last executing test programs: 22m59.453050459s ago: executing program 3 (id=25): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e", 0x19}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000300)="cb8f810d885b050d872d54afd76fb9", 0x0, 0x702, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) fsmount(r0, 0x0, 0xa) 22m58.045616681s ago: executing program 3 (id=27): mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x4) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x101}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) write$cgroup_pid(r1, &(0x7f0000000240), 0xfdef) 22m57.68949428s ago: executing program 3 (id=28): openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r1}, 0x14) 22m56.940697204s ago: executing program 3 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) 22m56.537051213s ago: executing program 3 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000280), 0x1001) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 22m52.373604376s ago: executing program 3 (id=37): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x4a900) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, 0x0, 0x0) read$watch_queue(r2, 0x0, 0x0) 22m51.590366136s ago: executing program 32 (id=37): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x4a900) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, 0x0, 0x0) read$watch_queue(r2, 0x0, 0x0) 21m19.352206766s ago: executing program 2 (id=358): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2, 0x4, 0x1ff, 0x4, 0xed, 0xa497}, &(0x7f0000000040)=0x14) 21m18.29823122s ago: executing program 2 (id=371): openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000540)={0xfffffffffffffe36}) 21m17.864434472s ago: executing program 2 (id=377): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 21m17.527442602s ago: executing program 2 (id=380): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) 21m17.138545973s ago: executing program 2 (id=382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x40) (fail_nth: 1) 21m16.148012319s ago: executing program 2 (id=389): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x200000, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x5, 0x5, 0x0, {0x5, 0x0, 0x48b, 0x7, 0x400000000000027, 0xd, 0xfff7ffff, 0x6, 0x4101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 21m15.275073861s ago: executing program 33 (id=389): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x200000, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dcf26f2e472a5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb09e3c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x5, 0x5, 0x0, {0x5, 0x0, 0x48b, 0x7, 0x400000000000027, 0xd, 0xfff7ffff, 0x6, 0x4101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 10m51.10268449s ago: executing program 4 (id=3871): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) 10m49.889726205s ago: executing program 4 (id=3878): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x8800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) waitid(0x1, r2, 0x0, 0x80000000, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000002c0)={0x5, 0x6, {r5}, {0xee01}, 0xfdca, 0xc5e}) move_pages(r6, 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$KDSETMODE(r7, 0x4b3a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r9, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x2004c890) ppoll(&(0x7f0000000040)=[{r4, 0x20}], 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 10m46.898790999s ago: executing program 4 (id=3887): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200004, 0x0, 0x0, 0x0, 0x5}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000000c0)={0x3, 'vlan0\x00', {0xc21}, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@bridge_newvlan={0x18, 0x70, 0x8, 0x70bd2b, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x88c0}, 0x4040000) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000002000/0x1000)=nil, 0x1000}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x592, 0x5dfa, 0x10001}}, @uexit={0x0, 0x18, 0x5}], 0x50}) ioctl$KVM_GET_XSAVE2(r6, 0x9000aecf, &(0x7f0000227000/0x3000)=nil) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0x24, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00002ce000/0x2000)=nil) syz_open_pts(0xffffffffffffffff, 0x101000) ptrace(0x10, 0x0) ptrace$poke(0x4, 0x0, &(0x7f0000001040), 0x282d) capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000340)={0x9, 0x5, 0xec0, 0x3, 0x8, 0x9}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) 10m43.548801043s ago: executing program 4 (id=3899): r0 = socket$packet(0x11, 0x2, 0x300) fchdir(r0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x4001000, 0xfffffffd, 0xffff, 0x103a, 0xfffffffc, 0xff, 0x7fffffff}, 0x1c) 10m43.134451178s ago: executing program 4 (id=3902): syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x333}, &(0x7f0000000080), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) unshare(0x28000600) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0x20, 0x0}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x4000050) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x6f6) r6 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x2e, 0x61, 0x30, 0x5f]}}, 0x0, 0x2e, 0x0, 0x1, 0x1ff}, 0x28) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3e, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1310c2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000240), 0x2, 0x90081) r9 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r9, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r9, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) preadv2(r4, &(0x7f00000008c0)=[{&(0x7f0000000300)=""/133, 0x85}, {&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000600)=""/221, 0xdd}, {&(0x7f0000000700)=""/221, 0xdd}, {&(0x7f0000000800)=""/150, 0x96}, {&(0x7f00000001c0)=""/36, 0x24}], 0x6, 0x8d, 0xb, 0x11) 10m42.60304142s ago: executing program 4 (id=3904): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x1, 0x9) (fail_nth: 1) 10m27.539527866s ago: executing program 34 (id=3904): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x1, 0x9) (fail_nth: 1) 9m46.514869294s ago: executing program 5 (id=4048): ioprio_set$uid(0x3, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e87735", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES16], 0x0) 9m44.293276532s ago: executing program 5 (id=4059): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000180)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TCSETS(r2, 0x89f0, &(0x7f0000000500)={0x8e7, 0xfffffff8, 0x0, 0x401, 0x7, "bbd4c1bc808000"}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020039000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x84481, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)='\b', 0x1}], 0x1}}], 0x1, 0x9200000000000000) r6 = dup3(r5, r4, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000140)=0x2, 0x4) recvmmsg(r6, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) 9m39.488945733s ago: executing program 5 (id=4072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x67f, 0x64, 0x0, 0x0) 9m37.698784204s ago: executing program 5 (id=4076): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/igmp\x00') fcntl$lock(0xffffffffffffffff, 0x25, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)='%pS \x00'}, 0x20) read$FUSE(r0, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = msgget(0x3, 0x70) msgctl$IPC_STAT(r3, 0x2, &(0x7f00000001c0)=""/64) r4 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000024c0)='net/udplite\x00') readv(r5, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYRES64=r2], 0x0) 9m36.929790126s ago: executing program 5 (id=4080): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delqdisc={0x16c, 0x25, 0x8, 0x70bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff1}, {0x9, 0xd}, {0x4, 0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3d, 0x7, 0xfffd, 0x8, 0x2, 0x8, 0x1}}, {0x4}}]}, @TCA_STAB={0x114, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x6, 0x5, 0x5, 0x1, 0x4, 0x6, 0x5}}, {0xe, 0x2, [0x5, 0xff, 0x80, 0x1, 0x14]}}, {{0x1c, 0x1, {0x8, 0x7, 0x3ff, 0xfffffffe, 0x1, 0x5, 0x5, 0x3}}, {0xa, 0x2, [0x1ff, 0x5, 0x4]}}, {{0x1c, 0x1, {0x8, 0x10, 0x40, 0x5, 0x0, 0x2, 0x3, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x2, 0x4, 0x6, 0x8, 0x1, 0x0, 0x7, 0x1}}, {0x6, 0x2, [0xfb]}}, {{0x1c, 0x1, {0x1, 0x40, 0x7, 0x979f, 0x0, 0x4000000, 0x6, 0x3}}, {0xa, 0x2, [0x5, 0x9, 0x170]}}, {{0x1c, 0x1, {0x3, 0x5, 0x0, 0x100, 0x0, 0xffffffff, 0x1, 0x5}}, {0xe, 0x2, [0xbf, 0x9c71, 0x7fff, 0x1000, 0x7]}}, {{0x1c, 0x1, {0x2, 0x1, 0xe, 0x482, 0x0, 0x1, 0x5}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x8}}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000880}, 0x20008004) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000440)=[{0x20, 0x5, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a14e5fc3df95bd1d3000000000021cd0b4f36d00800", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f27, 0x1f, 0x10000, 0xff, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0xffffffff, 0x1, 0x9, 0x3, 0x2, 0x0, 0x7, 0x3, 0x40000003, 0x40000089, 0x6, 0x4, 0x20001e58, 0xb, 0x1, 0x7c, 0x208, 0x6, 0x0, 0xb]}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000685e60e49939bc81e30000000000290000000b0000003e00"/36], 0x18}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000000000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000140)=""/4116, 0x1014}], 0x1, 0x16, 0xffffffff) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x24}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$nl_route(0x10, 0x3, 0x0) 9m33.638376931s ago: executing program 5 (id=4087): semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x4, 0x1800}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) semop(0x0, &(0x7f00000001c0)=[{0x1, 0x2, 0x1000}, {0x4, 0x3e, 0x1800}], 0x2) semctl$GETZCNT(0x0, 0x2, 0xf, 0x0) 9m18.274667302s ago: executing program 35 (id=4087): semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x4, 0x1800}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) semop(0x0, &(0x7f00000001c0)=[{0x1, 0x2, 0x1000}, {0x4, 0x3e, 0x1800}], 0x2) semctl$GETZCNT(0x0, 0x2, 0xf, 0x0) 8m6.062405227s ago: executing program 7 (id=4354): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4eb4}, 0x5e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r2 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xa, 0x148, 0xd0, 0x10, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x200003ae, 0x7f00}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x7, 0x70, [0x13, 0x2a84, 0x26, 0x7, 0x2, 0x13, 0x7, 0x31, 0x10, 0x32, 0x2b, 0x3c, 0xc, 0x23, 0x801e, 0x32], 0x2, 0x80000001, 0x6}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0x0, 'veth1_to_team\x00', 'ip6erspan0\x00', {}, {0xff}, 0x29, 0x3}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x80, 0x2, [0x26, 0x11, 0x3, 0x3ff, 0x3e, 0xd, 0x14, 0x30, 0x8, 0x40, 0x1039, 0xf, 0x4, 0x20, 0x16, 0x32], 0x2, 0x8, 0xffffffffffffff00}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2e8) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 8m4.943492499s ago: executing program 7 (id=4360): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) syz_usb_connect$uac2(0x5, 0x9a, &(0x7f0000000840)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xd8c, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x0, 0x80, 0x8, {0x8, 0xb, 0x1, 0x1, 0x1, 0xc, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x4, 0x28, 0x4}, [@source_unit={0x8, 0x24, 0xa, 0x5, 0x0, 0x40, 0x0, 0x3}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x5, 0x3, 0x5, 0x3, 0x1}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x5, [0x6, 0x1, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x6, 0x6, {0x8, 0x25, 0x1, 0x82, 0x30, 0x1, 0x28}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe8, 0xff, 0x5, {0x8, 0x25, 0x1, 0x3, 0x0, 0x6, 0xf29}}}}}}}}]}}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0}) listen(r0, 0x2) syz_usb_connect$cdc_ncm(0x692a53d17c8a57d8, 0x114, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x300, 0xf, 0xf6, 0x2, 0x40, 0x9}, 0x10, &(0x7f00000006c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0xe82e78ea6901139e, 0xf, 0x2, 0xdaaf, 0x2}]}, 0x4, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x401}}, {0x1c, &(0x7f0000000740)=@string={0x1c, 0x3, "a5c274bc1c2fb88b3fd284efe04898a92459179cf493083a1702"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x405}}]}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="024300031000000000070000000000000200090040000000000000000000000005000600000000000a000000000000000000000400000000000000026480008b48caeebd0005030000000005000500000000000a004e2400000001fc0000000000000000000000000000000300"/128], 0x80}, 0x1, 0x7}, 0x10) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0xfffe, @local}, 0x2, 0xffffffff}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000984e24e36c0421264476f4bca010ce7a823a6f4eca997fb52dafa74939ca446e8dfde257512665aa111dc494f01bfa328d8d662b15e97a230cc352010001008d1377afbbd29a8ad532fd77d7a6ab755d7639cd64119d712b9fc1758e23ff3dae7356b483bf52b1189a69a25e5c59bf0460a59a8a3421ca239709", @ANYRES16=r4, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a00000500120040000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r6 = socket$inet6(0xa, 0x3, 0x1) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6140888}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x4, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x15}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x404c895) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 8m3.579580557s ago: executing program 7 (id=4368): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010027087000fbdbdf250300000008000b00", @ANYRES32=0x0, @ANYBLOB="060001004e2200002b000600e0000001"], 0x2c}}, 0x8010) 8m3.53888905s ago: executing program 7 (id=4369): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 8m3.434225663s ago: executing program 7 (id=4370): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x26e1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="0c7c9f6c93c4525653d7b39fdcdf722d06f22cf9af7e3a625a2af8cd75777113c6", 0x21}], 0x1, 0x0, 0x0, 0x20008808}}], 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000540)=ANY=[@ANYBLOB="0500"]) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}], 0x10) sendmmsg$inet6(r2, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000240)="ebe3a0e9796cfd1647e299f4e376fdba128280b372069d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fb9b7b4f", 0x45}], 0x2, 0x0, 0x0, 0x4040004}], 0x1, 0x40808) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x26e1, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="0c7c9f6c93c4525653d7b39fdcdf722d06f22cf9af7e3a625a2af8cd75777113c6", 0x21}], 0x1, 0x0, 0x0, 0x20008808}}], 0x1, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000540)=ANY=[@ANYBLOB="0500"]) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}], 0x10) (async) sendmmsg$inet6(r2, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc) (async) close(r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000240)="ebe3a0e9796cfd1647e299f4e376fdba128280b372069d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fb9b7b4f", 0x45}], 0x2, 0x0, 0x0, 0x4040004}], 0x1, 0x40808) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) (async) 8m3.432499266s ago: executing program 7 (id=4371): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fanotify_init(0x200, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x1, 0x4000101a, r4, 0x0) fanotify_mark(r3, 0x80, 0x8, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3e0, 0x0, 0x0, 0x0, 0x5b2}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000010c0)={'ip6_vti0\x00', {0x2, 0x4e23, @empty}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="7ddb889a", 0x4}], 0x1, 0x0, 0x54}}], 0x1, 0x200080d0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r7, 0xc00c4809, 0x0) 7m46.318528156s ago: executing program 36 (id=4371): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fanotify_init(0x200, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x1, 0x4000101a, r4, 0x0) fanotify_mark(r3, 0x80, 0x8, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3e0, 0x0, 0x0, 0x0, 0x5b2}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000010c0)={'ip6_vti0\x00', {0x2, 0x4e23, @empty}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="7ddb889a", 0x4}], 0x1, 0x0, 0x54}}], 0x1, 0x200080d0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r7, 0xc00c4809, 0x0) 13.912324587s ago: executing program 6 (id=6474): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_robust_list(r0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x6000, 0x1) r4 = landlock_create_ruleset(&(0x7f0000000940)={0x840c, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) 13.034595438s ago: executing program 1 (id=6476): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) socket(0x400000000010, 0x3, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) 11.21318936s ago: executing program 6 (id=6477): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='\x00', 0x1, 0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x13, 0x0, @val=@tcx}, 0x1c) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x8000) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) read$dsp(r4, &(0x7f0000003200)=""/4088, 0x57d) write$dsp(r3, &(0x7f0000002200)="44e211a385424bf02640ba0d3a219de1033222bea86d14dc6bc540f652f0873cec4d2b540364b6e4ff506bf40b976a8485725d9cfab14bb4c91a5fd888b8b983ef960999942529696b90b853c1f1a3b01af9b0cdc6a605c13de44b58eaf66b597768a5a9bccdb34c1aa1c48b2484cf0f1d68f8b5c1d9f6179459a466a2e865c2a66274717ef95f59fcf4d5b05c4540a35bb64a8fab9af3ad51f3c648121e933ea77809f3901ca59ed3e990ff80d87a814eb6fb68e3305fd9420d4a163ad5654ce60386346b6d1154ecef0f4a782c4459c0a8ca7278655e6f806c4bc2e870000bfcb1346232b0ccce39ee18152165cf3f85e87ae23c4113586cf300b39d7589b28372e554f7d748b618bca2a4298d82864e0d8212f4fbd80fd854691ccac21279bb85aacac8a3301ad2ece3d6061dbcc63e4af0fefc68fab6e5319f6d9e6a2708e41e60b2673d62ec952bae35b854fe7e87bc78e2d1a56cc383e5a1783ce35eaa20868d97eb1198ecae2d6375d7cd6992883aa3bbbdcb93b92b6eca3d6cde5baa92a6adda4540d5fce6d4772e5711b3744210587c05833966b300da0a378787ad06e9d5cba6e569b14c013b8428dad38eb6d2bc547615dac42aca90ac891e6db4d1dd029fe628170433f9229a286a814d39afd5a019db11c185b72c34e01ea5e82a5008a059e6791c9b807c4aab4e9807a5a7896a4c5bfa42f15284c1481618461ce3501cf24a722e74923d01bd7d586eec5d5ccba03eee1c8fc83bc5d73675a11eaaebdcd25fb806155f5e669ed8af3267b214f7d23cf8600ab7e909e7347783b94f235ea797d2c1bd83c7f499c04532f2b63a55b336fa9e5305a4a22cdde74360995ffd241c9592043df3dc99dac462dd43443604ffed04b1ee23b6665e0955e0b38fa71f73af930a9762d6d4d762e11df043a78b90f49f1645acffe61094a20b4caaeca22feca5f66c549cfcda38a1a7b6b79b71aba7a696975a257a94344bf65b7b79212a61f465ee55b530582e8b1dc993c379dd40ab5dd860c5828e2c27afae20539978340db55a68897920c1019e75e0b43b4c93cb1061c98f683f8d407fae9b1a87f2f9cd2b8252059ac39766fc174c344c5224b43bbea978d722c93e727292c738b293da0b9f12b4f11c8f354ae91d644131ce3873612146d79fe3ace49c1446a79e0a324f23cc0b6fb673fc6c34315fa0baf03fb5bd36656a2272c9a4d80a312dfbec125af5aacd2faf633650e3ab54f9fd2c6ee76d5abd9fac547fe7880d0dd9341ac0f095c529d3232447a0d1b28c101a2a95c4a9040041fbdf47ff7da3abe4ee7d8acac57b6553e58f1c5f832e7b920ef3708b98e4917f5b855928344da2ad0a9755d3f90d31f3e427bc869a163844b5e38c62302cc2938b03c132caa4d8044ed92680d406b7d635026f38082b26d6d3dfe80e8f659f1101cec8ea74418699a4fedfcd4ce6f2693cce43123c03122f61b62497bc2fdc2307786943feb7325d645657ae5e58d1e2587003ed4712aba34973199238d3f3d29704ba86538a764abb4d69b9efabcd956fa688536e0661a2a2e0fc84d3e4152187fd90dfbd5023aa12e964d1f3bff4e2c2915f2600a3ab701b177bda95ba8203a45182e03cc07db3b20342cd45d4f8954edebb32fb7fdf49d1952477da9ead5d4ba6de96c42f5923e3dce7188b9e9ec1862dd2fd39d256e1de8cd0906f67a8423b29f0b5bf81539828a1f8ae7e747e6b43bd639c6d6a52a29a0e4944f6b07390fc390770154135acf448ed23c507009af66d20b175723069f8eef06c2cd3edc86bd80ebbe2f5cd56c379d655632b62794aa3757ea10fb232414a9477277261879e88c49e8eb5253c91551c13ed725f3551939533d7c131109d10b4300e24db600f8020b10e9aac24d8572873fac24d149398a3306707c5c3de875eca837e140d23b02637ef888d539b6f0c7fd6d97fd8b9edf9a82bf19d75cec625237a6b9716ac0003d1b8c8db5d04f5231bed4aac9e93da9b6bfea002af81eb77a3ef8cab9878fac2574742277e5403e44844e50e64d1471213c724cf14142291a44ff108c1334fd2aa086aff52cdf1e7c53a3c9757a6717ad360137a50c4968865083c132abfc3a5eba97a4387bd5affdf091f8396b443dad822a15150d68a0d9728c548fb793e6c9d5420561fe683b8b5e89227d357873891e95d87db4a33056f3af5aabdffa3cbaacc44bdbcca971d8e84586545ae5b0e5eb5c7fada201db84c3faf06eb3812c560d7b0c680e9c4908837c5fb10627eb828dc34718004c066b8d999d34fe25b831771eda169c2bd54aab176e851db66c2623a01b8ef09c006c9aeb2fc87502231f75f5e4e01cc2674847c4c4eef86afee4ae3646b25d11d885befe01c43a34d60eff675eabefceba4664fbc211b3f014e315ea8e4c95f5088b82c590695616127cf63ebcee2fd78f3856443d3cb529376d34db3db1a6949cb7c80bc403ba92952b694dec72c540763ce3901d262087bf5a16a89c4151ce2d2d97eb77dce3d93d99e087bc5352cbda39935c686cf294c3ba66fab0135acb713281c90d562fc473df7133df5af7d42e183e4b860ee7b624038141ee757cb14db143ef8e8617eb6cb24a0eb73ef230e417d543f4afc5858c43ad20819bf6eda31bd5c258e66e9703a9b1daa8b34f9db16cae43b131ef258da25272320e2b357357b1d12fd87d9a00551185f3d494426d3f33b0ee84e1ae65508b9916fec12805783a857ac5d70a661fce59088437cf991821d3cf5b0db477dc8f6bb38c8455bb628e563ca45cb65383db9ecfc80386cd05f92ab32bf825a0953c101609ca8239b6ef1fb5a7fcc55642f9b2911df108d64b8c72c5bd31645955056968d4917cbab525ae5994b5dcbd33de392081819012a16be8c1b4f164fa6a1c2d88fd957bd62f28a3e87ba1ffcf644116ffdcf26937d4e64b4e87bd4771b9e0a8d8eba4605a8eac0f8e320b1204eeab358a5a5b2caf3e534c28f9da5598fedc5f13b4a7930a569439c3bc43ac5f5195a29280042278f194f84f8e5ee210223f8a486d568fe4a51bf8ef813c1bd02a669e4e0ea79d1e6bad48257ace2e7feba18123a5e67fd7212a341f92061df472db87f1158b0a2088e48a3680edc29ce3d3156108c04e3b16a1cf18cd70c5f5eeeb59824fb869906679eceb4a6ab8ec8733e72db06403f357e128e3383e2b35269b20f032cc21da717ba3febe02fba9f4893074ee2fd98e85499e36ffe2077348bc541548a34bc32fa0f7c00d84cabfd31e5c75b6769a1ba5770c5217cb03d1f0a8c91ba8d524b42c7365e09d94d95cf43f7ec896718f210fd0ba4ef91a5262daf7cd2bae3c2aad3e2eb925bec9ca7c1b874776dc28784a3719cb191cc317ff897698b2667081cc9db30c96c6510766b65c55c5fd4b8564faca924e6f52c2b181561ee5403184a822f0a207d747602f616c5513cabfe55e525b2bce4d662ae0b9ea68c015d6ca87bc752ed3e527826191a36d23e8032e15f65b3d60a517f16c4ece8bc8b09681bad96a5300f7e30e6848612d67ad853bc1523799c568e46b1dfe0d37cbc202c1332718cfadd4d6938bc0bfb21fc15ad19a0506f669d5c8790b685d81c4acbdb8e1b06918e934b459e3f2b46fe0999e6eae4185edac1cb3e85e8b61de24794d339014c03a285a3d7ba91e00bed2d63b0edb933c290ddd62fb1c56b6d08cb99f47dabd72a667805d63a7784450a1bd1af6dfc2ec785ddb8b86fe4a44a7c8f86c4b19a61fdb701a81bd720bb70f8657e256b0f531ab7848b6206ba7cd4c32b866735a4b46091a0bb6c47c923a3efa99a09c0344228ed412f94c4eca96e6bf6ee75f23a1ae8415a892ff19bd190e1d67b8e1212be638eb179176e4074435ed381a7c2faaee9acbcf873823abd906e92f308b36c6c259e43d13b328ded6bf3c1f4a93a76e9a6d0483875456cf8f30eda231d9f26d6b3861a3f2db165758b0d7aacb7b5a8e9f4d775798556cee8dbe8a94fae8df837f71d66a0aaa48df5c36afa9033ec5283e713806d5a07f82729f9e888d309b713db36256757292443f00f1af08058057373ae710d90cefa5872bbeac931ddd145ba9a64997c0bc53cc59a954f8ee2670caac75e2a63b5a1ca6ca6e3f9287f080b271f34b2e63be2ad4c2b85b7c9683245b12491d221314ab2685e2a44787733af58502245e19af646f65dd26b44dda320d583d9ddd6567d6021dc2d7d731963d6cc790d8b082889045cb749de9857ee4388d0f3c2ef83d405d0a2328bd7f76fa4d3d0a2e8238c979babe572ab3e8ae2768ca212bad33249523fa89fc0498f5f29a68aa7aae681e41284f46b47cc996679c4f1d9936647cb9b47ca8dac8e161b5cc0ff29f48f4a42b6a567f1116a5c239e67069b96862e2ba0cb3d424d4c4810cc1f3da1c61f39e7cca3e519159c057a440db9838f9f14351f64ec24c70a21a874da100af89d4753d274bd87c6574de363d44ee5aa37bb360b3acf347b3a72fac5e66c939daf4c6cbfacb43ab73229cc0badacc30b6c771bee9a7a8e36a5839cf5d68ffac084e69cb7bb34f71fc2244e5d16d056f97f581e3c50112e81d8410b6aa6b33b924cbafbc8dcb163f22f0e7b618ecd22296328e3fafdc2366e49a7ab08fa0d5b55c8aaffa8c9fc2899c07cabcf35748b0f30edb03a8a55807b6c73cd0b64cdd1a77ec0dcb8be359715b284a9476a0013d69c825274f45b6ffa59df58ca07756af102a6bb0efa1b4b356f89c504097cf79c76ca07d325375bfac4d7c8483cabd8d7c9141c96948c32ec87c231b69d6776160b8b31dada7e0837b4c2dc2ecb28f9b0400589c12cde99dc7db30a9d4c4f8a904f6b2f2fba1d0c36544f84db803bef904ec5b1f976345f67688df6e2d866d9eda4a87395b8953c0dc1e93ca742d2141b3591bb0bfdb56a0f8eabf710a3479d8b8f7e3f0e73a6fd29fc946909f77a6ad3044495e4d6e661bc633f4eb63204dd9f47ee85676ec0aa8b713819a280c27f086445d62f258379ffd77ced5d2c8cdf7d87135d6806f340a111f42b042058b96daa2633a6975dc0c5580f93a38e3daba8fdfb21fd94ebb30a2e165a75c1788c1cfe2687af2c3d3908514722e19afb385a74d6ac8cb12ca6232cde2e99d4ac651b280e65b3b897e39984a64d55eb4f65ab0912675c3f334d7c7ce6ecd84044125d98ef9eb6cf46c5d5d01b3ba01fa4bb5ff70ba1d18cba8b28f3980fca9c75441ada9122d497ac2e779277edece11bd175bf79657c37b982acb078591520792cf8278b75177ad1aad8133b2e4a61c561b42f6ab11ff8227d75303720d121ad3f3ad2e350b4cbfb6c5476e0f73e58dd25a18f3b50d0b30a629b2f5e053422c5a18decb3ad311ca978dcb53d44c64f43ceec7f803370a9b4b91e837371c4ed274d636423cb189cfe1302c6605142d5765239c6c86384b7c6de980764793956cacff762f8c4feaef7dee318a977e942e3a2ef45e220857162ac83b0fd4f1deef6510005737e7588dac6679fd8ae630d60bb9509d848f00939134f0c52b2b122bcf7e46ce5ca2592d649ff00252e57d9541bafdfeb6492113f401eb428e543168a96bd06b31a9becd8f0fbb2b89d19479411bbe4e265480cf2a6f34e5bc02a98b9f29b8adc10f9096aa5096fe12ef67d9690388459664f9583095f9bef69f9725a76a2bab82cdefe92fefa283ad56c21ab3e8ea602130ad2d831c0a4fbbb7779476e74674034c6051272ca292540de9bfcb34536604865c759b639c6f1e58699635e037d3a8c", 0x1000) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000005280)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000010c53d6bbb78d6aba5648433110a37fc42e6d7d5bae75128d82354b98acb08b69f83f3d498982e9ef28ce9449ee6fd8013fac65ee80f0d392e8a58eaf25176098809a914c3f013a18a0ce05759bf73ce992beeb1957aae9d36061789c531bc2ef8042e29a0d1bef76f0dae2f2e3ef53778253002082484dd5fabd628c3fce1384d712200f62298f92fb1b3bd9d694ba074bcdb12c9681175124608ccc5c2f0c3bff51915b5c6df42063e1d20d19d97e7f9b82ccbf25f7d5bdd081a2f7b2ebb551b8c3dd07cad104bff712e0b4ae2cfca9fdd5f66afa0ffbd9f679f772144d5be1b8c5ab12be52f759154a98b543c4947cc07dc7f97373aa147ca1a3327d2461ca4cb7dfe57e4acd7c86b52a2104a2c94b47479c9543c51749fd6368a194ee65a41758d953c641241ef6484c7aca5fa061fa1aae14adce03f6f888d2fb5f5a3db592583808ba331033e4f733371159e5d4a3719c046164093fb4c59741ed3074e5d1bfd106bcfe4a0223b7c4e7994670029754d1fde7ab488a9b457cbe8856abddb0f272b3f468c87645d794da795d881efa39e2a84d550cb70a39c081c8338b3c91a1be3cbfb66c40ee943f9b3b5cbcb339806c22abee646e3365401df34c1c06ca5075a557d2a190cd1caa0bee759a40b567b78fc8c9ba466fedda9287d758ef90ba8af20fe8d179cab9463a2d8b48bf96c289b9d145c140239039c83c494273b40938272b3638cddb5f63d44d0a74b3acfdbe670ccf1413e5adc3c72efb0dfb4a9b2dd516fa64425f4333037c663cc1a74af0716ede692dd62bf387ae1348c7feae8af7258869750889c607e3f44d1353a369377dae6bf46d0eef6c436530a19c20ec566aa9b73a5068456b705aadd08446d25e98f249e2bed4433edfc883b98c2a3ec126a64f82790b2d8dee24cc9a6eb1c6159c99e777ab5d382d5b03eec44dfb73fb590b6a72430166aa14871e94944c9b919d212ef8940a672f1b8e4f56c0556fe32386d1574212b8b7a0564c36ccf6d0f7fda5b8ac4e3f98e9d9f1fa6152d57729a9585cb5519bb7a13731eea4ad51d71183174a05da5775a25929c73801282de617c576352205ad5391bac8ee0670c85e1f00e4095f8e4726cff25c3d8779f58938117f1b26c65261f42b950bd140f617e512c45acc46c54740c847e597525dbed456378e686ee1474c42801935b6a7fe6adf9cd616bbbc433c45be99cb3388e7723b2ae2a9872fe41f1cb087e928b6201b71e3a4adc909da49d60ec5396daa98afbd11302b0b4f1d8e803a8dd42a3edc9f3aad481a5ee296ba8048accdcc6ede94598740e89245ea0fd56f524b2f47ea4353da896cf0546553588fe73342b068f1f0659b90d6aba253579e6c117cacced1311e5c23fd394fbac560b62bfe73e30a12376210f49b457db48eb60f56ef122d8fd4b27e80466b8e96d7ef58389a09e2b0ff05dd00b87d5ac9d48c23a99a7223909fadc1834e8c262030c091b116099a259c5a3301953f09ce42f257eef8f168ea495d0b35b65c430600c68c9f141270e2d28977deb8111c2ef4a5965b1ea2272d909eb634227dddd334939d78357a80094da0f95b87899a95a6964f10906d4e5edf1d080b23170ddd1a8fb442f7d0cc863086a7b60029ef197708daf76c2e82fd20d748293c5f215464f8afa5c1d153ea61253f3df25bde382eb4a12adb5e4ad7cec7e274b322306a7f169cab878d55c3ae8869f14736c3ec5ac9d9e226f3a7d1c8f9552d00da6379fdedfe8a87ca5cbf65eae692bf0f55475f483dc75bbc00651626365ee00f30c6bfe938525855bc3206f35702cce1fd2bb7f6e7fc32f138fe4f3e6cad5628507e40b5d375cc5339c3e6ebe48e8a1f8413d5f97ceff0bee3642796cb95d70c68b316afb7a97ab0a2a02c27f1b8879d6dc61d4acc56e689c4da0c99c18906d60733f46adac860bbf5c8e8597cccb4eadbfcd4189cfcf68ca14ffb99ee70d58d02d2a715a175e6f2df327a7428d95c193ef2ffeeda8089bd281d5e886c3f186dd8b36fae8743565d75df3fb0e08defe45d8c23f1cec6518e2480302fcf0a718b33506359975aa20b4259e47f5fdbad79525bdc62cb4a6491679f99bd5d935ee1cf63997c0a04ed76112652037729573fb702b49b2609d68e4724eb4039c939798fadf41d149c95e00597a60eb87c48efd4a0290b08704cabb996cb73e3ab78103a8d02fb49986524f1aa07fcb1ae89d015084fb97ffeea522270449d9458101ae91dce34d4e4da01f7e0c30ac11ac6388b56db54c0e7692606a6bb98407752aaa83814062435b575836660c94ac3efe99a8a06519febb01814654a845c9566a9dcbb48eb1b0cbd75d9b2f690b23daa3eab83bfdf4b55d50f04aa774fdd188f85a9ef259f2f3fc97c7deea30aaffaa6d6671450249ccd590609a5e58d7b066df5f502fbbdb7822fc17a0440e1866231297b46840c10d9f6b26a27c7f06a2176fc7a72e2bb567cdb90a5c32b2127981631635dbd4e0b367c64636623707331fdaa3cb38878941bfb5440f7eb3a78a85a2a8e2c2507a1be52a547effad0b7c46f88837b9e795a53b6c5a6900d926f682f25652ad23c0c9546ecdd609c0cf6ba97defd15e2b3237ddce8ecba4a915cfa32f6ad981d238c242d17c943acd36fd7410c977b661c2b70c0a1785f0c77da576aa9ad752a1121ec3c9d71b667a9c78a024c86f0a266dfe091839dd0c8744833714b2866cacd0ef1062a65ca61d9f4d9d465c48290189261f58ca88f6b19e00940813e317c93653c8a85d3547867e4ac94685f6dea5758813833de6a61eb46535fdac2a9fdc7aa9baaccbe6080e231830c2faa50c396eec7ff9828411a9732d4959fc5c69c11be465bb6113f70434e761082707bcb85f17ae503b7c9c3a94fa2e2ee281c97e5f4c81dca2a92860fbaa8c81924ffa758581517e9ffe9fb3d3aac43bf6420e4f0d526b682000b31653209157cb8c41ca1af960140e1cae6ad3358ce1f085455a9b5d80902e2c33881b6384a6ccfd701acc1704141a46f23a26b05e5f978e06b4abc448bd911c50ab61ea5cb4e552595649e34d77625d6eb5948416a1754d6aa2255ca42c403d26e5cdc685e6a68f69b9fb1e8f2fe1b28d522f4cb125fcc9fe750f00b87fc336427ab8142a3f8c94237a0d91ab20dfc441db32bc4862ee265cf8a3308a94c9918febe70bd0d3c860b9508db3811747fa4f1332fdbb1b7a35a301eecb3c6f4429f90f7afc26a4f7efb65bb5177b2c994c44a104de54c87a6c09058535a70fea9ad473eafbda8e7e113ca5f68248987ce6b841d71fbd2436fa90bc8324ec77211b7ea555ea198be2256ec3b6db0b75c452b3c590d584a78da760217e81c0a74b7154b59ef20f2fac290cce9b5b13c49faddfdb13a1052c898e4eeb36b24158921af4feb76ca9e69651759b59e730a22692f577a1e3dcb3079375191f9e521b4e6c1e3e213d020573d3799cd9022a33f7e4e63bb470f6efbf2861a17c3def0cc41c80c350a35c7b9db22ac02d1c0ad005b3febf1f2fbfc516de363699d05a833c453edd54d2e011d1f94ccaf7ad49c372d519d36f1f1f8359350d89a92774ed18ef60cf441863a3372c270e2407f73bda980f0f0439870fb8edae7ec0d962e0d2c2eccd25dabf59127f8d98b8e5f691b889d920f886b91deeb74eb12e147f84f5db5907e1b7ca4334fea8031e6ffc32c4f1d39f4316e84be789a81b966d88bc57e7acf2deabaf4960c0382cd1fb23e7abe8b0cd20f1b076a76c1a1c37b66ec70ddb869f23977b8304d46c8730e15732cec7a97ba8a028a5a083edc54f51a3daa84898323aa83f485d8f1280b36038fdd7f173ae1ef38ab92e15fa5a92595f2b6c029f3817c3ed30422eb980510a52b756a674ae02f409a367d68475d99cec565e5fa97ce3a51770347f1ae748bde0aafbd2626a4b1dfbdd9c72269bd9890199bae79af405c612c3ee08a7cecd8bda0140473c12f540e16118472cdf8de73e39b593ad3a4e90ceab8ac57e5a9e9f9da3bc057e352f14001b52b6af182d8276857ca094a9f3c1e7726e7cfdd0c9760fcf9727d915225bed6d4422cae5728099f5423feef9443b059fa69da1244730b9cd5e5bc600ba5818b94fe5f6e03cbc95f75b95e38a5b9f03ed1b9eee63b5b39c2708e4fa43c459920b4088f959ff52fcd5d723b2c2078ac59769565ef93b14a3569f391e1cdac750a069dc10d327ffd28cb275e482ddcb1c9787c9700e1f32063f0680a4a465a0523b1b79e0fbd8e42447b50d131e9498457f3fc1bdb517002ee2cd0042862feb388d89531e6c03972afee81c10656fe82ad8d8767551ced06ee7d56f5890e3c5ee74646a4697da91a75ac591ea998d92f30c21456337af939b3cf9d5c26cff656e04e22496d9dddae4dc8110d75f46010e4ce64963f9dba0589059ebc0b42d4df6f4fcad19a6f73d6427bef8f61d2d86ff24996b30eeec6a9e748e524ef232cc4bbe8c551b61fda9118c8f4a28ecda79b22b38dd7eafc5324d4e8035b6dc1114bcf2a46a4f1d773437910362ecdcfa8e9dc60ae88b17c8fb85c1c7aac3f5d8f0d5ad211171f467c4d1fb3e4c2bfcc88a11b061a209e2cf4ae67d75624205748d41c403a1e6a7c48ef9141a8c1fc73ce024560f880011dc2f17f20f5f89bcbebd3de6022c860d06bbdad72b65337d2f6f33961c9cd3d1cd3b9401ef5cca2f58faa158edd3d108aa2efbdbea74a86f54d1f630a21deb98a12d49fd013a3fed8d96365ae2a6bb3dd49ce9fa9ca352a61117d5a284fc0bde97be85dfaee47b4bb5a53daabe0de43c82dc391377f3e0c67a3f10e5fda47ce731d13fa46ffb0bec5e0fe8186bc64bbed62aa454073b8c9d830077d5830bafb9009b4dcd910e7f5800db9504e1e8f5ac313cb7c9ee14dfa99ef8862b6ea13a19938703cfb9dc770f38e8fbe1e9d4cdfd7b62f1c701b5a40731de8f7c4ac235b92421912f56054ce555e14361955882459e6441421359ed9da4787b5c63f1049b5a61b502f915cfe421cfec64de08e1ff63d805ee16c12190468455a63c6126c121aa117a1049820e4580109d732d70fad09fc84676d4dfa8fa759128215de1f03ab16d015b8e190d10a60c11a98218c47cc575fe0b1558d485d315751ca05bd33e027eb7fadf2a82914aa45ff6a2690f75c1bd6efcbe49eb33df7e1521345eb30cf1c40e82d084c38b68b37450433b5779d82c05355a94987e511b0a5dcffefb5272679d2ac9a78c02f2055af919e58d94e477cfde686dc65a0f277c4e44e1d14c89cd10b5aec80cf794ed82d988483157f7afc2c8affaa595370c954d1ac3ba681ad6801950a8d6d47c9c1cd16524336335ad207a7ff1275f070c7b3e14074878ebb3c278c935feb1616a1fc7b30f7cd092f2b964e5f2ca73be96f74d6920a9fbe89acd99dab7fa801c3176b8ae558e86f2a550c63c454a98573072407c103f44b71c3da8b9d954363c3a95ca0804a67f34c5878e7b5555ee35fc1c99aa93f5f494b8845e95d11791c3b918a2a2ad628e19daa91c2e5c5af1c5e1c1fbc974364a09c3adcac7eea2e5d5376be9f23c09e108cdae832b3fd895819955923bdbdc85c2d62d407547222fb5acfeb0190dd2973b6c03407c70b9a3d7958a5705f87d4b1ac426b359b4226c97b9e689338164ae859c45049575424c077aea26556f7a03969c1ebed39b59b47e4f785c98d999e50c6eddbba6ed2cd74b522027811f24ceb1033e2ef9d8f202f50ced6434c038842fb5a1d65773d4f738000000b09b833ee1e8d810997b38ed687aaf1722fc4d13229a2bdbb8c65f073437be9d5e607725db9adb247baaf6cef982ce457f25179be66af679c864cf0c9f93ebf29e3ca2da026254ef6bc444d512503a81aa6fe81877fd59c9cae376bb4e09283d9c38507ea19343d8ab0058a2fac1e2429849ccf5452ac89e0cec4bd516f267e26bfe010347368b2cc0146d3f0888c0e5fd44e802eaaddb1ae8000000000000"], 0x1008) write$eventfd(0xffffffffffffffff, 0x0, 0x0) 11.126878246s ago: executing program 1 (id=6479): futex(&(0x7f0000004000)=0x1, 0x4, 0x0, 0x0, &(0x7f00000002c0), 0x93020007) r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x804, 0xa6}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000090}, 0x8019) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000600)=ANY=[@ANYRESOCT=r5], 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000), 0x8, 0x800}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) setresuid(0x0, 0xee01, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4000840}, 0x24040100) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r8, 0x0, 0xc8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="030000000400000004000000ffffffff00000000", @ANYRES32, @ANYBLOB="8f2900c43100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r6], 0x48) io_uring_enter(r1, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 10.542049033s ago: executing program 6 (id=6481): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)="31020002", 0x4}, {&(0x7f0000000a80)="683f0057954e837474512fcaea99bc671e3d", 0x12}, {&(0x7f0000000580)="a492e95857d9dad0c70b72425db11aaf3ffd93dad70350", 0x17}, {&(0x7f0000000400)="9f52141c0fb098", 0x7}], 0x5) socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000488900000095000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setresuid(0xee00, 0xee00, 0x0) r6 = epoll_create1(0x80000) fremovexattr(r6, &(0x7f0000000180)=@random={'os2.', 'system.posix_acl_default\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 10.474373121s ago: executing program 9 (id=6482): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d", 0x52}], 0x1}, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)={@fallback=r3, r2, 0x2f}, 0x20) (fail_nth: 1) 9.419750802s ago: executing program 9 (id=6483): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="400e490a000014e36e296bae294f547cb20f9a8629e250aa93efdc069a8fbf88530edb4138bfd8f9c5bf07b942b3e86a59b0dc43d979eb32532195c7116efe010d0c8d511c7c93daa2b1095d3401451b3e6684935399506a6d0cedf2f6d42d06652c"], 0x0, 0x0}) 9.29311921s ago: executing program 1 (id=6484): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = memfd_create(&(0x7f0000000740)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) write(r1, &(0x7f0000000140)='/', 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x12, 0x3f}, 0x20) sendfile(r1, r1, &(0x7f0000000040), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000010000d042abd7000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000040000000300012800c0001006d6163766c616e00200002800a"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030026bd7000fcdbdf251500000008000300", @ANYRES32=r4, @ANYBLOB="14002b800800010001000000050002000300000008002a"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000000000000129e636e63b595db085060940f1f0e00000001000000010000000000000000000000000000000000000073b4ffbe00a8090436996cffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200000000000000000ff5c77601686d4394b9010ac945ef59bd74ad6eeb7e45c663383fd44a149324675d73be7539a37296640f7860a0f4c8028094e1d90af160b97608a1a07f764e533d53da1d019ccc44f6a7921001e45f60a750d69dc8d328d1de8ba688e11329c280732496655"], 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000040000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020400"/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x6, 0x1, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000580)={'wg1\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') socket$nl_route(0x10, 0x3, 0x0) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 9.117777331s ago: executing program 8 (id=6486): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_robust_list(r0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x6000, 0x1) r4 = landlock_create_ruleset(&(0x7f0000000940)={0x840c, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) 7.931466095s ago: executing program 8 (id=6487): shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xa0) getdents64(r0, &(0x7f000001aa40)=""/4103, 0x1007) (fail_nth: 1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, 0x0, 0x2000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.578243923s ago: executing program 8 (id=6488): shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x281c048, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xa0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x1}, 0xfe}, 0x3) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r6, 0xc054561d, &(0x7f0000000040)={0xfffffff9, "f080e8ab8486ea7dbc6eb80bc61a4415b52b9fe8165de6a213839f0a4e62e100", 0x4, 0x400, 0x9d, 0xf2a, 0x4, 0x4, 0x0, 0xda}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@deltaction={0xdc, 0x31, 0x202, 0x70bd2d, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xdc}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004052}, 0x20000050) getdents64(r0, &(0x7f000001aa40)=""/4103, 0x1007) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) read(r4, &(0x7f00000004c0)=""/153, 0x99) bind$alg(r8, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/59, 0x3b}], 0x2}, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) 7.318661696s ago: executing program 1 (id=6489): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) socket(0x400000000010, 0x3, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) 6.039660328s ago: executing program 9 (id=6490): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000180)=[@increfs, @enter_looper, @release, @dead_binder_done, @release={0x40046306, 0x2}, @exit_looper], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x28, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x1a}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/236, 0xec, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000080)={r7}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6d", 0x9) r8 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000e40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000800}], 0x1, 0x20004050) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000300)=[{0x7, 0x0, 0x1, 0x803}, {0x1ff, 0xf, 0x4, 0x2}]}) recvmsg(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/9, 0x9}, {&(0x7f0000000400)=""/164, 0xa4}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000880)=""/224, 0xe0}], 0x5, &(0x7f0000001e80)=""/4096, 0x1000}, 0x40000122) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d"], &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28) ioctl$VHOST_VSOCK_SET_RUNNING(r10, 0x4004af61, &(0x7f00000000c0)) 6.03663047s ago: executing program 1 (id=6491): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x4a082, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="900000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e657665000060000280050004000100000014000700fe"], 0x90}}, 0x0) clock_gettime(0x0, &(0x7f0000003c40)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003a80)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/142, 0x8e}, {&(0x7f0000000380)=""/156, 0x9c}], 0x2}, 0xad69}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)=""/71, 0x47}], 0x1, &(0x7f0000000580)=""/220, 0xdc}, 0x3}, {{&(0x7f0000000680)=@caif, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000700)=""/155, 0x9b}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/235, 0xeb}], 0x3, &(0x7f0000001900)=""/169, 0xa9}, 0x31}, {{&(0x7f00000019c0)=@isdn, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001c40)=""/109, 0x6d}, {&(0x7f0000001b40)=""/244, 0xf4}, {&(0x7f0000001dc0)=""/236, 0xec}, {&(0x7f0000001cc0)=""/239, 0xef}, {&(0x7f0000001a40)=""/223, 0xdf}], 0x5, &(0x7f0000001f40)=""/224, 0xe0}, 0x10}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002040)=""/141, 0x8d}, {&(0x7f0000002100)}, {&(0x7f0000002140)=""/233, 0xe9}], 0x3, &(0x7f0000002280)=""/93, 0x5d}, 0x2}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002300)=""/156, 0x9c}], 0x1, &(0x7f0000002400)=""/189, 0xbd}, 0x8001}, {{&(0x7f00000024c0)=@hci, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003cc0)=""/103, 0x67}, {&(0x7f00000025c0)=""/152, 0x98}, {&(0x7f0000002680)=""/255, 0xff}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/35, 0x23}, {&(0x7f00000037c0)=""/78, 0x4e}, {&(0x7f0000003840)=""/220, 0xdc}, {&(0x7f0000003940)=""/104, 0x68}], 0x8, &(0x7f0000003a40)=""/26, 0x1a}, 0x8}], 0x7, 0x0, &(0x7f0000003c80)={r2, r3+10000000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe89c}}, './file0\x00'}) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [0x6d, 0xffffffff, 0x4, 0x24, 0x0, 0x1], 0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x4a082, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="900000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e657665000060000280050004000100000014000700fe"], 0x90}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000003c40)) (async) recvmmsg(r1, &(0x7f0000003a80)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/142, 0x8e}, {&(0x7f0000000380)=""/156, 0x9c}], 0x2}, 0xad69}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)=""/71, 0x47}], 0x1, &(0x7f0000000580)=""/220, 0xdc}, 0x3}, {{&(0x7f0000000680)=@caif, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000700)=""/155, 0x9b}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/235, 0xeb}], 0x3, &(0x7f0000001900)=""/169, 0xa9}, 0x31}, {{&(0x7f00000019c0)=@isdn, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001c40)=""/109, 0x6d}, {&(0x7f0000001b40)=""/244, 0xf4}, {&(0x7f0000001dc0)=""/236, 0xec}, {&(0x7f0000001cc0)=""/239, 0xef}, {&(0x7f0000001a40)=""/223, 0xdf}], 0x5, &(0x7f0000001f40)=""/224, 0xe0}, 0x10}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002040)=""/141, 0x8d}, {&(0x7f0000002100)}, {&(0x7f0000002140)=""/233, 0xe9}], 0x3, &(0x7f0000002280)=""/93, 0x5d}, 0x2}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002300)=""/156, 0x9c}], 0x1, &(0x7f0000002400)=""/189, 0xbd}, 0x8001}, {{&(0x7f00000024c0)=@hci, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003cc0)=""/103, 0x67}, {&(0x7f00000025c0)=""/152, 0x98}, {&(0x7f0000002680)=""/255, 0xff}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/35, 0x23}, {&(0x7f00000037c0)=""/78, 0x4e}, {&(0x7f0000003840)=""/220, 0xdc}, {&(0x7f0000003940)=""/104, 0x68}], 0x8, &(0x7f0000003a40)=""/26, 0x1a}, 0x8}], 0x7, 0x0, &(0x7f0000003c80)={r2, r3+10000000}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe89c}}, './file0\x00'}) (async) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [0x6d, 0xffffffff, 0x4, 0x24, 0x0, 0x1], 0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) (async) 5.906587654s ago: executing program 0 (id=6493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e0000000000000c0003"], 0x30}}, 0x0) (fail_nth: 1) 5.892758157s ago: executing program 8 (id=6494): futex(&(0x7f0000004000)=0x1, 0x4, 0x0, 0x0, &(0x7f00000002c0), 0x93020007) r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x804, 0xa6}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x246700, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000600)=ANY=[@ANYRESOCT=r6], 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000), 0x8, 0x800}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) setresuid(0x0, 0xee01, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4000840}, 0x24040100) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r9, 0x0, 0xc8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="030000000400000004000000ffffffff00000000", @ANYRES32, @ANYBLOB="8f2900c43100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r7], 0x48) io_uring_enter(r1, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 5.770898643s ago: executing program 0 (id=6495): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003075f37407104020695a40102030109021b000142d8000a0904"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6, [{0xfd, &(0x7f0000000540)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x14, &(0x7f0000000280)=@string={0x14, 0x3, "afe8a6b99d2ced5f3ff1ccdcfc3f26cf47cd"}}, {0x7b, &(0x7f0000000300)=@string={0x7b, 0x3, "2eef8d92511f599e75415cba8503db28068bc247a2a09548905f744b2206872061d467320226f0f9b09d58582a1bf5a9fa7f3f3bc7d4796e4a6d7b13ed5b68c88b46248be47827f68528884902f0a0c9e4e2012429d31ece09d08123137d43f4869f9962f8291c66ad912ea5434e77b24187e700c6f9e981ce"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x407}}]}) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x0, 0x0) preadv(r1, &(0x7f0000005fc0)=[{0x0}, {0x0}], 0x2, 0x0, 0xd04) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003441eb4023398a716af6b593a0010902240001000040000904ee0202949da000090504020000000000090588"], 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) pselect6(0x40, &(0x7f0000000040)={0x0, 0x10, 0x4, 0x2, 0x7fffffff, 0x10, 0x4c4, 0x8096}, &(0x7f0000000100)={0x9, 0x2, 0x400000000000006, 0x8, 0x6, 0x8, 0x4, 0x8}, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) epoll_create1(0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x9a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a6bfe4d0064110000000000000000000000ffffac1414aaff0200000000000000000000000000014e204e20"], 0x0) 4.575669002s ago: executing program 8 (id=6496): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.510202116s ago: executing program 6 (id=6497): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) get_robust_list(r0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x4, 0x3, 0x1800}, {0x0, 0xffbf, 0x2000}], 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x6000, 0x1) r4 = landlock_create_ruleset(&(0x7f0000000940)={0x840c, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) 3.703913245s ago: executing program 9 (id=6498): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01002e"], 0x0, 0x2e, 0x0, 0x5}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) unshare(0x8020400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0), 0x0) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x0, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4000, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x88) socketpair$unix(0x1, 0x2, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xa0) socket$nl_generic(0x10, 0x3, 0x10) tkill(0xffffffffffffffff, 0x2a) socket(0x2, 0x80805, 0x0) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) sendmsg$nl_route_sched(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) 3.519109837s ago: executing program 6 (id=6499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x12}, 0x20000815) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="d60a0000000000006111a00000000000180000000000000000000000000000009500000000000000db020bc0694f5e514f2cfd290747bcbfe915cef1698d0d2c909ab1ad34e193a81d3e2cb6314ddd679f6e3b23ea7f34661692a7b17326e768c94703de7a95b670d9bf26865f1834ccb02dc1b0a42f82949fd1fbe09cbe618ccb8175636a0180cb5d2a2f5e44f22940f7153ff54449fd8ac7a0c4236d01bbc54d9206433a1e"], 0x0}, 0x94) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) setuid(0xee00) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002180)=ANY=[@ANYBLOB="1800000014000100000000000000000008"], 0x18}], 0x1}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf22, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x700}}, [@generic={0x76, 0x7, 0x1, 0x4, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000040)=""/212}, 0x25) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe0880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1294, 0x2, 0x5}) 2.47928035s ago: executing program 6 (id=6500): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="400e490a000014e36e296bae294f547cb20f9a8629e250aa93efdc069a8fbf88530edb4138bfd8f9c5bf07b942b3e86a59b0dc43d979eb32532195c7116efe010d0c8d511c7c93daa2b1095d3401451b3e6684935399506a6d0cedf2f6d42d06652c"], 0x0, 0x0}) 2.434735631s ago: executing program 0 (id=6501): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) socket(0x400000000010, 0x3, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) 2.224744247s ago: executing program 8 (id=6502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000088d82, 0x0) r3 = syz_io_uring_setup(0xbdb, &(0x7f0000000040)={0x0, 0x5cd0, 0x100, 0x2, 0x1bc}, &(0x7f0000002180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x1, &(0x7f0000000140)=[{0x0}], 0x1}) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8ee2, 0x800, 0x1, 0xbfe00000}, 0x0, 0x0) io_uring_enter(r3, 0x847b9, 0xebd0, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x11) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf257b000000080003007ee7de9ffce56523b74292988c0274e9da0d16d76366c2fef4a1a58a123f44739c2cc0fdb53c16274a17b06f42f25b81514dcb7a23022211ca744f8d14ed669788d5047ec6336808f5d402a30981c2d3bd2e64be8e21ffbbb8be49104e96640449b124abf8d158943edc84dc397f32c239ab2d7c99fc94a5c2766810e338d4bbda6e43b161c643f726e86fcfd8c94f71b0c04e8b6bd8692e0ab36e482e66912dbc07e04809a0be223078c2c679e4365e61f8dce85b3a1453606fb830c74c04da6daf462386a715b13d59502315fa", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8814) 1.356315956s ago: executing program 0 (id=6503): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) 1.202727318s ago: executing program 1 (id=6504): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc8a80, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/187, 0xbb}], 0x1, 0x0, 0x0) 1.202319282s ago: executing program 0 (id=6505): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc8a80, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/187, 0xbb}], 0x1, 0x0, 0x0) (fail_nth: 1) 847.231534ms ago: executing program 9 (id=6506): futex(&(0x7f0000004000)=0x1, 0x4, 0x0, 0x0, &(0x7f00000002c0), 0x93020007) r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x804, 0xa6}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x246700, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000600)=ANY=[@ANYRESOCT=r6], 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000), 0x8, 0x800}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) setresuid(0x0, 0xee01, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4000840}, 0x24040100) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r9, 0x0, 0xc8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="030000000400000004000000ffffffff00000000", @ANYRES32, @ANYBLOB="8f2900c43100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r7], 0x48) io_uring_enter(r1, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 10.800015ms ago: executing program 0 (id=6507): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) (fail_nth: 1) 0s ago: executing program 9 (id=6508): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be", 0x1}, {0x0}], 0x2}, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) r4 = syz_open_procfs(0x0, &(0x7f00000015c0)='net/icmp6\x00') utimensat(r4, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @multicast1, @multicast1}, &(0x7f0000000300)=0x13) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x7, 0x61, 0x0, 0xe89a, 0x802, r4, 0x7f, '\x00', r5, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x1010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x118, &(0x7f0000000000), 0x0, 0x4) kernel console output (not intermixed with test programs): ted+0x152/0x1d0 [ 1395.204440][T25792] ? fdget_pos+0x252/0x320 [ 1395.204471][T25792] ksys_read+0x156/0x270 [ 1395.204499][T25792] ? __pfx_ksys_read+0x10/0x10 [ 1395.204536][T25792] do_syscall_64+0x14d/0xf80 [ 1395.204555][T25792] ? trace_irq_disable+0x3b/0x150 [ 1395.204576][T25792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.204596][T25792] ? clear_bhb_loop+0x40/0x90 [ 1395.204619][T25792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.204637][T25792] RIP: 0033:0x7f593a97cfce [ 1395.204655][T25792] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1395.204671][T25792] RSP: 002b:00007f5938c15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1395.204691][T25792] RAX: ffffffffffffffda RBX: 00007f5938c166c0 RCX: 00007f593a97cfce [ 1395.204705][T25792] RDX: 000000000000000f RSI: 00007f5938c160a0 RDI: 0000000000000004 [ 1395.204717][T25792] RBP: 00007f5938c16090 R08: 0000000000000000 R09: 0000000000000000 [ 1395.204729][T25792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1395.204740][T25792] R13: 00007f593ac36038 R14: 00007f593ac35fa0 R15: 00007ffd3523b5b8 [ 1395.204770][T25792] [ 1395.273760][ T9] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1395.273790][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1395.273817][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1395.273838][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1395.274242][ T9] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1395.274273][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.351343][T25796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6195'. [ 1396.186982][ T9] usb 10-1: config 0 descriptor?? [ 1396.204658][ T10] usblp0: Disabling reads from problematic bidirectional printer [ 1396.238248][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 118 if 0 alt 5 proto 1 vid 0x03F0 pid 0x0004 [ 1396.266918][ T10] usb 2-1: USB disconnect, device number 118 [ 1396.292003][ T10] usblp0: removed [ 1397.421257][ T9] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1397.421295][ T9] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1397.421321][ T9] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1397.421348][ T9] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1397.421374][ T9] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1397.421400][ T9] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1397.421427][ T9] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1397.421453][ T9] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1397.421479][ T9] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1397.421505][ T9] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1397.468571][ T9] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1397.700183][ T5129] usb 10-1: USB disconnect, device number 53 [ 1397.748673][T25815] FAULT_INJECTION: forcing a failure. [ 1397.748673][T25815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1397.748708][T25815] CPU: 1 UID: 0 PID: 25815 Comm: syz.6.6204 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1397.748735][T25815] Tainted: [L]=SOFTLOCKUP [ 1397.748742][T25815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1397.748753][T25815] Call Trace: [ 1397.748761][T25815] [ 1397.748770][T25815] dump_stack_lvl+0xe8/0x150 [ 1397.748802][T25815] should_fail_ex+0x46b/0x600 [ 1397.748831][T25815] _copy_from_user+0x2d/0xb0 [ 1397.748858][T25815] ___sys_sendmsg+0x1c6/0x360 [ 1397.748886][T25815] ? __pfx____sys_sendmsg+0x10/0x10 [ 1397.748947][T25815] ? __fget_files+0x2a/0x420 [ 1397.748970][T25815] ? __fget_files+0x3a6/0x420 [ 1397.749003][T25815] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1397.749026][T25815] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1397.749057][T25815] ? __pfx_ksys_write+0x10/0x10 [ 1397.749093][T25815] do_syscall_64+0x14d/0xf80 [ 1397.749113][T25815] ? trace_irq_disable+0x3b/0x150 [ 1397.749135][T25815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.749154][T25815] ? clear_bhb_loop+0x40/0x90 [ 1397.749176][T25815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.749195][T25815] RIP: 0033:0x7f593a9bc799 [ 1397.749213][T25815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1397.749228][T25815] RSP: 002b:00007f5938c16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1397.749249][T25815] RAX: ffffffffffffffda RBX: 00007f593ac35fa0 RCX: 00007f593a9bc799 [ 1397.749263][T25815] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000003 [ 1397.749275][T25815] RBP: 00007f5938c16090 R08: 0000000000000000 R09: 0000000000000000 [ 1397.749288][T25815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1397.749299][T25815] R13: 00007f593ac36038 R14: 00007f593ac35fa0 R15: 00007ffd3523b5b8 [ 1397.749329][T25815] [ 1398.600444][T25809] fido_id[25809]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1398.980036][T25831] veth1_macvtap: left promiscuous mode [ 1398.980062][T25831] macsec0: entered allmulticast mode [ 1399.120322][T25831] veth1_macvtap: entered promiscuous mode [ 1399.120350][T25831] veth1_macvtap: entered allmulticast mode [ 1399.120449][T25831] macsec0: left allmulticast mode [ 1399.120463][T25831] veth1_macvtap: left allmulticast mode [ 1399.285161][T13809] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1399.298640][T25837] FAULT_INJECTION: forcing a failure. [ 1399.298640][T25837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1399.298675][T25837] CPU: 0 UID: 0 PID: 25837 Comm: syz.9.6210 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1399.298701][T25837] Tainted: [L]=SOFTLOCKUP [ 1399.298709][T25837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1399.298720][T25837] Call Trace: [ 1399.298728][T25837] [ 1399.298736][T25837] dump_stack_lvl+0xe8/0x150 [ 1399.298767][T25837] should_fail_ex+0x46b/0x600 [ 1399.298796][T25837] _copy_to_user+0x31/0xb0 [ 1399.298824][T25837] simple_read_from_buffer+0xe1/0x170 [ 1399.298851][T25837] proc_fail_nth_read+0x1be/0x230 [ 1399.298877][T25837] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1399.298901][T25837] ? rw_verify_area+0x2ac/0x4e0 [ 1399.298926][T25837] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1399.298949][T25837] vfs_read+0x212/0xa80 [ 1399.298981][T25837] ? __pfx_vfs_read+0x10/0x10 [ 1399.299009][T25837] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1399.299029][T25837] ? lockdep_hardirqs_on+0x7a/0x110 [ 1399.299055][T25837] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1399.299074][T25837] ? mutex_lock_nested+0x152/0x1d0 [ 1399.299097][T25837] ? fdget_pos+0x252/0x320 [ 1399.299128][T25837] ksys_read+0x156/0x270 [ 1399.299157][T25837] ? __pfx_ksys_read+0x10/0x10 [ 1399.299192][T25837] do_syscall_64+0x14d/0xf80 [ 1399.299211][T25837] ? trace_irq_disable+0x3b/0x150 [ 1399.299230][T25837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.299250][T25837] ? clear_bhb_loop+0x40/0x90 [ 1399.299273][T25837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.299291][T25837] RIP: 0033:0x7f0d5326cfce [ 1399.299309][T25837] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1399.299325][T25837] RSP: 002b:00007f0d51505fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1399.299344][T25837] RAX: ffffffffffffffda RBX: 00007f0d515066c0 RCX: 00007f0d5326cfce [ 1399.299358][T25837] RDX: 000000000000000f RSI: 00007f0d515060a0 RDI: 0000000000000006 [ 1399.299370][T25837] RBP: 00007f0d51506090 R08: 0000000000000000 R09: 0000000000000000 [ 1399.299382][T25837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1399.299394][T25837] R13: 00007f0d53526038 R14: 00007f0d53525fa0 R15: 00007ffff1589e68 [ 1399.299424][T25837] [ 1399.585548][T13809] usb 7-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.585576][T13809] usb 7-1: config 12 has 1 interface, different from the descriptor's value: 3 [ 1399.616146][T13809] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1399.616175][T13809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1399.616196][T13809] usb 7-1: SerialNumber: syz [ 1399.856120][T13809] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1399.856174][T13809] usb 7-1: MIDIStreaming interface descriptor not found [ 1399.932939][T13809] usb 7-1: USB disconnect, device number 33 [ 1400.057680][T24795] udevd[24795]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1401.644228][ T10] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1401.819225][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1401.822978][ T10] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1401.823003][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1401.826682][ T10] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1401.826709][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.826730][ T10] usb 10-1: Product: syz [ 1401.826744][ T10] usb 10-1: Manufacturer: syz [ 1401.826758][ T10] usb 10-1: SerialNumber: syz [ 1401.837943][ T10] usb 10-1: selecting invalid altsetting 1 [ 1401.838704][ T10] usb 10-1: unit 6 not found! [ 1401.951414][ T10] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1402.041836][T24817] udevd[24817]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1402.365139][T13809] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1402.519386][T13809] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 1402.519421][T13809] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 1402.519448][T13809] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1402.519473][T13809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1402.561943][T13809] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1402.561973][T13809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.561994][T13809] usb 7-1: Product: syz [ 1402.562008][T13809] usb 7-1: Manufacturer: syz [ 1402.562023][T13809] usb 7-1: SerialNumber: syz [ 1402.608499][T13809] usb 7-1: config 0 descriptor?? [ 1402.610251][T25869] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1402.613137][T13809] usb 7-1: ucan: probing device on interface #0 [ 1402.613163][T13809] usb 7-1: ucan: invalid endpoint configuration [ 1402.613178][T13809] usb 7-1: ucan: probe failed; try to update the device firmware [ 1402.638534][T25881] veth1_macvtap: left promiscuous mode [ 1402.638556][T25881] macsec0: entered allmulticast mode [ 1402.673883][T25881] veth1_macvtap: entered promiscuous mode [ 1402.673906][T25881] veth1_macvtap: entered allmulticast mode [ 1402.673963][T25881] macsec0: left allmulticast mode [ 1402.673976][T25881] veth1_macvtap: left allmulticast mode [ 1402.797986][T25885] binder: 25884:25885 ioctl c018620c 200000000900 returned -1 [ 1402.867059][ T1551] Bluetooth: hci2: Frame reassembly failed (-84) [ 1402.881930][ T10] usb 7-1: USB disconnect, device number 34 [ 1403.065147][ T9] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 1403.298418][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1403.298938][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 1403.302402][ T9] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 1403.302428][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.302448][ T9] usb 2-1: Product: syz [ 1403.302463][ T9] usb 2-1: Manufacturer: syz [ 1403.302477][ T9] usb 2-1: SerialNumber: syz [ 1403.469098][T20791] usb 10-1: USB disconnect, device number 54 [ 1403.735997][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1403.821008][ T9] usb 2-1: USB disconnect, device number 119 [ 1403.885154][T20791] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1403.906657][T24795] udevd[24795]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1404.170799][T20791] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1404.171960][T20791] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.171984][T20791] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1404.174939][T20791] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1404.174966][T20791] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.219596][T20791] usb 10-1: Product: syz [ 1404.219684][T20791] usb 10-1: Manufacturer: syz [ 1404.219752][T20791] usb 10-1: SerialNumber: syz [ 1404.867834][T20791] usb 10-1: selecting invalid altsetting 1 [ 1404.868624][T20791] usb 10-1: unit 6 not found! [ 1404.868642][T20791] usb 10-1: unit 2 not found! [ 1404.912230][T18128] Bluetooth: hci2: command 0x1003 tx timeout [ 1404.977089][T16062] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1405.130137][T25890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.133090][T25890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.237548][T20791] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1405.255451][T20791] usb 10-1: USB disconnect, device number 55 [ 1405.321968][T24817] udevd[24817]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1405.365139][ T5129] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1405.545118][ T5129] usb 2-1: Using ep0 maxpacket: 32 [ 1405.547386][ T5129] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1405.548658][ T5129] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1405.550790][ T5129] usb 2-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 1405.550810][ T5129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.550822][ T5129] usb 2-1: Product: syz [ 1405.550830][ T5129] usb 2-1: Manufacturer: syz [ 1405.550838][ T5129] usb 2-1: SerialNumber: syz [ 1405.555182][T18222] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1405.619057][T20791] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1405.690089][T25912] netlink: 'syz.9.6233': attribute type 4 has an invalid length. [ 1405.707325][T18222] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 1405.707352][T18222] usb 9-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1405.707374][T18222] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.707392][T18222] usb 9-1: config 0 has no interface number 0 [ 1405.707421][T18222] usb 9-1: too many endpoints for config 0 interface 255 altsetting 255: 72, using maximum allowed: 30 [ 1405.707459][T18222] usb 9-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 1405.707487][T18222] usb 9-1: config 0 interface 255 has no altsetting 0 [ 1405.707519][T18222] usb 9-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1405.707531][T18222] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.723390][T18222] usb 9-1: config 0 descriptor?? [ 1405.749576][T18222] usb-storage 9-1:0.255: USB Mass Storage device detected [ 1405.762081][T18222] usb-storage 9-1:0.255: Quirks match for vid 1908 pid 1315: 20000 [ 1405.834235][ T5129] usbhid 2-1:1.0: can't add hid device: -71 [ 1405.834348][ T5129] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1405.846677][T20791] usb 7-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.846701][T20791] usb 7-1: config 12 has 1 interface, different from the descriptor's value: 3 [ 1405.849017][T20791] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1405.849033][T20791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1405.849044][T20791] usb 7-1: SerialNumber: syz [ 1405.917419][ T5129] usb 2-1: USB disconnect, device number 120 [ 1406.000990][T18222] usb 9-1: USB disconnect, device number 74 [ 1406.055171][ T9] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1406.134977][T20791] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1406.135783][T20791] usb 7-1: MIDIStreaming interface descriptor not found [ 1406.187187][ T9] usb 10-1: device descriptor read/64, error -71 [ 1406.205309][T20791] usb 7-1: USB disconnect, device number 35 [ 1406.240239][T25918] veth1_macvtap: left promiscuous mode [ 1406.240264][T25918] macsec0: entered allmulticast mode [ 1406.261694][T25918] veth1_macvtap: entered promiscuous mode [ 1406.261709][T25918] veth1_macvtap: entered allmulticast mode [ 1406.261795][T25918] macsec0: left allmulticast mode [ 1406.261803][T25918] veth1_macvtap: left allmulticast mode [ 1406.332003][T24795] udevd[24795]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1406.425164][ T9] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1406.560239][ T9] usb 10-1: device descriptor read/64, error -71 [ 1406.809747][ T9] usb usb10-port1: attempt power cycle [ 1407.163531][ T9] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1407.374532][ T5129] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1407.588293][ T5129] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1407.588329][ T5129] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1407.588355][ T5129] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1407.588378][ T5129] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1407.588420][ T5129] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1407.588443][ T5129] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.632874][ T5129] usb 9-1: config 0 descriptor?? [ 1407.661433][ T9] usb 10-1: device descriptor read/8, error -71 [ 1407.857029][ T5129] usbhid 9-1:0.0: can't add hid device: -71 [ 1407.857154][ T5129] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1407.885110][ T5129] usb 9-1: USB disconnect, device number 75 [ 1408.025561][ T9] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1408.685661][ T9] usb 10-1: device descriptor read/8, error -71 [ 1408.797208][ T9] usb usb10-port1: unable to enumerate USB device [ 1408.931664][T25952] netlink: 'syz.8.6244': attribute type 4 has an invalid length. [ 1409.028995][T25959] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6248'. [ 1409.029013][T25959] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6248'. [ 1410.035098][ T5129] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1410.065478][T25964] veth1_macvtap: left promiscuous mode [ 1410.065503][T25964] macsec0: entered allmulticast mode [ 1410.091617][T25964] veth1_macvtap: entered promiscuous mode [ 1410.091641][T25964] veth1_macvtap: entered allmulticast mode [ 1410.091729][T25964] macsec0: left allmulticast mode [ 1410.091742][T25964] veth1_macvtap: left allmulticast mode [ 1410.185057][ T5129] usb 10-1: Using ep0 maxpacket: 32 [ 1410.187397][ T5129] usb 10-1: config 0 has an invalid interface number: 133 but max is 0 [ 1410.187422][ T5129] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.187442][ T5129] usb 10-1: config 0 has no interface number 0 [ 1410.187486][ T5129] usb 10-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1410.187509][ T5129] usb 10-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1410.187534][ T5129] usb 10-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1410.190955][ T5129] usb 10-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 1410.190984][ T5129] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.191004][ T5129] usb 10-1: Product: syz [ 1410.191019][ T5129] usb 10-1: Manufacturer: syz [ 1410.191033][ T5129] usb 10-1: SerialNumber: syz [ 1410.235673][ T5129] usb 10-1: config 0 descriptor?? [ 1410.429771][T25975] loop5: detected capacity change from 0 to 3 [ 1410.431117][T25975] Dev loop5: unable to read RDB block 3 [ 1410.431144][T25975] loop5: AHDI p2 [ 1410.431170][T25975] loop5: partition table partially beyond EOD, truncated [ 1410.505340][ T5129] usb 10-1: probing VID:PID(0424:012C) [ 1410.506760][ T5129] usb 10-1: vub300 testing BULK OUT EndPoint(0) 0B [ 1410.506774][ T5129] usb 10-1: Could not find two sets of bulk-in/out endpoint pairs [ 1410.506822][ T5129] vub300 10-1:0.133: probe with driver vub300 failed with error -22 [ 1410.529403][ T5129] usb 10-1: USB disconnect, device number 60 [ 1410.670928][T25980] FAULT_INJECTION: forcing a failure. [ 1410.670928][T25980] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.670961][T25980] CPU: 1 UID: 0 PID: 25980 Comm: syz.0.6253 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1410.670987][T25980] Tainted: [L]=SOFTLOCKUP [ 1410.670994][T25980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1410.671006][T25980] Call Trace: [ 1410.671013][T25980] [ 1410.671022][T25980] dump_stack_lvl+0xe8/0x150 [ 1410.671053][T25980] should_fail_ex+0x46b/0x600 [ 1410.671083][T25980] should_failslab+0xa8/0x100 [ 1410.671104][T25980] __kmalloc_noprof+0xdf/0x7b0 [ 1410.671122][T25980] ? kfree+0x4d/0x6c0 [ 1410.671144][T25980] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1410.671173][T25980] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1410.671204][T25980] ? tomoyo_path_number_perm+0x219/0x630 [ 1410.671223][T25980] tomoyo_path_number_perm+0x246/0x630 [ 1410.671244][T25980] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1410.671266][T25980] ? __lock_acquire+0x6b5/0x2cf0 [ 1410.671319][T25980] ? __fget_files+0x2a/0x420 [ 1410.671345][T25980] ? __fget_files+0x2a/0x420 [ 1410.671367][T25980] ? __fget_files+0x3a6/0x420 [ 1410.671388][T25980] ? __fget_files+0x2a/0x420 [ 1410.671415][T25980] security_file_ioctl+0xc3/0x2a0 [ 1410.671438][T25980] __se_sys_ioctl+0x47/0x170 [ 1410.671460][T25980] do_syscall_64+0x14d/0xf80 [ 1410.671479][T25980] ? trace_irq_disable+0x3b/0x150 [ 1410.671500][T25980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.671520][T25980] ? clear_bhb_loop+0x40/0x90 [ 1410.671543][T25980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.671562][T25980] RIP: 0033:0x7f0232b7c799 [ 1410.671580][T25980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1410.671596][T25980] RSP: 002b:00007f0230dce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1410.671616][T25980] RAX: ffffffffffffffda RBX: 00007f0232df5fa0 RCX: 00007f0232b7c799 [ 1410.671630][T25980] RDX: 0000200000000080 RSI: 00000000c010640b RDI: 0000000000000003 [ 1410.671643][T25980] RBP: 00007f0230dce090 R08: 0000000000000000 R09: 0000000000000000 [ 1410.671655][T25980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1410.671667][T25980] R13: 00007f0232df6038 R14: 00007f0232df5fa0 R15: 00007fff54dbe0d8 [ 1410.671699][T25980] [ 1410.671706][T25980] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1410.688748][T25978] dvmrp1: entered allmulticast mode [ 1410.865155][T13809] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1410.951279][T18128] Bluetooth: hci3: unexpected event for opcode 0x040d [ 1410.978422][T25988] netlink: 'syz.0.6257': attribute type 4 has an invalid length. [ 1411.050646][T13809] usb 9-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.050674][T13809] usb 9-1: config 12 has 1 interface, different from the descriptor's value: 3 [ 1411.054413][T13809] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1411.054441][T13809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1411.054461][T13809] usb 9-1: SerialNumber: syz [ 1411.105280][ T5129] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1411.268967][ T5129] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1411.269052][ T5129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1411.269078][ T5129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1411.269101][ T5129] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1411.269143][ T5129] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1411.269214][ T5129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.282748][ T5129] usb 2-1: config 0 descriptor?? [ 1411.301435][T13809] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1411.301485][T13809] usb 9-1: MIDIStreaming interface descriptor not found [ 1411.475438][T13809] usb 9-1: USB disconnect, device number 76 [ 1411.502405][ T5129] usbhid 2-1:0.0: can't add hid device: -71 [ 1411.502521][ T5129] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1411.502935][T26002] FAULT_INJECTION: forcing a failure. [ 1411.502935][T26002] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.502975][T26002] CPU: 0 UID: 0 PID: 26002 Comm: syz.9.6263 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1411.503001][T26002] Tainted: [L]=SOFTLOCKUP [ 1411.503009][T26002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1411.503020][T26002] Call Trace: [ 1411.503028][T26002] [ 1411.503037][T26002] dump_stack_lvl+0xe8/0x150 [ 1411.503069][T26002] should_fail_ex+0x46b/0x600 [ 1411.503099][T26002] should_failslab+0xa8/0x100 [ 1411.503120][T26002] __kmalloc_noprof+0xdf/0x7b0 [ 1411.503136][T26002] ? kfree+0x4d/0x6c0 [ 1411.503157][T26002] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1411.503184][T26002] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1411.503216][T26002] ? tomoyo_path_number_perm+0x219/0x630 [ 1411.503236][T26002] tomoyo_path_number_perm+0x246/0x630 [ 1411.503257][T26002] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1411.503278][T26002] ? __lock_acquire+0x6b5/0x2cf0 [ 1411.503328][T26002] ? __fget_files+0x2a/0x420 [ 1411.503353][T26002] ? __fget_files+0x2a/0x420 [ 1411.503374][T26002] ? __fget_files+0x3a6/0x420 [ 1411.503395][T26002] ? __fget_files+0x2a/0x420 [ 1411.503420][T26002] security_file_ioctl+0xc3/0x2a0 [ 1411.503445][T26002] __se_sys_ioctl+0x47/0x170 [ 1411.503466][T26002] do_syscall_64+0x14d/0xf80 [ 1411.503484][T26002] ? trace_irq_disable+0x3b/0x150 [ 1411.503505][T26002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.503522][T26002] ? clear_bhb_loop+0x40/0x90 [ 1411.503542][T26002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.503560][T26002] RIP: 0033:0x7f0d532ac799 [ 1411.503579][T26002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1411.503593][T26002] RSP: 002b:00007f0d514e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1411.503613][T26002] RAX: ffffffffffffffda RBX: 00007f0d53526090 RCX: 00007f0d532ac799 [ 1411.503628][T26002] RDX: 0000200000000140 RSI: 00000000401054d5 RDI: 0000000000000003 [ 1411.503640][T26002] RBP: 00007f0d514e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1411.503653][T26002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1411.503665][T26002] R13: 00007f0d53526128 R14: 00007f0d53526090 R15: 00007ffff1589e68 [ 1411.503694][T26002] [ 1411.503761][T26002] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1411.563218][ T5129] usb 2-1: USB disconnect, device number 121 [ 1411.672424][T24795] udevd[24795]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1411.910355][T26008] FAULT_INJECTION: forcing a failure. [ 1411.910355][T26008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1411.910390][T26008] CPU: 0 UID: 0 PID: 26008 Comm: syz.8.6266 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1411.910417][T26008] Tainted: [L]=SOFTLOCKUP [ 1411.910425][T26008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1411.910436][T26008] Call Trace: [ 1411.910444][T26008] [ 1411.910453][T26008] dump_stack_lvl+0xe8/0x150 [ 1411.910485][T26008] should_fail_ex+0x46b/0x600 [ 1411.910516][T26008] _copy_from_user+0x2d/0xb0 [ 1411.910544][T26008] ___sys_sendmsg+0x1c6/0x360 [ 1411.910571][T26008] ? __pfx____sys_sendmsg+0x10/0x10 [ 1411.910624][T26008] ? __fget_files+0x2a/0x420 [ 1411.910647][T26008] ? __fget_files+0x3a6/0x420 [ 1411.910678][T26008] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1411.910702][T26008] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1411.910731][T26008] ? __pfx_ksys_write+0x10/0x10 [ 1411.910769][T26008] do_syscall_64+0x14d/0xf80 [ 1411.910789][T26008] ? trace_irq_disable+0x3b/0x150 [ 1411.910810][T26008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.910830][T26008] ? clear_bhb_loop+0x40/0x90 [ 1411.910853][T26008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.910872][T26008] RIP: 0033:0x7f88c1a1c799 [ 1411.910890][T26008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1411.910906][T26008] RSP: 002b:00007f88bfc76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1411.910933][T26008] RAX: ffffffffffffffda RBX: 00007f88c1c95fa0 RCX: 00007f88c1a1c799 [ 1411.910947][T26008] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000003 [ 1411.910960][T26008] RBP: 00007f88bfc76090 R08: 0000000000000000 R09: 0000000000000000 [ 1411.910972][T26008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1411.910983][T26008] R13: 00007f88c1c96038 R14: 00007f88c1c95fa0 R15: 00007ffde6c98868 [ 1411.911014][T26008] [ 1412.158145][T26010] veth1_macvtap: left promiscuous mode [ 1412.158171][T26010] macsec0: entered allmulticast mode [ 1412.292720][T26013] veth1_macvtap: entered promiscuous mode [ 1412.292744][T26013] veth1_macvtap: entered allmulticast mode [ 1412.292843][T26013] macsec0: left allmulticast mode [ 1412.292857][T26013] veth1_macvtap: left allmulticast mode [ 1412.298744][T26022] netlink: 'syz.6.6270': attribute type 4 has an invalid length. [ 1412.419181][T26023] netdevsim netdevsim8: Direct firmware load for / [ 1412.419181][T26023] failed with error -2 [ 1412.419198][T26023] netdevsim netdevsim8: Falling back to sysfs fallback for: / [ 1412.419198][T26023] [ 1412.606056][T26030] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6273'. [ 1412.697191][T26034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6274'. [ 1412.732786][T26037] FAULT_INJECTION: forcing a failure. [ 1412.732786][T26037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1412.732818][T26037] CPU: 0 UID: 0 PID: 26037 Comm: syz.1.6275 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1412.732843][T26037] Tainted: [L]=SOFTLOCKUP [ 1412.732860][T26037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1412.732872][T26037] Call Trace: [ 1412.732879][T26037] [ 1412.732886][T26037] dump_stack_lvl+0xe8/0x150 [ 1412.732915][T26037] should_fail_ex+0x46b/0x600 [ 1412.732944][T26037] _copy_from_user+0x2d/0xb0 [ 1412.732971][T26037] ___sys_recvmsg+0x175/0x590 [ 1412.732996][T26037] ? __pfx____sys_recvmsg+0x10/0x10 [ 1412.733038][T26037] ? __fget_files+0x3a6/0x420 [ 1412.733071][T26037] __x64_sys_recvmsg+0x1c0/0x2a0 [ 1412.733094][T26037] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1412.733122][T26037] ? __pfx_ksys_write+0x10/0x10 [ 1412.733156][T26037] do_syscall_64+0x14d/0xf80 [ 1412.733174][T26037] ? trace_irq_disable+0x3b/0x150 [ 1412.733196][T26037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.733213][T26037] ? clear_bhb_loop+0x40/0x90 [ 1412.733233][T26037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.733250][T26037] RIP: 0033:0x7f474a5ac799 [ 1412.733266][T26037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1412.733281][T26037] RSP: 002b:00007f47487fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1412.733300][T26037] RAX: ffffffffffffffda RBX: 00007f474a825fa0 RCX: 00007f474a5ac799 [ 1412.733313][T26037] RDX: 000000000000f0ff RSI: 00002000000005c0 RDI: 0000000000000004 [ 1412.733325][T26037] RBP: 00007f47487fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1412.733336][T26037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1412.733347][T26037] R13: 00007f474a826038 R14: 00007f474a825fa0 R15: 00007fff5cec5d28 [ 1412.733377][T26037] [ 1413.635154][ T5129] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1413.635327][ T5859] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1413.745397][T13809] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1413.786508][ T5859] usb 7-1: Using ep0 maxpacket: 16 [ 1413.789277][ T5129] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.789301][ T5129] usb 2-1: config 12 has 1 interface, different from the descriptor's value: 3 [ 1413.792645][ T5129] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1413.792672][ T5129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1413.792692][ T5129] usb 2-1: SerialNumber: syz [ 1413.794898][ T5859] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1413.804299][ T5859] usb 7-1: config 198 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.861674][ T5859] usb 7-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=58.84 [ 1413.861712][ T5859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.861732][ T5859] usb 7-1: Product: syz [ 1413.861746][ T5859] usb 7-1: Manufacturer: syz [ 1413.861760][ T5859] usb 7-1: SerialNumber: syz [ 1413.898651][T13809] usb 10-1: Using ep0 maxpacket: 16 [ 1413.908202][T13809] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1413.909588][T13809] usb 10-1: config 198 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.912135][T13809] usb 10-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=58.84 [ 1413.912212][T13809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.912232][T13809] usb 10-1: Product: syz [ 1413.912246][T13809] usb 10-1: Manufacturer: syz [ 1413.912261][T13809] usb 10-1: SerialNumber: syz [ 1414.217830][ T5129] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1414.218538][ T5129] usb 2-1: MIDIStreaming interface descriptor not found [ 1414.447332][T26071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6281'. [ 1414.456701][T26071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6281'. [ 1414.456721][T26071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6281'. [ 1414.456775][T26071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6281'. [ 1414.498342][ T5859] comedi comedi4: Wrong number of endpoints [ 1414.499280][ T5859] dt9812 7-1:198.0: driver 'dt9812' failed to auto-configure device. [ 1414.591795][ T5859] usb 7-1: USB disconnect, device number 36 [ 1414.690982][ T5129] usb 2-1: USB disconnect, device number 122 [ 1414.742228][T26075] netlink: 'syz.6.6282': attribute type 4 has an invalid length. [ 1414.798692][T13809] comedi comedi4: Wrong number of endpoints [ 1414.798713][T13809] dt9812 10-1:198.0: driver 'dt9812' failed to auto-configure device. [ 1414.861034][T13809] usb 10-1: USB disconnect, device number 61 [ 1415.122578][T24609] udevd[24609]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1415.388890][T26094] 9p: Bad value for 'rfdno' [ 1416.222383][T26101] veth1_macvtap: left promiscuous mode [ 1416.222410][T26101] macsec0: entered allmulticast mode [ 1416.237306][T26101] veth1_macvtap: entered promiscuous mode [ 1416.237328][T26101] veth1_macvtap: entered allmulticast mode [ 1416.283187][T26100] program syz.1.6289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1416.305174][T26101] macsec0: left allmulticast mode [ 1416.305195][T26101] veth1_macvtap: left allmulticast mode [ 1416.496324][T26108] FAULT_INJECTION: forcing a failure. [ 1416.496324][T26108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1416.496364][T26108] CPU: 0 UID: 0 PID: 26108 Comm: syz.8.6291 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1416.496391][T26108] Tainted: [L]=SOFTLOCKUP [ 1416.496398][T26108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1416.496409][T26108] Call Trace: [ 1416.496417][T26108] [ 1416.496425][T26108] dump_stack_lvl+0xe8/0x150 [ 1416.496456][T26108] should_fail_ex+0x46b/0x600 [ 1416.496484][T26108] _copy_from_user+0x2d/0xb0 [ 1416.496510][T26108] __sys_bpf+0x229/0x950 [ 1416.496535][T26108] ? __pfx___sys_bpf+0x10/0x10 [ 1416.496554][T26108] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1416.496591][T26108] ? ksys_write+0x248/0x270 [ 1416.496620][T26108] ? __pfx_ksys_write+0x10/0x10 [ 1416.496651][T26108] __x64_sys_bpf+0x7c/0x90 [ 1416.496672][T26108] do_syscall_64+0x14d/0xf80 [ 1416.496689][T26108] ? trace_irq_disable+0x3b/0x150 [ 1416.496709][T26108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.496726][T26108] ? clear_bhb_loop+0x40/0x90 [ 1416.496749][T26108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.496767][T26108] RIP: 0033:0x7f88c1a1c799 [ 1416.496784][T26108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1416.496799][T26108] RSP: 002b:00007f88bfc76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1416.496820][T26108] RAX: ffffffffffffffda RBX: 00007f88c1c95fa0 RCX: 00007f88c1a1c799 [ 1416.496834][T26108] RDX: 0000000000000094 RSI: 0000200000000a00 RDI: 0000000000000005 [ 1416.496846][T26108] RBP: 00007f88bfc76090 R08: 0000000000000000 R09: 0000000000000000 [ 1416.496857][T26108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1416.496869][T26108] R13: 00007f88c1c96038 R14: 00007f88c1c95fa0 R15: 00007ffde6c98868 [ 1416.496898][T26108] [ 1416.839238][T26115] netlink: 'syz.8.6294': attribute type 4 has an invalid length. [ 1416.967793][T13809] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 1417.125267][T13809] usb 10-1: Using ep0 maxpacket: 8 [ 1417.134041][T13809] usb 10-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1417.134062][T13809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.134073][T13809] usb 10-1: Product: syz [ 1417.134081][T13809] usb 10-1: Manufacturer: syz [ 1417.134088][T13809] usb 10-1: SerialNumber: syz [ 1417.515173][ T810] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1417.629681][T26113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.630163][T26113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.688253][ T810] usb 9-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.688279][ T810] usb 9-1: config 12 has 1 interface, different from the descriptor's value: 3 [ 1417.690340][ T810] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1417.690367][ T810] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1417.690387][ T810] usb 9-1: SerialNumber: syz [ 1417.786297][T13809] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1417.786324][T13809] usb 10-1: clock source 0 is not valid, cannot use [ 1417.790491][T13809] usb 10-1: 1:1: cannot get freq (v2/v3): err -71 [ 1417.791250][T13809] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1417.827579][T13809] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1417.827605][T13809] usb 10-1: clock source 0 is not valid, cannot use [ 1417.831136][T13809] usb 10-1: 2:1: cannot get freq (v2/v3): err -71 [ 1417.831573][T13809] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1417.899193][T26132] FAULT_INJECTION: forcing a failure. [ 1417.899193][T26132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1417.899216][T26132] CPU: 1 UID: 0 PID: 26132 Comm: syz.9.6298 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1417.899231][T26132] Tainted: [L]=SOFTLOCKUP [ 1417.899235][T26132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1417.899241][T26132] Call Trace: [ 1417.899246][T26132] [ 1417.899251][T26132] dump_stack_lvl+0xe8/0x150 [ 1417.899273][T26132] should_fail_ex+0x46b/0x600 [ 1417.899290][T26132] _copy_from_user+0x2d/0xb0 [ 1417.899307][T26132] ___sys_sendmsg+0x1c6/0x360 [ 1417.899324][T26132] ? __pfx____sys_sendmsg+0x10/0x10 [ 1417.899351][T26132] ? __fget_files+0x2a/0x420 [ 1417.899365][T26132] ? __fget_files+0x3a6/0x420 [ 1417.899382][T26132] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1417.899395][T26132] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1417.899411][T26132] ? __pfx_ksys_write+0x10/0x10 [ 1417.899432][T26132] do_syscall_64+0x14d/0xf80 [ 1417.899443][T26132] ? trace_irq_disable+0x3b/0x150 [ 1417.899455][T26132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.899466][T26132] ? clear_bhb_loop+0x40/0x90 [ 1417.899479][T26132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.899489][T26132] RIP: 0033:0x7f0d532ac799 [ 1417.899500][T26132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1417.899509][T26132] RSP: 002b:00007f0d51506028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1417.899521][T26132] RAX: ffffffffffffffda RBX: 00007f0d53525fa0 RCX: 00007f0d532ac799 [ 1417.899528][T26132] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 1417.899535][T26132] RBP: 00007f0d51506090 R08: 0000000000000000 R09: 0000000000000000 [ 1417.899541][T26132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1417.899548][T26132] R13: 00007f0d53526038 R14: 00007f0d53525fa0 R15: 00007ffff1589e68 [ 1417.899563][T26132] [ 1418.392101][ T810] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1418.392157][ T810] usb 9-1: MIDIStreaming interface descriptor not found [ 1418.445069][T13809] usb 10-1: USB disconnect, device number 62 [ 1418.569319][T26148] overlayfs: failed lookup in lower (newroot/424, name='bus', err=-40): overlapping layers [ 1418.667696][ T810] usb 9-1: USB disconnect, device number 77 [ 1418.785785][T26153] netlink: 'syz.6.6305': attribute type 4 has an invalid length. [ 1419.027830][T24609] udevd[24609]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:12.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1419.116641][T26162] FAULT_INJECTION: forcing a failure. [ 1419.116641][T26162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1419.116675][T26162] CPU: 0 UID: 0 PID: 26162 Comm: syz.1.6310 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1419.116701][T26162] Tainted: [L]=SOFTLOCKUP [ 1419.116709][T26162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1419.116720][T26162] Call Trace: [ 1419.116727][T26162] [ 1419.116736][T26162] dump_stack_lvl+0xe8/0x150 [ 1419.116766][T26162] should_fail_ex+0x46b/0x600 [ 1419.116794][T26162] _copy_from_user+0x2d/0xb0 [ 1419.116822][T26162] ___sys_sendmsg+0x1c6/0x360 [ 1419.116849][T26162] ? __pfx____sys_sendmsg+0x10/0x10 [ 1419.116902][T26162] ? __fget_files+0x2a/0x420 [ 1419.116924][T26162] ? __fget_files+0x3a6/0x420 [ 1419.116965][T26162] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1419.116988][T26162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1419.117016][T26162] ? __pfx_ksys_write+0x10/0x10 [ 1419.117052][T26162] do_syscall_64+0x14d/0xf80 [ 1419.117071][T26162] ? trace_irq_disable+0x3b/0x150 [ 1419.117092][T26162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.117111][T26162] ? clear_bhb_loop+0x40/0x90 [ 1419.117134][T26162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.117152][T26162] RIP: 0033:0x7f474a5ac799 [ 1419.117168][T26162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1419.117183][T26162] RSP: 002b:00007f47487fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1419.117203][T26162] RAX: ffffffffffffffda RBX: 00007f474a825fa0 RCX: 00007f474a5ac799 [ 1419.117217][T26162] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1419.117229][T26162] RBP: 00007f47487fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1419.117241][T26162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1419.117253][T26162] R13: 00007f474a826038 R14: 00007f474a825fa0 R15: 00007fff5cec5d28 [ 1419.117283][T26162] [ 1419.294264][T26165] netlink: 'syz.6.6311': attribute type 27 has an invalid length. [ 1419.294285][T26165] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6311'. [ 1419.459926][T26174] FAULT_INJECTION: forcing a failure. [ 1419.459926][T26174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1419.459961][T26174] CPU: 0 UID: 0 PID: 26174 Comm: syz.8.6316 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1419.459987][T26174] Tainted: [L]=SOFTLOCKUP [ 1419.459993][T26174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1419.460004][T26174] Call Trace: [ 1419.460011][T26174] [ 1419.460019][T26174] dump_stack_lvl+0xe8/0x150 [ 1419.460050][T26174] should_fail_ex+0x46b/0x600 [ 1419.460078][T26174] _copy_from_user+0x2d/0xb0 [ 1419.460106][T26174] ___sys_recvmsg+0x175/0x590 [ 1419.460134][T26174] ? __pfx____sys_recvmsg+0x10/0x10 [ 1419.460175][T26174] ? __fget_files+0x3a6/0x420 [ 1419.460207][T26174] __x64_sys_recvmsg+0x1c0/0x2a0 [ 1419.460230][T26174] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1419.460260][T26174] ? __pfx_ksys_write+0x10/0x10 [ 1419.460296][T26174] do_syscall_64+0x14d/0xf80 [ 1419.460312][T26174] ? trace_irq_disable+0x3b/0x150 [ 1419.460337][T26174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.460355][T26174] ? clear_bhb_loop+0x40/0x90 [ 1419.460376][T26174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.460394][T26174] RIP: 0033:0x7f88c1a1c799 [ 1419.460411][T26174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1419.460426][T26174] RSP: 002b:00007f88bfc76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1419.460446][T26174] RAX: ffffffffffffffda RBX: 00007f88c1c95fa0 RCX: 00007f88c1a1c799 [ 1419.460460][T26174] RDX: 0000000000000100 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1419.460472][T26174] RBP: 00007f88bfc76090 R08: 0000000000000000 R09: 0000000000000000 [ 1419.460483][T26174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1419.460494][T26174] R13: 00007f88c1c96038 R14: 00007f88c1c95fa0 R15: 00007ffde6c98868 [ 1419.460523][T26174] [ 1420.763413][T26190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6319'. [ 1420.763436][T26190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6319'. [ 1420.925151][T13809] usb 10-1: new low-speed USB device number 63 using dummy_hcd [ 1421.034934][T26199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6323'. [ 1421.087878][T13809] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1421.089348][T13809] usb 10-1: config 8 has an invalid interface number: 221 but max is 0 [ 1421.089374][T13809] usb 10-1: config 8 has no interface number 0 [ 1421.089405][T13809] usb 10-1: config 8 interface 221 has no altsetting 0 [ 1421.092596][T13809] usb 10-1: string descriptor 0 read error: -22 [ 1421.092731][T13809] usb 10-1: New USB device found, idVendor=0482, idProduct=0100, bcdDevice= 1.00 [ 1421.092756][T13809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.113136][T13809] usb-storage 10-1:8.221: USB Mass Storage device detected [ 1421.165557][T13809] usb-storage 10-1:8.221: Quirks match for vid 0482 pid 0100: 8 [ 1421.315116][ T810] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1421.346625][T13809] usb 10-1: USB disconnect, device number 63 [ 1421.479711][ T810] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1421.481137][ T810] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.481161][ T810] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1421.487159][ T810] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1421.487186][ T810] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.487259][ T810] usb 9-1: Product: syz [ 1421.487274][ T810] usb 9-1: Manufacturer: syz [ 1421.487288][ T810] usb 9-1: SerialNumber: syz [ 1421.546019][ T810] usb 9-1: selecting invalid altsetting 1 [ 1421.546479][ T810] usb 9-1: unit 6 not found! [ 1421.673763][ T810] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1421.782223][ T810] usb 9-1: USB disconnect, device number 78 [ 1421.841511][T24817] udevd[24817]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1421.991105][T26231] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6333'. [ 1422.015236][T26233] FAULT_INJECTION: forcing a failure. [ 1422.015236][T26233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1422.015270][T26233] CPU: 1 UID: 0 PID: 26233 Comm: syz.0.6334 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1422.015297][T26233] Tainted: [L]=SOFTLOCKUP [ 1422.015304][T26233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1422.015316][T26233] Call Trace: [ 1422.015323][T26233] [ 1422.015332][T26233] dump_stack_lvl+0xe8/0x150 [ 1422.015362][T26233] should_fail_ex+0x46b/0x600 [ 1422.015391][T26233] _copy_from_user+0x2d/0xb0 [ 1422.015419][T26233] ___sys_sendmsg+0x1c6/0x360 [ 1422.015447][T26233] ? __pfx____sys_sendmsg+0x10/0x10 [ 1422.015501][T26233] ? __fget_files+0x2a/0x420 [ 1422.015524][T26233] ? __fget_files+0x3a6/0x420 [ 1422.015556][T26233] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1422.015579][T26233] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1422.015609][T26233] ? __pfx_ksys_write+0x10/0x10 [ 1422.015644][T26233] do_syscall_64+0x14d/0xf80 [ 1422.015662][T26233] ? trace_irq_disable+0x3b/0x150 [ 1422.015700][T26233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.015719][T26233] ? clear_bhb_loop+0x40/0x90 [ 1422.015740][T26233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.015759][T26233] RIP: 0033:0x7f0232b7c799 [ 1422.015783][T26233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1422.015799][T26233] RSP: 002b:00007f0230dce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1422.015820][T26233] RAX: ffffffffffffffda RBX: 00007f0232df5fa0 RCX: 00007f0232b7c799 [ 1422.015833][T26233] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1422.015846][T26233] RBP: 00007f0230dce090 R08: 0000000000000000 R09: 0000000000000000 [ 1422.015858][T26233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1422.015870][T26233] R13: 00007f0232df6038 R14: 00007f0232df5fa0 R15: 00007fff54dbe0d8 [ 1422.015899][T26233] [ 1422.152993][T26235] overlayfs: overlapping lowerdir path [ 1422.504544][T26245] veth1_macvtap: left promiscuous mode [ 1422.504568][T26245] macsec0: entered allmulticast mode [ 1422.528859][T26245] veth1_macvtap: entered promiscuous mode [ 1422.528890][T26245] veth1_macvtap: entered allmulticast mode [ 1422.528981][T26245] macsec0: left allmulticast mode [ 1422.528995][T26245] veth1_macvtap: left allmulticast mode [ 1422.661973][T26248] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6340'. [ 1422.778396][T26259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6342'. [ 1423.364958][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.716651][T26262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6343'. [ 1423.865912][T26268] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6345'. [ 1423.966893][T26273] overlayfs: failed to resolve './file1/file0': -2 [ 1423.988404][T26274] netlink: 'syz.1.6346': attribute type 29 has an invalid length. [ 1423.990926][T26274] netlink: 'syz.1.6346': attribute type 29 has an invalid length. [ 1424.216032][T26280] veth1_macvtap: left promiscuous mode [ 1424.216058][T26280] macsec0: entered allmulticast mode [ 1424.264018][T26280] veth1_macvtap: entered promiscuous mode [ 1424.264034][T26280] veth1_macvtap: entered allmulticast mode [ 1424.264090][T26280] macsec0: left allmulticast mode [ 1424.264101][T26280] veth1_macvtap: left allmulticast mode [ 1424.364357][T26288] netlink: 'syz.8.6349': attribute type 29 has an invalid length. [ 1424.365453][T26288] netlink: 'syz.8.6349': attribute type 29 has an invalid length. [ 1424.476786][T26294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6353'. [ 1424.506425][ T810] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 1424.695786][ T810] usb 10-1: Using ep0 maxpacket: 32 [ 1424.733294][ T810] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1424.777028][ T810] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 7 [ 1424.825493][ T810] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 1424.825549][ T810] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.825615][ T810] usb 10-1: Product: syz [ 1424.825683][ T810] usb 10-1: Manufacturer: syz [ 1424.825742][ T810] usb 10-1: SerialNumber: syz [ 1425.550564][T26301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6356'. [ 1425.683474][ T810] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1425.755142][T26309] overlayfs: failed to resolve './file1/file0': -2 [ 1425.841637][ T810] usb 10-1: USB disconnect, device number 64 [ 1425.929148][T24817] udevd[24817]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1426.215146][ T5129] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1426.265378][ T9] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1426.287047][T26323] veth1_macvtap: left promiscuous mode [ 1426.287073][T26323] macsec0: entered allmulticast mode [ 1426.302693][T26323] veth1_macvtap: entered promiscuous mode [ 1426.302715][T26323] veth1_macvtap: entered allmulticast mode [ 1426.302812][T26323] macsec0: left allmulticast mode [ 1426.302826][T26323] veth1_macvtap: left allmulticast mode [ 1426.375456][ T5129] usb 7-1: Using ep0 maxpacket: 16 [ 1426.424644][T26330] __nla_validate_parse: 1 callbacks suppressed [ 1426.424667][T26330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6365'. [ 1426.616379][T13809] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1427.231216][ T5129] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1427.231306][ T5129] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1427.231351][ T5129] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1427.231375][ T5129] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.262366][T26332] FAULT_INJECTION: forcing a failure. [ 1427.262366][T26332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1427.262401][T26332] CPU: 0 UID: 0 PID: 26332 Comm: syz.1.6367 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1427.262427][T26332] Tainted: [L]=SOFTLOCKUP [ 1427.262434][T26332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1427.262446][T26332] Call Trace: [ 1427.262454][T26332] [ 1427.262461][T26332] dump_stack_lvl+0xe8/0x150 [ 1427.262491][T26332] should_fail_ex+0x46b/0x600 [ 1427.262520][T26332] _copy_from_user+0x2d/0xb0 [ 1427.262547][T26332] ___sys_sendmsg+0x1c6/0x360 [ 1427.262574][T26332] ? __pfx____sys_sendmsg+0x10/0x10 [ 1427.262626][T26332] ? __fget_files+0x2a/0x420 [ 1427.262648][T26332] ? __fget_files+0x3a6/0x420 [ 1427.262679][T26332] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1427.262702][T26332] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1427.262731][T26332] ? __pfx_ksys_write+0x10/0x10 [ 1427.262767][T26332] do_syscall_64+0x14d/0xf80 [ 1427.262786][T26332] ? trace_irq_disable+0x3b/0x150 [ 1427.262806][T26332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.262825][T26332] ? clear_bhb_loop+0x40/0x90 [ 1427.262846][T26332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.262864][T26332] RIP: 0033:0x7f474a5ac799 [ 1427.262882][T26332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1427.262898][T26332] RSP: 002b:00007f47487fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1427.262917][T26332] RAX: ffffffffffffffda RBX: 00007f474a825fa0 RCX: 00007f474a5ac799 [ 1427.262931][T26332] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1427.262943][T26332] RBP: 00007f47487fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1427.262955][T26332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1427.262966][T26332] R13: 00007f474a826038 R14: 00007f474a825fa0 R15: 00007fff5cec5d28 [ 1427.262996][T26332] [ 1427.265207][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 1427.301158][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1427.301198][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1427.301221][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1427.301261][ T9] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1427.301284][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.475225][T13809] usb 10-1: Using ep0 maxpacket: 32 [ 1427.485823][T13809] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 1427.485864][T13809] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1427.485911][T13809] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1427.485938][T13809] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1427.485960][T13809] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1427.485988][T13809] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1427.502416][ T9] usb 9-1: config 0 descriptor?? [ 1427.515158][T13809] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1427.515202][T13809] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1427.515224][T13809] usb 10-1: Product: syz [ 1427.515240][T13809] usb 10-1: Manufacturer: syz [ 1427.515253][T13809] usb 10-1: SerialNumber: syz [ 1427.557012][ T5129] usb 7-1: config 0 descriptor?? [ 1427.662884][T13809] usb 10-1: config 0 descriptor?? [ 1427.672735][T13809] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1427.697017][T13809] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1427.895884][T26328] ldusb 10-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1427.913956][ T114] usb 10-1: USB disconnect, device number 65 [ 1427.929896][ T114] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1427.975381][T26320] binder: 26314:26320 ioctl c0306201 2000000003c0 returned -14 [ 1428.036470][ T9] hid_parser_main: 5 callbacks suppressed [ 1428.036485][ T9] shield 0003:0955:7214.003E: unknown main item tag 0x0 [ 1428.036504][ T9] shield 0003:0955:7214.003E: unknown main item tag 0x0 [ 1428.036523][ T9] shield 0003:0955:7214.003E: unknown main item tag 0x0 [ 1428.036549][ T9] shield 0003:0955:7214.003E: unknown main item tag 0x0 [ 1428.036575][ T9] shield 0003:0955:7214.003E: unknown main item tag 0x0 [ 1428.045597][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input85 [ 1428.094321][ T5129] usbhid 7-1:0.0: can't add hid device: -71 [ 1428.094452][ T5129] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1428.127908][ T5129] usb 7-1: USB disconnect, device number 37 [ 1428.197319][ T9] shield 0003:0955:7214.003E: Registered Thunderstrike controller [ 1428.206645][ T9] shield 0003:0955:7214.003E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.8-1/input0 [ 1428.242451][T26320] random: crng reseeded on system resumption [ 1428.267167][T26341] overlayfs: failed to resolve './file1/file0': -2 [ 1428.282237][T26343] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6371'. [ 1428.596144][T18222] shield 0003:0955:7214.003E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1428.596462][T18222] shield 0003:0955:7214.003E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1428.596779][T18222] shield 0003:0955:7214.003E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1428.597078][T18222] shield 0003:0955:7214.003E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1428.597850][ T5129] usb 9-1: USB disconnect, device number 79 [ 1428.756121][T26358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6377'. [ 1428.875623][T13809] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1428.995973][T20791] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1429.725074][T13809] usb 10-1: Using ep0 maxpacket: 16 [ 1429.727625][T13809] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1429.728939][T13809] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.729034][T13809] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1429.731355][T13809] usb 10-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1429.731382][T13809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.731403][T13809] usb 10-1: Product: 煿﬛뺶౤㱖寫옇淲뤅娘㸛兩ᕞ췧Ḋ洯뽡䅘錁壹者㔞쇙㥕뾋㏵ޅ殸㺤펢봘뜡싈͎ⲛꠏ춴䒈ꊣ嫣҂䠰伬⌆鮲꫉Ⲋ꺿풻ຟᢠ乤啿榓❾䝟Н톬໕쫜ꀂ¯嬡㟁⍩㋋場얷墧⢊쪃탚坽ꂆ귃Ⱪ [ 1429.731433][T13809] usb 10-1: Manufacturer: 蠬褚裕悗䝔⪱Ꮌ蚸⳴疠攈い化슓젧磌뇄띭ꢥ挢怋烬ᴏ缈㱡ᗷ䢩栃仼穌룍谲听硌ꤻॎ媴揾ⴄ㎡圏깻鍾͵┎곑蹴詊ऍ獔좳깱뚟ᖠⲵ㣺㗿쿵뒆描苻闁總葖 [ 1429.731460][T13809] usb 10-1: SerialNumber: и [ 1429.737920][T26361] veth1_macvtap: left promiscuous mode [ 1429.737940][T26361] macsec0: entered allmulticast mode [ 1429.795066][T20791] usb 7-1: Using ep0 maxpacket: 32 [ 1429.799574][T20791] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1429.800787][T20791] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 7 [ 1429.826799][T26364] comedi comedi3: 8255: I/O port conflict (0x4004f27,4) [ 1429.830721][T20791] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 1429.830748][T20791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.830769][T20791] usb 7-1: Product: syz [ 1429.830783][T20791] usb 7-1: Manufacturer: syz [ 1429.830797][T20791] usb 7-1: SerialNumber: syz [ 1429.995468][T26363] veth1_macvtap: entered promiscuous mode [ 1429.995491][T26363] veth1_macvtap: entered allmulticast mode [ 1429.995577][T26363] macsec0: left allmulticast mode [ 1429.995591][T26363] veth1_macvtap: left allmulticast mode [ 1430.108942][T26367] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6380'. [ 1430.148576][T26367] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6380'. [ 1430.227154][T20791] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1430.289869][T13809] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 1430.290404][T13809] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1430.314922][T26367] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6380'. [ 1430.324632][T26367] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6380'. [ 1430.324885][T26367] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6380'. [ 1430.336809][T26367] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6380'. [ 1430.337051][T26367] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6380'. [ 1430.369920][T20791] usb 7-1: USB disconnect, device number 38 [ 1430.385133][ T5129] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1430.605100][ T5129] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1430.605944][ T5129] usb 2-1: not running at top speed; connect to a high speed hub [ 1430.612553][ T5129] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.612577][ T5129] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1430.612624][ T5129] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1430.658289][ T5129] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1430.658318][ T5129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.658339][ T5129] usb 2-1: Product: syz [ 1430.658353][ T5129] usb 2-1: Manufacturer: syz [ 1430.658368][ T5129] usb 2-1: SerialNumber: syz [ 1430.796648][T13809] usb 10-1: USB disconnect, device number 66 [ 1430.971164][T26369] fuse: Bad value for 'fd' [ 1431.213188][T24817] udevd[24817]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1431.345189][T20791] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1431.510724][T20791] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1431.513951][T20791] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 1431.539999][T20791] usb 7-1: string descriptor 0 read error: -22 [ 1431.541345][T20791] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1431.541371][T20791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.616079][T20791] usb 7-1: selecting invalid altsetting 1 [ 1431.620234][T20791] usb 7-1: unit 3 not found! [ 1431.727424][T26384] __nla_validate_parse: 32 callbacks suppressed [ 1431.727444][T26384] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6386'. [ 1431.861908][T26375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.884499][T26375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.894134][T20791] usb 7-1: cannot request logical cluster ID: 35217 (err: -5) [ 1431.894158][T20791] usb 7-1: invalid MIXER UNIT descriptor 6 [ 1431.921499][T20791] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 1431.963711][T20791] usb 7-1: selecting invalid altsetting 1 [ 1431.976067][T20791] usb 7-1: unit 3 not found! [ 1432.094178][T20791] usb 7-1: cannot request logical cluster ID: 35217 (err: -71) [ 1432.094259][T20791] usb 7-1: invalid MIXER UNIT descriptor 6 [ 1432.127396][T20791] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 1432.191287][T20791] usb 7-1: selecting invalid altsetting 1 [ 1432.194103][T20791] usb 7-1: unit 3 not found! [ 1432.194656][T20791] usb 7-1: cannot request logical cluster ID: 35217 (err: -71) [ 1432.194783][T20791] usb 7-1: invalid MIXER UNIT descriptor 6 [ 1433.190353][T24817] udevd[24817]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1433.227570][T20791] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 1433.255834][T20791] usb 7-1: USB disconnect, device number 39 [ 1433.382102][ T5129] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1433.444577][ T5129] usb 2-1: USB disconnect, device number 123 [ 1433.494770][T26401] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6388'. [ 1434.360852][T26403] veth1_macvtap: left promiscuous mode [ 1434.360880][T26403] macsec0: entered allmulticast mode [ 1434.420352][T24817] udevd[24817]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1434.450938][T26406] veth1_macvtap: entered promiscuous mode [ 1434.450964][T26406] veth1_macvtap: entered allmulticast mode [ 1434.451057][T26406] macsec0: left allmulticast mode [ 1434.451072][T26406] veth1_macvtap: left allmulticast mode [ 1434.825158][ T5129] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1435.736770][ T5129] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1435.738866][T26414] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1435.738884][T26414] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1435.740275][ T5129] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.740298][ T5129] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1435.743991][ T5129] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1435.744017][ T5129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.744036][ T5129] usb 2-1: Product: syz [ 1435.744049][ T5129] usb 2-1: Manufacturer: syz [ 1435.744063][ T5129] usb 2-1: SerialNumber: syz [ 1436.216029][ T5129] usb 2-1: USB disconnect, device number 124 [ 1437.207247][T26427] FAULT_INJECTION: forcing a failure. [ 1437.207247][T26427] name failslab, interval 1, probability 0, space 0, times 0 [ 1437.207281][T26427] CPU: 1 UID: 0 PID: 26427 Comm: syz.0.6400 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1437.207307][T26427] Tainted: [L]=SOFTLOCKUP [ 1437.207314][T26427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1437.207326][T26427] Call Trace: [ 1437.207333][T26427] [ 1437.207342][T26427] dump_stack_lvl+0xe8/0x150 [ 1437.207382][T26427] should_fail_ex+0x46b/0x600 [ 1437.207411][T26427] should_failslab+0xa8/0x100 [ 1437.207433][T26427] __kvmalloc_node_noprof+0x170/0x8e0 [ 1437.207454][T26427] ? file_tty_write+0x2ed/0xa30 [ 1437.207478][T26427] ? _mutex_trylock_nest_lock+0x128/0x180 [ 1437.207508][T26427] file_tty_write+0x2ed/0xa30 [ 1437.207541][T26427] do_iter_readv_writev+0x62b/0x8d0 [ 1437.207564][T26427] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1437.207592][T26427] ? rw_verify_area+0x25b/0x4e0 [ 1437.207620][T26427] vfs_writev+0x345/0x9a0 [ 1437.207650][T26427] ? __pfx_vfs_writev+0x10/0x10 [ 1437.207685][T26427] ? __fget_files+0x2a/0x420 [ 1437.207710][T26427] ? __fget_files+0x3a6/0x420 [ 1437.207731][T26427] ? __fget_files+0x2a/0x420 [ 1437.207762][T26427] do_writev+0x15a/0x2e0 [ 1437.207786][T26427] ? __pfx_do_writev+0x10/0x10 [ 1437.207818][T26427] do_syscall_64+0x14d/0xf80 [ 1437.207837][T26427] ? trace_irq_disable+0x3b/0x150 [ 1437.207857][T26427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.207877][T26427] ? clear_bhb_loop+0x40/0x90 [ 1437.207899][T26427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.207918][T26427] RIP: 0033:0x7f0232b7c799 [ 1437.207936][T26427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1437.207952][T26427] RSP: 002b:00007f0230dce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1437.207973][T26427] RAX: ffffffffffffffda RBX: 00007f0232df5fa0 RCX: 00007f0232b7c799 [ 1437.207987][T26427] RDX: 0000000000000005 RSI: 0000200000000040 RDI: 0000000000000003 [ 1437.207999][T26427] RBP: 00007f0230dce090 R08: 0000000000000000 R09: 0000000000000000 [ 1437.208011][T26427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1437.208023][T26427] R13: 00007f0232df6038 R14: 00007f0232df5fa0 R15: 00007fff54dbe0d8 [ 1437.208054][T26427] [ 1437.714022][T26437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6402'. [ 1438.726615][T26441] veth1_macvtap: left promiscuous mode [ 1438.726640][T26441] macsec0: entered allmulticast mode [ 1438.735445][T26441] veth1_macvtap: entered promiscuous mode [ 1438.735466][T26441] veth1_macvtap: entered allmulticast mode [ 1438.735557][T26441] macsec0: left allmulticast mode [ 1438.735569][T26441] veth1_macvtap: left allmulticast mode [ 1439.146739][T26447] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6397'. [ 1439.558951][T26451] FAULT_INJECTION: forcing a failure. [ 1439.558951][T26451] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.559005][T26451] CPU: 0 UID: 0 PID: 26451 Comm: syz.8.6406 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1439.559033][T26451] Tainted: [L]=SOFTLOCKUP [ 1439.559039][T26451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1439.559051][T26451] Call Trace: [ 1439.559059][T26451] [ 1439.559066][T26451] dump_stack_lvl+0xe8/0x150 [ 1439.559089][T26451] should_fail_ex+0x46b/0x600 [ 1439.559106][T26451] should_failslab+0xa8/0x100 [ 1439.559119][T26451] __kmalloc_noprof+0xdf/0x7b0 [ 1439.559128][T26451] ? kfree+0x4d/0x6c0 [ 1439.559142][T26451] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1439.559159][T26451] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1439.559176][T26451] ? tomoyo_path_number_perm+0x219/0x630 [ 1439.559187][T26451] tomoyo_path_number_perm+0x246/0x630 [ 1439.559199][T26451] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1439.559211][T26451] ? __lock_acquire+0x6b5/0x2cf0 [ 1439.559238][T26451] ? __fget_files+0x2a/0x420 [ 1439.559254][T26451] ? __fget_files+0x2a/0x420 [ 1439.559266][T26451] ? __fget_files+0x3a6/0x420 [ 1439.559278][T26451] ? __fget_files+0x2a/0x420 [ 1439.559293][T26451] security_file_ioctl+0xc3/0x2a0 [ 1439.559307][T26451] __se_sys_ioctl+0x47/0x170 [ 1439.559318][T26451] do_syscall_64+0x14d/0xf80 [ 1439.559330][T26451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.559341][T26451] ? clear_bhb_loop+0x40/0x90 [ 1439.559354][T26451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.559364][T26451] RIP: 0033:0x7f88c1a1c799 [ 1439.559375][T26451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1439.559390][T26451] RSP: 002b:00007f88bfc55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1439.559402][T26451] RAX: ffffffffffffffda RBX: 00007f88c1c96090 RCX: 00007f88c1a1c799 [ 1439.559410][T26451] RDX: 00002000000016c0 RSI: 0000000080106f53 RDI: 0000000000000004 [ 1439.559416][T26451] RBP: 00007f88bfc55090 R08: 0000000000000000 R09: 0000000000000000 [ 1439.559423][T26451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1439.559429][T26451] R13: 00007f88c1c96128 R14: 00007f88c1c96090 R15: 00007ffde6c98868 [ 1439.559445][T26451] [ 1439.559466][T26451] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1439.797370][T26453] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1439.797393][T26453] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1441.064407][T26464] binder: 26463:26464 ioctl 4018620d 0 returned -22 [ 1441.405434][ T114] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1441.555508][ T114] usb 10-1: Using ep0 maxpacket: 32 [ 1441.557695][ T114] usb 10-1: config 87 has an invalid interface number: 229 but max is 1 [ 1441.557721][ T114] usb 10-1: config 87 has no interface number 1 [ 1441.557765][ T114] usb 10-1: config 87 interface 229 has no altsetting 0 [ 1441.557785][ T114] usb 10-1: config 87 interface 0 has no altsetting 0 [ 1441.560435][ T114] usb 10-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=1a.7c [ 1441.560463][ T114] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.560484][ T114] usb 10-1: Product: syz [ 1441.560499][ T114] usb 10-1: Manufacturer: syz [ 1441.560514][ T114] usb 10-1: SerialNumber: syz [ 1442.509519][T26468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.510320][T26468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.557854][T26468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.558737][T26468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.564181][T26468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.564664][T26468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.571753][T26468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.576565][T26468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.588515][T26468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.590091][T26468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.772877][ T114] usb 10-1: bad CDC descriptors [ 1442.917653][T26476] veth1_macvtap: left promiscuous mode [ 1442.917680][T26476] macsec0: entered allmulticast mode [ 1442.936380][ T114] usb 10-1: USB disconnect, device number 67 [ 1442.952720][T26476] veth1_macvtap: entered promiscuous mode [ 1442.952755][T26476] veth1_macvtap: entered allmulticast mode [ 1442.975071][T26476] macsec0: left allmulticast mode [ 1442.975084][T26476] veth1_macvtap: left allmulticast mode [ 1443.075222][ T5129] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 1443.275768][T26486] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1443.275791][T26486] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1443.417560][ T5129] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1443.417587][ T5129] usb 7-1: config 0 has no interface number 0 [ 1443.420258][ T5129] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1443.420285][ T5129] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.420307][ T5129] usb 7-1: Product: syz [ 1443.420322][ T5129] usb 7-1: Manufacturer: syz [ 1443.420337][ T5129] usb 7-1: SerialNumber: syz [ 1443.667351][ T5129] usb 7-1: config 0 descriptor?? [ 1443.693942][ T5129] usb 7-1: selecting invalid altsetting 1 [ 1443.711554][ T5129] dvb_ttusb_budget: ttusb_init_controller: error [ 1443.711572][ T5129] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1443.862468][T26492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6422'. [ 1444.006205][ T5129] DVB: Unable to find symbol stv0299_attach() [ 1444.103805][T26497] FAULT_INJECTION: forcing a failure. [ 1444.103805][T26497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1444.103839][T26497] CPU: 1 UID: 0 PID: 26497 Comm: syz.1.6420 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1444.103865][T26497] Tainted: [L]=SOFTLOCKUP [ 1444.103873][T26497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1444.103883][T26497] Call Trace: [ 1444.103891][T26497] [ 1444.103900][T26497] dump_stack_lvl+0xe8/0x150 [ 1444.103931][T26497] should_fail_ex+0x46b/0x600 [ 1444.103961][T26497] _copy_to_user+0x31/0xb0 [ 1444.103990][T26497] simple_read_from_buffer+0xe1/0x170 [ 1444.104018][T26497] proc_fail_nth_read+0x1be/0x230 [ 1444.104044][T26497] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1444.104070][T26497] ? rw_verify_area+0x2ac/0x4e0 [ 1444.104095][T26497] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1444.104120][T26497] vfs_read+0x212/0xa80 [ 1444.104153][T26497] ? __pfx_vfs_read+0x10/0x10 [ 1444.104181][T26497] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1444.104203][T26497] ? lockdep_hardirqs_on+0x7a/0x110 [ 1444.104223][T26497] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1444.104243][T26497] ? mutex_lock_nested+0x152/0x1d0 [ 1444.104266][T26497] ? fdget_pos+0x252/0x320 [ 1444.104297][T26497] ksys_read+0x156/0x270 [ 1444.104325][T26497] ? __pfx_ksys_read+0x10/0x10 [ 1444.104362][T26497] do_syscall_64+0x14d/0xf80 [ 1444.104381][T26497] ? trace_irq_disable+0x3b/0x150 [ 1444.104401][T26497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.104421][T26497] ? clear_bhb_loop+0x40/0x90 [ 1444.104443][T26497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.104463][T26497] RIP: 0033:0x7f474a56cfce [ 1444.104481][T26497] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1444.104496][T26497] RSP: 002b:00007f47487dcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1444.104516][T26497] RAX: ffffffffffffffda RBX: 00007f47487dd6c0 RCX: 00007f474a56cfce [ 1444.104530][T26497] RDX: 000000000000000f RSI: 00007f47487dd0a0 RDI: 0000000000000004 [ 1444.104543][T26497] RBP: 00007f47487dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1444.104556][T26497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1444.104567][T26497] R13: 00007f474a826128 R14: 00007f474a826090 R15: 00007fff5cec5d28 [ 1444.104598][T26497] [ 1444.115119][ T5874] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 1444.265812][ T5874] usb 10-1: Using ep0 maxpacket: 16 [ 1444.273397][ T5874] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.273428][ T5874] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1444.273451][ T5874] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1444.273494][ T5874] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1444.273517][ T5874] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.400755][ T114] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 1444.595118][ T114] usb 9-1: Using ep0 maxpacket: 16 [ 1444.598418][ T114] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1444.599924][ T114] usb 9-1: config 198 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.602462][ T114] usb 9-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=58.84 [ 1444.602489][ T114] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.602509][ T114] usb 9-1: Product: syz [ 1444.602524][ T114] usb 9-1: Manufacturer: syz [ 1444.602538][ T114] usb 9-1: SerialNumber: syz [ 1444.802487][ T5129] DVB: Unable to find symbol tda8083_attach() [ 1444.802501][ T5129] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1444.893387][ T5874] usb 10-1: config 0 descriptor?? [ 1444.907491][ T5129] usb 7-1: USB disconnect, device number 40 [ 1445.205155][ T9] usb 2-1: new low-speed USB device number 125 using dummy_hcd [ 1445.326608][T26493] binder: 26488:26493 ioctl c0306201 2000000003c0 returned -14 [ 1445.351103][ T5874] shield 0003:0955:7214.003F: unknown main item tag 0x0 [ 1445.351140][ T5874] shield 0003:0955:7214.003F: unknown main item tag 0x0 [ 1445.351167][ T5874] shield 0003:0955:7214.003F: unknown main item tag 0x0 [ 1445.351194][ T5874] shield 0003:0955:7214.003F: unknown main item tag 0x0 [ 1445.351220][ T5874] shield 0003:0955:7214.003F: unknown main item tag 0x0 [ 1445.395256][ T5874] input: HID 0955:7214 Haptics as /devices/virtual/input/input86 [ 1445.432891][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1445.434282][ T9] usb 2-1: config 8 has an invalid interface number: 221 but max is 0 [ 1445.434305][ T9] usb 2-1: config 8 has no interface number 0 [ 1445.434335][ T9] usb 2-1: config 8 interface 221 has no altsetting 0 [ 1445.448837][ T9] usb 2-1: string descriptor 0 read error: -22 [ 1445.448977][ T9] usb 2-1: New USB device found, idVendor=0482, idProduct=0100, bcdDevice= 1.00 [ 1445.448999][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.473060][ T114] comedi comedi4: Wrong number of endpoints [ 1445.473079][ T114] dt9812 9-1:198.0: driver 'dt9812' failed to auto-configure device. [ 1445.500417][ T9] usb-storage 2-1:8.221: USB Mass Storage device detected [ 1445.559817][ T5874] shield 0003:0955:7214.003F: Registered Thunderstrike controller [ 1445.560156][ T5874] shield 0003:0955:7214.003F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 1445.561494][ T114] usb 9-1: USB disconnect, device number 80 [ 1445.574101][ T9] usb-storage 2-1:8.221: Quirks match for vid 0482 pid 0100: 8 [ 1445.738275][ T9] usb 2-1: USB disconnect, device number 125 [ 1445.752657][T26516] veth1_macvtap: left promiscuous mode [ 1445.752679][T26516] macsec0: entered allmulticast mode [ 1445.783692][T26516] veth1_macvtap: entered promiscuous mode [ 1445.783723][T26516] veth1_macvtap: entered allmulticast mode [ 1445.783811][T26516] macsec0: left allmulticast mode [ 1445.783824][T26516] veth1_macvtap: left allmulticast mode [ 1445.876905][T26493] random: crng reseeded on system resumption [ 1446.057101][T13809] shield 0003:0955:7214.003F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1446.057418][T13809] shield 0003:0955:7214.003F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1446.057930][T13809] shield 0003:0955:7214.003F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1446.058279][T13809] shield 0003:0955:7214.003F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1446.058362][ T5874] usb 10-1: USB disconnect, device number 68 [ 1446.328701][ T9] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 1447.054088][T26525] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1447.054102][T26525] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1447.156621][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1447.156645][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.156656][ T9] usb 7-1: Product: syz [ 1447.156664][ T9] usb 7-1: Manufacturer: syz [ 1447.156671][ T9] usb 7-1: SerialNumber: syz [ 1447.160589][ T9] usb 7-1: config 0 descriptor?? [ 1447.294649][T26531] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6433'. [ 1447.476242][ T9] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1448.546875][T26560] FAULT_INJECTION: forcing a failure. [ 1448.546875][T26560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1448.546906][T26560] CPU: 1 UID: 0 PID: 26560 Comm: syz.9.6440 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1448.546921][T26560] Tainted: [L]=SOFTLOCKUP [ 1448.546925][T26560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1448.546932][T26560] Call Trace: [ 1448.546936][T26560] [ 1448.546942][T26560] dump_stack_lvl+0xe8/0x150 [ 1448.546972][T26560] should_fail_ex+0x46b/0x600 [ 1448.547001][T26560] _copy_from_user+0x2d/0xb0 [ 1448.547029][T26560] copy_clone_args_from_user+0x1fa/0x740 [ 1448.547052][T26560] ? __lock_acquire+0x6b5/0x2cf0 [ 1448.547071][T26560] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 1448.547091][T26560] __se_sys_clone3+0x142/0x360 [ 1448.547103][T26560] ? __pfx___se_sys_clone3+0x10/0x10 [ 1448.547141][T26560] ? __pfx_ksys_write+0x10/0x10 [ 1448.547178][T26560] do_syscall_64+0x14d/0xf80 [ 1448.547198][T26560] ? trace_irq_disable+0x3b/0x150 [ 1448.547226][T26560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.547238][T26560] ? clear_bhb_loop+0x40/0x90 [ 1448.547250][T26560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.547260][T26560] RIP: 0033:0x7f0d532ac799 [ 1448.547274][T26560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.547289][T26560] RSP: 002b:00007f0d514e4ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1448.547310][T26560] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f0d532ac799 [ 1448.547325][T26560] RDX: 00007f0d514e4f10 RSI: 0000000000000058 RDI: 00007f0d514e4f10 [ 1448.547338][T26560] RBP: 00007f0d514e5090 R08: 0000000000000000 R09: 0000000000000058 [ 1448.547350][T26560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1448.547362][T26560] R13: 00007f0d53526128 R14: 00007f0d53526090 R15: 00007ffff1589e68 [ 1448.547391][T26560] [ 1448.605389][ T114] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1448.691691][T26523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.692276][T26523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.767016][ T114] usb 2-1: Using ep0 maxpacket: 16 [ 1448.771831][ T114] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1448.771862][ T114] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1448.771933][ T114] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1448.771975][ T114] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1448.772000][ T114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.829058][ T114] usb 2-1: config 0 descriptor?? [ 1449.265615][T26559] binder: 26558:26559 ioctl c0306201 2000000003c0 returned -14 [ 1449.268394][T26569] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6444'. [ 1449.303207][ T114] shield 0003:0955:7214.0040: unknown main item tag 0x0 [ 1449.303321][ T114] shield 0003:0955:7214.0040: unknown main item tag 0x0 [ 1449.303351][ T114] shield 0003:0955:7214.0040: unknown main item tag 0x0 [ 1449.303586][ T114] shield 0003:0955:7214.0040: unknown main item tag 0x0 [ 1449.303611][ T114] shield 0003:0955:7214.0040: unknown main item tag 0x0 [ 1449.316057][ T114] input: HID 0955:7214 Haptics as /devices/virtual/input/input87 [ 1449.473869][ T114] shield 0003:0955:7214.0040: Registered Thunderstrike controller [ 1449.474389][ T114] shield 0003:0955:7214.0040: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 1449.534551][T26559] random: crng reseeded on system resumption [ 1449.544621][ T9] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1449.615744][ T9] usb 7-1: USB disconnect, device number 41 [ 1449.706666][T26344] shield 0003:0955:7214.0040: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1449.707054][T26344] shield 0003:0955:7214.0040: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1449.707327][T26344] shield 0003:0955:7214.0040: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1449.707551][T26344] shield 0003:0955:7214.0040: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1449.707591][ T114] usb 2-1: USB disconnect, device number 126 [ 1449.861984][T26582] FAULT_INJECTION: forcing a failure. [ 1449.861984][T26582] name failslab, interval 1, probability 0, space 0, times 0 [ 1449.862019][T26582] CPU: 1 UID: 0 PID: 26582 Comm: syz.8.6448 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1449.862044][T26582] Tainted: [L]=SOFTLOCKUP [ 1449.862050][T26582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1449.862060][T26582] Call Trace: [ 1449.862067][T26582] [ 1449.862075][T26582] dump_stack_lvl+0xe8/0x150 [ 1449.862114][T26582] should_fail_ex+0x46b/0x600 [ 1449.862144][T26582] should_failslab+0xa8/0x100 [ 1449.862166][T26582] __kmalloc_noprof+0xdf/0x7b0 [ 1449.862183][T26582] ? kfree+0x4d/0x6c0 [ 1449.862205][T26582] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1449.862234][T26582] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1449.862267][T26582] ? tomoyo_path_number_perm+0x219/0x630 [ 1449.862286][T26582] tomoyo_path_number_perm+0x246/0x630 [ 1449.862309][T26582] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1449.862331][T26582] ? __lock_acquire+0x6b5/0x2cf0 [ 1449.862382][T26582] ? __fget_files+0x2a/0x420 [ 1449.862408][T26582] ? __fget_files+0x2a/0x420 [ 1449.862430][T26582] ? __fget_files+0x3a6/0x420 [ 1449.862452][T26582] ? __fget_files+0x2a/0x420 [ 1449.862478][T26582] security_file_ioctl+0xc3/0x2a0 [ 1449.862502][T26582] __se_sys_ioctl+0x47/0x170 [ 1449.862523][T26582] do_syscall_64+0x14d/0xf80 [ 1449.862543][T26582] ? trace_irq_disable+0x3b/0x150 [ 1449.862564][T26582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.862584][T26582] ? clear_bhb_loop+0x40/0x90 [ 1449.862612][T26582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.862630][T26582] RIP: 0033:0x7f88c1a1c799 [ 1449.862647][T26582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1449.862663][T26582] RSP: 002b:00007f88bfc76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1449.862684][T26582] RAX: ffffffffffffffda RBX: 00007f88c1c95fa0 RCX: 00007f88c1a1c799 [ 1449.862699][T26582] RDX: 0000200000000800 RSI: 000000000000890b RDI: 0000000000000004 [ 1449.862712][T26582] RBP: 00007f88bfc76090 R08: 0000000000000000 R09: 0000000000000000 [ 1449.862724][T26582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1449.862736][T26582] R13: 00007f88c1c96038 R14: 00007f88c1c95fa0 R15: 00007ffde6c98868 [ 1449.862767][T26582] [ 1449.862775][T26582] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1450.845169][ T5129] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 1451.054067][T26603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6454'. [ 1451.086028][ T5129] usb 10-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1451.086057][ T5129] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1451.089434][ T5129] usb 10-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1451.089461][ T5129] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.089481][ T5129] usb 10-1: Product: syz [ 1451.089496][ T5129] usb 10-1: Manufacturer: syz [ 1451.089510][ T5129] usb 10-1: SerialNumber: syz [ 1451.101647][T26606] FAULT_INJECTION: forcing a failure. [ 1451.101647][T26606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1451.101679][T26606] CPU: 0 UID: 0 PID: 26606 Comm: syz.0.6455 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1451.101706][T26606] Tainted: [L]=SOFTLOCKUP [ 1451.101713][T26606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1451.101725][T26606] Call Trace: [ 1451.101732][T26606] [ 1451.101740][T26606] dump_stack_lvl+0xe8/0x150 [ 1451.101770][T26606] should_fail_ex+0x46b/0x600 [ 1451.101798][T26606] _copy_from_user+0x2d/0xb0 [ 1451.101827][T26606] ___sys_sendmsg+0x1c6/0x360 [ 1451.101853][T26606] ? __pfx____sys_sendmsg+0x10/0x10 [ 1451.101903][T26606] ? __fget_files+0x2a/0x420 [ 1451.101926][T26606] ? __fget_files+0x3a6/0x420 [ 1451.101956][T26606] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1451.101978][T26606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1451.102007][T26606] ? __pfx_ksys_write+0x10/0x10 [ 1451.102043][T26606] do_syscall_64+0x14d/0xf80 [ 1451.102061][T26606] ? trace_irq_disable+0x3b/0x150 [ 1451.102082][T26606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.102101][T26606] ? clear_bhb_loop+0x40/0x90 [ 1451.102123][T26606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.102142][T26606] RIP: 0033:0x7f0232b7c799 [ 1451.102160][T26606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1451.102176][T26606] RSP: 002b:00007f0230dce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1451.102196][T26606] RAX: ffffffffffffffda RBX: 00007f0232df5fa0 RCX: 00007f0232b7c799 [ 1451.102209][T26606] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1451.102221][T26606] RBP: 00007f0230dce090 R08: 0000000000000000 R09: 0000000000000000 [ 1451.102233][T26606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1451.102244][T26606] R13: 00007f0232df6038 R14: 00007f0232df5fa0 R15: 00007fff54dbe0d8 [ 1451.102273][T26606] [ 1451.335404][T26611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6458'. [ 1451.343643][ T5129] usb 10-1: config 0 descriptor?? [ 1451.697395][ T5129] mos7840 10-1:0.0: required endpoints missing [ 1451.702162][ T5129] usb 10-1: USB disconnect, device number 69 [ 1451.988985][T26620] fuse: blksize only supported for fuseblk [ 1452.196271][T26624] FAULT_INJECTION: forcing a failure. [ 1452.196271][T26624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1452.196306][T26624] CPU: 1 UID: 0 PID: 26624 Comm: syz.1.6462 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1452.196333][T26624] Tainted: [L]=SOFTLOCKUP [ 1452.196339][T26624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1452.196351][T26624] Call Trace: [ 1452.196359][T26624] [ 1452.196367][T26624] dump_stack_lvl+0xe8/0x150 [ 1452.196399][T26624] should_fail_ex+0x46b/0x600 [ 1452.196429][T26624] _copy_from_user+0x2d/0xb0 [ 1452.196457][T26624] __sys_bpf+0x229/0x950 [ 1452.196482][T26624] ? __pfx___sys_bpf+0x10/0x10 [ 1452.196503][T26624] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1452.196544][T26624] ? ksys_write+0x248/0x270 [ 1452.196573][T26624] ? __pfx_ksys_write+0x10/0x10 [ 1452.196606][T26624] __x64_sys_bpf+0x7c/0x90 [ 1452.196628][T26624] do_syscall_64+0x14d/0xf80 [ 1452.196647][T26624] ? trace_irq_disable+0x3b/0x150 [ 1452.196668][T26624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.196688][T26624] ? clear_bhb_loop+0x40/0x90 [ 1452.196711][T26624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.196730][T26624] RIP: 0033:0x7f474a5ac799 [ 1452.196748][T26624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1452.196765][T26624] RSP: 002b:00007f47487fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1452.196785][T26624] RAX: ffffffffffffffda RBX: 00007f474a825fa0 RCX: 00007f474a5ac799 [ 1452.196799][T26624] RDX: 000000000000000c RSI: 00002000000000c0 RDI: 000000000000000a [ 1452.196811][T26624] RBP: 00007f47487fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1452.196824][T26624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1452.196836][T26624] R13: 00007f474a826038 R14: 00007f474a825fa0 R15: 00007fff5cec5d28 [ 1452.196872][T26624] [ 1452.885578][ T114] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1452.946670][T26640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6468'. [ 1452.952118][T26637] veth1_macvtap: left promiscuous mode [ 1452.952141][T26637] macsec0: entered allmulticast mode [ 1452.975774][T26637] veth1_macvtap: entered promiscuous mode [ 1452.975804][T26637] veth1_macvtap: entered allmulticast mode [ 1452.975893][T26637] macsec0: left allmulticast mode [ 1452.975905][T26637] veth1_macvtap: left allmulticast mode [ 1453.013901][T26640] macvlan0: entered promiscuous mode [ 1453.015286][T26640] dummy0: entered promiscuous mode [ 1453.032167][T26640] hsr1: entered promiscuous mode [ 1453.032201][T26640] hsr1: entered allmulticast mode [ 1453.032208][T26640] macvlan0: entered allmulticast mode [ 1453.032215][T26640] veth1_vlan: entered allmulticast mode [ 1453.032233][T26640] dummy0: entered allmulticast mode [ 1453.035281][ T114] usb 10-1: Using ep0 maxpacket: 16 [ 1453.037108][ T114] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1453.037138][ T114] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1453.037161][ T114] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1453.037205][ T114] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1453.037227][ T114] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.117189][ T5874] usb 9-1: new low-speed USB device number 81 using dummy_hcd [ 1453.127218][ T114] usb 10-1: config 0 descriptor?? [ 1453.270866][ T5874] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1453.273725][ T5874] usb 9-1: config 8 has an invalid interface number: 221 but max is 0 [ 1453.273749][ T5874] usb 9-1: config 8 has no interface number 0 [ 1453.273801][ T5874] usb 9-1: config 8 interface 221 has no altsetting 0 [ 1453.279531][ T5874] usb 9-1: string descriptor 0 read error: -22 [ 1453.279665][ T5874] usb 9-1: New USB device found, idVendor=0482, idProduct=0100, bcdDevice= 1.00 [ 1453.279688][ T5874] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.301431][ T5874] usb-storage 9-1:8.221: USB Mass Storage device detected [ 1453.317782][ T5874] usb-storage 9-1:8.221: Quirks match for vid 0482 pid 0100: 8 [ 1453.349510][T26651] FAULT_INJECTION: forcing a failure. [ 1453.349510][T26651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1453.349540][T26651] CPU: 1 UID: 0 PID: 26651 Comm: syz.1.6472 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1453.349567][T26651] Tainted: [L]=SOFTLOCKUP [ 1453.349574][T26651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1453.349586][T26651] Call Trace: [ 1453.349593][T26651] [ 1453.349601][T26651] dump_stack_lvl+0xe8/0x150 [ 1453.349631][T26651] should_fail_ex+0x46b/0x600 [ 1453.349650][T26651] _copy_from_user+0x2d/0xb0 [ 1453.349667][T26651] do_ipv6_setsockopt+0x264/0x31c0 [ 1453.349689][T26651] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1453.349729][T26651] ? __lock_acquire+0x6b5/0x2cf0 [ 1453.349762][T26651] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1453.349790][T26651] ? lockdep_hardirqs_on+0x7a/0x110 [ 1453.349812][T26651] ? __fget_files+0x2a/0x420 [ 1453.349828][T26651] ipv6_setsockopt+0x59/0x170 [ 1453.349840][T26651] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1453.349861][T26651] do_sock_setsockopt+0x17c/0x1b0 [ 1453.349885][T26651] __x64_sys_setsockopt+0x143/0x1b0 [ 1453.349909][T26651] do_syscall_64+0x14d/0xf80 [ 1453.349928][T26651] ? trace_irq_disable+0x3b/0x150 [ 1453.349950][T26651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.349968][T26651] ? clear_bhb_loop+0x40/0x90 [ 1453.349980][T26651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.349991][T26651] RIP: 0033:0x7f474a5ac799 [ 1453.350001][T26651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.350011][T26651] RSP: 002b:00007f47487fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1453.350029][T26651] RAX: ffffffffffffffda RBX: 00007f474a825fa0 RCX: 00007f474a5ac799 [ 1453.350043][T26651] RDX: 000000000000002b RSI: 0000000000000029 RDI: 0000000000000003 [ 1453.350055][T26651] RBP: 00007f47487fe090 R08: 0000000000000108 R09: 0000000000000000 [ 1453.350068][T26651] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 1453.350080][T26651] R13: 00007f474a826038 R14: 00007f474a825fa0 R15: 00007fff5cec5d28 [ 1453.350109][T26651] [ 1453.545809][T26626] binder: 26625:26626 ioctl c0306201 2000000003c0 returned -14 [ 1453.581998][ T114] shield 0003:0955:7214.0041: unknown main item tag 0x0 [ 1453.582034][ T114] shield 0003:0955:7214.0041: unknown main item tag 0x0 [ 1453.582062][ T114] shield 0003:0955:7214.0041: unknown main item tag 0x0 [ 1453.582088][ T114] shield 0003:0955:7214.0041: unknown main item tag 0x0 [ 1453.582113][ T114] shield 0003:0955:7214.0041: unknown main item tag 0x0 [ 1453.624090][ T114] input: HID 0955:7214 Haptics as /devices/virtual/input/input88 [ 1453.850932][ T5874] usb 9-1: USB disconnect, device number 81 [ 1454.621392][T26626] random: crng reseeded on system resumption [ 1454.783930][ T114] shield 0003:0955:7214.0041: Registered Thunderstrike controller [ 1454.784221][ T114] shield 0003:0955:7214.0041: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 1455.017560][ T9] shield 0003:0955:7214.0041: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1455.038242][ T9] shield 0003:0955:7214.0041: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1455.038570][ T9] shield 0003:0955:7214.0041: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1455.045372][ T9] shield 0003:0955:7214.0041: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1455.055403][ T9] usb 10-1: USB disconnect, device number 70 [ 1456.865117][ T5874] usb 9-1: new low-speed USB device number 82 using dummy_hcd [ 1457.028883][ T5874] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1457.030517][ T5874] usb 9-1: config 8 has an invalid interface number: 221 but max is 0 [ 1457.030542][ T5874] usb 9-1: config 8 has no interface number 0 [ 1457.030573][ T5874] usb 9-1: config 8 interface 221 has no altsetting 0 [ 1457.033738][ T5874] usb 9-1: string descriptor 0 read error: -22 [ 1457.033874][ T5874] usb 9-1: New USB device found, idVendor=0482, idProduct=0100, bcdDevice= 1.00 [ 1457.033898][ T5874] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.276505][ T5874] usb-storage 9-1:8.221: USB Mass Storage device detected [ 1457.313537][ T5874] usb-storage 9-1:8.221: Quirks match for vid 0482 pid 0100: 8 [ 1457.515995][T26692] FAULT_INJECTION: forcing a failure. [ 1457.515995][T26692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1457.516031][T26692] CPU: 0 UID: 0 PID: 26692 Comm: syz.9.6482 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1457.516058][T26692] Tainted: [L]=SOFTLOCKUP [ 1457.516065][T26692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1457.516077][T26692] Call Trace: [ 1457.516085][T26692] [ 1457.516094][T26692] dump_stack_lvl+0xe8/0x150 [ 1457.516125][T26692] should_fail_ex+0x46b/0x600 [ 1457.516155][T26692] _copy_from_user+0x2d/0xb0 [ 1457.516183][T26692] __sys_bpf+0x229/0x950 [ 1457.516208][T26692] ? __pfx___sys_bpf+0x10/0x10 [ 1457.516229][T26692] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1457.516268][T26692] ? ksys_write+0x248/0x270 [ 1457.516297][T26692] ? __pfx_ksys_write+0x10/0x10 [ 1457.516330][T26692] __x64_sys_bpf+0x7c/0x90 [ 1457.516353][T26692] do_syscall_64+0x14d/0xf80 [ 1457.516372][T26692] ? trace_irq_disable+0x3b/0x150 [ 1457.516392][T26692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.516412][T26692] ? clear_bhb_loop+0x40/0x90 [ 1457.516435][T26692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.516454][T26692] RIP: 0033:0x7f0d532ac799 [ 1457.516472][T26692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1457.516489][T26692] RSP: 002b:00007f0d514e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1457.516510][T26692] RAX: ffffffffffffffda RBX: 00007f0d53526090 RCX: 00007f0d532ac799 [ 1457.516524][T26692] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 000000000000001c [ 1457.516538][T26692] RBP: 00007f0d514e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1457.516550][T26692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1457.516561][T26692] R13: 00007f0d53526128 R14: 00007f0d53526090 R15: 00007ffff1589e68 [ 1457.516591][T26692] [ 1457.620870][T26681] veth1_macvtap: left promiscuous mode [ 1457.620896][T26681] macsec0: entered allmulticast mode [ 1457.710644][T26681] veth1_macvtap: entered promiscuous mode [ 1457.710749][T26681] veth1_macvtap: entered allmulticast mode [ 1457.715908][T26681] macsec0: left allmulticast mode [ 1457.715974][T26681] veth1_macvtap: left allmulticast mode [ 1458.208200][T26694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6481'. [ 1458.528812][ T5874] usb 9-1: USB disconnect, device number 82 [ 1458.865696][T20791] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 1459.349473][T20791] usb 10-1: device descriptor read/64, error -71 [ 1459.892978][T26714] FAULT_INJECTION: forcing a failure. [ 1459.892978][T26714] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.893015][T26714] CPU: 1 UID: 0 PID: 26714 Comm: syz.8.6487 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1459.893042][T26714] Tainted: [L]=SOFTLOCKUP [ 1459.893049][T26714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1459.893060][T26714] Call Trace: [ 1459.893069][T26714] [ 1459.893078][T26714] dump_stack_lvl+0xe8/0x150 [ 1459.893111][T26714] should_fail_ex+0x46b/0x600 [ 1459.893142][T26714] should_failslab+0xa8/0x100 [ 1459.893175][T26714] __kmalloc_cache_noprof+0x84/0x690 [ 1459.893195][T26714] ? ovl_iterate+0xffe/0x21b0 [ 1459.893221][T26714] ovl_iterate+0xffe/0x21b0 [ 1459.893248][T26714] ? __pfx_hlock_conflict+0x10/0x10 [ 1459.893276][T26714] ? check_path+0x21/0x40 [ 1459.893295][T26714] ? check_noncircular+0xda/0x150 [ 1459.893316][T26714] ? __pfx_ovl_iterate+0x10/0x10 [ 1459.893343][T26714] ? __lock_acquire+0x6b5/0x2cf0 [ 1459.893383][T26714] ? do_raw_spin_lock+0x12b/0x2f0 [ 1459.893419][T26714] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1459.893440][T26714] ? lockdep_hardirqs_on+0x7a/0x110 [ 1459.893463][T26714] ? rwbase_write_lock+0x568/0x730 [ 1459.893485][T26714] ? lock_acquire+0x20b/0x2e0 [ 1459.893507][T26714] ? __pfx_ovl_iterate+0x10/0x10 [ 1459.893529][T26714] wrap_directory_iterator+0x99/0xe0 [ 1459.893553][T26714] iterate_dir+0x3a5/0x580 [ 1459.893578][T26714] __se_sys_getdents64+0xf1/0x280 [ 1459.893601][T26714] ? __pfx___se_sys_getdents64+0x10/0x10 [ 1459.893620][T26714] ? ksys_write+0x248/0x270 [ 1459.893644][T26714] ? __pfx_filldir64+0x10/0x10 [ 1459.893665][T26714] ? __pfx_ksys_write+0x10/0x10 [ 1459.893702][T26714] do_syscall_64+0x14d/0xf80 [ 1459.893721][T26714] ? trace_irq_disable+0x3b/0x150 [ 1459.893742][T26714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.893761][T26714] ? clear_bhb_loop+0x40/0x90 [ 1459.893784][T26714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.893803][T26714] RIP: 0033:0x7f88c1a1c799 [ 1459.893821][T26714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1459.893837][T26714] RSP: 002b:00007f88bfc76028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1459.893858][T26714] RAX: ffffffffffffffda RBX: 00007f88c1c95fa0 RCX: 00007f88c1a1c799 [ 1459.893872][T26714] RDX: 0000000000001007 RSI: 000020000001aa40 RDI: 0000000000000003 [ 1459.893885][T26714] RBP: 00007f88bfc76090 R08: 0000000000000000 R09: 0000000000000000 [ 1459.893898][T26714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1459.893910][T26714] R13: 00007f88c1c96038 R14: 00007f88c1c95fa0 R15: 00007ffde6c98868 [ 1459.893942][T26714] [ 1460.055100][T20791] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 1460.225080][T20791] usb 10-1: device descriptor read/64, error -71 [ 1460.301392][T26719] overlayfs: failed to resolve './file0:/': -2 [ 1460.335501][T20791] usb usb10-port1: attempt power cycle [ 1460.695749][T20791] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 1461.344999][T20791] usb 10-1: device descriptor read/8, error -71 [ 1461.793788][T26726] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6491'. [ 1461.889179][T26733] FAULT_INJECTION: forcing a failure. [ 1461.889179][T26733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1461.889202][T26733] CPU: 0 UID: 0 PID: 26733 Comm: syz.0.6493 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1461.889217][T26733] Tainted: [L]=SOFTLOCKUP [ 1461.889221][T26733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1461.889227][T26733] Call Trace: [ 1461.889232][T26733] [ 1461.889237][T26733] dump_stack_lvl+0xe8/0x150 [ 1461.889257][T26733] should_fail_ex+0x46b/0x600 [ 1461.889274][T26733] _copy_from_user+0x2d/0xb0 [ 1461.889291][T26733] ___sys_sendmsg+0x1c6/0x360 [ 1461.889306][T26733] ? __pfx____sys_sendmsg+0x10/0x10 [ 1461.889333][T26733] ? __fget_files+0x2a/0x420 [ 1461.889347][T26733] ? __fget_files+0x3a6/0x420 [ 1461.889364][T26733] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1461.889377][T26733] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1461.889393][T26733] ? __pfx_ksys_write+0x10/0x10 [ 1461.889414][T26733] do_syscall_64+0x14d/0xf80 [ 1461.889425][T26733] ? trace_irq_disable+0x3b/0x150 [ 1461.889438][T26733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.889448][T26733] ? clear_bhb_loop+0x40/0x90 [ 1461.889461][T26733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.889471][T26733] RIP: 0033:0x7f0232b7c799 [ 1461.889482][T26733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1461.889491][T26733] RSP: 002b:00007f0230dce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1461.889503][T26733] RAX: ffffffffffffffda RBX: 00007f0232df5fa0 RCX: 00007f0232b7c799 [ 1461.889510][T26733] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1461.889517][T26733] RBP: 00007f0230dce090 R08: 0000000000000000 R09: 0000000000000000 [ 1461.889524][T26733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1461.889530][T26733] R13: 00007f0232df6038 R14: 00007f0232df5fa0 R15: 00007fff54dbe0d8 [ 1461.889545][T26733] [ 1462.375180][T20791] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 1462.397403][T20791] usb 10-1: Using ep0 maxpacket: 16 [ 1462.399066][T20791] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1462.399096][T20791] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1462.399119][T20791] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1462.399142][T20791] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1462.399155][T20791] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.403801][T20791] usb 10-1: config 0 descriptor?? [ 1462.823275][T26729] binder: 26727:26729 ioctl c0306201 2000000003c0 returned -14 [ 1462.843320][T20791] shield 0003:0955:7214.0042: unknown main item tag 0x0 [ 1462.843356][T20791] shield 0003:0955:7214.0042: unknown main item tag 0x0 [ 1462.843383][T20791] shield 0003:0955:7214.0042: unknown main item tag 0x0 [ 1462.843410][T20791] shield 0003:0955:7214.0042: unknown main item tag 0x0 [ 1462.843436][T20791] shield 0003:0955:7214.0042: unknown main item tag 0x0 [ 1462.885413][T20791] input: HID 0955:7214 Haptics as /devices/virtual/input/input89 [ 1462.917670][T20791] shield 0003:0955:7214.0042: Registered Thunderstrike controller [ 1462.918010][T20791] shield 0003:0955:7214.0042: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 1463.087468][T26739] veth1_macvtap: left promiscuous mode [ 1463.087496][T26739] macsec0: entered allmulticast mode [ 1463.111164][T26740] veth1_macvtap: entered promiscuous mode [ 1463.111422][T26740] veth1_macvtap: entered allmulticast mode [ 1463.111728][T26740] macsec0: left allmulticast mode [ 1463.111743][T26740] veth1_macvtap: left allmulticast mode [ 1463.280874][T26729] random: crng reseeded on system resumption [ 1463.515929][ T5129] shield 0003:0955:7214.0042: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1463.516601][ T5129] shield 0003:0955:7214.0042: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1463.516912][ T5129] shield 0003:0955:7214.0042: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1463.530321][ T5129] shield 0003:0955:7214.0042: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1463.570929][ T9] usb 10-1: USB disconnect, device number 74 [ 1463.715124][ T5129] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1463.885266][ T5129] usb 9-1: Using ep0 maxpacket: 32 [ 1463.886882][ T5129] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 1463.886921][ T5129] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1463.886961][ T5129] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1463.886979][ T5129] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1463.886993][ T5129] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1463.889752][ T5129] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1463.889779][ T5129] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1463.889800][ T5129] usb 9-1: Product: syz [ 1463.889808][ T5129] usb 9-1: Manufacturer: syz [ 1463.889817][ T5129] usb 9-1: SerialNumber: syz [ 1463.893061][ T5129] usb 9-1: config 0 descriptor?? [ 1463.898515][ T5129] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1463.902734][ T5129] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1464.132495][ T5874] usb 9-1: USB disconnect, device number 83 [ 1464.143481][ T5874] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 1464.429071][T26753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6499'. [ 1466.415084][ T5874] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1466.545085][ T5874] usb 7-1: device descriptor read/64, error -71 [ 1466.859104][ T5874] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1467.035454][ T5874] usb 7-1: device descriptor read/64, error -71 [ 1467.093643][T26773] FAULT_INJECTION: forcing a failure. [ 1467.093643][T26773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1467.093742][T26773] CPU: 1 UID: 0 PID: 26773 Comm: syz.0.6505 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1467.093770][T26773] Tainted: [L]=SOFTLOCKUP [ 1467.093778][T26773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1467.093789][T26773] Call Trace: [ 1467.093798][T26773] [ 1467.093806][T26773] dump_stack_lvl+0xe8/0x150 [ 1467.093845][T26773] should_fail_ex+0x46b/0x600 [ 1467.093891][T26773] _copy_to_user+0x31/0xb0 [ 1467.093922][T26773] simple_read_from_buffer+0xe1/0x170 [ 1467.093950][T26773] proc_fail_nth_read+0x1be/0x230 [ 1467.093976][T26773] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1467.094003][T26773] ? rw_verify_area+0x2ac/0x4e0 [ 1467.094029][T26773] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1467.094053][T26773] vfs_read+0x212/0xa80 [ 1467.094087][T26773] ? __pfx_vfs_read+0x10/0x10 [ 1467.094115][T26773] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1467.094136][T26773] ? lockdep_hardirqs_on+0x7a/0x110 [ 1467.094156][T26773] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1467.094176][T26773] ? mutex_lock_nested+0x152/0x1d0 [ 1467.094199][T26773] ? fdget_pos+0x252/0x320 [ 1467.094230][T26773] ksys_read+0x156/0x270 [ 1467.094257][T26773] ? __pfx_ksys_read+0x10/0x10 [ 1467.094293][T26773] do_syscall_64+0x14d/0xf80 [ 1467.094313][T26773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.094333][T26773] ? clear_bhb_loop+0x40/0x90 [ 1467.094355][T26773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.094373][T26773] RIP: 0033:0x7f0232b3cfce [ 1467.094391][T26773] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1467.094407][T26773] RSP: 002b:00007f0230d8bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1467.094427][T26773] RAX: ffffffffffffffda RBX: 00007f0230d8c6c0 RCX: 00007f0232b3cfce [ 1467.094442][T26773] RDX: 000000000000000f RSI: 00007f0230d8c0a0 RDI: 0000000000000004 [ 1467.094454][T26773] RBP: 00007f0230d8c090 R08: 0000000000000000 R09: 0000000000000000 [ 1467.094466][T26773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1467.094478][T26773] R13: 00007f0232df6218 R14: 00007f0232df6180 R15: 00007fff54dbe0d8 [ 1467.094509][T26773] [ 1467.175784][ T5874] usb usb7-port1: attempt power cycle [ 1467.675123][ T5874] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1467.689459][T26775] veth1_macvtap: left promiscuous mode [ 1467.689484][T26775] macsec0: entered allmulticast mode [ 1467.700566][T26778] veth1_macvtap: entered promiscuous mode [ 1467.700587][T26778] veth1_macvtap: entered allmulticast mode [ 1467.700662][T26778] macsec0: left allmulticast mode [ 1467.700675][T26778] veth1_macvtap: left allmulticast mode [ 1467.705869][ T5874] usb 7-1: device descriptor read/8, error -71 [ 1467.786205][T26783] FAULT_INJECTION: forcing a failure. [ 1467.786205][T26783] name failslab, interval 1, probability 0, space 0, times 0 [ 1467.786226][T26783] CPU: 0 UID: 0 PID: 26783 Comm: syz.0.6507 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1467.786241][T26783] Tainted: [L]=SOFTLOCKUP [ 1467.786245][T26783] Hardware name: Google Google Compute Engine/Google Comput[ 1467.786245][T26783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1467.786252][T26783] Call Trace: [ 1467.786257][T26783] [ 1467.786262][T26783] dump_stack_lvl+0xe8/0x150 [ 1467.786281][T26783] should_fail_ex+0x46b/0x600 [ 1467.786299][T26783] should_failslab+0xa8/0x100 [ 1467.786312][T26783] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1467.786328][T26783] ? __alloc_skb+0x1d0/0x7d0 [ 1467.786337][T26783] ? lockdep_hardirqs_on+0x7a/0x110 [ 1467.786352][T26783] __alloc_skb+0x1d0/0x7d0 [ 1467.786361][T26783] ? __lock_acquire+0x6b5/0x2cf0 [ 1467.786373][T26783] __ip6_append_data+0x2a44/0x3c50 [ 1467.786395][T26783] ? __pfx_raw6_getfrag+0x10/0x10 [ 1467.786419][T26783] ? __pfx___ip6_append_data+0x10/0x10 [ 1467.786439][T26783] ? ip6_setup_cork+0x544/0xf30 [ 1467.786451][T26783] ? ip6_append_data+0x1b7/0x280 [ 1467.786464][T26783] ip6_append_data+0x10f/0x280 [ 1467.786477][T26783] ? __pfx_raw6_getfrag+0x10/0x10 [ 1467.786492][T26783] rawv6_sendmsg+0x12d3/0x18e0 [ 1467.786512][T26783] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1467.786529][T26783] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1467.786552][T26783] ? kernel_text_address+0xa5/0xe0 [ 1467.786565][T26783] ? sock_rps_record_flow+0x19/0x400 [ 1467.786583][T26783] ? inet_sendmsg+0x2f4/0x370 [ 1467.786592][T26783] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1467.786609][T26783] ? __pfx_inet_sendmsg+0x10/0x10 [ 1467.786619][T26783] sock_write_iter+0x40c/0x4f0 [ 1467.786634][T26783] ? __pfx_sock_write_iter+0x10/0x10 [ 1467.786658][T26783] do_iter_readv_writev+0x62b/0x8d0 [ 1467.786674][T26783] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1467.786689][T26783] ? rw_verify_area+0x25b/0x4e0 [ 1467.786707][T26783] vfs_writev+0x345/0x9a0 [ 1467.786723][T26783] ? __pfx_vfs_writev+0x10/0x10 [ 1467.786742][T26783] ? __fget_files+0x2a/0x420 [ 1467.786759][T26783] ? __fget_files+0x3a6/0x420 [ 1467.786771][T26783] ? __fget_files+0x2a/0x420 [ 1467.786788][T26783] do_writev+0x15a/0x2e0 [ 1467.786801][T26783] ? __pfx_do_writev+0x10/0x10 [ 1467.786819][T26783] do_syscall_64+0x14d/0xf80 [ 1467.786830][T26783] ? trace_irq_disable+0x3b/0x150 [ 1467.786842][T26783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.786853][T26783] ? clear_bhb_loop+0x40/0x90 [ 1467.786866][T26783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.786876][T26783] RIP: 0033:0x7f0232b7c799 [ 1467.786887][T26783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1467.786896][T26783] RSP: 002b:00007f0230dce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1467.786908][T26783] RAX: ffffffffffffffda RBX: 00007f0232df5fa0 RCX: 00007f0232b7c799 [ 1467.786916][T26783] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1467.786923][T26783] RBP: 00007f0230dce090 R08: 0000000000000000 R09: 0000000000000000 [ 1467.786929][T26783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1467.786935][T26783] R13: 00007f0232df6038 R14: 00007f0232df5fa0 R15: 00007fff54dbe0d8 [ 1467.786951][T26783] [ 1467.824402][T26786] 1024-page vmalloc region starting at 0xffffc90010c94000 allocated at kcov_ioctl+0x58/0x640 [ 1467.824446][T26786] list_add corruption. next->prev should be prev (ffffffff8de28360), but was ffffffff00080000. (next=ffffc90010c94000). [ 1467.824882][T26786] ------------[ cut here ]------------ [ 1467.824890][T26786] kernel BUG at lib/list_debug.c:31! [ 1467.824927][T26786] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1467.824953][T26786] CPU: 0 UID: 0 PID: 26786 Comm: vhost-26785 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1467.824976][T26786] Tainted: [L]=SOFTLOCKUP [ 1467.824982][T26786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1467.824992][T26786] RIP: 0010:__list_add_valid_or_report+0xf4/0x130 [ 1467.825018][T26786] Code: 0e 61 fd 42 80 7c 2d 00 00 74 08 4c 89 e7 e8 63 44 82 fd 48 8b 53 08 48 c7 c7 e0 75 a6 8b 4c 89 f6 48 89 d9 e8 7d 04 7f fc 90 <0f> 0b 4c 89 f7 e8 92 0e 61 fd 43 80 3c 2c 00 74 08 4c 89 f7 e8 33 [ 1467.825032][T26786] RSP: 0018:ffffc90004167c58 EFLAGS: 00010246 [ 1467.825049][T26786] RAX: 0000000000000075 RBX: ffffc90010c94000 RCX: 4da93bf6adcc4500 [ 1467.825063][T26786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1467.825074][T26786] RBP: 1ffff92002192801 R08: 0000000000000000 R09: 0000000000000000 [ 1467.825086][T26786] R10: dffffc0000000000 R11: ffffed101710491b R12: ffffc90010c94008 [ 1467.825099][T26786] R13: dffffc0000000000 R14: ffffffff8de28360 R15: ffffc90016f16000 [ 1467.825112][T26786] FS: 00007f0d515066c0(0000) GS:ffff888126336000(0000) knlGS:0000000000000000 [ 1467.825128][T26786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1467.825140][T26786] CR2: 000000110c2d0976 CR3: 00000000a2532000 CR4: 00000000003526f0 [ 1467.825156][T26786] Call Trace: [ 1467.825164][T26786] [ 1467.825174][T26786] kcov_remote_stop+0x457/0x680 [ 1467.825198][T26786] vhost_run_work_list+0x152/0x1e0 [ 1467.825218][T26786] ? __pfx_vhost_run_work_list+0x10/0x10 [ 1467.825236][T26786] vhost_task_fn+0x2ef/0x4a0 [ 1467.825259][T26786] ? __pfx_vhost_task_fn+0x10/0x10 [ 1467.825278][T26786] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1467.825303][T26786] ? rt_spin_unlock+0x14f/0x200 [ 1467.825325][T26786] ? rt_spin_unlock+0x160/0x200 [ 1467.825346][T26786] ? __pfx_vhost_task_fn+0x10/0x10 [ 1467.825365][T26786] ret_from_fork+0x51e/0xb90 [ 1467.825389][T26786] ? __pfx_ret_from_fork+0x10/0x10 [ 1467.825411][T26786] ? __switch_to+0xc7d/0x1450 [ 1467.825439][T26786] ? __pfx_vhost_task_fn+0x10/0x10 [ 1467.825457][T26786] ret_from_fork_asm+0x1a/0x30 [ 1467.825480][T26786] [ 1467.825492][T26786] Modules linked in: [ 1467.825540][T26786] ---[ end trace 0000000000000000 ]--- [ 1467.830102][T26786] RIP: 0010:__list_add_valid_or_report+0xf4/0x130 [ 1467.830130][T26786] Code: 0e 61 fd 42 80 7c 2d 00 00 74 08 4c 89 e7 e8 63 44 82 fd 48 8b 53 08 48 c7 c7 e0 75 a6 8b 4c 89 f6 48 89 d9 e8 7d 04 7f fc 90 <0f> 0b 4c 89 f7 e8 92 0e 61 fd 43 80 3c 2c 00 74 08 4c 89 f7 e8 33 [ 1467.830146][T26786] RSP: 0018:ffffc90004167c58 EFLAGS: 00010246 [ 1467.830163][T26786] RAX: 0000000000000075 RBX: ffffc90010c94000 RCX: 4da93bf6adcc4500 [ 1467.830176][T26786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1467.830187][T26786] RBP: 1ffff92002192801 R08: 0000000000000000 R09: 0000000000000000 [ 1467.830199][T26786] R10: dffffc0000000000 R11: ffffed101710491b R12: ffffc90010c94008 [ 1467.830212][T26786] R13: dffffc0000000000 R14: ffffffff8de28360 R15: ffffc90016f16000 [ 1467.830226][T26786] FS: 00007f0d515066c0(0000) GS:ffff888126336000(0000) knlGS:0000000000000000 [ 1467.830241][T26786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1467.830254][T26786] CR2: 000000110c3b5e2c CR3: 00000000a2532000 CR4: 00000000003526f0 [ 1467.830280][T26786] Kernel panic - not syncing: Fatal exception [ 1467.830697][T26786] Kernel Offset: disabled