit_one+0x130/0x14c0 [ 1379.176375][T22428] ? irqentry_exit+0x218/0x730 [ 1379.176405][T22428] ? lockdep_hardirqs_on+0x7a/0x110 [ 1379.176436][T22428] ? irqentry_exit+0x218/0x730 [ 1379.176472][T22428] ? __pfx_io_submit_one+0x10/0x10 [ 1379.176497][T22428] ? __might_fault+0xaf/0x130 [ 1379.176550][T22428] ? __might_fault+0xaf/0x130 [ 1379.176592][T22428] __se_sys_io_submit+0x195/0x340 [ 1379.176631][T22428] ? __pfx___se_sys_io_submit+0x10/0x10 [ 1379.176664][T22428] ? ksys_write+0x248/0x270 [ 1379.176716][T22428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.176743][T22428] do_syscall_64+0x15f/0xf80 [ 1379.176771][T22428] ? trace_irq_disable+0x3b/0x140 [ 1379.176795][T22428] ? clear_bhb_loop+0x40/0x90 [ 1379.176824][T22428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.176848][T22428] RIP: 0033:0x7fa48980c819 [ 1379.176869][T22428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1379.176889][T22428] RSP: 002b:00007fa487a5e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1379.176913][T22428] RAX: ffffffffffffffda RBX: 00007fa489a85fa0 RCX: 00007fa48980c819 [ 1379.176931][T22428] RDX: 0000200000000280 RSI: 0000000000000001 RDI: 00007fa48a5c3000 [ 1379.176946][T22428] RBP: 00007fa487a5e090 R08: 0000000000000000 R09: 0000000000000000 [ 1379.176960][T22428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.176975][T22428] R13: 00007fa489a86038 R14: 00007fa489a85fa0 R15: 00007fff94f141e8 [ 1379.177012][T22428] [ 1379.249618][ T5813] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1379.319753][T22429] QAT: failed to copy from user cfg_data. [ 1379.332543][T22429] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4684'. [ 1379.730192][T22375] syz.5.4674 (22375): drop_caches: 2 [ 1379.966007][T22432] tipc: Started in network mode [ 1379.966030][T22432] tipc: Node identity fffffff8, cluster identity 4711 [ 1379.966044][T22432] tipc: Node number set to 4294967288 [ 1380.068506][ T5813] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 1380.122215][ T5813] usb 2-1: config index 0 descriptor too short (expected 65505, got 72) [ 1380.125100][ T5813] usb 2-1: config index 1 descriptor too short (expected 65505, got 72) [ 1380.160287][ T5813] usb 2-1: config index 2 descriptor too short (expected 65505, got 72) [ 1380.161819][ T5813] usb 2-1: config index 3 descriptor too short (expected 65505, got 72) [ 1380.171233][ T5813] usb 2-1: config index 4 descriptor too short (expected 65505, got 72) [ 1380.200833][ T5813] usb 2-1: config index 5 descriptor too short (expected 65505, got 72) [ 1380.219698][ T5813] usb 2-1: config index 6 descriptor too short (expected 65505, got 72) [ 1380.225973][ T5813] usb 2-1: config index 7 descriptor too short (expected 65505, got 72) [ 1380.269052][ T5813] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1380.269087][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.269109][ T5813] usb 2-1: Product: syz [ 1380.269126][ T5813] usb 2-1: Manufacturer: syz [ 1380.269144][ T5813] usb 2-1: SerialNumber: syz [ 1380.357540][ T5813] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1380.538674][T16159] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1381.407983][T22460] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1381.668246][ T38] audit: type=1326 audit(1776524316.127:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20bf2c819 code=0x7ffc0000 [ 1381.668416][ T38] audit: type=1326 audit(1776524316.137:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20bf2c819 code=0x7ffc0000 [ 1381.668469][ T38] audit: type=1326 audit(1776524316.137:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20bf2c819 code=0x7ffc0000 [ 1381.668519][ T38] audit: type=1326 audit(1776524316.137:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20bf2c819 code=0x7ffc0000 [ 1381.668628][ T38] audit: type=1326 audit(1776524316.137:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20bf2c819 code=0x7ffc0000 [ 1381.668679][ T38] audit: type=1326 audit(1776524316.137:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc20bf2c819 code=0x7ffc0000 [ 1381.668729][ T38] audit: type=1326 audit(1776524316.137:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20bf2c819 code=0x7ffc0000 [ 1381.668778][ T38] audit: type=1326 audit(1776524316.137:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20bf2c819 code=0x7ffc0000 [ 1381.668828][ T38] audit: type=1326 audit(1776524316.137:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20bf2c819 code=0x7ffc0000 [ 1381.668941][ T38] audit: type=1326 audit(1776524316.137:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fc20bf2c819 code=0x7ffc0000 [ 1382.220189][T16159] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1382.220397][T16159] ath9k_htc: Failed to initialize the device [ 1382.228176][ T5813] usb 2-1: USB disconnect, device number 60 [ 1382.279950][ T5813] usb 2-1: ath9k_htc: USB layer deinitialized [ 1382.288864][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 1382.548008][T22473] FAULT_INJECTION: forcing a failure. [ 1382.548008][T22473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1382.549560][T22473] CPU: 0 UID: 0 PID: 22473 Comm: syz.0.4700 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1382.549596][T22473] Tainted: [L]=SOFTLOCKUP [ 1382.549606][T22473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1382.549620][T22473] Call Trace: [ 1382.549631][T22473] [ 1382.549641][T22473] dump_stack_lvl+0xe8/0x150 [ 1382.549694][T22473] should_fail_ex+0x46b/0x600 [ 1382.549726][T22473] _copy_from_user+0x2d/0xb0 [ 1382.549756][T22473] do_sock_getsockopt+0x200/0x7e0 [ 1382.549788][T22473] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1382.549830][T22473] ? __fget_files+0x3a6/0x420 [ 1382.549865][T22473] ? __fget_files+0x2a/0x420 [ 1382.549903][T22473] __x64_sys_getsockopt+0x1aa/0x250 [ 1382.549935][T22473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.549962][T22473] do_syscall_64+0x15f/0xf80 [ 1382.549991][T22473] ? trace_irq_disable+0x3b/0x140 [ 1382.550015][T22473] ? clear_bhb_loop+0x40/0x90 [ 1382.550045][T22473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.550069][T22473] RIP: 0033:0x7f16503ac819 [ 1382.550091][T22473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1382.550113][T22473] RSP: 002b:00007f164e5fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1382.550139][T22473] RAX: ffffffffffffffda RBX: 00007f1650625fa0 RCX: 00007f16503ac819 [ 1382.550157][T22473] RDX: 0000000000000024 RSI: 000000000000011e RDI: 0000000000000003 [ 1382.550173][T22473] RBP: 00007f164e5fe090 R08: 00002000000001c0 R09: 0000000000000000 [ 1382.550189][T22473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1382.550203][T22473] R13: 00007f1650626038 R14: 00007f1650625fa0 R15: 00007fff69c46858 [ 1382.550239][T22473] [ 1383.208370][ T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1383.349838][ T10] usb 1-1: device descriptor read/64, error -71 [ 1383.608455][ T10] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1383.748231][ T10] usb 1-1: device descriptor read/64, error -71 [ 1384.418936][ T10] usb usb1-port1: attempt power cycle [ 1385.101424][T22516] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4710'. [ 1385.101452][T22516] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4710'. [ 1385.158230][ T10] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1385.179055][ T10] usb 1-1: device descriptor read/8, error -71 [ 1385.217636][T22518] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4710'. [ 1385.793736][ T10] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1385.814571][ T10] usb 1-1: device descriptor read/8, error -71 [ 1385.888193][T22509] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1385.888238][T22509] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1385.888270][T22509] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1385.928970][ T10] usb usb1-port1: unable to enumerate USB device [ 1386.500816][T22530] FAULT_INJECTION: forcing a failure. [ 1386.500816][T22530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1386.500857][T22530] CPU: 0 UID: 0 PID: 22530 Comm: syz.6.4712 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1386.500889][T22530] Tainted: [L]=SOFTLOCKUP [ 1386.500898][T22530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1386.500912][T22530] Call Trace: [ 1386.500920][T22530] [ 1386.500931][T22530] dump_stack_lvl+0xe8/0x150 [ 1386.500975][T22530] should_fail_ex+0x46b/0x600 [ 1386.501013][T22530] _copy_from_user+0x2d/0xb0 [ 1386.501044][T22530] kstrtouint_from_user+0xd6/0x180 [ 1386.501071][T22530] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1386.501115][T22530] proc_fail_nth_write+0x8e/0x210 [ 1386.501146][T22530] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1386.501184][T22530] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1386.501217][T22530] vfs_write+0x2a3/0xba0 [ 1386.501263][T22530] ? __pfx_vfs_write+0x10/0x10 [ 1386.501302][T22530] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1386.501367][T22530] ? lockdep_hardirqs_on+0x7a/0x110 [ 1386.501398][T22530] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1386.501430][T22530] ? mutex_lock_nested+0x152/0x1d0 [ 1386.501465][T22530] ? fdget_pos+0x252/0x320 [ 1386.501508][T22530] ksys_write+0x156/0x270 [ 1386.501546][T22530] ? __pfx_ksys_write+0x10/0x10 [ 1386.501589][T22530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.501616][T22530] do_syscall_64+0x15f/0xf80 [ 1386.501645][T22530] ? trace_irq_disable+0x3b/0x140 [ 1386.501670][T22530] ? clear_bhb_loop+0x40/0x90 [ 1386.501699][T22530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.501722][T22530] RIP: 0033:0x7fa4897cd04e [ 1386.501744][T22530] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1386.501764][T22530] RSP: 002b:00007fa487a5dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1386.501789][T22530] RAX: ffffffffffffffda RBX: 00007fa487a5e6c0 RCX: 00007fa4897cd04e [ 1386.501807][T22530] RDX: 0000000000000001 RSI: 00007fa487a5e0a0 RDI: 0000000000000005 [ 1386.501823][T22530] RBP: 00007fa487a5e090 R08: 0000000000000000 R09: 0000000000000000 [ 1386.501839][T22530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1386.501853][T22530] R13: 00007fa489a86038 R14: 00007fa489a85fa0 R15: 00007fff94f141e8 [ 1386.501890][T22530] [ 1388.128290][ T815] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1388.300850][ T815] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1388.300892][ T815] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1388.300919][ T815] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 1388.300946][ T815] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1388.300976][ T815] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1388.301007][ T815] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 1388.306278][ T815] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1388.306313][ T815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.306448][ T815] usb 2-1: Product: ఇ [ 1388.306469][ T815] usb 2-1: Manufacturer: ꔜ餆鹡束㺬쒝์NJ [ 1388.306489][ T815] usb 2-1: SerialNumber: 焳ۉꑻ䮺ꩵ㺤뺔坵蝇㜓⤳鴮┻쬥Ẍ僁续⽳벦諪꽯Ẑੀ픳ͼ㴵ꋵӎ쪋⋗激䝭퇃⽕盫賟溌柍䃀ߍ牦京உ䀆轏姏揱㓨矼덇䬼㯍Ѽ컥陃蕎歹繰᳄㭸劳ヲ嘊ꨘ뉲↶ᖌ茍㝝睃誔䝈웉伽썅늽ᙗ왔꫘韸⍀액ⷊ傐¥猯὿ᾛ〉䫀䷥떎듕撁꜋覦帍힞ꞕ繶❉轍퇙ﷻา⡔龚괹 [ 1388.508003][T16159] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 1388.508252][ T37] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 1388.678682][T16159] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1388.686970][T16159] usb 6-1: not running at top speed; connect to a high speed hub [ 1388.711837][T16159] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 1388.711877][T16159] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1388.712258][ T37] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1388.712290][ T37] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1388.712466][T16159] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 1388.717758][ T37] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1388.717793][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.717817][ T37] usb 7-1: Product: syz [ 1388.717834][ T37] usb 7-1: Manufacturer: syz [ 1388.717852][ T37] usb 7-1: SerialNumber: syz [ 1388.724293][T16159] usb 6-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 1388.724371][T16159] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.724395][T16159] usb 6-1: Product: syz [ 1388.724413][T16159] usb 6-1: Manufacturer: syz [ 1388.724459][T16159] usb 6-1: SerialNumber: syz [ 1388.754257][ T37] usb 7-1: config 0 descriptor?? [ 1388.769973][T22563] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1388.886052][ T815] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1388.886111][ T815] usb 2-1: MIDIStreaming interface descriptor not found [ 1389.128628][ T37] rc_core: IR keymap rc-streamzap not found [ 1389.128723][ T37] Registered IR keymap rc-empty [ 1389.214476][ T37] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1389.275307][ T37] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input65 [ 1389.442497][T22590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.443320][T22590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.525018][ T37] usb 7-1: USB disconnect, device number 33 [ 1390.285039][T22605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1391.035908][ T10] usb 2-1: USB disconnect, device number 61 [ 1391.046298][ T38] kauditd_printk_skb: 127 callbacks suppressed [ 1391.046317][ T38] audit: type=1326 audit(1776524325.507:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22621 comm="syz.7.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be16c819 code=0x7ffc0000 [ 1391.046362][ T38] audit: type=1326 audit(1776524325.507:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22621 comm="syz.7.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be16c819 code=0x7ffc0000 [ 1391.046401][ T38] audit: type=1326 audit(1776524325.507:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22621 comm="syz.7.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be16c819 code=0x7ffc0000 [ 1391.046443][ T38] audit: type=1326 audit(1776524325.507:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22621 comm="syz.7.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be16c819 code=0x7ffc0000 [ 1391.046481][ T38] audit: type=1326 audit(1776524325.507:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22621 comm="syz.7.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10be12d04e code=0x7ffc0000 [ 1391.211738][ T38] audit: type=1326 audit(1776524325.627:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22621 comm="syz.7.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be16c819 code=0x7ffc0000 [ 1391.211965][ T38] audit: type=1326 audit(1776524325.687:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22621 comm="syz.7.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f10be16c582 code=0x7ffc0000 [ 1391.212249][ T38] audit: type=1326 audit(1776524325.687:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22621 comm="syz.7.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f10be16c617 code=0x7ffc0000 [ 1391.212972][ T38] audit: type=1326 audit(1776524325.687:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22621 comm="syz.7.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f10be129511 code=0x7ffc0000 [ 1391.213038][ T38] audit: type=1326 audit(1776524325.687:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22621 comm="syz.7.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f10be16d609 code=0x7ffc0000 [ 1391.388669][T16159] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1391.720790][T22623] futex_wake_op: syz.7.4736 tries to shift op by -1; fix this program [ 1391.907082][ T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1392.101774][ T10] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 1392.107156][ T10] usb 2-1: config index 0 descriptor too short (expected 65505, got 72) [ 1392.130329][ T10] usb 2-1: config index 1 descriptor too short (expected 65505, got 72) [ 1392.137255][ T10] usb 2-1: config index 2 descriptor too short (expected 65505, got 72) [ 1392.156256][ T10] usb 2-1: config index 3 descriptor too short (expected 65505, got 72) [ 1392.188743][ T10] usb 2-1: config index 4 descriptor too short (expected 65505, got 72) [ 1392.195729][ T10] usb 2-1: config index 5 descriptor too short (expected 65505, got 72) [ 1392.225570][ T10] usb 2-1: config index 6 descriptor too short (expected 65505, got 72) [ 1392.250208][ T10] usb 2-1: config index 7 descriptor too short (expected 65505, got 72) [ 1392.278299][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1392.278344][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.278369][ T10] usb 2-1: Product: syz [ 1392.278386][ T10] usb 2-1: Manufacturer: syz [ 1392.278404][ T10] usb 2-1: SerialNumber: syz [ 1392.363569][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1392.508624][T16159] usb 6-1: USB disconnect, device number 68 [ 1392.708269][T15858] udevd[15858]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1392.776452][ T815] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1393.222239][T16159] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 1393.229150][ T37] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1393.399329][ T37] usb 6-1: Using ep0 maxpacket: 16 [ 1393.406381][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.406420][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.406464][ T37] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1393.406490][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.423406][ T37] usb 6-1: config 0 descriptor?? [ 1393.723365][T16159] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1393.723405][T16159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1393.737724][T16159] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1393.737760][T16159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.737783][T16159] usb 1-1: Product: syz [ 1393.737800][T16159] usb 1-1: Manufacturer: syz [ 1393.737817][T16159] usb 1-1: SerialNumber: syz [ 1393.920042][T22652] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4744'. [ 1394.621321][T16159] usb 1-1: config 0 descriptor?? [ 1394.778269][T22637] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1394.836557][ T37] usbhid 6-1:0.0: can't add hid device: -71 [ 1394.836695][ T37] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1394.941992][ T37] usb 6-1: USB disconnect, device number 69 [ 1395.445050][T22626] ------------[ cut here ]------------ [ 1395.445067][T22626] kcov->t != t [ 1395.445088][T22626] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#1: syz.1.4738/22626 [ 1395.445241][T22626] Modules linked in: [ 1395.445271][T22626] CPU: 1 UID: 0 PID: 22626 Comm: syz.1.4738 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1395.445345][T22626] Tainted: [L]=SOFTLOCKUP [ 1395.445355][T22626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1395.445372][T22626] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 1395.445413][T22626] Code: 10 00 00 48 8b bb 90 00 00 00 e8 46 6a 55 00 48 89 df 5b 41 5e 41 5f e9 79 1c 5b 00 7c 1c 5b 41 5e 41 5f e9 7d bb 69 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 9b 54 68 09 48 89 df be 03 00 [ 1395.445435][T22626] RSP: 0018:ffffc90003e17d20 EFLAGS: 00010287 [ 1395.445457][T22626] RAX: 064d81b03dcc9500 RBX: ffff888029059400 RCX: 0000000000000000 [ 1395.445475][T22626] RDX: 00000000888b1b09 RSI: ffffffff8ba72ac0 RDI: 00000000ffffffff [ 1395.445494][T22626] RBP: ffffc90003e17e78 R08: ffffffff8b2ce750 R09: ffffffff8dfc80c0 [ 1395.445514][T22626] R10: dffffc0000000000 R11: fffffbfff1f1711f R12: dffffc0000000000 [ 1395.445534][T22626] R13: 0000000000000000 R14: ffff888029059408 R15: ffff888038973d80 [ 1395.445553][T22626] FS: 0000555557de5500(0000) GS:ffff888126209000(0000) knlGS:0000000000000000 [ 1395.445576][T22626] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1395.445593][T22626] CR2: 00007f69ec101000 CR3: 000000006d8f8000 CR4: 00000000003526f0 [ 1395.445628][T22626] Call Trace: [ 1395.445639][T22626] [ 1395.445652][T22626] do_exit+0x150/0x22c0 [ 1395.445684][T22626] ? lockdep_hardirqs_on+0x7a/0x110 [ 1395.445718][T22626] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1395.445755][T22626] ? reacquire_held_locks+0x104/0x190 [ 1395.445790][T22626] ? rt_spin_lock+0x1e0/0x400 [ 1395.445813][T22626] ? __pfx_do_exit+0x10/0x10 [ 1395.445843][T22626] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1395.445880][T22626] ? rt_spin_unlock+0x160/0x200 [ 1395.445909][T22626] do_group_exit+0x21b/0x2d0 [ 1395.445943][T22626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.445972][T22626] __x64_sys_exit_group+0x3f/0x40 [ 1395.446004][T22626] x64_sys_call+0x221a/0x2240 [ 1395.446031][T22626] do_syscall_64+0x15f/0xf80 [ 1395.446065][T22626] ? clear_bhb_loop+0x40/0x90 [ 1395.446096][T22626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.446122][T22626] RIP: 0033:0x7f22c577c819 [ 1395.446145][T22626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1395.446166][T22626] RSP: 002b:00007ffc3bb0b468 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1395.446191][T22626] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f22c577c819 [ 1395.446209][T22626] RDX: 0000001b2f924000 RSI: 000000000000000a RDI: 0000000000000000 [ 1395.446226][T22626] RBP: 00007ffc3bb0b4cc R08: 0000000000000006 R09: 0000555557df89f0 [ 1395.446243][T22626] R10: 00000000003f7eb8 R11: 0000000000000246 R12: 000000000000010f [ 1395.446259][T22626] R13: 0000555557df89f0 R14: 00000000001531f7 R15: 00007ffc3bb0b520 [ 1395.446299][T22626] [ 1395.446312][T22626] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1395.446333][T22626] CPU: 1 UID: 0 PID: 22626 Comm: syz.1.4738 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1395.446366][T22626] Tainted: [L]=SOFTLOCKUP [ 1395.446376][T22626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1395.446392][T22626] Call Trace: [ 1395.446402][T22626] [ 1395.446413][T22626] vpanic+0x56c/0xa60 [ 1395.446457][T22626] ? __pfx__printk+0x10/0x10 [ 1395.446488][T22626] ? __pfx_vpanic+0x10/0x10 [ 1395.446511][T22626] ? is_bpf_text_address+0x292/0x2b0 [ 1395.446541][T22626] ? is_bpf_text_address+0x26/0x2b0 [ 1395.446581][T22626] panic+0xc5/0xd0 [ 1395.446606][T22626] ? __pfx_panic+0x10/0x10 [ 1395.446657][T22626] __warn+0x315/0x4c0 [ 1395.446681][T22626] ? kcov_task_exit+0xf5/0x160 [ 1395.446721][T22626] ? kcov_task_exit+0xf5/0x160 [ 1395.446760][T22626] __report_bug+0x29a/0x540 [ 1395.446857][T22626] ? kcov_task_exit+0xf5/0x160 [ 1395.446896][T22626] ? __pfx___report_bug+0x10/0x10 [ 1395.446930][T22626] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1395.446962][T22626] ? rt_spin_lock+0x1e0/0x400 [ 1395.446988][T22626] ? rt_spin_lock+0x1e0/0x400 [ 1395.447016][T22626] ? kcov_task_exit+0xf5/0x160 [ 1395.447054][T22626] report_bug+0x16a/0x220 [ 1395.447085][T22626] ? kcov_task_exit+0xf5/0x160 [ 1395.447121][T22626] ? kcov_task_exit+0xf7/0x160 [ 1395.447159][T22626] handle_bug+0x9c/0x200 [ 1395.447196][T22626] exc_invalid_op+0x1a/0x50 [ 1395.447233][T22626] asm_exc_invalid_op+0x1a/0x20 [ 1395.447258][T22626] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 1395.447297][T22626] Code: 10 00 00 48 8b bb 90 00 00 00 e8 46 6a 55 00 48 89 df 5b 41 5e 41 5f e9 79 1c 5b 00 7c 1c 5b 41 5e 41 5f e9 7d bb 69 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 9b 54 68 09 48 89 df be 03 00 [ 1395.447318][T22626] RSP: 0018:ffffc90003e17d20 EFLAGS: 00010287 [ 1395.447339][T22626] RAX: 064d81b03dcc9500 RBX: ffff888029059400 RCX: 0000000000000000 [ 1395.447358][T22626] RDX: 00000000888b1b09 RSI: ffffffff8ba72ac0 RDI: 00000000ffffffff [ 1395.447377][T22626] RBP: ffffc90003e17e78 R08: ffffffff8b2ce750 R09: ffffffff8dfc80c0 [ 1395.447397][T22626] R10: dffffc0000000000 R11: fffffbfff1f1711f R12: dffffc0000000000 [ 1395.447417][T22626] R13: 0000000000000000 R14: ffff888029059408 R15: ffff888038973d80 [ 1395.447445][T22626] ? rt_spin_lock+0x1e0/0x400 [ 1395.447481][T22626] do_exit+0x150/0x22c0 [ 1395.447510][T22626] ? lockdep_hardirqs_on+0x7a/0x110 [ 1395.447541][T22626] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1395.447577][T22626] ? reacquire_held_locks+0x104/0x190 [ 1395.447619][T22626] ? rt_spin_lock+0x1e0/0x400 [ 1395.447643][T22626] ? __pfx_do_exit+0x10/0x10 [ 1395.447672][T22626] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1395.447709][T22626] ? rt_spin_unlock+0x160/0x200 [ 1395.447738][T22626] do_group_exit+0x21b/0x2d0 [ 1395.447772][T22626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.447800][T22626] __x64_sys_exit_group+0x3f/0x40 [ 1395.447832][T22626] x64_sys_call+0x221a/0x2240 [ 1395.447859][T22626] do_syscall_64+0x15f/0xf80 [ 1395.447893][T22626] ? clear_bhb_loop+0x40/0x90 [ 1395.447924][T22626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.447950][T22626] RIP: 0033:0x7f22c577c819 [ 1395.447971][T22626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1395.447993][T22626] RSP: 002b:00007ffc3bb0b468 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1395.448018][T22626] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f22c577c819 [ 1395.448038][T22626] RDX: 0000001b2f924000 RSI: 000000000000000a RDI: 0000000000000000 [ 1395.448052][T22626] RBP: 00007ffc3bb0b4cc R08: 0000000000000006 R09: 0000555557df89f0 [ 1395.448070][T22626] R10: 00000000003f7eb8 R11: 0000000000000246 R12: 000000000000010f [ 1395.448085][T22626] R13: 0000555557df89f0 R14: 00000000001531f7 R15: 00007ffc3bb0b520 [ 1395.448125][T22626] [ 1395.448302][T22626] Kernel Offset: disabled