last executing test programs: 27m23.120629222s ago: executing program 2 (id=31): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x18, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x8, 0x3ffe, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x5) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300627269646765b8bd"], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x240408d0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0x0, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) 27m22.535015832s ago: executing program 2 (id=34): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x47, 0xd, 0x7ffc0001}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync_file_range(r1, 0xd81, 0x4d4, 0x5) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) unshare(0x400) unshare(0x18000300) r2 = io_uring_setup(0x115c, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r3) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r4, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400000070003d022abd7900fbdbdf250718f131", @ANYRES32=r6, @ANYBLOB="0c000180080001"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) ppoll(&(0x7f00000002c0)=[{r7, 0x1487}], 0x1, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) landlock_restrict_self(r8, 0xa) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x20}, 0x8}, 0x94) r10 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000180)={r0, r9}) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r11, &(0x7f0000003780)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r12, 0xd}, 0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000340)={r12, 0x3}, 0x8) sendmmsg$inet(r10, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}, {0x0}], 0x2, &(0x7f0000000380)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) 27m21.473886545s ago: executing program 2 (id=40): socket(0x10, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000001000010025bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 27m20.524945275s ago: executing program 2 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (fail_nth: 3) 27m19.830150151s ago: executing program 2 (id=49): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182100", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005000)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) listen(r3, 0x50) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 27m16.577164556s ago: executing program 2 (id=77): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x24044098}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r2, &(0x7f00000005c0)=[{0x41, 0x0, 0x0, 0xfd, @time={0xfffffffe, 0x20000002}, {0xfd}, {0xc}, @queue={0x8, {0x1, 0x1000}}}], 0x1c) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000640)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @default, @rose={'rose', 0x0}, 0x5, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @default, @default, @null]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0x9, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000185300000200"/48, @ANYRES32=r1, @ANYBLOB="1831000003004000"/17], &(0x7f00000001c0)='GPL\x00', 0xd, 0x2b, &(0x7f00000003c0)=""/43, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, r1, 0x8, &(0x7f0000000440)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x6, 0x0, 0x7fffffff}, 0x10, 0x0, r1, 0xa, &(0x7f0000000900)=[r1, r1, r1, 0xffffffffffffffff], &(0x7f0000000940)=[{0x2, 0x4, 0xc, 0x9}, {0x1, 0x5, 0x7, 0x2}, {0x0, 0x5, 0x1, 0xb}, {0x3, 0x1, 0x4, 0xb}, {0x3, 0x1, 0x9, 0xa}, {0x5, 0x3, 0x8, 0x8}, {0x2, 0x5, 0xa, 0x7}, {0x80000000, 0x5, 0xe, 0x7}, {0x3, 0x5, 0xa, 0x8}, {0x3, 0x1, 0x1, 0x5}], 0x10, 0x10005}, 0x94) mmap(&(0x7f0000240000/0x1000)=nil, 0x1000, 0x0, 0x20010, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) close_range(r0, r7, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket(0x15, 0x5, 0x0) connect$netrom(r9, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'veth1_virt_wifi\x00', &(0x7f0000000480)=@ethtool_sfeatures={0x1c}}) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x3051010, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 27m16.215994586s ago: executing program 32 (id=77): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x24044098}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r2, &(0x7f00000005c0)=[{0x41, 0x0, 0x0, 0xfd, @time={0xfffffffe, 0x20000002}, {0xfd}, {0xc}, @queue={0x8, {0x1, 0x1000}}}], 0x1c) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000640)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @default, @rose={'rose', 0x0}, 0x5, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @default, @default, @null]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0x9, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000185300000200"/48, @ANYRES32=r1, @ANYBLOB="1831000003004000"/17], &(0x7f00000001c0)='GPL\x00', 0xd, 0x2b, &(0x7f00000003c0)=""/43, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, r1, 0x8, &(0x7f0000000440)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x6, 0x0, 0x7fffffff}, 0x10, 0x0, r1, 0xa, &(0x7f0000000900)=[r1, r1, r1, 0xffffffffffffffff], &(0x7f0000000940)=[{0x2, 0x4, 0xc, 0x9}, {0x1, 0x5, 0x7, 0x2}, {0x0, 0x5, 0x1, 0xb}, {0x3, 0x1, 0x4, 0xb}, {0x3, 0x1, 0x9, 0xa}, {0x5, 0x3, 0x8, 0x8}, {0x2, 0x5, 0xa, 0x7}, {0x80000000, 0x5, 0xe, 0x7}, {0x3, 0x5, 0xa, 0x8}, {0x3, 0x1, 0x1, 0x5}], 0x10, 0x10005}, 0x94) mmap(&(0x7f0000240000/0x1000)=nil, 0x1000, 0x0, 0x20010, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) close_range(r0, r7, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket(0x15, 0x5, 0x0) connect$netrom(r9, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'veth1_virt_wifi\x00', &(0x7f0000000480)=@ethtool_sfeatures={0x1c}}) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x3051010, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 26m34.910097347s ago: executing program 4 (id=254): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0x2000c5fb, @value=0x3}) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb6668", 0x6, 0xfffffffffffffffe) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xe}, {0x3, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004850) r2 = epoll_create1(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x2}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="bcd2c73798d94f8412864739ebb7cd3313f59094c9fa3c3899e523e665b533f2cd3964ba40560c52b80428fbfdfb13ea92030af67c6a4d5600eb01ecdfe6f2427521a47f9d7a639bba51384323d8ae72168fed1389354efd72f8a524117b48574e0cd6801148b1d746a6f087befe81ae99", 0x71, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000280)={r4, r4, r4}, &(0x7f0000000200)=""/78, 0x4e, 0x0) 26m32.986096526s ago: executing program 4 (id=260): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x22040, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@raw={0xfe, 0x4, "ffb3609cc049"}) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d00010000000009040000050300150009210500000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) shutdown(r3, 0x1) setsockopt(r3, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @empty}}}, 0x84) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a67}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x80}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48051}, 0x20008040) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000ff3000000f30099540af80a0f995582e5eb9981c1ae9babae998b903e0a3ab582413e4a8f46fbad9d51457170fe242959f1f39426425a16adc239a7ab16fceddc869a25ac3b372e41a531264b53b09993fd0c0e5f6214fd1f66a83ceaefa170fa05f026e7b7f1ae58468b9dccf10cde2e5ea6c4a7987665b701b8a71dba59ace781a0759df94215d2bcb4e63601e74739a4163f724e6ec3842010ebf56a2759a6aed7166c5155a00a21ae048f348e2652b81a0f0cd8ecf016ea1befa493bf739b1726b42922f438165cc8c546b454456730cb291a95d54f783335a802d27abdd4340f32bdd9e44c4985820d620864d8351dc7fc2835cbfb"], &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000080)={0x0, 0x22, 0x27, {[@main=@item_4={0x3, 0x0, 0xa, "f4619e3a"}, @local=@item_4={0x3, 0x2, 0x2, "9bf1afec"}, @local=@item_4={0x3, 0x2, 0x0, "86b3836a"}, @local=@item_4={0x3, 0x2, 0x4, "b97bef8e"}, @main=@item_4={0x3, 0x0, 0xb, "3adf5c5b"}, @local=@item_4={0x3, 0x2, 0x1, "f367b035"}, @main=@item_4={0x3, 0x0, 0xb, "4bef01d7"}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_012={0x2, 0x1, 0xb, "ad44"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xdf, 0xb, 0x1, {0x22, 0x5a}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x0, 0xa, 0xae, "b4d24a54fd899e79feaf58f05f6138fdaa3bfb40d50130f4f0404e34557e41f0d98c5a183f4ec1fd0b8f8261e678cd31564350368bc5e016b62849a19fb69eec39f71aa8de0c88ff24f909627b645d4b651839cbe92b11cbaf7360ec4bec38b9981be3d92b90490e7e7c932c702f522d9e06600b0bd53a137cb09e798485ab2927512ae80efb35b17f8b895b288d76378d89d1b2ce00bbe71fc53b9280b4d1e45334c5e1c7e31610c86090516f61"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000400)={0x20, 0x1, 0x42, "a07babd284c417808a8762428a23555b40ebf4da10f5197a7362cb9a2b5cab065f6be06c2859ada9b57987c34133243e82dc50d8fb12a8bddcb2158881dc502bcff6"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x6}}) 26m28.441489418s ago: executing program 4 (id=282): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d34, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x60, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0xb, 0x9, 0x1, {0x22, 0x73}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x2, 0x6}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x6, 0x10, 0x7, 0x20, 0x55}, 0x118, &(0x7f00000005c0)={0x5, 0xf, 0x118, 0x5, [@generic={0x8c, 0x10, 0x4, "7c3f59cb9ff2d2cf2fd18ad572ec63ed66946c08c8894f7ebe73068b876c888b0f8d3f46dcff1dbde19520b95a3138ebd13d69938255bc82cac1a9e4490d66cbefcff665a685964fb70994777e1ca31a96c277b19022b030159aed63fd870c0fa934e690efaa52375a49db8beaa2e24e1c55724e7f72cc54fe33cbb2654609fe6e5bf06c780259f1d2"}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x2, 0xf, 0x7, [0x30, 0xff0030]}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x9, 0xff11, 0x7fff, [0xf, 0x0, 0x3fc0, 0xff3f0f]}, @wireless={0xb, 0x10, 0x1, 0x2, 0xb3, 0xf, 0x1, 0xdae, 0x6}, @generic={0x4c, 0x10, 0x3, "e3e8051dbe0cf00c8e732acbdff1107960ea58aa979f251c444242f73c5d9c9f7e24f1f3b5cbf0dbb5dd83c676ba9688bdea596ddd63e51e9225f02ec6ecbdfa3b8c1a2cdafcece2c4"}]}, 0x6, [{0x4e, &(0x7f0000000700)=@string={0x4e, 0x3, "5b7bfc330604ababb3188b61e39392930462ec10a74b4ccd96847a7e3b43240f042c73d06f113b5051418e00cc9031a6982a65d30b7a837fc34545a4d5a0239ec938d2040bca8d0b0fef8f12"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x2401}}, {0x21, &(0x7f0000000880)=@string={0x21, 0x3, "55f3021687e40d88404d6328cf3eba362a0d50276e4becb5249483ce92b4d5"}}, {0x1e, &(0x7f00000008c0)=@string={0x1e, 0x3, "f09222270095deb74eb8148480b7f33818a9c9978fb73a1018573b84"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f00000000c0)={0x40, 0x22, 0x6a, {0x6a, 0x23, "fc784b1951afd688f2461827f20c707d6362bdfccb5a08e157f0e924d9682771f9355cdc1d094a0e0ed1d000012468de53a50a0a7518c05c632b2d25c51fac7b60c6e1f993f632bfae78eecb7b2a99f517b3356170c6532f404c9d852761f04870df6aab2efc3a4a"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}, &(0x7f0000000180)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x0, "d180"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x81, 0x1, {0x22, 0x3d2}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x0, 0x3, 0xf4, "6621ee41d2fabe4134e9620d74797fa3a4759f763312a3b304a53c8945cd7ed66b1d27f0324b8a2997c494e165d974080757ba6beb82a54a7b9d9b104ce88ada1ffe0110bbb8980682dba6ec417bc3b3f0d17f36b97efc03115a77d87a0252e92488292e88a2a5e7f3c055216b97d34f6aec6e729f72723fd7f697ef37c6b3aa52d7cad1c969314a131e20ff76a6ddc09c9c97370faa152a58e596b7ed2bd5477c4b3065e4f1b6d8e864d5bde33ca0066aa07b8186d57eccf2700475724ea74322f1a634bdcd6a3e97746e5979a53f602ffe05aa2f5205f4e894ed3577add1deb451b16f73782fc83bbb4568e152434bd25ca027"}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000003c0)={0x20, 0x1, 0x97, "3b68e5dc5ec2f10f1cb1db3f5c03f6f77de2b025443ab5920124e9861578a455eedbd6369f7031765d51b665b578798d72cf10351c7a5ee93e3a2794fdb2c21fbc36324d08760cafd3d1ba986cef65f113fb34a9204848084a1e046ea99732b84b1bf2c06afb51813932285a572c71ce0b98dfedfc404a57a191e60b421c208d04ea6bf3539a054ed06ebc8ce8912695834ff072d8868b"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x2}}) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000040)={0x2, 0xffffffff, 0x8}) 26m25.729708981s ago: executing program 4 (id=301): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x64020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8100, &(0x7f0000001dc0)={0x88, 0x77, 0x80000}, 0x20) 26m25.353107582s ago: executing program 4 (id=305): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000640)={0x40, 0x14, 0x1, "7f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/106, 0x6a}], 0x1}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) prctl$PR_SET_NAME(0x4, 0x0) syz_clone3(0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000008c0)={0x40, 0x8, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x2, 0x1}, 0x50) socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x38}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') unshare(0x20000400) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, 0x0, 0x0) pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) syz_usb_connect$uac1(0x3, 0xd8, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x10, 0x10, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x50}, [@feature_unit={0xf, 0x24, 0x6, 0x5, 0x4, 0x4, [0x1, 0x1, 0x5, 0x9], 0xf}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, 0x4, [0x1, 0x9, 0x4, 0x5], 0x2e}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0x5, "a3202f25"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x400, 0x3, 0xe, 0xb, 0x8, 0x4}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0x9, 'JB'}, @processing_unit={0xc, 0x24, 0x7, 0x4, 0x6, 0x0, "98adaedc76"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xc0, 0x3, 0x1, 0xc, 0xff}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xe9, 0x4, 0x3, 0x8, "9e291c", "0349"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xc, 0x2, 0x7, '4'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x1, 0xfd, {0x7, 0x25, 0x1, 0xc, 0x3, 0xed}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x1, 0x7f, {0x7, 0x25, 0x1, 0xc, 0x6, 0x6}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xa, 0x82, 0x1, 0x58}, 0x11f, &(0x7f0000000180)={0x5, 0xf, 0x11f, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0x3f, 0x8, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "c7e359d6892386acd506c39d54183ae1"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0xb, 0x8}, @generic={0xea, 0x10, 0x1, "f27493209178c6acc5b57a34301675b3f26b69bca5d9905573521d58af9661c2e8d4c6d981182a10177fdc38c7316122d8564ff3208dba5caf8c24248e5ab506be0b0f8e1e247057731786724bca826707dd924cf5fd2da2b1b33c4fa7dfd58d1970a41d186ce93e14bf119f9dcfbc71c099731703311035cf7a6c8303df7e2cbe03199c83cfb60e7f46a3d33137d52654c5226c86143a7ccc516ae9b939e801d6eb32a70a92aa4d265a194ec7efc9ddd77f871dcc9a8453e86243b43da19b0a4f03e703e0e3386587957d56fe0d157eacded0572dee046f37bc4e9b938997c10a857a562c7ab9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0x31, 0x3}]}, 0x4, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x441}}, {0xc4, &(0x7f0000000680)=@string={0xc4, 0x3, "018ed7de1aba12d8151f19516d7a59670ad1162e5e7b67257cf08d83ecb56d998bc620ac28d2ff274e5e0202b20eea85aa798a094f4561e425a192ccc0495771ccd128e8aa1c1b621c7b2d1dfbccb01b5d0070c1bedd07fef8c02a7d3474c15b656ba1a50e6b066d0c5819c1b05c35b27384f07cde1c4de1dfa2481a26eea9b48f54a45489893ed19380845832354b87089fd12ddb1fd896885238242e0fc3c47d647af0ddb1246a2e12aed28eaa26c7aaa07e0237cc4e46470be32ff895e2466c5d"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x380a}}, {0x79, &(0x7f0000000480)=@string={0x79, 0x3, "35b1fac9d0a516fab40e36f3c98aa306b7c235480456f11fc4bba9e00be66be82bf4609b1169dccf45e196b455ed7b52b7308fb1ec0a787f24bd18e776f6d0d3c9fd099f81ed7d6faf98b3bbceeafcbabc0e0bb25639817ededc0e8fc4ada5ec32bbe30ae874a2be548873a8927e9ecbc9ac561b469af4"}}]}) 26m22.761387272s ago: executing program 4 (id=317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x18, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x0) 26m22.071479474s ago: executing program 33 (id=317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x18, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x0) 21m20.627541608s ago: executing program 3 (id=2152): ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x0, @void}, 0xffffffffffffff50) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1000001, 0x8, 0x8}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) socket$inet6(0xa, 0x2, 0x20002000) sendto$inet(r3, 0x0, 0x0, 0x200007fc, &(0x7f0000001300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000200)=0x4, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x14, 0x0, &(0x7f00000000c0)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/hibernate_compression_threads', 0x40a02, 0x158) write$cgroup_int(r6, &(0x7f0000000040)=0xbe5, 0x12) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x20000328) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f00000001c0)={0x40, 0x4, 0x7, 0x8, 0x9, 0x7, "d65be69b791e1969364ac6c039a1eda6", 0x40, 0x0, 0x0, 0x6, 0x3, 0xff, 0x79}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) close_range(r1, 0xffffffffffffffff, 0x0) 21m20.314713453s ago: executing program 3 (id=2154): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000640)={0x40, 0x14, 0x1, "7f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/106, 0x6a}], 0x1}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) prctl$PR_SET_NAME(0x4, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r3, 0x0, 0x0, 0x19, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000008c0)={0x40, 0x8, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r4, 0x2, 0x1}, 0x50) socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x38}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_procfs(0x0, 0x0) unshare(0x20000400) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r7, 0x103, 0x7, 0x0, 0x0) pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) syz_usb_connect$uac1(0x3, 0xd8, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x10, 0x10, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x50}, [@feature_unit={0xf, 0x24, 0x6, 0x5, 0x4, 0x4, [0x1, 0x1, 0x5, 0x9], 0xf}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, 0x4, [0x1, 0x9, 0x4, 0x5], 0x2e}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0x5, "a3202f25"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x400, 0x3, 0xe, 0xb, 0x8, 0x4}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0x9, 'JB'}, @processing_unit={0xc, 0x24, 0x7, 0x4, 0x6, 0x0, "98adaedc76"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xc0, 0x3, 0x1, 0xc, 0xff}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xe9, 0x4, 0x3, 0x8, "9e291c", "0349"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xc, 0x2, 0x7, '4'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x1, 0xfd, {0x7, 0x25, 0x1, 0xc, 0x3, 0xed}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x1, 0x7f, {0x7, 0x25, 0x1, 0xc, 0x6, 0x6}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xa, 0x82, 0x1, 0x58}, 0x11f, &(0x7f0000000180)={0x5, 0xf, 0x11f, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0x3f, 0x8, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "c7e359d6892386acd506c39d54183ae1"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0xb, 0x8}, @generic={0xea, 0x10, 0x1, "f27493209178c6acc5b57a34301675b3f26b69bca5d9905573521d58af9661c2e8d4c6d981182a10177fdc38c7316122d8564ff3208dba5caf8c24248e5ab506be0b0f8e1e247057731786724bca826707dd924cf5fd2da2b1b33c4fa7dfd58d1970a41d186ce93e14bf119f9dcfbc71c099731703311035cf7a6c8303df7e2cbe03199c83cfb60e7f46a3d33137d52654c5226c86143a7ccc516ae9b939e801d6eb32a70a92aa4d265a194ec7efc9ddd77f871dcc9a8453e86243b43da19b0a4f03e703e0e3386587957d56fe0d157eacded0572dee046f37bc4e9b938997c10a857a562c7ab9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0x31, 0x3}]}, 0x4, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x441}}, {0xc4, &(0x7f0000000680)=@string={0xc4, 0x3, "018ed7de1aba12d8151f19516d7a59670ad1162e5e7b67257cf08d83ecb56d998bc620ac28d2ff274e5e0202b20eea85aa798a094f4561e425a192ccc0495771ccd128e8aa1c1b621c7b2d1dfbccb01b5d0070c1bedd07fef8c02a7d3474c15b656ba1a50e6b066d0c5819c1b05c35b27384f07cde1c4de1dfa2481a26eea9b48f54a45489893ed19380845832354b87089fd12ddb1fd896885238242e0fc3c47d647af0ddb1246a2e12aed28eaa26c7aaa07e0237cc4e46470be32ff895e2466c5d"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x380a}}, {0x79, &(0x7f0000000480)=@string={0x79, 0x3, "35b1fac9d0a516fab40e36f3c98aa306b7c235480456f11fc4bba9e00be66be82bf4609b1169dccf45e196b455ed7b52b7308fb1ec0a787f24bd18e776f6d0d3c9fd099f81ed7d6faf98b3bbceeafcbabc0e0bb25639817ededc0e8fc4ada5ec32bbe30ae874a2be548873a8927e9ecbc9ac561b469af4"}}]}) 21m16.58475947s ago: executing program 3 (id=2172): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000010000004000000020"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r1) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = io_uring_setup(0xa71, &(0x7f0000000240)={0x0, 0x86a1, 0x1, 0x3, 0x276}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000015c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000014c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="c5002abd7000fedbdf254500000008000300", @ANYRES32=r8, @ANYBLOB="1e8b4001cc40f8c24003078c9d36262b68ee2c8626706818143d7aab2c789700eda83590f9063df8f72e079ac1324e6f5074237199eca3d714aa3b2f648c3bbc03b0305bb3cb46f8fd02ba1b3e400e8a8f2b54aa28cb90e0196f2efcced8c63d7a9bfac6fac6739a24d80576b4f6fe79fe3a343a8e253bbba39efb2def4b6e81a117ba3da12deadae0c1007fde0cf34c066b730504a62b167d6efef97aa9205158f5613f26f50b2dcb83ac3d1e703a7e0d1da697c9002fe22409e9"], 0x1c}, 0x1, 0x0, 0x0, 0x24040804}, 0x20000000) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), 0xffffffffffffffff, 0x6, r0}, 0x38) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r2, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a0}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r9, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x18, 0x3, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r11, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1d, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, r10, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) r13 = socket$packet(0x11, 0x3, 0x300) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000180)=r14, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002980)={0x16, 0x1d, &(0x7f00000026c0)=@raw=[@alu={0x7, 0x1, 0x7, 0x8, 0x8, 0xfffffffffffffff0}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @jmp={0x5, 0x0, 0xa, 0x4, 0xa, 0xfffffffffffffffe, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xbd}], &(0x7f0000001600)='syzkaller\x00', 0x1, 0x0, &(0x7f00000027c0), 0x41000, 0x48, '\x00', 0x0, @flow_dissector, r9, 0x8, &(0x7f00000028c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000002900)={0x3, 0x8, 0x2, 0x1}, 0x10, r12, r14, 0x1, 0x0, &(0x7f0000002940)=[{0x5, 0x4, 0x7, 0xc}], 0x10, 0x9}, 0x94) sendmmsg$sock(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="3e9e69278a311807b8e8485fee7de7e10c707f984ad06acd4c7d806c34cdfc4998ed15f9213c2f092c6937ee1b5bb9ea4f89d8e4152aa669572364dd0023d9cdb87bf71843bb9a0116da8f428d8a2eb620892a4b71e53dadb7468a4ac8e0c16a6b4488eed270884e217b3328c4ccfbb7b9a421bbfb3468be38b3af36576c1e3ea221a96a2d962ade098d3325ee8f572e02bea2db39dc155c77a597a1ee56b235fe1a13c59ccd142d47f324ff009d1edce12d9ce45aa529ff96bdc1a85f3b3c8bbc5ac272ba14680a71ae", 0xca}, {&(0x7f0000000240)="7e5be9d6908de3f630c01d887395457655a938d4e7", 0x15}], 0x2, &(0x7f0000000300)=[@timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0xf0}}, {{&(0x7f0000000400)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000480)="f5128a0c3fbfab1e9c05e358abf2b505aa49d1dd2e66b8e85d36f6fe620aa8900d1610509a3d1896c36100c6936e608897c19a5be32b8a869037d20c3bf1b0afb9540a2aac1602c86d6aa21ae0c5859bf426c2045e5cdc3d7feda2ccf9b562fd9f3e2b816fd0cb9632549e5c9dfa69a5f7054d0e2d5635192d591dd690857b8f133d1989c3a2573c163786f4b8ac2347d24d9bc9c2aced0bff1aade34ac64e436dc432a067e8897c654095500a9616574088e22e848f7275ba52f7343626571416acde4b11e07e9273bb4baed40dc4d51a119773f92f90359918c6656718034d", 0xe0}, {&(0x7f00000005c0)="1ce1f5a8892990ad4421b1a2830fb5039772367bea22cf3b325b4833d047c7284198", 0x22}], 0x2, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffe01}}, @timestamping={{0x14, 0x1, 0x25, 0xff}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}], 0xc0}}, {{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000780)="9557d20db83f4008eef948a66a044be8460cf4d6a191363c7f6fea7dffa61989034595a2517fcd1c8e30b61b3544c42b6acdad0ce4e1e9272820c68030997f1293e3d174e4679e7147e5fb57c6085c332aa65d926aafb984a7da00776e56c5f714ac44b2c9e43ab7e58ce58e6d9dcdfe136785f274bb3e9aed455aff2bbe6760a4cfed60ea99238cd98c1231c0a3e7dff4acda66df4baf722ba1b648ae7bcd9f598fcb56d96fc4a2548f09378495d7f55db2fbd7", 0xb4}, {&(0x7f0000000840)="a00c8b599f43e78ea2f79872966480a8b1f16ba52effa47f5cd892302fa5c763ab0db1c1cfdff080492e4dd19db19119619f8eb204396dbe425a238c28d7da2ddd5cc918fb238b6bc22d0aa5fc33e9b5f68c81ab0184b33028", 0x59}, {&(0x7f00000008c0)="e228462e54e9e30cd2b2a9c3f607e211d82f4d84eb42", 0x16}], 0x3, &(0x7f0000000940)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x5bb9}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="a4801f594e20003a0581721f5ffc981000ac4b753e1f9c01c37b", 0x1a}, {&(0x7f0000000a00)="34939ae77ec2999db485ca1110dd6d999445bc244f11b5a840e54ba80d58159d7ad2290a367b1e9e1cecca2cbb83463f1b0be3605b98f8d2b9feef52127127bbaa59a97939243612e6c2533cd7ec7e6072c3f39127a50f6ff74d143ccec7760018b2eb6acb9aa700c5081883791085feef4b4d7bde79d5288128c35843d920107fc765980318a91daf7c51d5201b6266cc83b3396cf98bcf616c7f1b9395c2e7ac", 0xa1}], 0x2, &(0x7f0000000b00)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}, {{&(0x7f0000000b40)=@l2={0x1f, 0xacfa, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6775, 0x1}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000bc0)="546a046f2348aaedc0a0c8e97c47c6fd479bd8fd10d9d80e8987a58c44c9229381c95b616b31d3e3c128474768a6a50acd5b656bf16fb292e387f4ae0a1900699555b6e6ca35eb674cdf27ce6aa00055d408d7664252a0053939dec806667b418d6ba8804c460d72d5ec65841743903418b671e5799d4d10141da0adba755da9d7683c68ef0b735d74db1c9fcc51c1d9a5ea91c8f8b6674c663ffdb5524c40fb35271bcf0512d604ee27808cd83ad82761ef79abc9b22dc68dec01c9387071d310787aa04a1d3f08c7bbfeadb9b3d66af811", 0xd2}, {&(0x7f0000000cc0)="5b4fb3c699985bbb0cc2032137b97f1fe63e61d84023546d024878c37a3525fbffafe4188a7e6962500bbdc4bd18ba26178507fecd3df55b84cd829196c427fb4b1f841a9efd9201786a526909c8e2a30d0dc2c380142637464ed5c3aae00f784d5a191216112b533b594fcdc362487dc99e0016cfc91e67c6742f7667c7176156d69ff1c18cc314310cd0d7b1ca0595ef26175583e99faa674290079704cc9bf0c72ccc230d66be1dc5035477b309f5794a9985523d3caf7df12a5c789dd002d68a35f71290a1", 0xc7}, {&(0x7f0000000dc0)="9e473e7fd6841c0578020e7fe200fa599910d2a2edf8104951228d436c5704f55c6da10b858e2a0dc6be60a600b98a82e2fbcc23d34ac457643edaa1c001f58bc2e95983830c5883f5c23691e570f7da8a7a22506b6b8ab1d909d8062b6df07b58", 0x61}, {&(0x7f0000000e40)="817377dd29b9400ba62cba93e4ddd53ce020be1a9eb11b7cb94630a5e9e4f86347db35b71810eaff69111d0b001450b618bc833d9cf3ac48e8700b896c325776af1a94033889c9b892562080cc383a18dc1cf4ae0a9d7d7849b27c99c8997bd7ea600c439640baaa08", 0x69}, {&(0x7f0000000ec0)="546cafafdbdf6efeaf9ffa0f2d69ccfac45962f870fe6ed38954146b760c6327925ebae3a478a80c2d207a004755", 0x2e}], 0x5, &(0x7f0000000f80)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x74}}], 0x30}}, {{&(0x7f0000000fc0)=@rc={0x1f, @none, 0x80}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001040)="487b3be604b953ee3306831e3e88115bb0e8390d12df878422dc3a21e35e0e60761633594a373512dfbd22cc405a796d11c2cf30ad7a217c3973a5e934bfebe332b0f30fb295f2567e418ea0008965df654618dd47776d3233a13e6b15bb0a44169d8ea45d587587fe5fc6e159afc8356d1c9b9efaa5112ba32be87db2a946ba75d4202d38ce", 0x86}, {&(0x7f0000001100)="fae515dd1601b5eab8844de6687d72afc9791cc308331ae362dd458951f43ef3a2fbadd8da72d3ce80fe2a5f5da2d33580905e353d4cac80752e985e349252e8ec30c22fb3214773b7a2be6f397270bd5888e59f663fbfb166b2f556c102606e16a822fdea98680dcadf5eee472bc0bddc8e2f98a0e3f52c4e3b0ae771243ab14f3c77c39a8181ed8b0c437d0986eedefb324f424beed07975eb8d85c6e87dfe6c75c074209bbdde674090d2e70738e969f219ded1fbe34a7261166e2c51a6983feba8f8b4a1ebdd8c4903e25482eb66c792b02d44f6bde35ba2857f53fcfc5d4067fdcbbbbbc3cf997f8971802cbf4b55c405bcfa6fc92bf8df84f77e28", 0xfe}, {&(0x7f0000001200)="20aab4438fb6b2505e9a4f883a3b5fafd3eeeee4426fa66610820f4fe9f0e98cf2325ccfae5f", 0x26}, {&(0x7f00000016c0)="bb1ac63114fd0e40adc85494b9047369e322c3a57e08ed99a14935a75ec98c7543e9144d4ed62588236e789c9152fd23d515e5e98c05c19112af57f996df3233eb2f6e9d1f551d21469f75344be4a79378d9c6318ccc0173ceea43a9eed05ba2a7ba974c03a8afffdc71d2c7ea4ee74f65a5767a845db2848763adc1fb34a1084a48686a61250a9a963a7567f06ec6eec1a4304e0d26273f0739becc3d4e7da8093513ed7acbbb7e9d89cf3aea6719724ebd3542b6f1e9e6d0393fa0a7a51d69b56406d71fd998624a5cda1c31da03f3c9c1a6930b7c6d21045f3568818cfa298cff19fa62912910556a9f27c167a560113042deb97ded4fd47853c3a8b5be4458fa7d821c9128f708ed6713c5fc631ba413904d2f74c4f0995c918a01d69f11648834ee48a9f16b4b4a8ff01d33e9b9ae11baea4b49bb3b663a702d8649d74a0a3d925798567edd541ae372dcf8bc77bd3d24ad91c151caf921124902cbe3d2f3d67c99670c5d60a80c37ef2963fff301db4ce935f0d8712e8f931a3ba2f1a6be9f18e738dce59823eda36c7261e7965e0b4ac9d977cd2c9780d3dd75bb4d25dc08cff10ce9b557d7a81cb3f98b8988907a5a4d9fca083242370a512875735cf058432421b12439281c270f191d90abee7b4d83d68c4f58d66bf798fa981b93c5b1c8de7d756f87ffd55b18b3f4ed1198b950c093a27dd108090b8b054db0a94265b32d45810f9e7d186f11a6035844c3abf77ae05df825c3c3a92be25f7ced8d253f50988539c9ac94cc5bb5fab52409e2b152726ec99c1f8fd945a26d928409364cf64afb1daa294a7cdfd3ed5a5a5a5a2783412549b13a24c84247533f7792836e39ab9f02fe934db5cb4d7535c6f4b67bfba254a5fea9ddb395b8b5d942dd16289bbf5b79fce0a72c246c38c5c6bba488a5edf96ef8487be6394ca594d3c6cca96a1ef69913cc0db41ec21c4fc6fea23a5bbe0e5c84411b510a84542e304227c75ef54ec9e4a414fff59f10c4d90267d2c781d335ab9cd5dd2343bb25dbf356e6aea8e026e5934bd2e806c186dc37f6ffd605a4b477c0bea29867319cf647aba6cb8b4e211a5ad844f6f21ec0ff6678a8691f2f67e0d8bcb816b6c46d0da9c983165378bf43829edfda06e55245ae34b84bcd06a73e29e1fc4ee7af23422322dc14e39b7f1e06bfb69bac48cda3b54b150573384bf1227d0d25959231b354d8dc44146a1c519fa2388e3fab6fe38b23d09eae6f8f9c5a25d7b7a1ec87994f29a4c4a493c0f04838cdd1c9a26f8753970174e57b96df3650d4b36e4483d0044efb21fb6bd6c2122bedc332081d5210eb7a3a2c6fc19235de56b7eaa5ee429c7b3ca1681b6f0590780a7a6e8348300c8f11fc4ecec0f874372f3a9790b683781a4e0aa4676c5999404250852b5283e63e20bf26760dbe66662948a454e663e507e80cc0bafb8c1fdc729b24f0b92c71a1f946959481635265296d6b667bb157a99cca1b436890fcffccd233476f5b89f64d59a2a3d195ae7936da72217918f6771236c03d8da71484faaf42d5c1bbfb73e270b6606d8728124abbe85df1100968795a8683d7c80a928eb429edd6f55f4b52bca10d90e01448cd1bedbb99fc08cb736924e7383b3027808db15710907b017b16336e30df80227e703e5b2778bea08d4b6f0226c02ab330a8a0c89edd2a2bd13d46441d11e7db6d35167280b0d57f2525da2e6d55e0eaaaa32d206ce3f81876def60d1918e3440ec23047c52546352bd158c8caa19fa05c9b735d57722700bf3b03125fb4d47f7a8ef51afe185090a83eb6bf8adacb1b85eb65f31ae5061f63a61b1d3f3da770e6f6f05321fc5338ffef955e782678515ac87d303f7e1829711e9e51ee0565d9220f8d592262b270a5f53ac98964e181613d9bf9feb10ff64e18da75b44d65b61d61e0decb0867a23f6ebed87bc85f6d083ddaa95c5788b2d29889ee63af85c3a9447896fb7fbee261a5356150127ef423d30040014730c116406fcb25621d2d75673cd59933b358165eb2b28d369e36bd2bb80cffdcc4d3a50084bbf4483d37d9c53ad17cf2b5066fe6a86395bdb31f6aace086550bd3a61dd3946acac87ab8a14b8fb4b9bc0d9ddd1b72b6fe6251b016d7649fcf19bd47aa104ceea701f17353cae0f62d5bc02322bba7dad572dfc242ac97126c0e04cacad4ae7852bfb821d26f915435b76042c1cbc18a22d0b5b2eb557a38832d8c65354ebd5556ed5da78cf25933b4b799673415850aaa8745a82aa83bdfdc08a1d230cb6c4787efca0bc90691825ce3b9f7030ed3d602d329d85241529a0b3da960e8d403403bcd2d88da74a3565ab301257ceddbf27e60af5195dc8be7f184760c3c044906f6fe8bb5cf95f57a58f8bf43f7d77dfc723ae618ddb83cfe9194a796c8cdbf1f39b648e8f2a688aa1d08443d2d2c835b83fedbcbeb02b310c6db3e07c311f33844aa06813a57687a835ed6470f41bbcda5fbf0fa4553a2a04535be88b41089a2967e85d02154338c188eb94a93191372aed1b5221cf4937ed35787926168ffc5ebbc4d4df7591f17c2418d29efa5021bcd32aa62c5ff8ffd382ed0d621b8d9dba30514c4741c9d405eca63b7368e1688f7f68dba43ff4fb0a6dbb859a33828e4be7f07c0371fc239f82c994911e68bf621530b4ff62ef9ac6762021c9e1e2b1213aa4410ce429473975f76a9507d337b66b31f885158a5e3d473dd73431a3ecaf7e43ad2602335ad4aa4f51b0276cdd26ad880edf26b8ef32c68ef0d5cd24c324ad7f0047abe960806f936e60587a53ae799245125cc4fe502a5ba16d5b71ae70a08c284106398ae9085be9fadf972434ac39f29553b9769c2b320ed877e0de12fc328666182293cd3f98ed4e766c217d834b543fbda613368dc615f4b17d407bbec098ee756c50f71895ef77809cc95839fdcb8f9d8df742396e7abfd840fcde447ea4bae54b449ba45cbadf1936ed73ef4b62b9cd9bb6c5a1b110dc8827dbe8ae96ae18423f57c0c66ffdb144b12fd569d424a6ccf322e47fdf6641ebf5fddb6da75ddbf87832e63c7a5c4e85fa94ee3c95c2f65497b18a123c4abf70dd38a68c45bab7aab8b599b6edb1188c824e9523d8d647a9b0312b6eb7625e76ebd54c235e349f384edebd7e560f21b2fa94f0574af4345cc58a245af5a1ebb08c8e0081522fec5c923a99904cb3704b1a99948b95958619b4b8a330691faa3f7ff6942d6786ebf4ab5f06181f718c4057b7f1b16dc061e9e80bad07b9057a1a686fccd211da7e984847e3cad198f8bcf72580696b7f4919b678cebaf9122086b4110408920160f625363d3f9ddf6edb952b5c8d4422f9f51f5f97e78cd7fbd7b350556c3c5d87fd065d4fa1366a527dbf52c903f0b86d518a2c9d394f961441410febaa4ea39a48ce7f56fd526e60920db2c0f603d3add4f85bb5d349ec67cc13b4c53f88dd14b0289dae205dbfa3a0e96ca80f67e9eabc95c313554c77e4ab1ade2685afdc4843cd5fb3e5035880c7265dfa7cd85da78ec30554ed902fe114742bcf949847e85da40ef01bb59aa9bef842e94279e74566aadf81d76770f51427ca17d828bba7b9649962e2821937071c96a41c2c36bd94e3ee258508e53ea1137c5570c1a56c4b5a686b3076295de46e16e95f1734374386a8724f7c4ef46a6b77d61c81ac8582949f712a94f3f1b7aaf8bd4dfb27551a7cb1516f3e66575fa9a8278f13ba3b1c88dc9f30d4cb5e680920e3a0b06c1b2e103ceb05c73b2bdfce3b11899cef3dd9b281353318b726a10aa939e965ce41283010a8b5681246b18eec074f9aceb8f91983f0028e19059eb987a400a232aab076fe3f5f413a37db7cd20b3ead803c2a1456998342fdbc95caf0480aaa46a94b66a1cf835b453486b501bba1cab4462fb1b941df39eea5eba9525865579eac801f2e113c56751b86f79edf2efd3191fe2c44866f88800d8762bcfde0ae705567ea90081a54e08022ec58ba0250cb7f0c73915c7b943aa8393603d39064f60221d57ec360e261e9ea627e984b8f0390d98e2038bef2ec8a1f03fff37ba207b64a4b47dfea4a4f3361be3f2614d4e72c007972d960e0baa6bf179b59954f7594231835e448364ee5c6d7c603057b3f045375f3f7bcaebfe812f55ea48d08e5f8e442813c3e55493ddac21ea1dbead6c4665e7d403694d6eddbdcdb695b6294b3c848b17b7cea89f0b8ff0ef3d06e2a2fa11db6af75c993a7f72e35d60be70ad1b646b19fd929573f0da5b6aa96be448f67bacd9f21f1cbd7323985f7bf7578894e7b678c8bbba1aab9906e91d1427c5ed52dbd5e7eebfa15f4e39fae4718e7ee27b14f99c2d76d2b185599429dbcf6b422b7ae750b62e5a7b670e6d5825ff85a4201c88efc9b754f2c6505987be85d53b620d58a78fb8c20d23d5bc10222c47a4ba90007a02ff800b1e91bc82c2759c12ad3ae3a61f381464008625b525b927c0ffeaf07e2562f6bba2b6d0c2b3abbc0ee8b83765a71943353ddc1252a49b2729b0be843640b932a438adb6b26298e789d83c3bbd12256f0e8d38f6cad034ff13127afdc8e9cfc369774046a8d05ada14ca4d7f2404838f1f9e9d2afa44c79584fddf8cc66a0e56376324fbf72eb24e494378bf4b880400839a6ef9000550f7ccf7853730734487d662e40c5928e2e61a2c27b7a1aa4c1305441347f4413ed2cc5d35d1c9fa923d582c6eece4bc74502028e4ad2ecb09402f6189d93fce466322ac48731d040976c6cb83c88a046a6180bfb5397c8db3150e87ecd7af00a94dd62e44201e0fe170318610c8ace43c4c2a6803f6f80202d7f637ed6fc769c8cb1abbaebc88f4283a432a8b264ac1dda9eef914b1a9c2d0e58a1ce0f0d71114cdda65d4ee458cc5b8ea5c2760cb42dda9bf0bb34a7465085b22e437e470d3defc8c3e553adf62065b8bf17f9a431842f407ab3f110cd4943ab4e32dd99b9f2a9c0c9728920289f2dffc9cfece82ad340ccce43d5b56b16990868c4d6ccb868e409272573ba49f1be2aca5848bb8ae72965db3cc89a17ee22145a41879c382731f6aa644df85494957a3f533514dd6e439e3a8c72d2d633412b03c8acfab556a90b58b42e23fc33ef91b8bcb324523163cdece863a9339c27d995e2bffbfe28dfe4937387ef536a85faf15710aebd6c5979fb1032c0fdeb141bf6a80f4393a621fc83e619f246fd5b45c4fcb164b96d50af795a3ff72b64fa3a25198e44b4a4681ca0b82047b6016c2acda7567ae5de64f30e7be7c7efe4ed2dbbf193883f88a8163500b2d4c73e51379b3a0baa7e66ff1aac621fb5a18776a5b111735bffc3f02f3f19bbe366eca50dd6ab4ef8d465c3884c5cf8e391ccc281dd8af51721dd55dbc8b68749b10e30ec8334200cf646d1818cfad154ec90e296fe49b4e5becad85a9d8b1947370414b9985ebc0491d5d88e9b72569e309d968f641202e96146b6837c2348e983cb96c75d43781fd5da3b4d32d4a8d6a43c4c2948985cb38951be3346406b6aed7c098df7d6b8427a1c8a82b70eed9284149ada4c25c654b2aa892f4d582cd26a11b0a6d2e5765b1ae8b8247adeb906b2eb00515e6290ae592faf8b63f08c1047c2d156f251923e8b5acc7417f44fe922f76254999b2256757abbc7e7508dc8c606e7f59eb87c51cbf44b4ea664704304f4adc4b662267246fb18aad5982aaf08253ba95e73762f69ca62efc08a245800754546cbd5a8c01a114369e59b4151afed4b68544397a9450c6956970d5dcd9a4", 0x1000}], 0x4, &(0x7f00000012c0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x48}}], 0x6, 0x80) 21m16.221527301s ago: executing program 3 (id=2176): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x64020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8100, &(0x7f0000001dc0)={0x88, 0x77, 0x80000}, 0x20) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) 21m15.977738433s ago: executing program 3 (id=2180): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000005c0)={0x2, &(0x7f0000000580)=[{0x3d2, 0xb1, 0x3, 0x800}, {0x6, 0x9, 0x0, 0x1000}]}, 0x10) r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x30925) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x442d02, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000001c0)={'mpc624\x00', [0x408, 0x7ff, 0xffffffff, 0x0, 0x0, 0x1, 0x8, 0x7, 0xa, 0x2, 0x2, 0x1, 0x684b, 0x4000004, 0x6, 0x93, 0x1, 0x1a447, 0x3, 0x40000006, 0x100, 0x2, 0xf24, 0x7, 0xb, 0xa, 0x30d6, 0xc, 0x4004, 0x10000, 0x6]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="64000000100020002cbd70000000000000000000", @ANYRESHEX=r1, @ANYBLOB="0384010000000000343cfbe9c70001eec74ac20e578b97616e0000002000028008000100", @ANYRES32=0x0, @ANYBLOB="08000d000900000004001200080004000900000008000500", @ANYRES32=0x0, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x240008c4}, 0x400401c) keyctl$join(0x1, &(0x7f0000000600)={'syz', 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) keyctl$get_keyring_id(0x0, r0, 0x5) landlock_restrict_self(r4, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x8152, 0x0, 0x1}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) landlock_create_ruleset(&(0x7f00000001c0)={0x1005, 0x1}, 0x18, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r5, &(0x7f0000000000)='./file0\x00', 0x4) 21m15.018055673s ago: executing program 3 (id=2190): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x18d002, 0x0) 21m14.722432034s ago: executing program 34 (id=2190): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x18d002, 0x0) 4m10.457943518s ago: executing program 6 (id=6196): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) 4m10.247195975s ago: executing program 6 (id=6197): r0 = socket$inet(0x2, 0x80000, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000031401002abd7000ffdbdf2509f4010073797a3200000000080041007278650014003300766c616e3100"/56, @ANYBLOB="793c8b62e3fffe2ef89e", @ANYRES32=r1, @ANYRESHEX=r0], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x4094) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="2a0d47b2dbf888e47a00bea8bba764e437db3eb797197f9f7b77b780df416eab7a6fddbcb6a8767b6111a210f0f1e327ac852ae4307360c8ba0850698a4d2a6bb35636e995cc71b3b2032a215e5f02522d35d10b01b151182d3150a3f0fb16fb5bda71a3e1ea8e37146ae5d26f6b349fac7e22a9d143155d251fcca2d6970a84b937170479640555c4dc9a3ee3aed10934a284b9020ba95f3d11cfb0c99efb68516822d4ceea2b03a57dd4aff1c2ef909400a30669f3bf1406ff49ea279c898f3f760ba645ea1d018b21cc0c2f5cab12710a92d3ad62009b2631fd665051cfc04ffd8b", @ANYRES16=0x0, @ANYRES8=r1, @ANYRESOCT=r0], 0x50) accept4$bt_l2cap(r2, 0x0, 0x0, 0x140c00) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x5, 0x1, 0x4}, {0x74, 0x0, 0x20}, {0x6, 0xfc, 0xfd, 0x909f}]}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="ad765d564c904e00000019eac12067ce3b85000055000000", 0x18) openat$dsp(0xffffffffffffff9c, 0x0, 0x10a803, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0xcb4d7274b92d97df) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x39000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) splice(r7, 0x0, r4, 0x0, 0x5, 0x8) write$binfmt_elf64(r6, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) 4m8.425595701s ago: executing program 6 (id=6202): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 4m8.358666266s ago: executing program 6 (id=6204): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x9) 4m6.732480173s ago: executing program 6 (id=6206): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000340)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x9) landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) 4m5.608646135s ago: executing program 6 (id=6213): pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_add_watch(r0, &(0x7f0000000380)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x2, 0x0, 0x884, 0x33, 0x2, 0x8}) syz_usb_connect(0x5, 0x2d, &(0x7f00000016c0)={{0x12, 0x1, 0x310, 0xb1, 0x9f, 0x4a, 0x40, 0x7fa, 0x846, 0x76da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0x3, 0x40, 0x1, "", [{{0x9, 0x4, 0x77, 0xc, 0x1, 0x25, 0x90, 0x7a, 0x99, [], [{{0x9, 0x5, 0xd, 0x10, 0x10, 0x7, 0x7, 0xa}}]}}]}}]}}, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x5, 0xa6, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x2, 0x1, 0x7, 0x10, 0xff, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, 'nh'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xfffffe37, 0x8, 0x1, 0x5e}, {0x6, 0x24, 0x1a, 0x3, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x5}, @obex={0x5, 0x24, 0x15, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x45, 0x90}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x5}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x5, 0xea, 0x5, 0x20, 0x9f}, 0x30, &(0x7f0000000200)={0x5, 0xf, 0x30, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0xfb, 0x2, 0x7, 0xf00, 0x0, [0xc0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x4a, "3e0a695c50a2700214b788fc2eb37a90"}, @ptm_cap={0x3}]}, 0x1, [{0xca, &(0x7f0000000240)=@string={0xca, 0x3, "0bcf2e92b84574684dae0c48c10b0dc2e480feeac667fec4f1d6e8963d984a39ed4d26b360e2fe53dbf20bb8c5c97dddd63eea1268038b4751043091fb13de88145907697446b1a4494aaa922bca53db23d9d8d1d0fd8adbac98ecba03aa3f1c099ea06ed33922bb768915c6686df914a204ffc53f850ed1e160472b73aeee048f27d1672e4df80f546904022e72611bb9ea53a1d64eb0f274cee3f8d3e310aa48bf455c57c4d03ccef2dc07e20324479b14f885ef616bb56368e865710b7b42d1d40387bf721cfd"}}]}) 3m50.367950869s ago: executing program 35 (id=6213): pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_add_watch(r0, &(0x7f0000000380)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x2, 0x0, 0x884, 0x33, 0x2, 0x8}) syz_usb_connect(0x5, 0x2d, &(0x7f00000016c0)={{0x12, 0x1, 0x310, 0xb1, 0x9f, 0x4a, 0x40, 0x7fa, 0x846, 0x76da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0x3, 0x40, 0x1, "", [{{0x9, 0x4, 0x77, 0xc, 0x1, 0x25, 0x90, 0x7a, 0x99, [], [{{0x9, 0x5, 0xd, 0x10, 0x10, 0x7, 0x7, 0xa}}]}}]}}]}}, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x5, 0xa6, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x2, 0x1, 0x7, 0x10, 0xff, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, 'nh'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xfffffe37, 0x8, 0x1, 0x5e}, {0x6, 0x24, 0x1a, 0x3, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x5}, @obex={0x5, 0x24, 0x15, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x45, 0x90}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x5}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x5, 0xea, 0x5, 0x20, 0x9f}, 0x30, &(0x7f0000000200)={0x5, 0xf, 0x30, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0xfb, 0x2, 0x7, 0xf00, 0x0, [0xc0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x4a, "3e0a695c50a2700214b788fc2eb37a90"}, @ptm_cap={0x3}]}, 0x1, [{0xca, &(0x7f0000000240)=@string={0xca, 0x3, "0bcf2e92b84574684dae0c48c10b0dc2e480feeac667fec4f1d6e8963d984a39ed4d26b360e2fe53dbf20bb8c5c97dddd63eea1268038b4751043091fb13de88145907697446b1a4494aaa922bca53db23d9d8d1d0fd8adbac98ecba03aa3f1c099ea06ed33922bb768915c6686df914a204ffc53f850ed1e160472b73aeee048f27d1672e4df80f546904022e72611bb9ea53a1d64eb0f274cee3f8d3e310aa48bf455c57c4d03ccef2dc07e20324479b14f885ef616bb56368e865710b7b42d1d40387bf721cfd"}}]}) 2m4.606848774s ago: executing program 1 (id=6517): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0], &(0x7f0000000300), 0x0, 0x2, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000040)={0x20, r2, r1}) 2m3.967903024s ago: executing program 1 (id=6520): mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e51350410"], 0x5a) 2m3.392452282s ago: executing program 1 (id=6522): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002900090027bd7000010000000400000010088789f55d4f3c52087709022e6d7ca1b63295285057dc6dd034a1e7643b07"], 0x14}, 0x1, 0x0, 0x0, 0x404a806}, 0x84) 2m0.282163107s ago: executing program 1 (id=6526): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x2, 0x3, 0x2) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 1m57.171528745s ago: executing program 1 (id=6532): mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e51350410"], 0x5a) 1m56.527373536s ago: executing program 1 (id=6536): r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3, 0x3032, 0xffffffffffffffff, 0x77aff000) r1 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000040)='\x00', &(0x7f00000012c0)="f9", 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000340)=0x200, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}], 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0100000800000002", 0x8) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000500000005001b0020"], 0x44}}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRES8=r6], 0x60}}, 0x4008091) r7 = getpid() r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r11, 0x801, 0x709d2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) r12 = eventfd(0x4000002) io_submit(r9, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xc2, r12, &(0x7f0000000180)="0100fd6400000000", 0x8, 0x36, 0x0, 0x3}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r12, 0x0, 0x0, 0x2, 0x0, 0x1, r12}]) modify_ldt$write(0x1, &(0x7f0000001f00)={0x800, 0x20001000, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000002c0)={0x3, 'veth1_to_team\x00', {0x1}, 0x8ea7}) capset(0x0, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) syz_open_dev$usbfs(&(0x7f0000000300), 0x7f, 0xc00) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) sendmsg$AUDIT_SET(r5, &(0x7f00000000c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x3c, 0x3e9, 0x800, 0x70bd26, 0x25dfdc00, {0x6f, 0x0, 0x0, r8, 0xb, 0xf00000, 0x9, 0xfffffffe, 0x0, 0x6, 0x7}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x8824) 1m41.192184182s ago: executing program 36 (id=6536): r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3, 0x3032, 0xffffffffffffffff, 0x77aff000) r1 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000040)='\x00', &(0x7f00000012c0)="f9", 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000340)=0x200, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}], 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0100000800000002", 0x8) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000500000005001b0020"], 0x44}}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRES8=r6], 0x60}}, 0x4008091) r7 = getpid() r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r11, 0x801, 0x709d2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) r12 = eventfd(0x4000002) io_submit(r9, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xc2, r12, &(0x7f0000000180)="0100fd6400000000", 0x8, 0x36, 0x0, 0x3}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r12, 0x0, 0x0, 0x2, 0x0, 0x1, r12}]) modify_ldt$write(0x1, &(0x7f0000001f00)={0x800, 0x20001000, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000002c0)={0x3, 'veth1_to_team\x00', {0x1}, 0x8ea7}) capset(0x0, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) syz_open_dev$usbfs(&(0x7f0000000300), 0x7f, 0xc00) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) sendmsg$AUDIT_SET(r5, &(0x7f00000000c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x3c, 0x3e9, 0x800, 0x70bd26, 0x25dfdc00, {0x6f, 0x0, 0x0, r8, 0xb, 0xf00000, 0x9, 0xfffffffe, 0x0, 0x6, 0x7}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x8824) 26.361946184s ago: executing program 9 (id=6678): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e092000000000000109022400010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 21.929595425s ago: executing program 9 (id=6685): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'virt_wifi0\x00', @random="0163014030d9"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) socket$rds(0x15, 0x5, 0x0) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r2, 0x21ac, 0x0, 0x0, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x2, &(0x7f0000000080)={0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$phonet(0x23, 0x2, 0x1) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = socket(0x18, 0x1, 0x2) getsockname$packet(r7, 0x0, &(0x7f0000000200)) getpid() 21.425507562s ago: executing program 0 (id=6686): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x10, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000001000010025bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 18.482449138s ago: executing program 7 (id=6691): socket$kcm(0x2, 0x3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x11, 0x0, 0x0}) unshare(0x22020600) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x3, 0x0, 0x0}) (fail_nth: 3) 18.468345497s ago: executing program 0 (id=6692): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYBLOB="0000000400000000000000000000002c861000000032", @ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000480)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) close(0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100a48000000060a9805e362c58df6147aae010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900000000040002800918010073797a31000000001400000011000100"/112], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x3}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0x2711}, 0x10) listen(r4, 0x0) pselect6(0x40, &(0x7f0000000200)={0x5, 0x2bf3, 0x1, 0x400, 0x100, 0x5, 0xa1}, &(0x7f0000000240)={0xa, 0x1, 0x3, 0xcd35, 0x6, 0x6, 0x5, 0x10004}, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)={0xffffffb0, 0x0, 0x0, 0x0}) unshare(0x22020600) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x54, &(0x7f0000000040)=0x80, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000280)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x400005, 0x0, 0x0, 0x41100, 0xba}, 0x94) 17.922962576s ago: executing program 9 (id=6694): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000540)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0xee00, 0x0) 17.870708998s ago: executing program 7 (id=6695): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0xffffffffffffffff, 0x787203) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r5 = getpid() sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r6 = socket(0x2b, 0x1, 0x1) listen(r6, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r6, 0x894b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x24, 0x5e, 0x1, 0x4, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="ba"]}]}, 0x24}], 0x1}, 0x8000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000030601040000001f000000000200000505000100070000002c196d659ee69b8811835beb5bb99069a07c647159a13b7ef3bfeb7bb5a10630bdaef92edcf9f424ace09cb15312ae61b76f0f7db519edab3a2f4728cfd52fb006142a2e76b37b9e5be3092338eb49def3520746664f484dcc4341487fe04bf7d0491097a08d47ea870298fcbc6e7d2c4e4a5c1c784679e1305294fe1b3837be26361cbe6ef7334ab747a20d8fd7c6e36cba6f66144ccb23f9412b6a97d6bda3e1d432ea5df1dd665b2a0f2cbee636717a4e0cf4b6"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02864c3, &(0x7f00000003c0)={0x0, 0x7, 0x0, 0x4}) 14.139587162s ago: executing program 9 (id=6698): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000400), 0x8) 13.149685955s ago: executing program 0 (id=6700): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000200)="b9ff03076003008cb89e0ff086dde9fa7c830ccb54ae85f9f9f9c560733bf0f171a636c4ca185794", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002500)=ANY=[@ANYBLOB="dc0ac42d960553799802621f45827fa0acf14fda35e71b1c0f35f7cc8ffcae8dd8f860560488e99fe8ac3e609923a632db84d171f3cb3e1b8786c0c05e05b243570d1ac741d35a5d77d4262327b2749f304aca65d1b6b2df1c28a337fb7ea47ad8943d6172a820ba6eeebeca76dbf2151aaa8d9ed6da6dbe84e6e4da2ee729cb42057947968e68462cc63a51a60ce16f4253d4dc98513af9c85ef115b075a5fd2919e3ebef95587e8ff094506a04bdb24d1080244a1d7381ad054c633f722e874f1bea2ef9ee54015e5d3a231124dc84599de0ea3d777c68a7969780432e50e4bf5b3caca10105318557d2048fcf0f46f5c13e0ec62114868c89f3dffc6ba7f3da7b3e5320debf8fd6425c65568e6f341a9b6f7f328caf7e3b669123e3c380ef85c4b31028", @ANYRES16=r7, @ANYBLOB="57010000000000000000000000000800020001000000"], 0x1c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaae130aeaaba3086dd606410a6000000000000000000698a3f050000ffffffffffff02000000000000000000faed803501c0de5b205745775eec489c98540ce81f46d2a41113dc64eb56e3826aded500000000011c72e15c31dea94b0e2980e9f1"], 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r10], 0x20}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a8000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000001c080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000000a0a050000000000000000000a0000090900010073797a31000000000900020073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) socket$kcm(0x10, 0x2, 0x10) 12.645286318s ago: executing program 8 (id=6701): syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000a2dd60b8192300000000000000aafe8000000000eb2600000000000000aa2f00000000000000"], 0x0) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000040)={0x4, 'syz1\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x100}}, 0x4040082) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f0000000400)) fchmod(0xffffffffffffffff, 0x71) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/protocols\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000100)=""/126, 0x7e}], 0x1, 0x7a, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x902) syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4, 0x0, r2}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r5, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r7 = add_key$user(&(0x7f0000000100), 0x0, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r7, 0x1c4e) read$FUSE(r6, &(0x7f0000005580)={0x2020}, 0x1437) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='i', 0x1, 0x3fff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x6) ioctl$UDMABUF_CREATE_LIST(r8, 0x40087543, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000003000000", @ANYRES32, @ANYBLOB="00000000000e0000000000000020000000000000", @ANYRES32, @ANYBLOB="0000000000000100"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00']) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040)=0xd1a8, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x62, 0x0, r6, &(0x7f00000002c0)={0x80800, 0x8}, &(0x7f0000000300)='./file0\x00', 0x18, 0x0, 0x23456}) io_uring_enter(r2, 0x847ba, 0x217e, 0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 12.32614451s ago: executing program 5 (id=6702): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x10, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000001000010025bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 12.123346628s ago: executing program 7 (id=6703): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) wait4(0x0, 0x0, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = io_uring_setup(0xa71, &(0x7f0000000240)={0x0, 0x86a1, 0x1, 0x3, 0x276}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x8000000000000}) fcntl$lock(r2, 0x7, &(0x7f0000000180)={0x0, 0x2, 0x7, 0x3}) close_range(r1, 0xffffffffffffffff, 0x0) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10) 12.021749031s ago: executing program 8 (id=6704): r0 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r0, 0x0, r0) (async) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000580)=[@nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x4e7, 0xdb, 0x7}}, @nested_load_syzos={0x136, 0x70, {0x3, 0x7, [@nested_amd_vmload={0x182, 0x18}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0x2283}}]}}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x4, 0x1, 0x1}}, @wr_crn={0x67, 0x20, {0x0, 0x87f1}}, @wrmsr={0x65, 0x20, {0x2e7, 0x8}}, @code={0xa, 0x4d, {"470f07f4c423497eb27f0000005fc481f97efc65410f005500c402753db50c83000066b80e000f00d8c442e3f6f2c4e1055f80fe4b0000c4e270f52f"}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x464, 0x40, 0x59cf, 0x7fffffff}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @in_dx={0x69, 0x20, {0x4092, 0x6}}, @set_irq_handler={0xc8, 0x20, {0xe7}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_load_syzos={0x136, 0x70, {0x3, 0x4, [@nested_amd_set_intercept={0x181, 0x30, {0x1, 0x7, 0x1, 0x1}}, @nested_load_syzos={0x136, 0x20, {0x1, 0x1}}]}}, @set_irq_handler={0xc8, 0x20, {0x73}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @out_dx={0x6a, 0x28, {0xcd5b, 0x2, 0x3}}, @rdmsr={0x66, 0x18, {0xa29}}, @in_dx={0x69, 0x20, {0x9030}}], 0x375}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd27, 0xf0, {0x0, 0x0, 0x0, r4, {0xfff3}, {0x9, 0x1fffe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) syz_usb_connect(0x0, 0x46, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0xa9, 0x16, 0xc0, 0x8, 0x2013, 0x8461, 0xb382, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0xff, 0x9, 0x80, 0xf, "", [{{0x9, 0x4, 0x69, 0x5, 0x3, 0x4a, 0x5d, 0x50, 0x1, [], [{{0x9, 0x5, 0xa, 0x2, 0x40, 0xad, 0x6, 0x6}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0x3, 0xe9, 0x92}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x7, 0xc, 0x3, [@generic={0x7, 0x5, "b5826acf35"}]}}]}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) 11.568059463s ago: executing program 5 (id=6705): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2040, 0x1120}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x504, 0x347}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) (fail_nth: 3) 11.317044745s ago: executing program 0 (id=6706): socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) mq_open(&(0x7f00000001c0)=':\\{%\xee!\x00', 0x40, 0x15a, &(0x7f0000000280)={0x8000000000000001, 0x2, 0xffff, 0x7fffffffffffffff}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a9d8ca08450c038064f9010243010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000000)={0x0, 0x17, 0x71, "734aff128dc2c631dc3b391b649c025278f27fe891c71ee958296008a402b8191ab8daf05325c98826a28e70116596133f8970aa4e0985752b97f411bf1a66163833b82f285e2786262ce8197176d63dba154fd8967a6b081e0251363b3d246330a9c07354705bade653b752d6a6b52085"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.198963022s ago: executing program 8 (id=6707): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000680)={0x1, &(0x7f0000000100)=[{0x1, 0x5, 0x8, 0x7fff0000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f000087f000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x24c01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000780)=[&(0x7f0000000480)={0xfffffffe, 0x20011004, 0x4, 0x6, 0xfffc, r1, &(0x7f0000000540)="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", 0x13a, 0x407f0b00}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001180)={0x44, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4624}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x2000c000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES8=r0], 0x0) 10.857827527s ago: executing program 5 (id=6708): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000540)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0xee00, 0x0) 8.067486154s ago: executing program 7 (id=6709): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x8240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x5) io_setup(0x239f, 0x0) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, 0x0, 0x26) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c001280091e3691000100766c616ed10f00000c0002800600010004000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4000881}, 0x8000002) r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202"], 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000d00)=ANY=[@ANYBLOB="f5d75f244aa4cc6cc652c30c6ba1619e726dc402a61ef10feac8c390563f55fb9a08074cb9351b5cee9c4523441688a091ad0608c668eb7131b672b6d41e98f45d5754b9bffa68022279ab13818cf7a86c37d1eaae4684b0ad353509d93abce0381b45a77456c9ce9a325260eccb71feb96027b34610b469f27b519cecc6d7b40801f59a2aee6a968b61b13dfb046dd7bdaded0e72fc322f2ac21252c941f7c8afbdecd0a6b7576838febd9a7b823f2fa1290c2c4b5e04a9f4f3bfc8025144162f2f4e03e1386c11366b17595ddae1fc1b7290c5fb34f6a6a307eb", @ANYRES8=r0, @ANYRES64=r3, @ANYRES8=0x0, @ANYRES64=r0, @ANYRESHEX=r3, @ANYRESDEC=r5, @ANYRES64, @ANYRES32=r2, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x2, 0xa, 0x2) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x2, 0x3}, 0x20) syz_emit_vhci(0x0, 0x16) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x20010, r4, 0x8000000) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000004c0)={0x7f, 0x4, 0x6, 0x2, 0x1, "e6a2384392fcd138"}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000100)='(\x00') remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0x800) io_submit(0x0, 0x0, &(0x7f0000000b40)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x68}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, 0x0, 0x0) socket(0x22, 0x2, 0x3) r8 = socket$isdn(0x22, 0x2, 0x3) close(r8) 7.952104816s ago: executing program 9 (id=6710): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000340)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x9) landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) 5.847189435s ago: executing program 8 (id=6711): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x4000) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r1) r2 = fsopen(&(0x7f0000000080)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x15, &(0x7f0000002440)={@dev={0xac, 0x14, 0x14, 0xa}, @local}, 0x8) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0xa) getrlimit(0xa, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000010c0), 0x1, 0x0) ioctl$TIOCSCTTY(r8, 0x540e, 0x8) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="88020000", @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="610233"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x40000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) 5.761077809s ago: executing program 0 (id=6712): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth0_to_hsr\x00'}}, 0x1e) r1 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240102000a0002010209040100000102000206000725010c0040000904029e091b7395e317be9b58aba7db640000010200000904020101010200000905820900020303100725010c08ff03"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403181e"]}, 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000001a80)={0x14, 0x0, &(0x7f00000019c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000180)={0x0, @multicast2, 0x4e20, 0x4, 'sed\x00', 0x2, 0xcbe8, 0x25}, 0x2c) 5.336103762s ago: executing program 5 (id=6713): landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000340)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x9) landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) 5.101529473s ago: executing program 8 (id=6714): openat$audio1(0xffffffffffffff9c, 0x0, 0x12ba02, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ad0b19196c79eb5}) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, &(0x7f0000000000)=0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000200000000000000f0ffffff000000000010000021000000950000000000000018400000ffffffff00040000000000001500"/71], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r5, &(0x7f00000000c0)="48ababb80f3f0532ad4bf7b66723da83e7e18f11243c971fb4cf82dd06324117e943652f14c7f23d39609d7052fb96122b7078069d01095bf201e9cef1632652951e42c5", 0x44, 0x0, 0x0, 0x0) 4.425881191s ago: executing program 7 (id=6715): prctl$PR_CAPBSET_READ(0x17, 0xfffffffffffffe2d) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001fa"], 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000a00)={0x6, [0x6, 0xc00, 0x7, 0x3ff, 0x3fc, 0xf, 0x9, 0x9, 0xc, 0x3c, 0x6, 0x5, 0xf9, 0xfe00, 0x679e, 0x7f, 0x35d8, 0x10, 0xffff, 0x4002, 0x8, 0x4, 0x200, 0x100, 0x3, 0xfff9, 0xc, 0x6e, 0x2, 0x4, 0xa250, 0x1, 0xfb6, 0x8844, 0x8d8, 0x7ffe, 0x0, 0x6, 0x5, 0x7, 0x4, 0x100, 0xd, 0x4a, 0x45, 0x3ff, 0x7, 0x4], 0x5}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() process_vm_writev(r2, &(0x7f0000000300)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/75, 0x4b}], 0x2, &(0x7f0000001f00), 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = memfd_create(&(0x7f0000000040)='!\x00', 0x5) fstatfs(r3, &(0x7f0000000080)=""/82) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) waitid(0x1, r2, &(0x7f0000000180), 0x1, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040054}, 0x4000) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x15, 0x1, &(0x7f0000000340)='Z'}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000500)='./cgroup\x00', &(0x7f0000000040)='efs\x00', 0x208000, 0x0) 4.0103667s ago: executing program 8 (id=6716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000151cf7ffff06"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0x6c, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xd4cd3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x3, 0x5, 0x6, 0x1ff}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x80c0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}], 0x1}) prctl$PR_SCHED_CORE(0x51, 0x0, 0x0, 0x2, 0x0) 3.209739929s ago: executing program 0 (id=6717): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000002c0)={0x1, 0x0, 0x8, &(0x7f0000000240)={0x1b, "4e9a3e6fc6d288049300070a000000000000e879956b404b0aaa5efb7a18d6b800"}}) 2.502864067s ago: executing program 9 (id=6718): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d00010000000009040000050300150009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008040) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000ff3000000"], &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xdf, 0xb, 0x1, {0x22, 0x5a}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x0, 0xa, 0xae, "b4d24a54fd899e79feaf58f05f6138fdaa3bfb40d50130f4f0404e34557e41f0d98c5a183f4ec1fd0b8f8261e678cd31564350368bc5e016b62849a19fb69eec39f71aa8de0c88ff24f909627b645d4b651839cbe92b11cbaf7360ec4bec38b9981be3d92b90490e7e7c932c702f522d9e06600b0bd53a137cb09e798485ab2927512ae80efb35b17f8b895b288d76378d89d1b2ce00bbe71fc53b9280b4d1e45334c5e1c7e31610c86090516f61"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000400)={0x20, 0x1, 0x42, "a07babd284c417808a8762428a23555b40ebf4da10f5197a7362cb9a2b5cab065f6be06c2859ada9b57987c34133243e82dc50d8fb12a8bddcb2158881dc502bcff6"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x6}}) 1.746438393s ago: executing program 5 (id=6719): socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x87159c1c19cc1657) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x3a010100) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r4, 0x4b32, 0x9) sendto$packet(r0, &(0x7f00000002c0)="44c394f305916c4516999da288a8", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x17, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0xa, {{0xa, 0x4e20, 0x6, @local}}}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x15) open$dir(0x0, 0x2225c3, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x4000000000, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7ea}) 1.432813663s ago: executing program 5 (id=6720): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000400), 0x8) 0s ago: executing program 7 (id=6721): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000680)={0x1, &(0x7f0000000100)=[{0x1, 0x5, 0x8, 0x7fff0000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f000087f000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x24c01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000780)=[&(0x7f0000000480)={0xfffffffe, 0x20011004, 0x4, 0x6, 0xfffc, r1, &(0x7f0000000540)="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", 0x13a, 0x407f0b00}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001180)={0x44, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4624}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x2000c000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES8=r0], 0x0) kernel console output (not intermixed with test programs): B Raw Gadget: couldn't find an available UDC or it's busy [ 1601.683780][T25154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1601.687612][T25163] FAULT_INJECTION: forcing a failure. [ 1601.687612][T25163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1601.687652][T25163] CPU: 0 UID: 0 PID: 25163 Comm: syz.1.6454 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1601.687683][T25163] Tainted: [L]=SOFTLOCKUP [ 1601.687692][T25163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1601.687705][T25163] Call Trace: [ 1601.687715][T25163] [ 1601.687725][T25163] dump_stack_lvl+0xe8/0x150 [ 1601.687769][T25163] should_fail_ex+0x46b/0x600 [ 1601.687804][T25163] _copy_from_iter+0x1d3/0x1670 [ 1601.687844][T25163] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1601.687877][T25163] ? __alloc_skb+0x27d/0x7d0 [ 1601.687911][T25163] ? __pfx__copy_from_iter+0x10/0x10 [ 1601.687940][T25163] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1601.687975][T25163] ? __alloc_skb+0x27d/0x7d0 [ 1601.688012][T25163] ? netlink_sendmsg+0x650/0xb40 [ 1601.688044][T25163] ? skb_put+0x11b/0x210 [ 1601.688081][T25163] netlink_sendmsg+0x6c0/0xb40 [ 1601.688122][T25163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1601.688156][T25163] ? unwind_get_return_address+0x4d/0x90 [ 1601.688184][T25163] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1601.688225][T25163] ____sys_sendmsg+0x94c/0x9c0 [ 1601.688255][T25163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1601.688287][T25163] ? import_iovec+0x73/0xa0 [ 1601.688323][T25163] ___sys_sendmsg+0x2a5/0x360 [ 1601.688351][T25163] ? __pfx____sys_sendmsg+0x10/0x10 [ 1601.688422][T25163] ? __fget_files+0x2a/0x420 [ 1601.688451][T25163] ? __fget_files+0x3a6/0x420 [ 1601.688492][T25163] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1601.688520][T25163] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1601.688553][T25163] ? __pfx_ksys_write+0x10/0x10 [ 1601.688597][T25163] do_syscall_64+0x14d/0xf80 [ 1601.688629][T25163] ? trace_irq_disable+0x3b/0x150 [ 1601.688657][T25163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.688680][T25163] ? clear_bhb_loop+0x40/0x90 [ 1601.688709][T25163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.688732][T25163] RIP: 0033:0x7fa900ccc799 [ 1601.688753][T25163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1601.688774][T25163] RSP: 002b:00007fa8fef05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1601.688797][T25163] RAX: ffffffffffffffda RBX: 00007fa900f46090 RCX: 00007fa900ccc799 [ 1601.688813][T25163] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1601.688826][T25163] RBP: 00007fa8fef05090 R08: 0000000000000000 R09: 0000000000000000 [ 1601.688840][T25163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1601.688853][T25163] R13: 00007fa900f46128 R14: 00007fa900f46090 R15: 00007fffe34ed808 [ 1601.688888][T25163] [ 1602.080916][T25158] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.205218][ T808] usb 6-1: USB disconnect, device number 34 [ 1602.317047][T25171] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6457'. [ 1602.429828][ T10] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1602.496698][ T31] usb 8-1: USB disconnect, device number 19 [ 1602.588815][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1602.590617][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.590674][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1602.590694][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1602.590710][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1602.590740][ T10] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1602.590757][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.594276][ T10] usb 1-1: config 0 descriptor?? [ 1602.772113][T25158] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.938636][T20324] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1603.022043][ T37] audit: type=1400 audit(2000002489.684:2024): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="TIPCv2" requested=w pid=25168 comm="syz.0.6456" daddr=2001::1 dest=20003 [ 1603.088652][T20324] usb 2-1: Using ep0 maxpacket: 8 [ 1603.094774][T20324] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1603.094849][T20324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.094866][T20324] usb 2-1: Product: syz [ 1603.094877][T20324] usb 2-1: Manufacturer: syz [ 1603.094888][T20324] usb 2-1: SerialNumber: syz [ 1603.196603][ T10] nintendo 0003:057E:2019.0059: unexpected long global item [ 1603.197252][ T10] nintendo 0003:057E:2019.0059: HID parse failed [ 1603.212580][T20324] usb 2-1: config 0 descriptor?? [ 1603.212823][ T10] nintendo 0003:057E:2019.0059: probe - fail = -22 [ 1603.213049][ T10] nintendo 0003:057E:2019.0059: probe with driver nintendo failed with error -22 [ 1603.271006][ T5815] Bluetooth: hci5: unexpected cc 0x1004 length: 84 > 11 [ 1603.271036][ T5815] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 1603.296411][T20324] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1603.416037][T25158] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.642251][T25179] netlink: 'syz.1.6459': attribute type 39 has an invalid length. [ 1604.125075][T25169] bond1: entered allmulticast mode [ 1604.126162][T25169] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1604.150880][T18401] usb 1-1: USB disconnect, device number 65 [ 1604.362133][T20324] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 1604.362516][T20324] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1604.778049][T25158] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.148930][ T808] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1605.308430][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 1605.310664][ T808] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1605.310687][ T808] usb 1-1: config 0 has no interface number 0 [ 1605.310741][ T808] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1605.310767][ T808] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1605.312447][ T808] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1605.312474][ T808] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1605.312496][ T808] usb 1-1: Product: syz [ 1605.312511][ T808] usb 1-1: SerialNumber: syz [ 1605.353081][ T808] usb 1-1: config 0 descriptor?? [ 1605.402507][ T808] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1605.406655][ T808] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input79 [ 1605.890860][T20324] usb 2-1: USB disconnect, device number 101 [ 1605.931588][ T67] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.000884][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1606.164831][ T1013] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.262408][ T67] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.288472][T18401] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1606.297836][T11026] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.433540][T20324] usb 1-1: USB disconnect, device number 66 [ 1606.465239][T20324] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1606.481150][T18401] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1606.482844][T18401] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.482867][T18401] usb 6-1: config 0 has no interfaces? [ 1606.486781][T18401] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1606.486808][T18401] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.486828][T18401] usb 6-1: Product: syz [ 1606.486842][T18401] usb 6-1: Manufacturer: syz [ 1606.486857][T18401] usb 6-1: SerialNumber: syz [ 1606.589798][T18401] usb 6-1: config 0 descriptor?? [ 1606.709327][T25226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6471'. [ 1607.305051][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.305130][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.311505][ T1325] lec:lec_start_xmit: lec0:No lecd attached [ 1607.370858][T25216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1607.371242][T25216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1607.459755][ T5815] Bluetooth: hci2: unexpected cc 0x1004 length: 84 > 11 [ 1607.459793][ T5815] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 1607.617996][T25235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6473'. [ 1607.618104][T25235] openvswitch: netlink: Tunnel attr 112 out of range max 16 [ 1607.715196][T25242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6476'. [ 1607.733427][T25242] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6476'. [ 1607.787393][T25244] FAULT_INJECTION: forcing a failure. [ 1607.787393][T25244] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.787420][T25244] CPU: 0 UID: 0 PID: 25244 Comm: syz.0.6477 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1607.787460][T25244] Tainted: [L]=SOFTLOCKUP [ 1607.787466][T25244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1607.787476][T25244] Call Trace: [ 1607.787482][T25244] [ 1607.787489][T25244] dump_stack_lvl+0xe8/0x150 [ 1607.787518][T25244] should_fail_ex+0x46b/0x600 [ 1607.787543][T25244] should_failslab+0xa8/0x100 [ 1607.787561][T25244] __kmalloc_noprof+0xdf/0x7b0 [ 1607.787587][T25244] ? new_nbp+0x29/0x440 [ 1607.787609][T25244] new_nbp+0x29/0x440 [ 1607.787630][T25244] br_add_if+0x283/0xed0 [ 1607.787646][T25244] ? safesetid_security_capable+0xa9/0x1a0 [ 1607.787674][T25244] ? bpf_lsm_capable+0x9/0x20 [ 1607.787693][T25244] ? security_capable+0x7e/0x2c0 [ 1607.787717][T25244] br_ioctl_stub+0x72a/0xd60 [ 1607.787740][T25244] ? do_vfs_ioctl+0x117b/0x1540 [ 1607.787755][T25244] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1607.787775][T25244] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1607.787804][T25244] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1607.787830][T25244] ? lockdep_hardirqs_on+0x7a/0x110 [ 1607.787857][T25244] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1607.787882][T25244] ? mutex_lock_nested+0x152/0x1d0 [ 1607.787901][T25244] ? sock_ioctl+0x4fd/0x7f0 [ 1607.787921][T25244] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1607.787940][T25244] sock_ioctl+0x526/0x7f0 [ 1607.787960][T25244] ? __pfx_sock_ioctl+0x10/0x10 [ 1607.787980][T25244] ? __fget_files+0x2a/0x420 [ 1607.788000][T25244] ? __fget_files+0x3a6/0x420 [ 1607.788020][T25244] ? __fget_files+0x2a/0x420 [ 1607.788043][T25244] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1607.788059][T25244] ? __pfx_sock_ioctl+0x10/0x10 [ 1607.788078][T25244] __se_sys_ioctl+0xff/0x170 [ 1607.788106][T25244] do_syscall_64+0x14d/0xf80 [ 1607.788130][T25244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1607.788147][T25244] ? clear_bhb_loop+0x40/0x90 [ 1607.788167][T25244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1607.788183][T25244] RIP: 0033:0x7f77ca77c799 [ 1607.788199][T25244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1607.788242][T25244] RSP: 002b:00007f77c89d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1607.788267][T25244] RAX: ffffffffffffffda RBX: 00007f77ca9f5fa0 RCX: 00007f77ca77c799 [ 1607.788284][T25244] RDX: 0000200000000200 RSI: 00000000000089a2 RDI: 0000000000000004 [ 1607.788299][T25244] RBP: 00007f77c89d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1607.788313][T25244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1607.788330][T25244] R13: 00007f77ca9f6038 R14: 00007f77ca9f5fa0 R15: 00007ffd4a786f68 [ 1607.788363][T25244] [ 1607.838333][T18401] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1607.968417][ T31] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 1608.008351][T18401] usb 2-1: Using ep0 maxpacket: 16 [ 1608.033159][T18401] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1608.033195][T18401] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1608.033220][T18401] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1608.033257][T18401] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1608.033282][T18401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.165468][T18401] usb 2-1: config 0 descriptor?? [ 1608.166832][ T808] usb 6-1: USB disconnect, device number 35 [ 1608.252347][ T31] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1608.252461][ T31] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1608.252491][ T31] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1608.252517][ T31] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1608.252545][ T31] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1608.263403][ T31] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1608.263456][ T31] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1608.276282][ T31] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1608.276313][ T31] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1608.276347][ T31] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1608.330647][ T31] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1608.330701][ T31] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1608.347747][ T31] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1608.347782][ T31] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1608.347812][ T31] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1608.438788][ T31] usb 8-1: string descriptor 0 read error: -22 [ 1608.438980][ T31] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1608.439005][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.506459][ T31] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1608.612545][T18401] nzxt-smart2 0003:1E71:2009.005A: item fetching failed at offset 1/5 [ 1608.632550][T18401] nzxt-smart2 0003:1E71:2009.005A: probe with driver nzxt-smart2 failed with error -22 [ 1608.803496][T23794] usb 2-1: USB disconnect, device number 102 [ 1609.239594][T18401] usb 8-1: USB disconnect, device number 20 [ 1610.136361][ T5815] Bluetooth: hci1: unexpected cc 0x1004 length: 84 > 11 [ 1610.136398][ T5815] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 1611.540175][T25280] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1611.577618][T25281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1612.471125][T18401] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1612.637355][T18401] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1612.678955][T18401] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.678987][T18401] usb 2-1: config 0 has no interfaces? [ 1612.682633][T18401] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1612.682663][T18401] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.682684][T18401] usb 2-1: Product: syz [ 1612.682700][T18401] usb 2-1: Manufacturer: syz [ 1612.682717][T18401] usb 2-1: SerialNumber: syz [ 1612.739293][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 1612.739330][ C1] lec:lec_tx_timeout: lec0 [ 1612.762757][T18401] usb 2-1: config 0 descriptor?? [ 1613.989658][T25275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.990022][T25275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1614.788359][ T31] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1614.895781][T18401] usb 2-1: USB disconnect, device number 103 [ 1614.948354][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 1614.952800][ T31] usb 8-1: config 128 has too many interfaces: 33, using maximum allowed: 32 [ 1614.952827][ T31] usb 8-1: config 128 has an invalid interface number: 73 but max is 32 [ 1614.952849][ T31] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 33 [ 1614.952873][ T31] usb 8-1: config 128 has no interface number 0 [ 1614.952921][ T31] usb 8-1: config 128 interface 73 has no altsetting 0 [ 1614.958041][ T31] usb 8-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=30.f4 [ 1614.958072][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.958096][ T31] usb 8-1: Product: syz [ 1614.958113][ T31] usb 8-1: Manufacturer: syz [ 1614.958129][ T31] usb 8-1: SerialNumber: syz [ 1615.125203][ T5815] Bluetooth: hci5: unexpected cc 0x1004 length: 84 > 11 [ 1615.125237][ T5815] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 1615.168388][ T6337] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1615.268662][ T31] imon_raw 8-1:128.73: IR endpoint missing [ 1615.275146][ T31] usb 8-1: USB disconnect, device number 21 [ 1615.338381][ T6337] usb 1-1: Using ep0 maxpacket: 16 [ 1615.341621][ T6337] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1615.341654][ T6337] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1615.341679][ T6337] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1615.341713][ T6337] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1615.341737][ T6337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.345256][ T6337] usb 1-1: config 0 descriptor?? [ 1615.981381][ T6337] nzxt-smart2 0003:1E71:2009.005B: item fetching failed at offset 1/5 [ 1615.982914][ T6337] nzxt-smart2 0003:1E71:2009.005B: probe with driver nzxt-smart2 failed with error -22 [ 1616.032454][ T6337] usb 1-1: USB disconnect, device number 67 [ 1616.488434][ T6337] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 1617.562652][ T6337] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1617.562703][ T6337] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1617.562729][ T6337] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1617.562751][ T6337] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1617.562792][ T6337] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1617.564232][ T6337] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1617.564282][ T6337] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1617.564310][ T6337] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1617.564335][ T6337] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1617.564360][ T6337] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1617.628446][ T6337] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1617.628506][ T6337] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1617.628538][ T6337] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1617.628566][ T6337] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1617.628595][ T6337] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1617.924943][ T6337] usb 8-1: string descriptor 0 read error: -22 [ 1617.925095][ T6337] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1617.925121][ T6337] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.052096][ T6337] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1619.030671][T20324] usb 8-1: USB disconnect, device number 22 [ 1620.203659][ T31] usb 2-1: new low-speed USB device number 104 using dummy_hcd [ 1620.731485][ T31] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1620.731540][ T31] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1620.731568][ T31] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1620.731594][ T31] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1620.731620][ T31] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1620.733399][ T31] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1620.733452][ T31] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1620.733481][ T31] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1620.733508][ T31] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1620.733534][ T31] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1620.735404][ T31] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1620.735455][ T31] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1620.735485][ T31] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1620.735512][ T31] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1620.735540][ T31] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1620.908392][ T31] usb 2-1: string descriptor 0 read error: -22 [ 1620.908549][ T31] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1620.908576][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.996984][ T31] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1621.381746][T25346] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6508'. [ 1622.385921][T20324] usb 2-1: USB disconnect, device number 104 [ 1622.412241][ T5815] Bluetooth: hci4: unexpected cc 0x1004 length: 84 > 11 [ 1622.792263][T25352] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6508'. [ 1624.589361][T23794] libceph: connect (1)[c::]:6789 error -101 [ 1624.589580][T23794] libceph: mon0 (1)[c::]:6789 connect error [ 1624.617188][T25364] ceph: No mds server is up or the cluster is laggy [ 1624.761434][T25364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6512'. [ 1625.008408][ T31] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1625.173719][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1625.175365][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1625.175391][ T31] usb 6-1: config 0 has no interfaces? [ 1625.178813][ T31] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1625.178915][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.178958][ T31] usb 6-1: Product: syz [ 1625.178998][ T31] usb 6-1: Manufacturer: syz [ 1625.179038][ T31] usb 6-1: SerialNumber: syz [ 1625.267264][ T31] usb 6-1: config 0 descriptor?? [ 1625.968415][ T31] usb 1-1: new low-speed USB device number 68 using dummy_hcd [ 1626.080827][T25367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1626.081229][T25367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1626.213485][ T31] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1626.213541][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1626.213571][ T31] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1626.213589][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1626.213608][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1626.217783][ T31] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1626.217838][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1626.217866][ T31] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1626.217896][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1626.217915][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1626.335291][ T31] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1626.335334][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1626.335354][ T31] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1626.335374][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1626.335393][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1626.411625][ T31] usb 1-1: string descriptor 0 read error: -22 [ 1626.411841][ T31] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1626.411870][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.488762][ T31] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1626.587724][ T5815] Bluetooth: hci3: unexpected cc 0x1004 length: 84 > 11 [ 1626.587759][ T5815] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 1627.896939][ T31] usb 1-1: USB disconnect, device number 68 [ 1628.058454][T18401] usb 6-1: USB disconnect, device number 36 [ 1630.598525][ T31] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1630.788373][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 1630.795421][ T31] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1630.795450][ T31] usb 1-1: config 179 has no interface number 0 [ 1630.795499][ T31] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1630.795533][ T31] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1630.795555][ T31] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1630.795575][ T31] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1630.795593][ T31] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1630.795614][ T31] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1630.795639][ T31] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1630.795656][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.294825][ T31] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input80 [ 1632.787243][ T31] usb 1-1: USB disconnect, device number 69 [ 1632.787350][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1633.279802][ T5815] Bluetooth: hci3: unexpected cc 0x1004 length: 84 > 11 [ 1633.279838][ T5815] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 1633.848482][T23794] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1633.938669][ T1233] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1634.058289][T23794] usb 1-1: Using ep0 maxpacket: 16 [ 1634.067829][T23794] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 1634.067859][T23794] usb 1-1: config 0 has no interface number 0 [ 1634.067906][T23794] usb 1-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1634.106130][T23794] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1634.106164][T23794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.106186][T23794] usb 1-1: Product: syz [ 1634.106202][T23794] usb 1-1: Manufacturer: syz [ 1634.106218][T23794] usb 1-1: SerialNumber: syz [ 1634.137508][ T1233] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1634.137672][ T1233] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 8 [ 1634.137743][ T1233] usb 8-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1634.137806][ T1233] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 1634.202918][ T1233] usb 8-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 1634.202949][ T1233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.202974][ T1233] usb 8-1: Product: syz [ 1634.202985][ T1233] usb 8-1: Manufacturer: syz [ 1634.202996][ T1233] usb 8-1: SerialNumber: syz [ 1634.254752][T23794] usb 1-1: config 0 descriptor?? [ 1634.257741][T25436] raw-gadget.4 gadget.7: fail, usb_ep_enable returned -22 [ 1634.329699][T23794] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1634.726306][T25444] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6534'. [ 1635.385934][ T1013] usb 1-1: Failed to submit usb control message: -110 [ 1635.385983][ T1013] usb 1-1: unable to send the bmi data to the device: -110 [ 1635.386221][ T1013] usb 1-1: unable to get target info from device [ 1635.386239][ T1013] usb 1-1: could not get target info (-110) [ 1635.387674][ T1013] usb 1-1: could not probe fw (-110) [ 1635.542994][T25444] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6534'. [ 1635.548458][T21809] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1635.562419][ T8611] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1635.563675][ T8611] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1635.564678][ T8611] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1635.893615][T25451] trusted_key: encrypted_key: insufficient parameters specified [ 1636.611378][ T6337] usb 1-1: USB disconnect, device number 70 [ 1645.224135][ T5815] Bluetooth: hci4: command 0x0406 tx timeout [ 1646.573732][ T1233] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1646.781302][ T1233] usb 8-1: USB disconnect, device number 23 [ 1647.166541][T25440] bond4: option tlb_dynamic_lb: invalid value (32) [ 1647.425200][ T37] audit: type=1326 audit(2000002534.074:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25468 comm="syz.7.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x7ffc0000 [ 1647.425244][ T37] audit: type=1326 audit(2000002534.074:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25468 comm="syz.7.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x7ffc0000 [ 1647.425276][ T37] audit: type=1326 audit(2000002534.074:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25468 comm="syz.7.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x7ffc0000 [ 1647.425307][ T37] audit: type=1326 audit(2000002534.074:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25468 comm="syz.7.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a109cc799 code=0x7ffc0000 [ 1647.425338][ T37] audit: type=1326 audit(2000002534.074:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25468 comm="syz.7.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x7ffc0000 [ 1647.425369][ T37] audit: type=1326 audit(2000002534.074:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25468 comm="syz.7.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x7ffc0000 [ 1647.425401][ T37] audit: type=1326 audit(2000002534.074:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25468 comm="syz.7.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x7ffc0000 [ 1647.427742][T25440] bond4 (unregistering): Released all slaves [ 1647.448850][ T37] audit: type=1326 audit(2000002534.104:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25468 comm="syz.7.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a109cc799 code=0x7ffc0000 [ 1647.448996][ T37] audit: type=1326 audit(2000002534.104:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25468 comm="syz.7.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x7ffc0000 [ 1647.449113][ T37] audit: type=1326 audit(2000002534.114:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25468 comm="syz.7.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x7ffc0000 [ 1648.562110][ T1233] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1648.740428][ T1233] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1648.740467][ T1233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.787826][ T1233] usb 1-1: config 0 descriptor?? [ 1648.807169][ T1233] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1649.033439][ T1233] gp8psk: usb in 128 operation failed. [ 1649.239120][ T1233] gp8psk: usb in 146 operation failed. [ 1649.239142][ T1233] gp8psk: failed to get FW version [ 1649.245979][ T1233] gp8psk: usb in 149 operation failed. [ 1649.245993][ T1233] gp8psk: failed to get FPGA version [ 1649.710058][T24381] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1649.710127][T24381] CPU: 0 UID: 0 PID: 24381 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1649.710165][T24381] Tainted: [L]=SOFTLOCKUP [ 1649.710174][T24381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1649.710190][T24381] Workqueue: hci5 hci_rx_work [ 1649.710235][T24381] Call Trace: [ 1649.710245][T24381] [ 1649.710255][T24381] dump_stack_lvl+0xe8/0x150 [ 1649.710295][T24381] sysfs_create_dir_ns+0x271/0x2a0 [ 1649.710323][T24381] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1649.710355][T24381] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1649.710387][T24381] ? rt_spin_unlock+0x160/0x200 [ 1649.710418][T24381] kobject_add_internal+0x631/0xd10 [ 1649.710454][T24381] kobject_add+0x163/0x240 [ 1649.710496][T24381] ? __pfx_kobject_add+0x10/0x10 [ 1649.710528][T24381] ? get_device_parent+0x370/0x3a0 [ 1649.710557][T24381] device_add+0x408/0xb80 [ 1649.710586][T24381] hci_conn_add_sysfs+0xd5/0x210 [ 1649.710620][T24381] le_conn_complete_evt+0xf1d/0x1430 [ 1649.710655][T24381] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1649.710680][T24381] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1649.710730][T24381] ? lockdep_hardirqs_on+0x7a/0x110 [ 1649.710768][T24381] ? skb_pull_data+0xfb/0x200 [ 1649.710800][T24381] hci_le_conn_complete_evt+0x187/0x470 [ 1649.710834][T24381] hci_event_packet+0x7af/0x12c0 [ 1649.710873][T24381] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1649.710910][T24381] ? __pfx_hci_event_packet+0x10/0x10 [ 1649.710943][T24381] ? preempt_schedule_common+0x82/0xd0 [ 1649.710978][T24381] ? preempt_schedule_thunk+0x16/0x30 [ 1649.711013][T24381] ? hci_send_to_monitor+0xe2/0x590 [ 1649.711044][T24381] hci_rx_work+0x3ee/0x1030 [ 1649.711085][T24381] ? process_scheduled_works+0xa8d/0x18c0 [ 1649.711120][T24381] process_scheduled_works+0xb6e/0x18c0 [ 1649.711189][T24381] ? __pfx_process_scheduled_works+0x10/0x10 [ 1649.711237][T24381] ? assign_work+0x3d5/0x5e0 [ 1649.711276][T24381] worker_thread+0xa53/0xfc0 [ 1649.711343][T24381] kthread+0x388/0x470 [ 1649.711369][T24381] ? __pfx_worker_thread+0x10/0x10 [ 1649.711401][T24381] ? __pfx_kthread+0x10/0x10 [ 1649.711427][T24381] ret_from_fork+0x51e/0xb90 [ 1649.711464][T24381] ? __pfx_ret_from_fork+0x10/0x10 [ 1649.711495][T24381] ? __switch_to+0xc7d/0x1450 [ 1649.711530][T24381] ? __pfx_kthread+0x10/0x10 [ 1649.711556][T24381] ret_from_fork_asm+0x1a/0x30 [ 1649.711597][T24381] [ 1649.711811][T24381] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1649.714460][T24381] Bluetooth: hci5: failed to register connection device [ 1649.855932][T25490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6549'. [ 1650.629791][T23794] usb 8-1: new low-speed USB device number 24 using dummy_hcd [ 1650.936789][T11363] lec:lec_start_xmit: lec0:No lecd attached [ 1652.833765][ T1233] gp8psk: usb out operation failed. [ 1652.833944][ T1233] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1652.834182][ T1233] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1654.146212][T23794] usb 8-1: device descriptor read/all, error -71 [ 1654.225660][T25490] nbd: socks must be embedded in a SOCK_ITEM attr [ 1654.227166][ T5815] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1654.315801][ T5815] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1654.319401][ T5815] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1654.338569][ T5815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1654.346045][ T5815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1654.686980][ T10] usb 1-1: USB disconnect, device number 71 [ 1654.840584][T25509] FAULT_INJECTION: forcing a failure. [ 1654.840584][T25509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1654.840622][T25509] CPU: 1 UID: 0 PID: 25509 Comm: syz.0.6554 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1654.840652][T25509] Tainted: [L]=SOFTLOCKUP [ 1654.840661][T25509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1654.840675][T25509] Call Trace: [ 1654.840684][T25509] [ 1654.840694][T25509] dump_stack_lvl+0xe8/0x150 [ 1654.840733][T25509] should_fail_ex+0x46b/0x600 [ 1654.840768][T25509] _copy_to_user+0x31/0xb0 [ 1654.840804][T25509] simple_read_from_buffer+0xe1/0x170 [ 1654.840838][T25509] proc_fail_nth_read+0x1be/0x230 [ 1654.840870][T25509] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1654.840902][T25509] ? rw_verify_area+0x2ac/0x4e0 [ 1654.840935][T25509] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1654.840965][T25509] vfs_read+0x212/0xa80 [ 1654.841006][T25509] ? __pfx_vfs_read+0x10/0x10 [ 1654.841041][T25509] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1654.841078][T25509] ? lockdep_hardirqs_on+0x7a/0x110 [ 1654.841113][T25509] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1654.841147][T25509] ? mutex_lock_nested+0x152/0x1d0 [ 1654.841173][T25509] ? fdget_pos+0x252/0x320 [ 1654.841212][T25509] ksys_read+0x156/0x270 [ 1654.841248][T25509] ? __pfx_ksys_read+0x10/0x10 [ 1654.841281][T25509] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 1654.841323][T25509] do_syscall_64+0x14d/0xf80 [ 1654.841355][T25509] ? trace_irq_disable+0x3b/0x150 [ 1654.841388][T25509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.841413][T25509] ? clear_bhb_loop+0x40/0x90 [ 1654.841442][T25509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.841465][T25509] RIP: 0033:0x7f77ca73cfce [ 1654.841487][T25509] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1654.841506][T25509] RSP: 002b:00007f77c89d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1654.841530][T25509] RAX: ffffffffffffffda RBX: 00007f77c89d66c0 RCX: 00007f77ca73cfce [ 1654.841546][T25509] RDX: 000000000000000f RSI: 00007f77c89d60a0 RDI: 0000000000000005 [ 1654.841559][T25509] RBP: 00007f77c89d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1654.841574][T25509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1654.841588][T25509] R13: 00007f77ca9f6038 R14: 00007f77ca9f5fa0 R15: 00007ffd4a786f68 [ 1654.841625][T25509] [ 1655.753413][T25493] udevd[25493]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1655.764709][T25512] udevd[25512]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1655.938747][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1655.938783][ C1] lec:lec_tx_timeout: lec0 [ 1656.525945][ T5815] Bluetooth: hci6: command tx timeout [ 1657.678712][T23794] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 1657.849016][T23794] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1657.849057][T23794] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1657.849077][T23794] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1657.849096][T23794] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1657.849116][T23794] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1657.851053][T23794] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1657.851107][T23794] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1657.851138][T23794] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1657.851166][T23794] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1657.851195][T23794] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1657.852456][T23794] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1657.852490][T23794] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1657.852511][T23794] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1657.852528][T23794] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1657.852546][T23794] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1658.047665][T23794] usb 6-1: string descriptor 0 read error: -22 [ 1658.047808][T23794] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1658.047836][T23794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.195522][T23794] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1658.593873][T24381] Bluetooth: hci6: command tx timeout [ 1659.071953][ T10] usb 6-1: USB disconnect, device number 37 [ 1659.218523][ T5815] Bluetooth: hci5: command 0x0406 tx timeout [ 1660.559831][ T10] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1660.611107][ T813] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.658371][T24381] Bluetooth: hci6: command tx timeout [ 1660.668816][ T1233] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1660.708325][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1660.728921][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1660.729060][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1660.729090][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1660.729114][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1660.729160][ T10] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1660.729186][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.736243][ T10] usb 1-1: config 0 descriptor?? [ 1660.898497][ T1233] usb 6-1: Using ep0 maxpacket: 32 [ 1660.959397][ T1233] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1660.959428][ T1233] usb 6-1: config 0 has no interface number 0 [ 1660.959540][ T1233] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1661.020994][ T1233] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1661.021027][ T1233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.021110][ T1233] usb 6-1: Product: syz [ 1661.021127][ T1233] usb 6-1: Manufacturer: syz [ 1661.021144][ T1233] usb 6-1: SerialNumber: syz [ 1661.064595][ T1233] usb 6-1: config 0 descriptor?? [ 1661.452039][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 1661.452168][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1661.500208][ T10] usb 1-1: USB disconnect, device number 72 [ 1661.547125][ T813] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.714615][T25494] chnl_net:caif_netlink_parms(): no params data found [ 1661.754504][ T1233] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1661.754533][ T1233] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1661.754553][ T1233] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1661.789446][ T1233] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 1662.118846][ T813] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.158431][ T1233] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1662.308702][ T1233] usb 8-1: Using ep0 maxpacket: 16 [ 1662.314950][ T1233] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.314995][ T1233] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1662.315020][ T1233] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1662.315039][ T1233] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1662.315072][ T1233] usb 8-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1662.315093][ T1233] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.396993][ T1233] usb 8-1: config 0 descriptor?? [ 1662.408296][ T10] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1662.535685][ T813] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.572017][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1662.573447][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.573474][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1662.607415][ T10] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1662.607446][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.607469][ T10] usb 1-1: Product: syz [ 1662.607543][ T10] usb 1-1: Manufacturer: syz [ 1662.607561][ T10] usb 1-1: SerialNumber: syz [ 1662.750243][T24381] Bluetooth: hci6: command tx timeout [ 1662.814457][ T37] kauditd_printk_skb: 98 callbacks suppressed [ 1662.814478][ T37] audit: type=1400 audit(2000002549.474:2133): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="TIPCv2" requested=w pid=25549 comm="syz.7.6565" daddr=2001::1 dest=20003 [ 1662.877782][ T37] audit: type=1400 audit(2000002549.534:2134): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="TIPCv2" requested=w pid=25558 comm="syz.8.6567" [ 1662.954681][ T1233] nintendo 0003:057E:2019.005C: unexpected long global item [ 1662.966810][T25550] bond5: entered allmulticast mode [ 1662.971549][ T1233] nintendo 0003:057E:2019.005C: HID parse failed [ 1662.984889][T25550] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1663.011838][ T1233] nintendo 0003:057E:2019.005C: probe - fail = -22 [ 1663.012030][ T1233] nintendo 0003:057E:2019.005C: probe with driver nintendo failed with error -22 [ 1663.814073][ T1233] usb 8-1: USB disconnect, device number 26 [ 1663.890094][T25494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.890198][T25494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.890430][T25494] bridge_slave_0: entered allmulticast mode [ 1663.944747][T25494] bridge_slave_0: entered promiscuous mode [ 1663.963048][T25494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.963384][T25494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.963681][T25494] bridge_slave_1: entered allmulticast mode [ 1664.028688][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1664.037001][T25494] bridge_slave_1: entered promiscuous mode [ 1664.306182][T25494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1664.362476][T25494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1664.444359][ T10] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1664.521787][ T10] usb 1-1: USB disconnect, device number 73 [ 1664.703277][T25512] udevd[25512]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1665.156810][T25494] team0: Port device team_slave_0 added [ 1665.276881][T25494] team0: Port device team_slave_1 added [ 1665.608739][ T813] bridge_slave_1: left allmulticast mode [ 1665.608771][ T813] bridge_slave_1: left promiscuous mode [ 1665.609030][ T813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.733764][ T813] bridge_slave_0: left allmulticast mode [ 1665.733787][ T813] bridge_slave_0: left promiscuous mode [ 1665.734300][ T813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1665.921935][T23794] usb 6-1: USB disconnect, device number 38 [ 1668.612872][T25612] FAULT_INJECTION: forcing a failure. [ 1668.612872][T25612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1668.612912][T25612] CPU: 0 UID: 0 PID: 25612 Comm: syz.7.6578 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1668.612944][T25612] Tainted: [L]=SOFTLOCKUP [ 1668.612952][T25612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1668.612966][T25612] Call Trace: [ 1668.612975][T25612] [ 1668.612985][T25612] dump_stack_lvl+0xe8/0x150 [ 1668.613025][T25612] should_fail_ex+0x46b/0x600 [ 1668.613060][T25612] _copy_to_user+0x31/0xb0 [ 1668.613095][T25612] simple_read_from_buffer+0xe1/0x170 [ 1668.613130][T25612] proc_fail_nth_read+0x1be/0x230 [ 1668.613162][T25612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1668.613193][T25612] ? rw_verify_area+0x2ac/0x4e0 [ 1668.613262][T25612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1668.613294][T25612] vfs_read+0x212/0xa80 [ 1668.613337][T25612] ? __pfx_vfs_read+0x10/0x10 [ 1668.613370][T25612] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1668.613404][T25612] ? lockdep_hardirqs_on+0x7a/0x110 [ 1668.613439][T25612] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1668.613473][T25612] ? mutex_lock_nested+0x152/0x1d0 [ 1668.613499][T25612] ? fdget_pos+0x252/0x320 [ 1668.613537][T25612] ksys_read+0x156/0x270 [ 1668.613573][T25612] ? __pfx_ksys_read+0x10/0x10 [ 1668.613617][T25612] do_syscall_64+0x14d/0xf80 [ 1668.613648][T25612] ? trace_irq_disable+0x3b/0x150 [ 1668.613674][T25612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1668.613697][T25612] ? clear_bhb_loop+0x40/0x90 [ 1668.613724][T25612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1668.613745][T25612] RIP: 0033:0x7f4a1098cfce [ 1668.613767][T25612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1668.613786][T25612] RSP: 002b:00007f4a0ec25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1668.613810][T25612] RAX: ffffffffffffffda RBX: 00007f4a0ec266c0 RCX: 00007f4a1098cfce [ 1668.613825][T25612] RDX: 000000000000000f RSI: 00007f4a0ec260a0 RDI: 0000000000000004 [ 1668.613839][T25612] RBP: 00007f4a0ec26090 R08: 0000000000000000 R09: 0000000000000000 [ 1668.613852][T25612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1668.613867][T25612] R13: 00007f4a10c46038 R14: 00007f4a10c45fa0 R15: 00007ffd716eed68 [ 1668.613899][T25612] [ 1668.770690][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.770872][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.793517][ T1325] lec:lec_start_xmit: lec0:No lecd attached [ 1669.349194][ T813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1669.368518][ T6337] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1669.523528][ T813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1669.562359][ T813] bond0 (unregistering): Released all slaves [ 1669.586896][ T813] bond1 (unregistering): Released all slaves [ 1669.598379][ T808] usb 8-1: new low-speed USB device number 27 using dummy_hcd [ 1669.598757][ T6337] usb 1-1: Using ep0 maxpacket: 16 [ 1669.607508][ T6337] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1669.607564][ T6337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1669.607596][ T6337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1669.607620][ T6337] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1669.607664][ T6337] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1669.607689][ T6337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.716383][ T6337] usb 1-1: config 0 descriptor?? [ 1669.743928][ T813] bond2 (unregistering): Released all slaves [ 1669.760572][ T808] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1669.760630][ T808] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1669.760662][ T808] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1669.760690][ T808] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1669.760719][ T808] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1669.762013][ T808] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1669.762074][ T808] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1669.762105][ T808] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1669.762134][ T808] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1669.762162][ T808] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1669.763461][ T808] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1669.763514][ T808] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1669.763545][ T808] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1669.763572][ T808] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1669.763601][ T808] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1669.767422][ T808] usb 8-1: string descriptor 0 read error: -22 [ 1669.767575][ T808] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1669.767603][ T808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.008680][ T813] bond3 (unregistering): Released all slaves [ 1670.135956][ T808] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1670.233823][ T37] audit: type=1400 audit(2000002556.894:2135): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="TIPCv2" requested=w pid=25614 comm="syz.0.6581" daddr=2001::1 dest=20003 [ 1670.558944][ T6337] nintendo 0003:057E:2019.005D: unexpected long global item [ 1670.559824][ T6337] nintendo 0003:057E:2019.005D: HID parse failed [ 1670.561966][ T6337] nintendo 0003:057E:2019.005D: probe - fail = -22 [ 1670.562077][ T6337] nintendo 0003:057E:2019.005D: probe with driver nintendo failed with error -22 [ 1670.756860][ T9] usb 8-1: USB disconnect, device number 27 [ 1670.921640][T25615] bond2: entered allmulticast mode [ 1670.921986][T25615] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1670.923121][ T813] tipc: Left network mode [ 1670.924086][T25494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1670.924102][T25494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1670.924133][T25494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1670.996319][ T6337] usb 1-1: USB disconnect, device number 74 [ 1671.017328][T25494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1671.017345][T25494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.017377][T25494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1671.103111][ T5968] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1671.259871][ T5968] usb 6-1: Using ep0 maxpacket: 16 [ 1671.265034][ T5968] usb 6-1: config 0 has an invalid interface number: 68 but max is 0 [ 1671.265060][ T5968] usb 6-1: config 0 has no interface number 0 [ 1671.265103][ T5968] usb 6-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1671.269027][ T5968] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1671.269055][ T5968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.269077][ T5968] usb 6-1: Product: syz [ 1671.269092][ T5968] usb 6-1: Manufacturer: syz [ 1671.269107][ T5968] usb 6-1: SerialNumber: syz [ 1671.530554][ T5968] usb 6-1: config 0 descriptor?? [ 1671.655698][ T5968] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1671.859378][ T9] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1672.008489][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1672.027850][ T9] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1672.027874][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.104235][ T9] usb 8-1: config 0 descriptor?? [ 1672.129677][T25494] hsr_slave_0: entered promiscuous mode [ 1672.136901][T25494] hsr_slave_1: entered promiscuous mode [ 1672.148367][T25494] debugfs: 'hsr0' already exists in 'hsr' [ 1672.148398][T25494] Cannot create hsr debugfs directory [ 1672.238047][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1672.819361][ T1436] usb 6-1: Failed to submit usb control message: -110 [ 1672.819401][ T1436] usb 6-1: unable to send the bmi data to the device: -110 [ 1672.819422][ T1436] usb 6-1: unable to get target info from device [ 1672.819440][ T1436] usb 6-1: could not get target info (-110) [ 1672.819551][ T1436] usb 6-1: could not probe fw (-110) [ 1673.395290][ T9] gspca_vc032x: reg_w err -71 [ 1673.395308][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1673.395320][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1673.395330][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1673.395339][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1673.395349][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1673.395359][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1673.395369][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1673.395379][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1673.395388][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1673.395398][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1673.395407][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1673.395417][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1673.395426][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1673.395436][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1673.395445][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1673.395454][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1673.395463][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1673.395472][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1673.395482][ T9] gspca_vc032x: Unknown sensor... [ 1673.395566][ T9] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 1673.533663][ T9] usb 8-1: USB disconnect, device number 28 [ 1673.692901][ T808] usb 6-1: USB disconnect, device number 39 [ 1673.798294][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1673.798331][ C1] lec:lec_tx_timeout: lec0 [ 1673.944801][ T813] hsr_slave_0: left promiscuous mode [ 1673.957842][T25664] netlink: 'syz.0.6590': attribute type 10 has an invalid length. [ 1674.019240][ T813] hsr_slave_1: left promiscuous mode [ 1674.020361][ T813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1674.020389][ T813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1674.073296][ T813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1674.073324][ T813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1674.165832][T25669] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6591'. [ 1674.504839][ T813] veth1_macvtap: left promiscuous mode [ 1674.504953][ T813] veth0_macvtap: left promiscuous mode [ 1674.505382][ T813] veth0_vlan: left promiscuous mode [ 1674.928330][ T9] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 1675.083289][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1675.085729][ T9] usb 8-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1675.085759][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.085782][ T9] usb 8-1: Product: syz [ 1675.085799][ T9] usb 8-1: Manufacturer: syz [ 1675.085815][ T9] usb 8-1: SerialNumber: syz [ 1675.141773][ T9] usb 8-1: config 0 descriptor?? [ 1675.174463][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1675.347930][ T9] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1675.348040][ T9] gspca_pac7302 8-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1675.387497][ T9] usb 8-1: USB disconnect, device number 29 [ 1676.228376][ T808] usb 8-1: new low-speed USB device number 30 using dummy_hcd [ 1676.403603][ T808] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1676.403663][ T808] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1676.403695][ T808] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1676.403723][ T808] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1676.403750][ T808] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1676.405571][ T808] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1676.405622][ T808] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1676.405651][ T808] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1676.405678][ T808] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1676.405704][ T808] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1676.409702][ T808] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1676.409860][ T808] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1676.409928][ T808] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1676.409992][ T808] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1676.410065][ T808] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1676.570829][ T808] usb 8-1: string descriptor 0 read error: -22 [ 1676.571047][ T808] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1676.572350][ T808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.659093][ T808] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1678.500226][ T9] usb 8-1: USB disconnect, device number 30 [ 1678.561715][T25664] 8021q: adding VLAN 0 to HW filter on device team0 [ 1678.566226][T25664] bond0: (slave team0): Enslaving as an active interface with an up link [ 1678.799428][T25695] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1679.298288][ T808] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1679.450532][T25494] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1679.495684][ T808] usb 6-1: Using ep0 maxpacket: 16 [ 1679.506345][ T808] usb 6-1: config 0 has an invalid interface number: 68 but max is 0 [ 1679.506367][ T808] usb 6-1: config 0 has no interface number 0 [ 1679.506399][ T808] usb 6-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1679.556943][ T808] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1679.556967][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.556981][ T808] usb 6-1: Product: syz [ 1679.556992][ T808] usb 6-1: Manufacturer: syz [ 1679.557003][ T808] usb 6-1: SerialNumber: syz [ 1679.576661][T25494] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1679.592806][ T808] usb 6-1: config 0 descriptor?? [ 1679.658371][T18401] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1679.676571][ T808] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1679.747556][T25494] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1679.818721][T18401] usb 8-1: Using ep0 maxpacket: 32 [ 1679.821938][T18401] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 1679.821968][T18401] usb 8-1: config 0 has no interface number 0 [ 1679.822067][T18401] usb 8-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1679.822096][T18401] usb 8-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1679.830600][T18401] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1679.830693][T18401] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.830716][T18401] usb 8-1: Product: syz [ 1679.830732][T18401] usb 8-1: Manufacturer: syz [ 1679.830749][T18401] usb 8-1: SerialNumber: syz [ 1679.932556][T18401] usb 8-1: config 0 descriptor?? [ 1679.969475][T25494] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1680.139873][T18401] radio-si470x 8-1:0.35: this is not a si470x device. [ 1680.165410][ T813] IPVS: stop unused estimator thread 0... [ 1680.693329][T18401] radio-raremono 8-1:0.35: this is not Thanko's Raremono. [ 1681.070035][ T8486] usb 6-1: Failed to submit usb control message: -110 [ 1681.070068][ T8486] usb 6-1: unable to send the bmi data to the device: -110 [ 1681.070081][ T8486] usb 6-1: unable to get target info from device [ 1681.070093][ T8486] usb 6-1: could not get target info (-110) [ 1681.073386][ T8486] usb 6-1: could not probe fw (-110) [ 1681.239909][T23794] usb 8-1: USB disconnect, device number 31 [ 1681.353161][T25494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1681.398688][T25494] 8021q: adding VLAN 0 to HW filter on device team0 [ 1681.411088][ T1436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1681.411505][ T1436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1681.443818][ T1436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1681.444004][ T1436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1681.892902][ T9] usb 6-1: USB disconnect, device number 40 [ 1682.180688][T25738] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=131076 (262152 ns) > initial count (131088 ns). Using initial count to start timer. [ 1682.260195][T25494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1683.999074][T25494] veth0_vlan: entered promiscuous mode [ 1684.033298][T25494] veth1_vlan: entered promiscuous mode [ 1684.226733][T25494] veth0_macvtap: entered promiscuous mode [ 1684.389267][T25494] veth1_macvtap: entered promiscuous mode [ 1684.455827][T25494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1684.475270][T25494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1684.576876][ T1013] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.576951][ T1013] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.577005][ T1013] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.577045][ T1013] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.783804][T25772] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1685.808318][ T5968] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 1686.011745][ T5968] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1686.011824][ T5968] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1686.011855][ T5968] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1686.011895][ T5968] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1686.011921][ T5968] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1686.016674][ T5968] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1686.016712][ T5968] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1686.016733][ T5968] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1686.016752][ T5968] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1686.016772][ T5968] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1686.141404][ T5968] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1686.141464][ T5968] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1686.141485][ T5968] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1686.141503][ T5968] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1686.141523][ T5968] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1686.221193][ T5968] usb 1-1: string descriptor 0 read error: -22 [ 1686.221299][ T5968] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1686.221317][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.319332][ T5968] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1686.868071][ T808] usb 1-1: USB disconnect, device number 75 [ 1686.999637][T25776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.999909][T25776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.897113][T25776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1687.912915][T25776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1690.375364][ T150] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.464890][ T150] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.477160][ T150] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.481303][ T150] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.696252][ T1288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.696276][ T1288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.768958][ T6337] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 1690.916993][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.917016][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.937904][ T6337] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1690.937962][ T6337] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1690.937994][ T6337] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1690.938022][ T6337] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1690.938107][ T6337] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1691.007353][ T6337] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1691.007411][ T6337] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1691.007441][ T6337] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1691.007468][ T6337] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1691.007497][ T6337] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1691.076589][ T6337] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1691.076646][ T6337] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1691.076676][ T6337] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1691.076703][ T6337] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1691.076731][ T6337] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1691.158553][ T6337] usb 6-1: string descriptor 0 read error: -22 [ 1691.158693][ T6337] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1691.158711][ T6337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.277943][ T6337] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1693.738422][T18401] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1693.745239][T25827] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6619'. [ 1693.918346][T18401] usb 10-1: Using ep0 maxpacket: 8 [ 1693.921414][T18401] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1693.921441][T18401] usb 10-1: config 179 has no interface number 0 [ 1693.921489][T18401] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1693.921519][T18401] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1693.921548][T18401] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1693.921575][T18401] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1693.921600][T18401] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1693.921629][T18401] usb 10-1: config 179 interface 65 has no altsetting 0 [ 1693.921664][T18401] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1693.921688][T18401] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.198684][T18401] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input81 [ 1694.389956][T18401] usb 10-1: USB disconnect, device number 2 [ 1694.645521][T25836] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6621'. [ 1695.186380][T18401] usb 6-1: USB disconnect, device number 41 [ 1695.736173][T25851] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6626'. [ 1695.736231][T25851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6626'. [ 1695.736243][T25851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6626'. [ 1696.008420][ T6337] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1697.096601][T18401] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1697.304441][ T6337] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1697.304508][ T6337] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1697.304533][ T6337] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.385831][ T6337] usb 6-1: config 0 descriptor?? [ 1697.386880][T25851] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1697.489804][T18401] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1697.508758][T18401] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1697.508778][T18401] usb 10-1: config 0 has no interfaces? [ 1697.536989][T18401] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1697.537011][T18401] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.537026][T18401] usb 10-1: Product: syz [ 1697.537037][T18401] usb 10-1: Manufacturer: syz [ 1697.537048][T18401] usb 10-1: SerialNumber: syz [ 1697.633030][T18401] usb 10-1: config 0 descriptor?? [ 1697.738433][ T1233] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1697.898415][ T1233] usb 1-1: Using ep0 maxpacket: 16 [ 1697.919885][ T6337] hid_parser_main: 428 callbacks suppressed [ 1697.919923][ T6337] logitech-djreceiver 0003:046D:C71F.005E: unknown main item tag 0x0 [ 1697.919956][ T6337] logitech-djreceiver 0003:046D:C71F.005E: unknown main item tag 0x0 [ 1697.919985][ T6337] logitech-djreceiver 0003:046D:C71F.005E: unknown main item tag 0x0 [ 1697.920011][ T6337] logitech-djreceiver 0003:046D:C71F.005E: unknown main item tag 0x0 [ 1697.920041][ T6337] logitech-djreceiver 0003:046D:C71F.005E: unknown main item tag 0x0 [ 1697.920066][ T6337] logitech-djreceiver 0003:046D:C71F.005E: unknown main item tag 0x0 [ 1697.920109][ T6337] logitech-djreceiver 0003:046D:C71F.005E: unknown main item tag 0x0 [ 1697.920139][ T6337] logitech-djreceiver 0003:046D:C71F.005E: unknown main item tag 0x0 [ 1697.920167][ T6337] logitech-djreceiver 0003:046D:C71F.005E: unknown main item tag 0x0 [ 1697.920193][ T6337] logitech-djreceiver 0003:046D:C71F.005E: unknown main item tag 0x0 [ 1698.468393][ T1233] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 1698.468423][ T1233] usb 1-1: config 0 has no interface number 0 [ 1698.468480][ T1233] usb 1-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1698.473496][ T1233] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1698.473518][ T1233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.473541][ T1233] usb 1-1: Product: syz [ 1698.473552][ T1233] usb 1-1: Manufacturer: syz [ 1698.473564][ T1233] usb 1-1: SerialNumber: syz [ 1698.508288][ T6337] logitech-djreceiver 0003:046D:C71F.005E: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0 [ 1698.567738][ T1233] usb 1-1: config 0 descriptor?? [ 1698.651690][ T1233] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1698.682472][ T6337] usb 6-1: USB disconnect, device number 42 [ 1698.937743][T25870] fido_id[25870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1699.225372][T23794] usb 10-1: USB disconnect, device number 3 [ 1699.789259][ T1288] usb 1-1: Failed to submit usb control message: -110 [ 1699.789298][ T1288] usb 1-1: unable to send the bmi data to the device: -110 [ 1699.789318][ T1288] usb 1-1: unable to get target info from device [ 1699.789335][ T1288] usb 1-1: could not get target info (-110) [ 1699.789470][ T1288] usb 1-1: could not probe fw (-110) [ 1699.926548][T25879] FAULT_INJECTION: forcing a failure. [ 1699.926548][T25879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1699.926590][T25879] CPU: 0 UID: 0 PID: 25879 Comm: syz.5.6634 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1699.926621][T25879] Tainted: [L]=SOFTLOCKUP [ 1699.926630][T25879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1699.926645][T25879] Call Trace: [ 1699.926654][T25879] [ 1699.926665][T25879] dump_stack_lvl+0xe8/0x150 [ 1699.926705][T25879] should_fail_ex+0x46b/0x600 [ 1699.926741][T25879] _copy_to_user+0x31/0xb0 [ 1699.926779][T25879] simple_read_from_buffer+0xe1/0x170 [ 1699.926815][T25879] proc_fail_nth_read+0x1be/0x230 [ 1699.926847][T25879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1699.926879][T25879] ? rw_verify_area+0x2ac/0x4e0 [ 1699.926914][T25879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1699.926944][T25879] vfs_read+0x212/0xa80 [ 1699.926985][T25879] ? __pfx_vfs_read+0x10/0x10 [ 1699.927023][T25879] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1699.927059][T25879] ? lockdep_hardirqs_on+0x7a/0x110 [ 1699.927091][T25879] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1699.927126][T25879] ? mutex_lock_nested+0x152/0x1d0 [ 1699.927153][T25879] ? fdget_pos+0x252/0x320 [ 1699.927192][T25879] ksys_read+0x156/0x270 [ 1699.927229][T25879] ? __pfx_ksys_read+0x10/0x10 [ 1699.927277][T25879] do_syscall_64+0x14d/0xf80 [ 1699.927311][T25879] ? trace_irq_disable+0x3b/0x150 [ 1699.927339][T25879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.927364][T25879] ? clear_bhb_loop+0x40/0x90 [ 1699.927392][T25879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.927431][T25879] RIP: 0033:0x7feecbd3cfce [ 1699.927454][T25879] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1699.927475][T25879] RSP: 002b:00007feec9fcdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1699.927499][T25879] RAX: ffffffffffffffda RBX: 00007feec9fce6c0 RCX: 00007feecbd3cfce [ 1699.927517][T25879] RDX: 000000000000000f RSI: 00007feec9fce0a0 RDI: 0000000000000005 [ 1699.927531][T25879] RBP: 00007feec9fce090 R08: 0000000000000000 R09: 0000000000000000 [ 1699.927546][T25879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1699.927559][T25879] R13: 00007feecbff6038 R14: 00007feecbff5fa0 R15: 00007fffb6415448 [ 1699.927596][T25879] [ 1700.306623][ T6337] Process accounting resumed [ 1700.369174][T23794] usb 1-1: USB disconnect, device number 76 [ 1701.348313][ T6337] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1701.576879][ T6337] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1701.588584][ T6337] usb 10-1: not running at top speed; connect to a high speed hub [ 1701.646490][ T6337] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.646543][ T6337] usb 10-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1701.646570][ T6337] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1701.709206][ T6337] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1701.709239][ T6337] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.709270][ T6337] usb 10-1: Product: syz [ 1701.709285][ T6337] usb 10-1: Manufacturer: syz [ 1701.709301][ T6337] usb 10-1: SerialNumber: syz [ 1701.738302][ T1233] usb 8-1: new low-speed USB device number 32 using dummy_hcd [ 1701.925487][ T1233] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1701.925544][ T1233] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1701.925574][ T1233] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1701.925594][ T1233] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1701.925638][ T1233] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1701.984155][ T1233] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1701.984209][ T1233] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1701.984237][ T1233] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1701.984264][ T1233] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1701.984290][ T1233] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1701.987174][ T1233] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1701.987224][ T1233] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1701.987255][ T1233] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1701.987282][ T1233] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1701.987308][ T1233] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1702.166515][ T1233] usb 8-1: string descriptor 0 read error: -22 [ 1702.166669][ T1233] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1702.166704][ T1233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.192646][ T6337] usb 10-1: bad CDC descriptors [ 1702.319424][ T6337] usb 10-1: USB disconnect, device number 4 [ 1702.366396][ T1233] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1702.970160][ T5968] usb 8-1: USB disconnect, device number 32 [ 1706.137659][ T5968] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1706.415257][ T5968] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1706.415294][ T5968] usb 10-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1706.415312][ T5968] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.457539][ T5968] usb 10-1: config 0 descriptor?? [ 1706.647834][ T5968] smsusb:smsusb_probe: board id=8, interface number 0 [ 1706.688597][ T5968] smsusb:smsusb_probe: Device initialized with return code -19 [ 1706.821893][T23794] libceph: connect (1)[c::]:6789 error -101 [ 1706.822086][T23794] libceph: mon0 (1)[c::]:6789 connect error [ 1706.889391][T25932] ceph: No mds server is up or the cluster is laggy [ 1706.959005][ T36] usb 10-1: USB disconnect, device number 5 [ 1707.079328][T23794] libceph: connect (1)[c::]:6789 error -101 [ 1707.079530][T23794] libceph: mon0 (1)[c::]:6789 connect error [ 1707.598731][ T36] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1707.728315][ T36] usb 10-1: device descriptor read/64, error -71 [ 1707.968342][ T36] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1708.098409][ T36] usb 10-1: device descriptor read/64, error -71 [ 1708.128331][T23794] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1708.208714][ T36] usb usb10-port1: attempt power cycle [ 1708.278268][T23794] usb 8-1: Using ep0 maxpacket: 16 [ 1708.280861][T23794] usb 8-1: config 0 has an invalid interface number: 68 but max is 0 [ 1708.280889][T23794] usb 8-1: config 0 has no interface number 0 [ 1708.280936][T23794] usb 8-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.284027][T23794] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1708.284055][T23794] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.284076][T23794] usb 8-1: Product: syz [ 1708.284091][T23794] usb 8-1: Manufacturer: syz [ 1708.284107][T23794] usb 8-1: SerialNumber: syz [ 1708.379806][T23794] usb 8-1: config 0 descriptor?? [ 1708.430746][T23794] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1708.548337][ T36] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1708.569824][ T36] usb 10-1: device descriptor read/8, error -71 [ 1708.828396][ T36] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1708.985659][ T36] usb 10-1: device descriptor read/8, error -71 [ 1709.088816][ T36] usb usb10-port1: unable to enumerate USB device [ 1709.509481][T25956] sp0: Synchronizing with TNC [ 1709.551731][ T8611] usb 8-1: Failed to submit usb control message: -110 [ 1709.551771][ T8611] usb 8-1: unable to send the bmi data to the device: -110 [ 1709.551804][ T8611] usb 8-1: unable to get target info from device [ 1709.551821][ T8611] usb 8-1: could not get target info (-110) [ 1709.551956][ T8611] usb 8-1: could not probe fw (-110) [ 1709.744948][ T36] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1709.898397][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 1709.901219][ T36] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1709.902653][ T36] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1709.905571][ T36] usb 1-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.40 [ 1709.905593][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.905608][ T36] usb 1-1: Product: syz [ 1709.905619][ T36] usb 1-1: Manufacturer: syz [ 1709.905630][ T36] usb 1-1: SerialNumber: syz [ 1710.386453][ T36] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input82 [ 1710.396937][ T5152] bcm5974 1-1:1.0: could not read from device [ 1710.716857][ T5152] bcm5974 1-1:1.0: could not read from device [ 1710.746258][ T36] usb 1-1: USB disconnect, device number 77 [ 1710.931059][ T5886] usb 8-1: USB disconnect, device number 33 [ 1711.348338][T23794] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1711.500942][T23794] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1711.502366][T23794] usb 6-1: config 7 has an invalid interface number: 250 but max is 0 [ 1711.502386][T23794] usb 6-1: config 7 has no interface number 0 [ 1711.502408][T23794] usb 6-1: config 7 interface 250 has no altsetting 0 [ 1711.507069][T23794] usb 6-1: New USB device found, idVendor=53b2, idProduct=8c88, bcdDevice=f1.fb [ 1711.507101][T23794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.507124][T23794] usb 6-1: Product: syz [ 1711.507139][T23794] usb 6-1: Manufacturer: syz [ 1711.507155][T23794] usb 6-1: SerialNumber: syz [ 1711.668634][ T5886] usb 8-1: new low-speed USB device number 34 using dummy_hcd [ 1711.871039][ T5886] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1711.871100][ T5886] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1711.871134][ T5886] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1711.871162][ T5886] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1711.871191][ T5886] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1711.872641][ T5886] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1711.872686][ T5886] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1711.872720][ T5886] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1711.872810][ T5886] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1711.872838][ T5886] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1711.874100][ T5886] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1711.874151][ T5886] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1711.874179][ T5886] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1711.874204][ T5886] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1711.874227][ T5886] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1711.908362][ T5886] usb 8-1: string descriptor 0 read error: -22 [ 1711.908629][ T5886] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1711.908677][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.097036][ T5886] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1712.098131][T23794] usb-storage 6-1:7.250: USB Mass Storage device detected [ 1712.404296][T25996] binder: 25991:25996 ioctl c0306201 0 returned -14 [ 1712.465227][T23794] usb 6-1: USB disconnect, device number 43 [ 1715.063324][T26012] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6661'. [ 1716.598883][ T36] usb 8-1: USB disconnect, device number 34 [ 1717.160166][T26031] FAULT_INJECTION: forcing a failure. [ 1717.160166][T26031] name failslab, interval 1, probability 0, space 0, times 0 [ 1717.160193][T26031] CPU: 0 UID: 0 PID: 26031 Comm: syz.7.6664 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1717.160214][T26031] Tainted: [L]=SOFTLOCKUP [ 1717.160219][T26031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1717.160229][T26031] Call Trace: [ 1717.160234][T26031] [ 1717.160241][T26031] dump_stack_lvl+0xe8/0x150 [ 1717.160268][T26031] should_fail_ex+0x46b/0x600 [ 1717.160290][T26031] should_failslab+0xa8/0x100 [ 1717.160307][T26031] kmem_cache_alloc_noprof+0x87/0x680 [ 1717.160330][T26031] ? skb_clone+0x212/0x3a0 [ 1717.160349][T26031] skb_clone+0x212/0x3a0 [ 1717.160366][T26031] __netlink_deliver_tap+0x404/0x850 [ 1717.160395][T26031] ? netlink_deliver_tap+0x2e/0x1b0 [ 1717.160415][T26031] netlink_deliver_tap+0x19c/0x1b0 [ 1717.160436][T26031] netlink_unicast+0x805/0x9f0 [ 1717.160459][T26031] ? __pfx_netlink_unicast+0x10/0x10 [ 1717.160478][T26031] ? netlink_sendmsg+0x650/0xb40 [ 1717.160496][T26031] ? skb_put+0x11b/0x210 [ 1717.160520][T26031] netlink_sendmsg+0x813/0xb40 [ 1717.160547][T26031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1717.160568][T26031] ? unwind_get_return_address+0x4d/0x90 [ 1717.160585][T26031] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1717.160610][T26031] ____sys_sendmsg+0x94c/0x9c0 [ 1717.160629][T26031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1717.160650][T26031] ? import_iovec+0x73/0xa0 [ 1717.160674][T26031] ___sys_sendmsg+0x2a5/0x360 [ 1717.160692][T26031] ? __pfx____sys_sendmsg+0x10/0x10 [ 1717.160731][T26031] ? __fget_files+0x2a/0x420 [ 1717.160749][T26031] ? __fget_files+0x3a6/0x420 [ 1717.160775][T26031] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1717.160792][T26031] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1717.160813][T26031] ? __pfx_ksys_write+0x10/0x10 [ 1717.160843][T26031] do_syscall_64+0x14d/0xf80 [ 1717.160865][T26031] ? trace_irq_disable+0x3b/0x150 [ 1717.160889][T26031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1717.160904][T26031] ? clear_bhb_loop+0x40/0x90 [ 1717.160923][T26031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1717.160937][T26031] RIP: 0033:0x7f4a109cc799 [ 1717.160951][T26031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1717.160964][T26031] RSP: 002b:00007f4a0ec26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1717.160981][T26031] RAX: ffffffffffffffda RBX: 00007f4a10c45fa0 RCX: 00007f4a109cc799 [ 1717.160993][T26031] RDX: 0000000000004000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1717.161002][T26031] RBP: 00007f4a0ec26090 R08: 0000000000000000 R09: 0000000000000000 [ 1717.161012][T26031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1717.161021][T26031] R13: 00007f4a10c46038 R14: 00007f4a10c45fa0 R15: 00007ffd716eed68 [ 1717.161044][T26031] [ 1719.237191][T11363] lec:lec_start_xmit: lec0:No lecd attached [ 1719.882139][T26030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.882385][T26030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.978346][ T808] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1720.128309][ T808] usb 8-1: Using ep0 maxpacket: 32 [ 1720.131332][ T808] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1720.131350][ T808] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1720.133674][ T808] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1720.133694][ T808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.133710][ T808] usb 8-1: Product: syz [ 1720.133720][ T808] usb 8-1: Manufacturer: syz [ 1720.133731][ T808] usb 8-1: SerialNumber: syz [ 1720.227909][ T808] usb 8-1: config 0 descriptor?? [ 1721.725870][T26030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1721.732515][T26030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1722.205307][T23794] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1722.566551][ T808] usb 8-1: USB disconnect, device number 35 [ 1722.656019][T23794] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1722.657255][T23794] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.657281][T23794] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1722.696175][T23794] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1722.696206][T23794] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.696226][T23794] usb 10-1: Product: syz [ 1722.696240][T23794] usb 10-1: Manufacturer: syz [ 1722.696260][T23794] usb 10-1: SerialNumber: syz [ 1722.762673][T23794] usb 10-1: selecting invalid altsetting 1 [ 1722.934328][T23794] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1722.983505][ T36] usb 10-1: USB disconnect, device number 10 [ 1723.064173][T25512] udevd[25512]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1723.383818][T26069] binder: 26066:26069 ioctl c0306201 0 returned -14 [ 1723.527681][ T1562] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.554998][ T1562] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.568969][ T1562] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.569488][ T1562] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.918699][ T9] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1724.069176][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1724.072699][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.073429][ T9] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1724.073460][ T9] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1724.073478][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.119436][ T9] usb 10-1: config 0 descriptor?? [ 1724.721037][T26079] FAULT_INJECTION: forcing a failure. [ 1724.721037][T26079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1724.721075][T26079] CPU: 1 UID: 0 PID: 26079 Comm: syz.5.6679 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1724.721105][T26079] Tainted: [L]=SOFTLOCKUP [ 1724.721113][T26079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1724.721126][T26079] Call Trace: [ 1724.721138][T26079] [ 1724.721148][T26079] dump_stack_lvl+0xe8/0x150 [ 1724.721185][T26079] should_fail_ex+0x46b/0x600 [ 1724.721234][T26079] _copy_from_user+0x2d/0xb0 [ 1724.721269][T26079] evdev_ioctl_handler+0x6c3/0x1fe0 [ 1724.721314][T26079] ? __pfx_evdev_ioctl_handler+0x10/0x10 [ 1724.721349][T26079] ? __pfx_smack_log+0x10/0x10 [ 1724.721380][T26079] ? smk_access+0x14c/0x4e0 [ 1724.721415][T26079] ? smk_tskacc+0x311/0x3a0 [ 1724.721450][T26079] ? smack_file_ioctl+0x2c2/0x360 [ 1724.721487][T26079] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1724.721541][T26079] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1724.721565][T26079] ? __pfx_evdev_ioctl+0x10/0x10 [ 1724.721598][T26079] __se_sys_ioctl+0xff/0x170 [ 1724.721638][T26079] do_syscall_64+0x14d/0xf80 [ 1724.721671][T26079] ? trace_irq_disable+0x3b/0x150 [ 1724.721699][T26079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.721731][T26079] ? clear_bhb_loop+0x40/0x90 [ 1724.721760][T26079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.721784][T26079] RIP: 0033:0x7feecbd7c799 [ 1724.721805][T26079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1724.721825][T26079] RSP: 002b:00007feec9fce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1724.721848][T26079] RAX: ffffffffffffffda RBX: 00007feecbff5fa0 RCX: 00007feecbd7c799 [ 1724.721865][T26079] RDX: 0000000000000000 RSI: 0000000080104592 RDI: 0000000000000003 [ 1724.721878][T26079] RBP: 00007feec9fce090 R08: 0000000000000000 R09: 0000000000000000 [ 1724.721893][T26079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1724.721906][T26079] R13: 00007feecbff6038 R14: 00007feecbff5fa0 R15: 00007fffb6415448 [ 1724.721942][T26079] [ 1724.738406][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 1724.738439][ C1] lec:lec_tx_timeout: lec0 [ 1725.503911][T26072] netlink: 'syz.7.6677': attribute type 3 has an invalid length. [ 1725.503928][T26072] netlink: 666 bytes leftover after parsing attributes in process `syz.7.6677'. [ 1726.063393][ T36] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1726.234344][ T36] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1726.236605][ T36] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1726.236623][ T36] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1726.269660][ T36] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1726.269688][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.269709][ T36] usb 6-1: Product: syz [ 1726.269730][ T36] usb 6-1: Manufacturer: syz [ 1726.269741][ T36] usb 6-1: SerialNumber: syz [ 1726.961782][ T36] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1728.149601][ T9] usb 10-1: USB disconnect, device number 11 [ 1728.401797][ T36] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1728.410682][ T36] usb 6-1: USB disconnect, device number 44 [ 1728.515804][T25512] udevd[25512]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1729.488612][T23794] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1729.648362][T23794] usb 6-1: Using ep0 maxpacket: 16 [ 1729.656150][T23794] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1729.656179][T23794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.656202][T23794] usb 6-1: Product: syz [ 1729.656218][T23794] usb 6-1: Manufacturer: syz [ 1729.656234][T23794] usb 6-1: SerialNumber: syz [ 1729.705465][T23794] usb 6-1: config 0 descriptor?? [ 1729.716541][T23794] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 1730.054213][T26090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1730.065576][T26090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1730.188511][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.188588][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.192218][ T1325] lec:lec_start_xmit: lec0:No lecd attached [ 1731.546850][T26099] net veth1_virt_wifi c@0Ù: renamed from virt_wifi0 [ 1731.601500][T26123] FAULT_INJECTION: forcing a failure. [ 1731.601500][T26123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1731.601619][T26123] CPU: 0 UID: 0 PID: 26123 Comm: syz.7.6691 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1731.601652][T26123] Tainted: [L]=SOFTLOCKUP [ 1731.601662][T26123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1731.601677][T26123] Call Trace: [ 1731.601686][T26123] [ 1731.601697][T26123] dump_stack_lvl+0xe8/0x150 [ 1731.601735][T26123] should_fail_ex+0x46b/0x600 [ 1731.601770][T26123] _copy_from_user+0x2d/0xb0 [ 1731.601806][T26123] evdev_ioctl_handler+0x6c3/0x1fe0 [ 1731.601852][T26123] ? __pfx_evdev_ioctl_handler+0x10/0x10 [ 1731.601890][T26123] ? __pfx_smack_log+0x10/0x10 [ 1731.601913][T26123] ? smk_access+0x14c/0x4e0 [ 1731.601946][T26123] ? smk_tskacc+0x311/0x3a0 [ 1731.601983][T26123] ? smack_file_ioctl+0x2c2/0x360 [ 1731.602018][T26123] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1731.602058][T26123] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1731.602077][T26123] ? __pfx_evdev_ioctl+0x10/0x10 [ 1731.602110][T26123] __se_sys_ioctl+0xff/0x170 [ 1731.602142][T26123] do_syscall_64+0x14d/0xf80 [ 1731.602170][T26123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1731.602188][T26123] ? clear_bhb_loop+0x40/0x90 [ 1731.602209][T26123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1731.602227][T26123] RIP: 0033:0x7f4a109cc799 [ 1731.602243][T26123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1731.602259][T26123] RSP: 002b:00007f4a0ec26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1731.602277][T26123] RAX: ffffffffffffffda RBX: 00007f4a10c45fa0 RCX: 00007f4a109cc799 [ 1731.602290][T26123] RDX: 00002000000000c0 RSI: 0000000080104592 RDI: 0000000000000004 [ 1731.602302][T26123] RBP: 00007f4a0ec26090 R08: 0000000000000000 R09: 0000000000000000 [ 1731.602313][T26123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1731.602323][T26123] R13: 00007f4a10c46038 R14: 00007f4a10c45fa0 R15: 00007ffd716eed68 [ 1731.602351][T26123] [ 1731.621047][ T43] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1731.621141][ T43] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.651799][ T43] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1731.651863][ T43] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.986151][ T43] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1731.986179][ T43] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.986212][ T43] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1731.986232][ T43] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.285304][T26135] mkiss: ax0: crc mode is auto. [ 1733.300775][T26135] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6696'. [ 1733.300799][T26135] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6696'. [ 1733.528347][ T36] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1733.783651][ T36] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1733.785438][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.785456][ T36] usb 1-1: config 0 has no interfaces? [ 1733.787877][ T36] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1733.787898][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.787913][ T36] usb 1-1: Product: syz [ 1733.787924][ T36] usb 1-1: Manufacturer: syz [ 1733.787935][ T36] usb 1-1: SerialNumber: syz [ 1733.881058][ T36] usb 1-1: config 0 descriptor?? [ 1735.636347][ T6337] usb 6-1: USB disconnect, device number 45 [ 1735.828199][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5640 ms [ 1735.828246][ C1] lec:lec_tx_timeout: lec0 [ 1736.022535][T26129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1736.022909][T26129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1736.288329][ T1233] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1736.457746][ T1233] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1736.473503][ T1233] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1736.473533][ T1233] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1736.501415][ T1233] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1736.501444][ T1233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.501466][ T1233] usb 6-1: Product: syz [ 1736.501477][ T1233] usb 6-1: Manufacturer: syz [ 1736.501488][ T1233] usb 6-1: SerialNumber: syz [ 1736.694748][ T6337] usb 1-1: USB disconnect, device number 78 [ 1736.846228][T26147] ceph: No mds server is up or the cluster is laggy [ 1736.846786][ T5886] libceph: connect (1)[c::]:6789 error -101 [ 1736.846980][ T5886] libceph: mon0 (1)[c::]:6789 connect error [ 1737.112782][T26147] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6699'. [ 1737.195219][ T1233] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1737.339422][ T1233] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1737.343943][ T1233] usb 6-1: USB disconnect, device number 46 [ 1737.424887][T25511] udevd[25511]: setting owner of /dev/bus/usb/006/046 to uid=0, gid=0 failed: No such file or directory [ 1737.552564][T25511] udevd[25511]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1737.778764][ T1562] wlan0: Trigger new scan to find an IBSS to join [ 1738.400932][ T37] audit: type=1326 audit(2000002625.064:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26164 comm="syz.7.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x50000 [ 1738.400989][ T37] audit: type=1326 audit(2000002625.064:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26164 comm="syz.7.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x50000 [ 1738.401035][ T37] audit: type=1326 audit(2000002625.064:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26164 comm="syz.7.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x50000 [ 1738.401066][ T37] audit: type=1326 audit(2000002625.064:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26164 comm="syz.7.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x50000 [ 1738.401099][ T37] audit: type=1326 audit(2000002625.064:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26164 comm="syz.7.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x50000 [ 1738.401130][ T37] audit: type=1326 audit(2000002625.064:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26164 comm="syz.7.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x50000 [ 1738.401164][ T37] audit: type=1326 audit(2000002625.064:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26164 comm="syz.7.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x50000 [ 1738.401195][ T37] audit: type=1326 audit(2000002625.064:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26164 comm="syz.7.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x50000 [ 1738.401227][ T37] audit: type=1326 audit(2000002625.064:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26164 comm="syz.7.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x50000 [ 1738.401260][ T37] audit: type=1326 audit(2000002625.064:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26164 comm="syz.7.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x50000 [ 1738.776414][T26171] FAULT_INJECTION: forcing a failure. [ 1738.776414][T26171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1738.776472][T26171] CPU: 0 UID: 0 PID: 26171 Comm: syz.5.6705 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1738.776502][T26171] Tainted: [L]=SOFTLOCKUP [ 1738.776510][T26171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1738.776523][T26171] Call Trace: [ 1738.776532][T26171] [ 1738.776542][T26171] dump_stack_lvl+0xe8/0x150 [ 1738.776583][T26171] should_fail_ex+0x46b/0x600 [ 1738.776619][T26171] _copy_from_iter+0x1d3/0x1670 [ 1738.776659][T26171] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1738.776694][T26171] ? __alloc_skb+0x27d/0x7d0 [ 1738.776727][T26171] ? __pfx__copy_from_iter+0x10/0x10 [ 1738.776756][T26171] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1738.776792][T26171] ? __alloc_skb+0x27d/0x7d0 [ 1738.776831][T26171] ? netlink_sendmsg+0x650/0xb40 [ 1738.776862][T26171] ? skb_put+0x11b/0x210 [ 1738.776901][T26171] netlink_sendmsg+0x6c0/0xb40 [ 1738.776943][T26171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1738.776978][T26171] ? unwind_get_return_address+0x4d/0x90 [ 1738.777007][T26171] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1738.777053][T26171] ____sys_sendmsg+0x94c/0x9c0 [ 1738.777081][T26171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1738.777115][T26171] ? import_iovec+0x73/0xa0 [ 1738.777153][T26171] ___sys_sendmsg+0x2a5/0x360 [ 1738.777183][T26171] ? __pfx____sys_sendmsg+0x10/0x10 [ 1738.777245][T26171] ? __fget_files+0x2a/0x420 [ 1738.777274][T26171] ? __fget_files+0x3a6/0x420 [ 1738.777316][T26171] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1738.777343][T26171] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1738.777378][T26171] ? __pfx_ksys_write+0x10/0x10 [ 1738.777427][T26171] do_syscall_64+0x14d/0xf80 [ 1738.777467][T26171] ? trace_irq_disable+0x3b/0x150 [ 1738.777495][T26171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.777520][T26171] ? clear_bhb_loop+0x40/0x90 [ 1738.777550][T26171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.777574][T26171] RIP: 0033:0x7feecbd7c799 [ 1738.777596][T26171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1738.777616][T26171] RSP: 002b:00007feec9fce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1738.777640][T26171] RAX: ffffffffffffffda RBX: 00007feecbff5fa0 RCX: 00007feecbd7c799 [ 1738.777657][T26171] RDX: 0000000008000002 RSI: 0000200000000280 RDI: 0000000000000003 [ 1738.777672][T26171] RBP: 00007feec9fce090 R08: 0000000000000000 R09: 0000000000000000 [ 1738.777685][T26171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1738.777699][T26171] R13: 00007feecbff6038 R14: 00007feecbff5fa0 R15: 00007fffb6415448 [ 1738.777735][T26171] [ 1741.791150][ T13] wlan0: Trigger new scan to find an IBSS to join [ 1742.185863][T26183] mkiss: ax0: crc mode is auto. [ 1742.203538][ T5886] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1742.218387][T26183] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6709'. [ 1742.218410][T26183] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6709'. [ 1742.398283][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 1742.418362][ T5886] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1742.418395][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1742.418411][ T5886] usb 1-1: Product: syz [ 1742.418422][ T5886] usb 1-1: Manufacturer: syz [ 1742.418433][ T5886] usb 1-1: SerialNumber: syz [ 1742.494116][ T5886] usb 1-1: config 0 descriptor?? [ 1742.521878][ T5886] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1742.530192][ T6337] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1742.678336][ T6337] usb 8-1: Using ep0 maxpacket: 32 [ 1742.680860][ T6337] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 1742.680890][ T6337] usb 8-1: config 0 has no interface number 0 [ 1742.680988][ T6337] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1742.681011][ T6337] usb 8-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1742.681030][ T6337] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1742.681050][ T6337] usb 8-1: config 0 interface 196 has no altsetting 0 [ 1742.683957][ T6337] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1742.684047][ T6337] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.684065][ T6337] usb 8-1: Product: syz [ 1742.684077][ T6337] usb 8-1: Manufacturer: syz [ 1742.684090][ T6337] usb 8-1: SerialNumber: syz [ 1743.816102][ T6337] usb 8-1: config 0 descriptor?? [ 1743.909054][ T5886] gspca_sn9c2028: read1 error -110 [ 1743.909741][ T5886] gspca_sn9c2028: read1 error -32 [ 1743.909832][ T5886] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1743.910199][T26183] raw-gadget.4 gadget.7: fail, usb_ep_enable returned -22 [ 1743.955151][ T1288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1744.251979][ T1233] usb 1-1: USB disconnect, device number 79 [ 1744.394871][ T6337] ipheth 8-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 1744.395106][ T6337] ipheth 8-1:0.196: probe with driver ipheth failed with error -22 [ 1744.477923][ T6337] libceph: connect (1)[c::]:6789 error -101 [ 1744.478135][ T6337] libceph: mon0 (1)[c::]:6789 connect error [ 1744.516705][ T6337] libceph: connect (1)[c::]:6789 error -101 [ 1744.516904][ T6337] libceph: mon0 (1)[c::]:6789 connect error [ 1744.539187][T26188] ceph: No mds server is up or the cluster is laggy [ 1744.628522][T26183] netlink: 'syz.7.6709': attribute type 10 has an invalid length. [ 1744.628553][T26183] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6709'. [ 1744.628848][T26183] dummy0: entered promiscuous mode [ 1744.630732][T26183] bridge0: port 3(dummy0) entered blocking state [ 1744.630863][T26183] bridge0: port 3(dummy0) entered disabled state [ 1744.631037][T26183] dummy0: entered allmulticast mode [ 1744.637020][T26188] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6711'. [ 1744.781326][ T6337] usb 8-1: USB disconnect, device number 37 [ 1744.878564][ T1233] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1745.093367][ T1233] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1745.113885][ T1233] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.113921][ T1233] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1745.177466][ T1233] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1745.177501][ T1233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.177523][ T1233] usb 1-1: Product: syz [ 1745.177538][ T1233] usb 1-1: Manufacturer: syz [ 1745.177554][ T1233] usb 1-1: SerialNumber: syz [ 1745.854999][ T1233] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1745.948310][ T36] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1746.099642][ T36] usb 8-1: Using ep0 maxpacket: 8 [ 1746.273471][ T36] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1746.273893][ T36] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1746.274197][ T36] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1746.274289][ T36] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.450415][ T36] usb 8-1: config 0 descriptor?? [ 1746.694672][ T36] iowarrior 8-1:0.0: no interrupt-in endpoint found [ 1746.729140][ T1233] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1746.779524][ T1233] usb 1-1: USB disconnect, device number 80 [ 1747.049025][ T37] kauditd_printk_skb: 464 callbacks suppressed [ 1747.088757][ T37] audit: type=1326 audit(2000002633.714:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26199 comm="syz.7.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x7ffc0000 [ 1747.088827][ T37] audit: type=1326 audit(2000002633.714:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26199 comm="syz.7.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x7ffc0000 [ 1747.093650][T25512] udevd[25512]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1747.139159][ T37] audit: type=1326 audit(2000002633.794:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26199 comm="syz.7.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4a109cc799 code=0x7ffc0000 [ 1747.139219][ T37] audit: type=1326 audit(2000002633.794:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26199 comm="syz.7.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x7ffc0000 [ 1747.139268][ T37] audit: type=1326 audit(2000002633.794:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26199 comm="syz.7.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x7ffc0000 [ 1747.139323][ T37] audit: type=1326 audit(2000002633.794:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26199 comm="syz.7.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a109cc799 code=0x7ffc0000 [ 1747.139370][ T37] audit: type=1326 audit(2000002633.804:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26199 comm="syz.7.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x7ffc0000 [ 1747.139429][ T37] audit: type=1326 audit(2000002633.804:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26199 comm="syz.7.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x7ffc0000 [ 1747.139480][ T37] audit: type=1326 audit(2000002633.804:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26199 comm="syz.7.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a1098cfce code=0x7ffc0000 [ 1747.140285][ T37] audit: type=1326 audit(2000002633.804:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26199 comm="syz.7.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a109cc799 code=0x7ffc0000 [ 1747.490880][ T1233] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1748.054423][ T1233] usb 1-1: Using ep0 maxpacket: 16 [ 1748.101550][ T1233] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1748.101574][ T1233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.101590][ T1233] usb 1-1: Product: syz [ 1748.101601][ T1233] usb 1-1: Manufacturer: syz [ 1748.101612][ T1233] usb 1-1: SerialNumber: syz [ 1748.342096][ T1233] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1748.368900][ T1233] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1748.369458][ T1233] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1748.369498][ T1233] usb 1-1: media controller created [ 1748.394929][T26218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6719'. [ 1748.417455][ T5968] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1748.447499][ T1233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1748.578370][ T5968] usb 10-1: Using ep0 maxpacket: 16 [ 1748.581213][ T5968] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1748.581269][ T5968] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1748.581356][ T5968] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1748.581392][ T5968] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1748.581434][ T5968] usb 10-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1748.581459][ T5968] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.679952][ T5968] usb 10-1: config 0 descriptor?? [ 1748.702404][ T1233] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1748.869237][ T36] usb 8-1: USB disconnect, device number 38 [ 1750.260016][T26223] ------------[ cut here ]------------ [ 1750.260033][T26223] usb 1-1: BOGUS control dir, pipe 80005180 doesn't match bRequestType c0 [ 1750.260061][T26223] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1052/0x18b0, CPU#1: syz.8.6716/26223 [ 1750.260122][T26223] Modules linked in: [ 1750.260146][T26223] CPU: 1 UID: 0 PID: 26223 Comm: syz.8.6716 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1750.260180][T26223] Tainted: [L]=SOFTLOCKUP [ 1750.260189][T26223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1750.260204][T26223] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 1750.260242][T26223] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 1750.260264][T26223] RSP: 0018:ffffc90006cef8c8 EFLAGS: 00010246 [ 1750.260285][T26223] RAX: 0000000000000000 RBX: ffff888038febc00 RCX: 0000000080005180 [ 1750.260305][T26223] RDX: ffff88801abe9720 RSI: ffffffff8beddc00 RDI: ffffffff8f765a10 [ 1750.260325][T26223] RBP: 1ffff11004150668 R08: 00000000000000c0 R09: 0000000000400000 [ 1750.260342][T26223] R10: 0000000000008068 R11: fffff52000d9df44 R12: ffff8880350ca100 [ 1750.260360][T26223] R13: ffff888020a83340 R14: 0000000080005180 R15: ffff88801abe9720 [ 1750.260379][T26223] FS: 00007f15aabf56c0(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000 [ 1750.260398][T26223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1750.260414][T26223] CR2: 0000001b2ef14000 CR3: 000000004e724000 CR4: 00000000003526f0 [ 1750.260436][T26223] Call Trace: [ 1750.260446][T26223] [ 1750.260465][T26223] ? __init_swait_queue_head+0xa9/0x150 [ 1750.260511][T26223] usb_start_wait_urb+0x13f/0x5b0 [ 1750.260570][T26223] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1750.260632][T26223] usb_control_msg+0x234/0x3e0 [ 1750.260680][T26223] gl861_ctrl_msg+0x207/0x420 [ 1750.260723][T26223] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 1750.260768][T26223] gl861_i2c_master_xfer+0x439/0x6a0 [ 1750.260806][T26223] __i2c_transfer+0x79a/0x2020 [ 1750.260844][T26223] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1750.260889][T26223] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1750.260930][T26223] ? i2c_transfer+0xc8/0x2d0 [ 1750.260968][T26223] i2c_transfer+0x1cc/0x2d0 [ 1750.261007][T26223] i2cdev_ioctl_rdwr+0x460/0x740 [ 1750.261056][T26223] i2cdev_ioctl+0x6a8/0x890 [ 1750.261093][T26223] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1750.261131][T26223] ? __fget_files+0x3a6/0x420 [ 1750.261164][T26223] ? __fget_files+0x2a/0x420 [ 1750.261201][T26223] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1750.261228][T26223] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1750.261263][T26223] __se_sys_ioctl+0xff/0x170 [ 1750.261299][T26223] do_syscall_64+0x14d/0xf80 [ 1750.261350][T26223] ? trace_irq_disable+0x3b/0x150 [ 1750.261376][T26223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.261399][T26223] ? clear_bhb_loop+0x40/0x90 [ 1750.261427][T26223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.261451][T26223] RIP: 0033:0x7f15ac9bc799 [ 1750.261475][T26223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1750.261495][T26223] RSP: 002b:00007f15aabf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1750.261518][T26223] RAX: ffffffffffffffda RBX: 00007f15acc36090 RCX: 00007f15ac9bc799 [ 1750.261533][T26223] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000005 [ 1750.261561][T26223] RBP: 00007f15aca52c99 R08: 0000000000000000 R09: 0000000000000000 [ 1750.261578][T26223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1750.261591][T26223] R13: 00007f15acc36128 R14: 00007f15acc36090 R15: 00007ffeda2b2c78 [ 1750.261628][T26223] [ 1750.261655][T26223] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1750.261681][T26223] CPU: 1 UID: 0 PID: 26223 Comm: syz.8.6716 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1750.261720][T26223] Tainted: [L]=SOFTLOCKUP [ 1750.261729][T26223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1750.261745][T26223] Call Trace: [ 1750.261757][T26223] [ 1750.261769][T26223] vpanic+0x56c/0xa60 [ 1750.261809][T26223] ? __pfx__printk+0x10/0x10 [ 1750.261838][T26223] ? __pfx_vpanic+0x10/0x10 [ 1750.261868][T26223] ? is_bpf_text_address+0x292/0x2b0 [ 1750.261901][T26223] ? is_bpf_text_address+0x26/0x2b0 [ 1750.261940][T26223] panic+0xc5/0xd0 [ 1750.261973][T26223] ? __pfx_panic+0x10/0x10 [ 1750.262017][T26223] __warn+0x315/0x4f0 [ 1750.262049][T26223] ? usb_submit_urb+0x1052/0x18b0 [ 1750.262088][T26223] ? usb_submit_urb+0x1052/0x18b0 [ 1750.262120][T26223] __report_bug+0x29a/0x540 [ 1750.262153][T26223] ? unwind_get_return_address+0x4d/0x90 [ 1750.262189][T26223] ? usb_submit_urb+0x1052/0x18b0 [ 1750.262228][T26223] ? __pfx___report_bug+0x10/0x10 [ 1750.262264][T26223] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1750.262302][T26223] ? lockdep_hardirqs_on+0x7a/0x110 [ 1750.262343][T26223] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1750.262379][T26223] ? stack_depot_save_flags+0x3f3/0x810 [ 1750.262419][T26223] report_bug_entry+0x19a/0x290 [ 1750.262457][T26223] ? usb_submit_urb+0x1114/0x18b0 [ 1750.262495][T26223] ? usb_submit_urb+0x1119/0x18b0 [ 1750.262526][T26223] handle_bug+0xce/0x200 [ 1750.262562][T26223] exc_invalid_op+0x1a/0x50 [ 1750.262592][T26223] asm_exc_invalid_op+0x1a/0x20 [ 1750.262619][T26223] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 1750.262658][T26223] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 1750.262680][T26223] RSP: 0018:ffffc90006cef8c8 EFLAGS: 00010246 [ 1750.262701][T26223] RAX: 0000000000000000 RBX: ffff888038febc00 RCX: 0000000080005180 [ 1750.262718][T26223] RDX: ffff88801abe9720 RSI: ffffffff8beddc00 RDI: ffffffff8f765a10 [ 1750.262737][T26223] RBP: 1ffff11004150668 R08: 00000000000000c0 R09: 0000000000400000 [ 1750.262754][T26223] R10: 0000000000008068 R11: fffff52000d9df44 R12: ffff8880350ca100 [ 1750.262773][T26223] R13: ffff888020a83340 R14: 0000000080005180 R15: ffff88801abe9720 [ 1750.262812][T26223] ? usb_submit_urb+0x10a3/0x18b0 [ 1750.262869][T26223] ? __init_swait_queue_head+0xa9/0x150 [ 1750.262910][T26223] usb_start_wait_urb+0x13f/0x5b0 [ 1750.262956][T26223] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1750.263019][T26223] usb_control_msg+0x234/0x3e0 [ 1750.263063][T26223] gl861_ctrl_msg+0x207/0x420 [ 1750.263107][T26223] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 1750.263167][T26223] gl861_i2c_master_xfer+0x439/0x6a0 [ 1750.263198][T26223] __i2c_transfer+0x79a/0x2020 [ 1750.263231][T26223] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1750.263268][T26223] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1750.263301][T26223] ? i2c_transfer+0xc8/0x2d0 [ 1750.263332][T26223] i2c_transfer+0x1cc/0x2d0 [ 1750.263414][T26223] i2cdev_ioctl_rdwr+0x460/0x740 [ 1750.263476][T26223] i2cdev_ioctl+0x6a8/0x890 [ 1750.263530][T26223] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1750.263591][T26223] ? __fget_files+0x3a6/0x420 [ 1750.263641][T26223] ? __fget_files+0x2a/0x420 [ 1750.263675][T26223] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1750.263699][T26223] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1750.263727][T26223] __se_sys_ioctl+0xff/0x170 [ 1750.263763][T26223] do_syscall_64+0x14d/0xf80 [ 1750.263797][T26223] ? trace_irq_disable+0x3b/0x150 [ 1750.263826][T26223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.263856][T26223] ? clear_bhb_loop+0x40/0x90 [ 1750.263891][T26223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.263915][T26223] RIP: 0033:0x7f15ac9bc799 [ 1750.263935][T26223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1750.263953][T26223] RSP: 002b:00007f15aabf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1750.263973][T26223] RAX: ffffffffffffffda RBX: 00007f15acc36090 RCX: 00007f15ac9bc799 [ 1750.263990][T26223] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000005 [ 1750.264004][T26223] RBP: 00007f15aca52c99 R08: 0000000000000000 R09: 0000000000000000 [ 1750.264017][T26223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1750.264029][T26223] R13: 00007f15acc36128 R14: 00007f15acc36090 R15: 00007ffeda2b2c78 [ 1750.264063][T26223] [ 1750.266229][T26223] Kernel Offset: disabled