last executing test programs: 5m40.269312093s ago: executing program 2 (id=9): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120109022400010200db27a1717a67d4e10508c5370100093700086ce81801000905499b44f8815f000000ffffffff6000000000"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 5m35.067495746s ago: executing program 2 (id=11): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x2, 0x200, 0x8, 0x4, 0x0, 0x6, 0xc8, 0x1, 0xff, 0x6, 0xc, 0x8, 0x9}, {0xf053, 0xa6f2, 0xa, 0xa9, 0xc, 0x7, 0x8, 0x3, 0x4, 0x13, 0x1, 0xfe, 0x5}, {0x100000, 0x7ff, 0x7, 0xb, 0x3, 0x4, 0x0, 0x40, 0x70, 0x15, 0x0, 0x3, 0x4}], 0x9}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x8, 0xfffffffffffffffd, 0x0, 0x800000000000fffc, 0xfffffffffffffffd, 0x4002004c3, 0x1000, 0x0, 0xfff, 0xc, 0x5, 0x0, 0xffffffffffffffff, 0x8001, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = timerfd_create(0x9, 0x0) r5 = timerfd_create(0x9, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) timerfd_settime(r4, 0x1, &(0x7f0000000440)={{0x77359400}, {0x77359400}}, 0x0) timerfd_settime(r4, 0x1, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0) sched_setaffinity(r2, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20044894) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4004002}, 0x44000) 5m28.045774073s ago: executing program 2 (id=16): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x3, @local, 0x2}], 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace_options\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='bi', 0x2) close(r4) r5 = openat(r4, &(0x7f00000001f0)='./trace/trace_marker\x00', 0x1, 0x52) write(r5, &(0x7f00000001f8), 0x0) close(r5) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000540)) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f00000032c0)={0x18, 0x140e, 0x529, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4044801}, 0x20000000) 5m17.231578382s ago: executing program 2 (id=25): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000bfa5437e0de643738e1365e700000000b702000014000000b70300000000000067e1400c00000000bf09000000000000750901000000000095000001000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000006000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0x8, 0x8, 0x2010, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_open_dev$vbi(&(0x7f00000002c0), 0x2, 0x2) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f0000000140)={0x0, 0x5, 0x800102}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r5, 0x9) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) socket$inet_sctp(0x2, 0x5, 0x84) 5m13.141681657s ago: executing program 2 (id=29): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x642, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x6) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000003d40), 0x80, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/59, 0x3b}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) fcntl$getflags(r1, 0x401) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) 5m8.14998858s ago: executing program 2 (id=34): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x3, @local, 0x2}], 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace_options\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='bi', 0x2) close(r4) r5 = openat(r4, &(0x7f00000001f0)='./trace/trace_marker\x00', 0x1, 0x52) write(r5, &(0x7f00000001f8), 0x0) close(r5) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000540)) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f00000032c0)={0x18, 0x140e, 0x529, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4044801}, 0x20000000) 4m51.357239284s ago: executing program 32 (id=34): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x3, @local, 0x2}], 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace_options\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='bi', 0x2) close(r4) r5 = openat(r4, &(0x7f00000001f0)='./trace/trace_marker\x00', 0x1, 0x52) write(r5, &(0x7f00000001f8), 0x0) close(r5) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000540)) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f00000032c0)={0x18, 0x140e, 0x529, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4044801}, 0x20000000) 50.86951069s ago: executing program 4 (id=434): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0xd, &(0x7f0000000080)={0x6, 0x6}) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x200000, 0x13f66f, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x979d3}) 45.001530539s ago: executing program 3 (id=440): socket$kcm(0x11, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) shutdown(r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'geneve0\x00', 0x3}, 0x18) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write(r5, &(0x7f0000000680)='drop=1', 0x6) 40.937521829s ago: executing program 3 (id=443): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x642, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x6) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000003d40), 0x80, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/59, 0x3b}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getflags(r1, 0x401) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) 37.741602103s ago: executing program 3 (id=444): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) copy_file_range(r3, 0x0, r3, &(0x7f0000000080)=0x10000000000032, 0x1, 0x0) close(0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000ac0)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}}, 0x40000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) r7 = socket(0xa, 0x3, 0x87) sendto(r7, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000040)={[{0x3f, 0x4e00, "ef7cad9de5dce58693f9e7729f933246ff73c37b9dece33947129d90e3bca93b0f5e609bd2916aa8044d8269f37085bdff10b09e1992d09b94a4f732dd6b66"}]}) 36.584323662s ago: executing program 1 (id=445): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000a80)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file7\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x602200, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace$getsig(0x4202, 0x0, 0x7ff, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r3, 0x0, 0x32, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) lseek(r5, 0x0, 0x1) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000814000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d61"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a000000050001000700ff01000000000000ac75d749b3a47836a7edce6f7a3f"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) 36.230398048s ago: executing program 4 (id=447): socket$inet_icmp(0x2, 0x2, 0x1) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file1\x00'}) r5 = signalfd(r2, 0x0, 0x0) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000b80)='.pending_reads\x00', 0x1090c1, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x13, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff400, 0x0, 0x0, 0x0, 0x9}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x17}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) sendmsg$unix(r2, &(0x7f0000000e00)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000300)="76a7c6415bec6e0dbcb81df45134bc6449f697abe1e6727d38c13002955a349344eef1f452809b3936526d139c9374935865bcaae8cf0e00d0ee027ab1391e4e9d6a2072d9787cf392503716374c192993a9931bbbbac70a3ff9e961dc0b5a5d5b3497baae3f791cfb85c66bdaec992625b678a22456ec4d81ed16fcc9b54f22fd33cbbcc681c2634e03fae94cd794ebe2299da7b75f15ff336cf7d2591457cfbcaf47806636179ac922bd15cc94946e5ab5a1cdb2df50af2155a8e5719fb5d37d865d483d2f23afef65f9f6cf4b46c9ecf6ac4257ac68743093", 0xda}, {&(0x7f0000000400)="b273983129c9eb82eb09e05b", 0xc}, {&(0x7f0000000440)="fa47dc2a426565738410210dcd8f0393844d766780e7f4b5948cdd635c430b08da8df85013d4d4a6f3f148b3f7d7fe642b17026ff9cc399d05cc424006b87c0b8f6f42196fed7e25b7f96bc3006692", 0x4f}, {&(0x7f0000000540)="72b38e6e087bfb74a366b4ac40d688eb9400a3d455bdc8b788b73556acac3e5ee0c5d413c93bdf4a93da5b39657b1ea61c707b3ee80bef0e90eccfe680d6a7fb28f4a7083093709f1344d830840e6339d601af9566911d5dae54ba2b13ed6d886bf2d4a3575579cb0a10490808e3079e901ac7682f41e9dac3823e74dc08fc7e1dd46d03c80b52c502a80a2816d5255f2ae39d7d343844e1c17ee4388ef0671ddf60bcbd286b38ee1dd021cd728c4cf51072a1c4f3bae0d2944232ad57817c2326494c4de9a5111440ba220439fdbfd6", 0xd0}, {&(0x7f0000000640)="56d7ae012a2fbf03dedab3f58e7e1d9e02b8282a935d5a5be5766f7a10f59745c1fd556bda3d6d9d50e4074e4a4b0913f668e0fc3a9c0a511391f710c568613ecaf648f4b2580e6f21c7579ce0c50ba86a15b0aa37c5456f534bfee0fac32abb6cbfaa2251c7cb9b8c3cfbd5523a605e6d323a8b8a47c73f3cf91d691c8f815963b219627f9fe333dbab36478188746ccf083f0a995141a5f2424a3a87b2ff9c67be130f41d64a093369e4ef61fcec4e5f23dd8062f6be0805e0b7f596a5428be6a5ed623e1283952025df8a74812716683afaba06440f82df22dbc7fb09c28a5965dfca4eed50", 0xe7}, {&(0x7f0000000740)="a1a4c4cc21e94459f1f86d5e64f0c22316109180feee1b9c8561c4620fcbe9ab9d75a97d8f459e14de24da1e24fdd4a9ff3b586a134a4410d592088eed7c898322eda927c10ead7f4175bb98b69f9fdf4f2a758d6e7869ecf01d47699954a61545872ce948337f8ad5d115b4517b2aa1e49531d9df7d1009a2f2ebbc1c6eb77715e36abcf6f409c5766492ce831797cc6a176ca94ddd92e934f74d472dd1b1e2eddccf1df061dfad8d05e6549073b23322dc822c48c18dd1f793508797529e80", 0xc0}, {&(0x7f0000000840)="888b0bd1772a376a12ec114fc6a589db87b31d8a4c4bbb79168c7583ebb41a2f8819617630bd7dfa5758685afe3b96cd8f6433eedd65e1afdeabd55e365845fca66a31be8b35512b2d33b47babd341f8bea234e5ff84c7fa6d62870ace8b26a00e0ac75946fbc37ee2f5a0a3bf57b3ed3cc7df9c15283cb57dfef2622a5b6008d67932604bebb4c98d52d6b7ed450e201b027573c2db581e7b0131d76a6ed35266ec4590153f20e281b504911992", 0xae}, {&(0x7f0000000900)="3062b2cfdb98a53a9cff4c47a193dd31870a7aaf7ef44a759fb4d22f1f681fe5", 0x20}], 0x8, &(0x7f0000000d00)=[@rights={{0x28, 0x1, 0x1, [r1, r2, r1, r1, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r4}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r2, r2, r5, r1, r6, r2, r2, r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r1]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r0, r7, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, r8]}}], 0xe8, 0x20004044}, 0x20000840) chdir(&(0x7f0000000140)='./file0\x00') r9 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r9, 0x0, 0x0, 0x1000f4) sendfile(r9, r9, 0x0, 0x40000000800) 34.539142498s ago: executing program 4 (id=448): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x80000000000002, 0x2042) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x5c1, 0x10000, 0xfffffffd, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000080)=0x0) syz_usb_connect(0x4, 0xf63, &(0x7f0000002000)={{0x12, 0x1, 0x201, 0x4b, 0x2, 0x3f, 0x8, 0x19d2, 0xfff3, 0xf4f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf51, 0x4, 0x3, 0x3, 0x50, 0x0, "", [{{0x9, 0x4, 0x3, 0x9, 0xb, 0x7c, 0x2b, 0xc0, 0x8, [], [{{0x9, 0x5, 0x0, 0x10, 0x200, 0x2, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0xfff9}]}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0x81, 0x9b, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x7}, @generic={0x51, 0x21, "a8b91a12fe87ff335c5d3c2cc8ac423c59f0e4cf9793fe4a83eec24b257b27be40d9c5ab9932b331ad514f3be154de76ac6ebf6902fe1844ca2c0b54a80052ac975c00d8551614361e937143a6f717"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x5, 0x6c, 0x64, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x7}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x81, 0x2, 0x1, [@generic={0x1f, 0x5, "f8903c46d24cff8eb875454ea7946fd825724662f04f45f2689f604f17"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81}]}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x8, 0xac, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x212bd952ffb9718d, 0x3, 0x488f}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x80, 0xea, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x1df, 0x4, 0xff, 0x2, [@generic={0xf3, 0x7, "759edf3f2feb94c35a423b960db571bb4a9c1e8114919e625a87c040efc94bd1efc294cc4c018085b6e52393505b481fb263634a817e5e34940378cf8048adc96f175e0079f8678fdefdf4ea486c04d6e6f9ab918d1cfce7cb4b38642aedaf774ca616331c2969e8d68ab6263d820556171e16716a04321a23df98b956a8ceaa652164f41d1271eb75e14b5222e71fab318892604aaaabe40a47ebe72162e220a82884a1a1d71b86da128fd1819eeca882dc643ebe8844dfa25da77d0b7be6fb67536e49aec4a7e87eebad6b53e18facaf18aacd8b33e4983ed88a6e75c58186beb64ba7d181cdfc940c6911cb361189bc"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x19f, 0x6, 0x5, 0xec, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0xfff7}]}}, {{0x9, 0x5, 0xd, 0xf, 0x200, 0x4, 0x1, 0x36, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0xfffa}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x0, 0x6, 0xb5}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x9, 0x6, 0x1, [@generic={0xb5, 0x8, "50a63a0dad8f7e78e52d5ff20798e048cd75d2431c449f286c31eb8862bee5bff4826b1cb403d7eb741136cdef51ddd74bad46d7e90f13bff3de126b7242d57fd3c20634f963ef5c3728c15ddbf94ff9e9d1211f2603291fd6dbb76bbcfdc940921f2f6fe292e5bff83d98fa372bbb580ebfd4ce3de8a01420e94b94311b515f5790106e72a89c6a7d76242a2aaac0dc99794269dc5ab6db99320b38c4ffb660f1540b66d0e89c793fe6354e801bc244193f4a"}]}}]}}, {{0x9, 0x4, 0x3d, 0x6, 0x7, 0xf6, 0xcc, 0x44, 0x1, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x6, 0x9, 0xa, 0x9a}]}], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0x81, 0x1, 0x17}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x0, 0x47, 0x7, [@generic={0x6, 0x11, "a9ef6d86"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0xc2, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xef, 0x200}]}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x0, 0x80, 0xff}}, {{0x9, 0x5, 0x1, 0x10, 0x7ff, 0x5, 0xb, 0x0, [@generic={0xb, 0x6, "3676f27d5e733194a4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2c, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x9, 0x3, 0x1, [@generic={0xd6, 0x21, "900330344be67f3ac0b51059281033fcefb98549ecc14274138f93d1ef2ed25f251dfacb89e5726b88b5e5a67e00246caf07b9ac891d7890617e3b3761e699f60edd561bf91adf4cf6795ec93ff91a2a7e1aca60582689510a185ba2ff64efe483a2819f7851ec706c3dad4373d0e05d1d2d270415167ba106e66df4b19006956af6361cee0ef8ef679acf881312f1cf12e699526daaf653f472cff353f292a7a4c5fe1239c7e14c419cc37e3658ff91b478020565c0933fa51a51b304471714c92d25a06f00d338161b927f4f9a1bddb0b5730f"}, @generic={0xbf, 0x9, "797c201bdf0179bfe0fab76b95d6dfeeb5836f9b131ae91c714f3bbd8c70006d9fd53cfc048e144e7252183c9fecab46319944afa7cfe96683cb01427ed9f55bcdc2553a6d3924f5d6efb4f2c9bc391a6e50d846d06259b27d2b59597b8afa488d9268e1093c596a83bef33730d08117cde0a4c7357cb0cbd42c23b540e9400b36f25e94c61a8e6976ed2f4e9c6e9374c5478e0bbcaa3f64e51d747a743f39e50c9d7a57a7e14bba8ef6cd8ccdf5ca16e41f16330b1d198e45f8760deb"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x0, 0x1, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x400}]}}]}}, {{0x9, 0x4, 0x97, 0x6, 0xe, 0xc, 0x3e, 0x36, 0x2, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "8d65cd"}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x6d4, 0x9, 0x9, 0x7}, {0x6, 0x24, 0x1a, 0x8, 0x9}}], [{{0x9, 0x5, 0x6, 0x10, 0x400, 0x1, 0x1, 0x41}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x3, 0xd0, 0x2a, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x401}]}}, {{0x9, 0x5, 0x5, 0x10, 0x408, 0x4, 0x9, 0x5, [@generic={0x6d, 0x9, "0a295f608ed4d706862f0a092d2cfd7d152510623813a824446c874a0ee5bc785e772a943e4b8b6835720bf18f21d44721d02fb1e57d8034fcc50b008d75b5af721a76b35db02964c78594a5bc3a547c91f4994f1882e1d268101454bb24045e16d374fe1fc3d7aab5c623"}, @generic={0x9, 0x3, "38f2089540a3fc"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x39f, 0x4, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x59b}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x7}]}}, {{0x9, 0x5, 0xb, 0x28, 0x420, 0x4, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x89, 0x3, 0x2, [@generic={0xe8, 0x21, "cb1193cb3eb6ff8b21fb0da2454aa2c12d0d3fccd98556c85645d81a0d2592b8feb439bbb7d2e19e6554686352de7a6f16ca9af5ae710544e6991330071afcc16deba6f6f0957a5fbca0596baf9c12b2de5d7a57e05356ba171959fd6ee0b16763fea7409c4bb3459081b1ad7fe44dbb683a94ee0ef6461d145a2593d274e8c38c45ae0cf6d96910534955f23bb845553f667b02729e72ce33de63be786d080b87e110ed0076be59b9c10a12a4a04d061000bda2c7c8c9e3602010a9008065b1719c7ecaec7488f60394ea48fb17ab7e32c1ca623ef48ea79d7ff66eb776d5c51c922bc5497d"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x6, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4369}, @generic={0x15, 0x21, "d694dc1cd710b053bdde61a5b044d6993172af"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x0, 0x8, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1}]}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x8, 0x5, 0x3}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x9, 0x8, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x1, 0x8, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7b, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0x101}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x7, 0x0, 0x1, [@generic={0xc7, 0x11, "cc4044f3bf27dfb0df71461a874c1e0e6abc307a26da813a26decf2ca6387475bca9e63416c398affdc6d9ec602f9507d267b94c6dd3dbc57d888591f88a6fa483a95de45322eecdb3319e0918c7feae4cd0f584cc862dfdffe52d03d4287c086e5e451bdc31c01f469b2a1031e32587c0a3985c64b933822d5805535b45192ff4aa77ef9fdd085173a3edaa1eaf9446a297cfc81bb2f81dabfcd3df1d02ba5fdd6da6fa11b2a909953119ac9a0a0cea3bc6a4137683f987e7ba5277193769400a464c35ab"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xff, 0x0, 0x9, [@generic={0x63, 0x3, "e80cddf9d58555a5a55e6842d712c59ffc8e2c8213c969dc2759e36bb27958e38425e1c60bdd838d4a57975f74e6c1df2fe8e24f15026e8accd97aa63f33acc35d99191ac06a7850932e302e6e17e1bf903c2a54be3da4525e2804e4a8a1e10fb3"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x10, 0x28, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x5}]}}]}}, {{0x9, 0x4, 0x75, 0xfb, 0xf, 0x47, 0x3b, 0xea, 0x3, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0xbac, 0x7}, {0x6, 0x24, 0x1a, 0x101, 0x1c}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x40}]}], [{{0x9, 0x5, 0x6, 0xc, 0x40, 0xa, 0x4, 0xf, [@generic={0xcc, 0x30, "94d6bab137c495665f3bb15e9d6878facffd6b8c453d4b34e9e6d8e0a2b27541bca119a2ecd0d7db48b76f4bd9045cf5ab9d410871f238b4f567209087c5466af66534c512a3a0016daba97d048e1d1cbae37e1dc0edb3a7986e7974de258abd013fbc5cd271b4ab1619f003975f3ec1f17db6c33f6c72406c729fe37a3b1406be41f2139df79feecdcddaf9374cdc8f6e0b70bc0d60629163998216eb6006d72717a1ed89103ae60fc59db23573459f5dbf4aad6146c7023022a62950a662fe875d2f51660d9448ce83"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xfe, 0x8}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ef, 0xfe, 0x3, 0x9f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x3}, @generic={0xac, 0x22, "c432ef3c5ef1180cf27f8708d7c5fd2f25a602bf57975c416e84602b6574a9d8097a2e99fd6fe86dc7521b0fefb033328f260955b78677da1373c16042e66098ff794695fca5f6f2eef49a2999a0c885eb0c8f9a3ed1caa33cc14e3cd54d23b35233209b5b8133903e83908a1a6dbadd2b4bb12b67f414f8b654e0023aa0ea7b784450f3d6ad6baa9eaa29863fa5d132b21cf6c31079272a257e6261d6d76fc240f4878d51c32eeca873"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x8, 0xa, 0xf6, [@generic={0xbb, 0x24, "3660f9bb56fcc73873081130d396247231b31ae1e77e1161b59d7f9bc77f35e64e2754efb418dd0306aa25d65dff244491146e05bcbfbae2125fc8a8a687b718928311a02b4e9972eedbd35e600d8209cd622d649113a968abec3e11947eab55e17157a518cf47d936255c28d6c02774c999ef62bab355efefd4e3712dec8724abcde95f1e769e586b33aa95b4cb85709f6034c4fee518d62798e85f8f4446405c68489a402be34779fb34e8c5502d105bde98f65ba86c8231"}, @generic={0x66, 0x8, "2211b2c968b4d2f5679feae6e2121686ddc836e6c7a8d866eb17fb18251643e103ac662771ccff43f266b46988bd9e541bca61d01bb83336808335e967f9ee2a1915f08d9c72165b05df9260c74d97f81c70be5908313b7d1365d07b81f86a3933e43d87"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x7, 0x81, 0x0, [@generic={0x8, 0x8, "fbef5390d142"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x210, 0x6, 0x14, 0x4, [@generic={0xaf, 0xc, "1c0041a29657830efbc6e9ddbc25bd108eab4bebbbb36c79c8b5954563f31b96425945abf913c403ee1e4ad696e297af13500ecb1644d8768460a082e7eeaee11f4695a5d6d27a4580938d1769a7af6f5ea6c0ea01c98386ab9702936c6274b8914c15283953d06648c995142347c1a8a45c3dc683f1cfd6439ac9a0ccf5c8c42fb0ea8a61866f8a5275676f6a09c63a071cb4062f66d205988049151233cfd2305c60fb76c7a752f0baab2ebb"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xc, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6}, @generic={0x8f, 0x7, "fc19f834e828c1504a20eabaf320a2de9fcd2eff37f55d9ccbd210a8b4bb908e230df6c739a9961de7b51cb1f9ee2704e92f5f094b3ddf3a268e4afa7ee87457837c861e4a1bc0ef839618c3aaf407c5feee4583bc8d926f59cf8fa17cafb1df894a766af4ec04ffea4df98fe5a2a204d00f1b791603be02692b607677881d4ec8cad96b7fb59409f64af73657"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x40, 0x3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0xff}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x0, 0x8a, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x9, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x55, 0x23b0}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x26, 0x6}]}}, {{0x9, 0x5, 0x9, 0xb, 0x200, 0x6, 0xbf, 0xa7, [@generic={0x4c, 0x0, "e1ac1a46a635db4976f3af2623a851e677331f567e8a746124711659ac94961a2dcfb82a2badc201ec8f29072e412bf72fa9be0412b1b1d19912bac952091d9b3498abf914b6941eec2f"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0xc, 0x80, 0x0, [@generic={0xa3, 0x5, "20d2a4cf21cde7851d749bf37b1eb2ca74c0b18cc3c0be81ccc8f634872be5e1a0568b87b8884931b8ba6b6555dac3faff382063c303c20b4cd52f132180d40109e9d70d4e72c94dafdfa1f26862bbb994582aaeeec575a324acb69a7567b2104087c7712df69aaceddb75dc541e55f61fda9963f1fe5c0b0041fe550941f6ca6aaa916a292063e7ab7bc9dbbcbac2cedfbe0ba8343eda1e030bc73ed011dd9c71"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x1, 0x4, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x800}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0xa, 0x4, 0xd, [@generic={0x49, 0x8, "269cd16b68dd5abb86a91355170603f24adacd95561c9fed406e515e1b80893d206c99fa39663bb17d923e73540a36bd4d4146a8be464b64df9ed9b909954513fb7aa410faf77a"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x3, 0x5, 0x4, [@generic={0xc2, 0x35, "353e6d3211694b6b33bf47f323e211f4dbbe85410f9685ff8228c55352edb29b9bc4c2b0c1ee17baa04219676fdd4e2d476a70830463e281631b4b255e507022619cdf82adc683c224e0d518a3faeb366ed75bc478009f845371d5fdb473781d15c681bb872460399924ca251c31eb7b997dfc431be39e31187dab69b22ad2c25d5b7c77a48e01d69b2836b183518e7f04a1b845ddba15d3eb5cad25462a50c87e2d6acae9e48ed755810f36acb14fec7f4727b6b1a809c05a7cb7b522e91a80"}, @generic={0x33, 0xb, "cece7e7d38483416ab86d09218ea15905582c9dc589af1798e7eb17f38c112db262f8da02c5de743ca258ec3cf183eec0d"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x9, 0xb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x100}]}}]}}]}}]}}, &(0x7f0000003100)={0xa, &(0x7f0000002f80)={0xa, 0x6, 0xfec198df35236562, 0x81, 0x2, 0xa5, 0x10, 0x6}, 0x2e, &(0x7f0000002fc0)={0x5, 0xf, 0x2e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xa, 0x0, 0xfff}, @wireless={0xb, 0x10, 0x1, 0xa, 0xc0, 0x64, 0xf5, 0xfe00, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "119ab35040362e1d02136e081eb0b539"}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000003000)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000003040)=@lang_id={0x4, 0x3, 0x408}}, {0x57, &(0x7f0000003080)=@string={0x57, 0x3, "6cd96c06e2d568f32d3280ea062b7d99e7c47c033d6a9d088d4557e946e47feb589396ac8f2ab22fcec7a414a6623c554a016f14c71faa80e65a7499f94fab94358771f5ff7aba9d1ca0c76bdb7a3a16e37003d927"}}]}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001600)=@IORING_OP_POLL_REMOVE={0x7, 0x12, 0x0, 0x0, 0x0, 0x12345, 0x4, {0x8}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x5e3f8b2d08cbb781) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = epoll_create1(0x0) dup3(r9, r10, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f00000002c0)={0xa0000013}) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r10, &(0x7f0000000140)={0x80000008}) write(r8, &(0x7f0000000180)='traceon', 0x7) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 33.994689947s ago: executing program 1 (id=449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r3) getgroups(0x2, &(0x7f0000000400)=[0x0, 0x0]) r6 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000440)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0xee01, r8, 0x0) setresuid(r8, r8, r8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) sendmmsg$unix(r1, &(0x7f0000000600)=[{{&(0x7f0000000280)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000300)="476da1542c990f10d74b694eb8bac3007ca75b27eb5318b8bd5c4816860c60298eb73e0eb36edd4c27bc20d949c1bfa230d8ae3a631778e7fbe00ea9758a6c0ab948737b071aa10e459ba85da0d029de76e72198cba06ffd7a6d459708bd9a6297b6ce07a1aac59ab5d0cfc398059f063fdb6c034d30072ac32a51e9ff7c73a47b7bdc08de941130ad905e99c883ca5abbf255f9c807f0dfd738c88d240f5140aa75a22a2b513bb23323b2b9ef609868c2becd24", 0xb4}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="1c00f8ff000000001c00000002000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r6, @ANYBLOB="2c00000017ec710201000000010000aa", @ANYRES32=r2, @ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES16=r4, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="8d8f", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x48001}}], 0x1, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r11 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) fsmount(r11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000004) r12 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0xfffffffb, 0x4, 0xc2, 0x4f, 0x40, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x0, 0x100000080009}, {0xb, 0xa6f2, 0x16, 0x1, 0x9, 0x4, 0x4, 0x6, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x0, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0xfff, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x10000000000000, 0x3, 0x4], 0x41000, 0x400}) 30.495753623s ago: executing program 0 (id=450): socket$netlink(0x10, 0x3, 0x0) io_uring_setup(0x393, &(0x7f0000000640)={0x0, 0xa886, 0x1000, 0x3, 0x1a6}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x10}) r0 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') openat(r2, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141c00, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket(0x2d, 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000100)) io_uring_setup(0x32db, &(0x7f0000000080)={0x0, 0xed42, 0x1, 0x0, 0x208, 0x0, r0}) 30.458402762s ago: executing program 4 (id=451): writev(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000bc0)={0x0, "cd48b8ad5516b3851ea8a13d68eb4d6d7d86d64a7263cc6b7e157fff84922c04", 0x1, 0x4, 0x108c, 0x2, 0x4, 0x2, 0x3, 0x2b}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r3, 0x3e}, 0x80, &(0x7f00000004c0)}, 0x4008840) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r4 = syz_open_dev$midi(0x0, 0x3, 0x8ac02) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r5 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) read$FUSE(r5, 0x0, 0x0) write$FUSE_INTERRUPT(r5, &(0x7f0000000000)={0x10, 0xfffffffffffffffe}, 0x10) read$FUSE(r5, &(0x7f0000002400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r6, &(0x7f0000000040)='net/ip_vs_stats\x00') sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 30.166228556s ago: executing program 1 (id=452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) (fail_nth: 5) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) syz_open_procfs(0x0, 0x0) io_uring_setup(0x523, 0x0) socket$packet(0x11, 0x3, 0x300) 28.33008458s ago: executing program 3 (id=453): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x642, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x6) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000003d40), 0x80, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/59, 0x3b}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getflags(r1, 0x401) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) 27.58816883s ago: executing program 1 (id=454): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x80000000000002, 0x2042) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x5c1, 0x10000, 0xfffffffd, 0x40055}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000080)=0x0) syz_usb_connect(0x4, 0xccb, &(0x7f0000002000)={{0x12, 0x1, 0x201, 0x4b, 0x2, 0x3f, 0x8, 0x19d2, 0xfff3, 0xf4f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb9, 0x4, 0x3, 0x3, 0x50, 0x0, "", [{{0x9, 0x4, 0x3, 0x9, 0xb, 0x7c, 0x2b, 0xc0, 0x8, [], [{{0x9, 0x5, 0x0, 0x10, 0x200, 0x2, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0xfff9}]}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0x81, 0x9b, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x7}, @generic={0x51, 0x21, "a8b91a12fe87ff335c5d3c2cc8ac423c59f0e4cf9793fe4a83eec24b257b27be40d9c5ab9932b331ad514f3be154de76ac6ebf6902fe1844ca2c0b54a80052ac975c00d8551614361e937143a6f717"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x5, 0x6c, 0x64, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x7}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x81, 0x2, 0x1, [@generic={0x1f, 0x5, "f8903c46d24cff8eb875454ea7946fd825724662f04f45f2689f604f17"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81}]}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x8, 0xac, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x212bd952ffb9718d, 0x3, 0x488f}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x80, 0xea, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x1df, 0x4, 0xff, 0x2, [@generic={0xf3, 0x7, "759edf3f2feb94c35a423b960db571bb4a9c1e8114919e625a87c040efc94bd1efc294cc4c018085b6e52393505b481fb263634a817e5e34940378cf8048adc96f175e0079f8678fdefdf4ea486c04d6e6f9ab918d1cfce7cb4b38642aedaf774ca616331c2969e8d68ab6263d820556171e16716a04321a23df98b956a8ceaa652164f41d1271eb75e14b5222e71fab318892604aaaabe40a47ebe72162e220a82884a1a1d71b86da128fd1819eeca882dc643ebe8844dfa25da77d0b7be6fb67536e49aec4a7e87eebad6b53e18facaf18aacd8b33e4983ed88a6e75c58186beb64ba7d181cdfc940c6911cb361189bc"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x19f, 0x6, 0x5, 0xec, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0xfff7}]}}, {{0x9, 0x5, 0xd, 0xf, 0x200, 0x4, 0x1, 0x36, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0xfffa}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x0, 0x6, 0xb5}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x9, 0x6, 0x1, [@generic={0xb5, 0x8, "50a63a0dad8f7e78e52d5ff20798e048cd75d2431c449f286c31eb8862bee5bff4826b1cb403d7eb741136cdef51ddd74bad46d7e90f13bff3de126b7242d57fd3c20634f963ef5c3728c15ddbf94ff9e9d1211f2603291fd6dbb76bbcfdc940921f2f6fe292e5bff83d98fa372bbb580ebfd4ce3de8a01420e94b94311b515f5790106e72a89c6a7d76242a2aaac0dc99794269dc5ab6db99320b38c4ffb660f1540b66d0e89c793fe6354e801bc244193f4a"}]}}]}}, {{0x9, 0x4, 0x3d, 0x6, 0x7, 0xf6, 0xcc, 0x44, 0x1, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x6, 0x9, 0xa, 0x9a}]}], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0x81, 0x1, 0x17}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x0, 0x47, 0x7, [@generic={0x6, 0x11, "a9ef6d86"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0xc2, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xef, 0x200}]}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x0, 0x80, 0xff}}, {{0x9, 0x5, 0x1, 0x10, 0x7ff, 0x5, 0xb, 0x0, [@generic={0xb, 0x6, "3676f27d5e733194a4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2c, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x9, 0x3, 0x1, [@generic={0xd6, 0x21, "900330344be67f3ac0b51059281033fcefb98549ecc14274138f93d1ef2ed25f251dfacb89e5726b88b5e5a67e00246caf07b9ac891d7890617e3b3761e699f60edd561bf91adf4cf6795ec93ff91a2a7e1aca60582689510a185ba2ff64efe483a2819f7851ec706c3dad4373d0e05d1d2d270415167ba106e66df4b19006956af6361cee0ef8ef679acf881312f1cf12e699526daaf653f472cff353f292a7a4c5fe1239c7e14c419cc37e3658ff91b478020565c0933fa51a51b304471714c92d25a06f00d338161b927f4f9a1bddb0b5730f"}, @generic={0xbf, 0x9, "797c201bdf0179bfe0fab76b95d6dfeeb5836f9b131ae91c714f3bbd8c70006d9fd53cfc048e144e7252183c9fecab46319944afa7cfe96683cb01427ed9f55bcdc2553a6d3924f5d6efb4f2c9bc391a6e50d846d06259b27d2b59597b8afa488d9268e1093c596a83bef33730d08117cde0a4c7357cb0cbd42c23b540e9400b36f25e94c61a8e6976ed2f4e9c6e9374c5478e0bbcaa3f64e51d747a743f39e50c9d7a57a7e14bba8ef6cd8ccdf5ca16e41f16330b1d198e45f8760deb"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x0, 0x1, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x400}]}}]}}, {{0x9, 0x4, 0x97, 0x6, 0xe, 0xc, 0x3e, 0x36, 0x2, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "8d65cd"}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x6d4, 0x9, 0x9, 0x7}, {0x6, 0x24, 0x1a, 0x8, 0x9}}], [{{0x9, 0x5, 0x6, 0x10, 0x400, 0x1, 0x1, 0x41}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x3, 0xd0, 0x2a, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x401}]}}, {{0x9, 0x5, 0x5, 0x10, 0x408, 0x4, 0x9, 0x5, [@generic={0x6d, 0x9, "0a295f608ed4d706862f0a092d2cfd7d152510623813a824446c874a0ee5bc785e772a943e4b8b6835720bf18f21d44721d02fb1e57d8034fcc50b008d75b5af721a76b35db02964c78594a5bc3a547c91f4994f1882e1d268101454bb24045e16d374fe1fc3d7aab5c623"}, @generic={0x9, 0x3, "38f2089540a3fc"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x39f, 0x4, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x59b}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x7}]}}, {{0x9, 0x5, 0xb, 0x28, 0x420, 0x4, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x89, 0x3, 0x2, [@generic={0xe8, 0x21, "cb1193cb3eb6ff8b21fb0da2454aa2c12d0d3fccd98556c85645d81a0d2592b8feb439bbb7d2e19e6554686352de7a6f16ca9af5ae710544e6991330071afcc16deba6f6f0957a5fbca0596baf9c12b2de5d7a57e05356ba171959fd6ee0b16763fea7409c4bb3459081b1ad7fe44dbb683a94ee0ef6461d145a2593d274e8c38c45ae0cf6d96910534955f23bb845553f667b02729e72ce33de63be786d080b87e110ed0076be59b9c10a12a4a04d061000bda2c7c8c9e3602010a9008065b1719c7ecaec7488f60394ea48fb17ab7e32c1ca623ef48ea79d7ff66eb776d5c51c922bc5497d"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x6, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4369}, @generic={0x15, 0x21, "d694dc1cd710b053bdde61a5b044d6993172af"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x0, 0x8, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1}]}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x8, 0x5, 0x3}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x9, 0x8, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x1, 0x8, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7b, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0x101}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x7, 0x0, 0x1, [@generic={0xc7, 0x11, "cc4044f3bf27dfb0df71461a874c1e0e6abc307a26da813a26decf2ca6387475bca9e63416c398affdc6d9ec602f9507d267b94c6dd3dbc57d888591f88a6fa483a95de45322eecdb3319e0918c7feae4cd0f584cc862dfdffe52d03d4287c086e5e451bdc31c01f469b2a1031e32587c0a3985c64b933822d5805535b45192ff4aa77ef9fdd085173a3edaa1eaf9446a297cfc81bb2f81dabfcd3df1d02ba5fdd6da6fa11b2a909953119ac9a0a0cea3bc6a4137683f987e7ba5277193769400a464c35ab"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xff, 0x0, 0x9, [@generic={0x63, 0x3, "e80cddf9d58555a5a55e6842d712c59ffc8e2c8213c969dc2759e36bb27958e38425e1c60bdd838d4a57975f74e6c1df2fe8e24f15026e8accd97aa63f33acc35d99191ac06a7850932e302e6e17e1bf903c2a54be3da4525e2804e4a8a1e10fb3"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x10, 0x28, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x5}]}}]}}, {{0x9, 0x4, 0x75, 0xfb, 0x7, 0x47, 0x3b, 0xea, 0x3, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0xbac, 0x7}, {0x6, 0x24, 0x1a, 0x101, 0x1c}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x40}]}], [{{0x9, 0x5, 0x6, 0xc, 0x40, 0xa, 0x4, 0xf, [@generic={0xcc, 0x30, "94d6bab137c495665f3bb15e9d6878facffd6b8c453d4b34e9e6d8e0a2b27541bca119a2ecd0d7db48b76f4bd9045cf5ab9d410871f238b4f567209087c5466af66534c512a3a0016daba97d048e1d1cbae37e1dc0edb3a7986e7974de258abd013fbc5cd271b4ab1619f003975f3ec1f17db6c33f6c72406c729fe37a3b1406be41f2139df79feecdcddaf9374cdc8f6e0b70bc0d60629163998216eb6006d72717a1ed89103ae60fc59db23573459f5dbf4aad6146c7023022a62950a662fe875d2f51660d9448ce83"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xfe, 0x8}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ef, 0xfe, 0x3, 0x9f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x3}, @generic={0xac, 0x22, "c432ef3c5ef1180cf27f8708d7c5fd2f25a602bf57975c416e84602b6574a9d8097a2e99fd6fe86dc7521b0fefb033328f260955b78677da1373c16042e66098ff794695fca5f6f2eef49a2999a0c885eb0c8f9a3ed1caa33cc14e3cd54d23b35233209b5b8133903e83908a1a6dbadd2b4bb12b67f414f8b654e0023aa0ea7b784450f3d6ad6baa9eaa29863fa5d132b21cf6c31079272a257e6261d6d76fc240f4878d51c32eeca873"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x8, 0xa, 0xf6, [@generic={0xbb, 0x24, "3660f9bb56fcc73873081130d396247231b31ae1e77e1161b59d7f9bc77f35e64e2754efb418dd0306aa25d65dff244491146e05bcbfbae2125fc8a8a687b718928311a02b4e9972eedbd35e600d8209cd622d649113a968abec3e11947eab55e17157a518cf47d936255c28d6c02774c999ef62bab355efefd4e3712dec8724abcde95f1e769e586b33aa95b4cb85709f6034c4fee518d62798e85f8f4446405c68489a402be34779fb34e8c5502d105bde98f65ba86c8231"}, @generic={0x66, 0x8, "2211b2c968b4d2f5679feae6e2121686ddc836e6c7a8d866eb17fb18251643e103ac662771ccff43f266b46988bd9e541bca61d01bb83336808335e967f9ee2a1915f08d9c72165b05df9260c74d97f81c70be5908313b7d1365d07b81f86a3933e43d87"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x7, 0x81, 0x0, [@generic={0x8, 0x8, "fbef5390d142"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x210, 0x6, 0x14, 0x4, [@generic={0xaf, 0xc, "1c0041a29657830efbc6e9ddbc25bd108eab4bebbbb36c79c8b5954563f31b96425945abf913c403ee1e4ad696e297af13500ecb1644d8768460a082e7eeaee11f4695a5d6d27a4580938d1769a7af6f5ea6c0ea01c98386ab9702936c6274b8914c15283953d06648c995142347c1a8a45c3dc683f1cfd6439ac9a0ccf5c8c42fb0ea8a61866f8a5275676f6a09c63a071cb4062f66d205988049151233cfd2305c60fb76c7a752f0baab2ebb"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xc, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6}, @generic={0x8f, 0x7, "fc19f834e828c1504a20eabaf320a2de9fcd2eff37f55d9ccbd210a8b4bb908e230df6c739a9961de7b51cb1f9ee2704e92f5f094b3ddf3a268e4afa7ee87457837c861e4a1bc0ef839618c3aaf407c5feee4583bc8d926f59cf8fa17cafb1df894a766af4ec04ffea4df98fe5a2a204d00f1b791603be02692b607677881d4ec8cad96b7fb59409f64af73657"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x40, 0x3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0xff}]}}]}}]}}]}}, &(0x7f0000003100)={0xa, &(0x7f0000002f80)={0xa, 0x6, 0xfec198df35236562, 0x81, 0x2, 0xa5, 0x10, 0x6}, 0x2e, &(0x7f0000002fc0)={0x5, 0xf, 0x2e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xa, 0x0, 0xfff}, @wireless={0xb, 0x10, 0x1, 0xa, 0xc0, 0x64, 0xf5, 0xfe00, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "119ab35040362e1d02136e081eb0b539"}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000003000)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000003040)=@lang_id={0x4, 0x3, 0x408}}, {0x57, &(0x7f0000003080)=@string={0x57, 0x3, "6cd96c06e2d568f32d3280ea062b7d99e7c47c033d6a9d088d4557e946e47feb589396ac8f2ab22fcec7a414a6623c554a016f14c71faa80e65a7499f94fab94358771f5ff7aba9d1ca0c76bdb7a3a16e37003d927"}}]}) syz_io_uring_submit(r1, 0x0, r2, &(0x7f0000001600)=@IORING_OP_POLL_REMOVE={0x7, 0x12, 0x0, 0x0, 0x0, 0x12345, 0x4, {0x8}}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x5e3f8b2d08cbb781) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = epoll_create1(0x0) dup3(r6, r7, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r7, &(0x7f0000000140)={0x80000008}) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 26.233890329s ago: executing program 3 (id=455): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x642, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x6) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000003d40), 0x80, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/59, 0x3b}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r7, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) fcntl$getflags(r1, 0x401) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) 26.07866287s ago: executing program 4 (id=456): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0xd, &(0x7f0000000080)={0x6, 0x6}) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x200000, 0x13f66f, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x979d3}) 24.751596716s ago: executing program 0 (id=457): socket$inet_icmp(0x2, 0x2, 0x1) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file1\x00'}) signalfd(r2, 0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000b80)='.pending_reads\x00', 0x1090c1, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@dev, @in6=@private1}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) chdir(&(0x7f0000000140)='./file0\x00') r4 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r4, 0x0, 0x0, 0x1000f4) sendfile(r4, r4, 0x0, 0x40000000800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r5, 0x100000000000011, 0x2000, 0x2f93) 23.529651203s ago: executing program 0 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf25030000002400018008000700", @ANYRES32=0x0, @ANYBLOB="060001"], 0x38}, 0x1, 0x0, 0x0, 0x40812}, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4, 0x40000002, 0x0) 23.413323668s ago: executing program 1 (id=459): prctl$PR_MCE_KILL(0x23, 0x3, 0x7ffffffff000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x13, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) getrandom(&(0x7f0000000480)=""/244, 0xf4, 0x3) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) clock_adjtime(0x0, &(0x7f0000000000)={0x19b1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000006, 0x0, 0x0, 0x4}) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0100001000130727bd7000fcdbdf2564010101000000000000000000000000ac141426000000000000000000000000000479b04e210002000000a021000000", @ANYRES8=r2, @ANYRESOCT=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\a\b\x00\x00'], 0x15c}, 0x1, 0x0, 0x0, 0x8000881}, 0x2014) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="09000000250005000000000000000000030000003000010f03000c0001006e66736400000000140002003132372e302e302e31000000000000000c000300ffffff7f0000000081db97fe2c9cf6608a052ffd1de6f126237b1d4fdd316038e0966da16b4d39cd3a5693fe80c1e116faad9a008b15114bdae130ab6f788e5dfad8646b72251271a8e6fa886b4e17d71e9de0a0e28cf2a1efe6a1acd2d77145c7307da94469dc0fbd6549287790a96d99e16f1be76616660e4dda3cce8a1f59248c497817fedfc45cbc137fcb2efb52340f9a4ac43aa753c35316ec223c4f762ff7cd"], 0x44}}, 0x0) pipe(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) sendfile(r4, r4, 0x0, 0x2000009) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x1, 0x6, 0xeeee8000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f0000000180)=0x7d8, 0x0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) 22.622089537s ago: executing program 1 (id=460): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x80000000000002, 0x2042) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x5c1, 0x10000, 0xfffffffd, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000080)=0x0) syz_usb_connect(0x4, 0xf63, &(0x7f0000002000)={{0x12, 0x1, 0x201, 0x4b, 0x2, 0x3f, 0x8, 0x19d2, 0xfff3, 0xf4f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf51, 0x4, 0x3, 0x3, 0x50, 0x0, "", [{{0x9, 0x4, 0x3, 0x9, 0xb, 0x7c, 0x2b, 0xc0, 0x8, [], [{{0x9, 0x5, 0x0, 0x10, 0x200, 0x2, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0xfff9}]}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0x81, 0x9b, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x7}, @generic={0x51, 0x21, "a8b91a12fe87ff335c5d3c2cc8ac423c59f0e4cf9793fe4a83eec24b257b27be40d9c5ab9932b331ad514f3be154de76ac6ebf6902fe1844ca2c0b54a80052ac975c00d8551614361e937143a6f717"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x5, 0x6c, 0x64, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x7}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x81, 0x2, 0x1, [@generic={0x1f, 0x5, "f8903c46d24cff8eb875454ea7946fd825724662f04f45f2689f604f17"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81}]}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x8, 0xac, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x212bd952ffb9718d, 0x3, 0x488f}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x80, 0xea, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x1df, 0x4, 0xff, 0x2, [@generic={0xf3, 0x7, "759edf3f2feb94c35a423b960db571bb4a9c1e8114919e625a87c040efc94bd1efc294cc4c018085b6e52393505b481fb263634a817e5e34940378cf8048adc96f175e0079f8678fdefdf4ea486c04d6e6f9ab918d1cfce7cb4b38642aedaf774ca616331c2969e8d68ab6263d820556171e16716a04321a23df98b956a8ceaa652164f41d1271eb75e14b5222e71fab318892604aaaabe40a47ebe72162e220a82884a1a1d71b86da128fd1819eeca882dc643ebe8844dfa25da77d0b7be6fb67536e49aec4a7e87eebad6b53e18facaf18aacd8b33e4983ed88a6e75c58186beb64ba7d181cdfc940c6911cb361189bc"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x19f, 0x6, 0x5, 0xec, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0xfff7}]}}, {{0x9, 0x5, 0xd, 0xf, 0x200, 0x4, 0x1, 0x36, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0xfffa}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x0, 0x6, 0xb5}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x9, 0x6, 0x1, [@generic={0xb5, 0x8, "50a63a0dad8f7e78e52d5ff20798e048cd75d2431c449f286c31eb8862bee5bff4826b1cb403d7eb741136cdef51ddd74bad46d7e90f13bff3de126b7242d57fd3c20634f963ef5c3728c15ddbf94ff9e9d1211f2603291fd6dbb76bbcfdc940921f2f6fe292e5bff83d98fa372bbb580ebfd4ce3de8a01420e94b94311b515f5790106e72a89c6a7d76242a2aaac0dc99794269dc5ab6db99320b38c4ffb660f1540b66d0e89c793fe6354e801bc244193f4a"}]}}]}}, {{0x9, 0x4, 0x3d, 0x6, 0x7, 0xf6, 0xcc, 0x44, 0x1, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x6, 0x9, 0xa, 0x9a}]}], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0x81, 0x1, 0x17}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x0, 0x47, 0x7, [@generic={0x6, 0x11, "a9ef6d86"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0xc2, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xef, 0x200}]}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x0, 0x80, 0xff}}, {{0x9, 0x5, 0x1, 0x10, 0x7ff, 0x5, 0xb, 0x0, [@generic={0xb, 0x6, "3676f27d5e733194a4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2c, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x9, 0x3, 0x1, [@generic={0xd6, 0x21, "900330344be67f3ac0b51059281033fcefb98549ecc14274138f93d1ef2ed25f251dfacb89e5726b88b5e5a67e00246caf07b9ac891d7890617e3b3761e699f60edd561bf91adf4cf6795ec93ff91a2a7e1aca60582689510a185ba2ff64efe483a2819f7851ec706c3dad4373d0e05d1d2d270415167ba106e66df4b19006956af6361cee0ef8ef679acf881312f1cf12e699526daaf653f472cff353f292a7a4c5fe1239c7e14c419cc37e3658ff91b478020565c0933fa51a51b304471714c92d25a06f00d338161b927f4f9a1bddb0b5730f"}, @generic={0xbf, 0x9, "797c201bdf0179bfe0fab76b95d6dfeeb5836f9b131ae91c714f3bbd8c70006d9fd53cfc048e144e7252183c9fecab46319944afa7cfe96683cb01427ed9f55bcdc2553a6d3924f5d6efb4f2c9bc391a6e50d846d06259b27d2b59597b8afa488d9268e1093c596a83bef33730d08117cde0a4c7357cb0cbd42c23b540e9400b36f25e94c61a8e6976ed2f4e9c6e9374c5478e0bbcaa3f64e51d747a743f39e50c9d7a57a7e14bba8ef6cd8ccdf5ca16e41f16330b1d198e45f8760deb"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x0, 0x1, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x400}]}}]}}, {{0x9, 0x4, 0x97, 0x6, 0xe, 0xc, 0x3e, 0x36, 0x2, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "8d65cd"}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x6d4, 0x9, 0x9, 0x7}, {0x6, 0x24, 0x1a, 0x8, 0x9}}], [{{0x9, 0x5, 0x6, 0x10, 0x400, 0x1, 0x1, 0x41}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x3, 0xd0, 0x2a, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x401}]}}, {{0x9, 0x5, 0x5, 0x10, 0x408, 0x4, 0x9, 0x5, [@generic={0x6d, 0x9, "0a295f608ed4d706862f0a092d2cfd7d152510623813a824446c874a0ee5bc785e772a943e4b8b6835720bf18f21d44721d02fb1e57d8034fcc50b008d75b5af721a76b35db02964c78594a5bc3a547c91f4994f1882e1d268101454bb24045e16d374fe1fc3d7aab5c623"}, @generic={0x9, 0x3, "38f2089540a3fc"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x39f, 0x4, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x59b}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x7}]}}, {{0x9, 0x5, 0xb, 0x28, 0x420, 0x4, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x89, 0x3, 0x2, [@generic={0xe8, 0x21, "cb1193cb3eb6ff8b21fb0da2454aa2c12d0d3fccd98556c85645d81a0d2592b8feb439bbb7d2e19e6554686352de7a6f16ca9af5ae710544e6991330071afcc16deba6f6f0957a5fbca0596baf9c12b2de5d7a57e05356ba171959fd6ee0b16763fea7409c4bb3459081b1ad7fe44dbb683a94ee0ef6461d145a2593d274e8c38c45ae0cf6d96910534955f23bb845553f667b02729e72ce33de63be786d080b87e110ed0076be59b9c10a12a4a04d061000bda2c7c8c9e3602010a9008065b1719c7ecaec7488f60394ea48fb17ab7e32c1ca623ef48ea79d7ff66eb776d5c51c922bc5497d"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x6, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4369}, @generic={0x15, 0x21, "d694dc1cd710b053bdde61a5b044d6993172af"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x0, 0x8, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1}]}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x8, 0x5, 0x3}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x9, 0x8, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x1, 0x8, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7b, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0x101}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x7, 0x0, 0x1, [@generic={0xc7, 0x11, "cc4044f3bf27dfb0df71461a874c1e0e6abc307a26da813a26decf2ca6387475bca9e63416c398affdc6d9ec602f9507d267b94c6dd3dbc57d888591f88a6fa483a95de45322eecdb3319e0918c7feae4cd0f584cc862dfdffe52d03d4287c086e5e451bdc31c01f469b2a1031e32587c0a3985c64b933822d5805535b45192ff4aa77ef9fdd085173a3edaa1eaf9446a297cfc81bb2f81dabfcd3df1d02ba5fdd6da6fa11b2a909953119ac9a0a0cea3bc6a4137683f987e7ba5277193769400a464c35ab"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xff, 0x0, 0x9, [@generic={0x63, 0x3, "e80cddf9d58555a5a55e6842d712c59ffc8e2c8213c969dc2759e36bb27958e38425e1c60bdd838d4a57975f74e6c1df2fe8e24f15026e8accd97aa63f33acc35d99191ac06a7850932e302e6e17e1bf903c2a54be3da4525e2804e4a8a1e10fb3"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x10, 0x28, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x5}]}}]}}, {{0x9, 0x4, 0x75, 0xfb, 0xf, 0x47, 0x3b, 0xea, 0x3, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0xbac, 0x7}, {0x6, 0x24, 0x1a, 0x101, 0x1c}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x40}]}], [{{0x9, 0x5, 0x6, 0xc, 0x40, 0xa, 0x4, 0xf, [@generic={0xcc, 0x30, "94d6bab137c495665f3bb15e9d6878facffd6b8c453d4b34e9e6d8e0a2b27541bca119a2ecd0d7db48b76f4bd9045cf5ab9d410871f238b4f567209087c5466af66534c512a3a0016daba97d048e1d1cbae37e1dc0edb3a7986e7974de258abd013fbc5cd271b4ab1619f003975f3ec1f17db6c33f6c72406c729fe37a3b1406be41f2139df79feecdcddaf9374cdc8f6e0b70bc0d60629163998216eb6006d72717a1ed89103ae60fc59db23573459f5dbf4aad6146c7023022a62950a662fe875d2f51660d9448ce83"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xfe, 0x8}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ef, 0xfe, 0x3, 0x9f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x3}, @generic={0xac, 0x22, "c432ef3c5ef1180cf27f8708d7c5fd2f25a602bf57975c416e84602b6574a9d8097a2e99fd6fe86dc7521b0fefb033328f260955b78677da1373c16042e66098ff794695fca5f6f2eef49a2999a0c885eb0c8f9a3ed1caa33cc14e3cd54d23b35233209b5b8133903e83908a1a6dbadd2b4bb12b67f414f8b654e0023aa0ea7b784450f3d6ad6baa9eaa29863fa5d132b21cf6c31079272a257e6261d6d76fc240f4878d51c32eeca873"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x8, 0xa, 0xf6, [@generic={0xbb, 0x24, "3660f9bb56fcc73873081130d396247231b31ae1e77e1161b59d7f9bc77f35e64e2754efb418dd0306aa25d65dff244491146e05bcbfbae2125fc8a8a687b718928311a02b4e9972eedbd35e600d8209cd622d649113a968abec3e11947eab55e17157a518cf47d936255c28d6c02774c999ef62bab355efefd4e3712dec8724abcde95f1e769e586b33aa95b4cb85709f6034c4fee518d62798e85f8f4446405c68489a402be34779fb34e8c5502d105bde98f65ba86c8231"}, @generic={0x66, 0x8, "2211b2c968b4d2f5679feae6e2121686ddc836e6c7a8d866eb17fb18251643e103ac662771ccff43f266b46988bd9e541bca61d01bb83336808335e967f9ee2a1915f08d9c72165b05df9260c74d97f81c70be5908313b7d1365d07b81f86a3933e43d87"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x7, 0x81, 0x0, [@generic={0x8, 0x8, "fbef5390d142"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x210, 0x6, 0x14, 0x4, [@generic={0xaf, 0xc, "1c0041a29657830efbc6e9ddbc25bd108eab4bebbbb36c79c8b5954563f31b96425945abf913c403ee1e4ad696e297af13500ecb1644d8768460a082e7eeaee11f4695a5d6d27a4580938d1769a7af6f5ea6c0ea01c98386ab9702936c6274b8914c15283953d06648c995142347c1a8a45c3dc683f1cfd6439ac9a0ccf5c8c42fb0ea8a61866f8a5275676f6a09c63a071cb4062f66d205988049151233cfd2305c60fb76c7a752f0baab2ebb"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xc, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6}, @generic={0x8f, 0x7, "fc19f834e828c1504a20eabaf320a2de9fcd2eff37f55d9ccbd210a8b4bb908e230df6c739a9961de7b51cb1f9ee2704e92f5f094b3ddf3a268e4afa7ee87457837c861e4a1bc0ef839618c3aaf407c5feee4583bc8d926f59cf8fa17cafb1df894a766af4ec04ffea4df98fe5a2a204d00f1b791603be02692b607677881d4ec8cad96b7fb59409f64af73657"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x40, 0x3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0xff}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x0, 0x8a, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x9, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x55, 0x23b0}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x26, 0x6}]}}, {{0x9, 0x5, 0x9, 0xb, 0x200, 0x6, 0xbf, 0xa7, [@generic={0x4c, 0x0, "e1ac1a46a635db4976f3af2623a851e677331f567e8a746124711659ac94961a2dcfb82a2badc201ec8f29072e412bf72fa9be0412b1b1d19912bac952091d9b3498abf914b6941eec2f"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0xc, 0x80, 0x0, [@generic={0xa3, 0x5, "20d2a4cf21cde7851d749bf37b1eb2ca74c0b18cc3c0be81ccc8f634872be5e1a0568b87b8884931b8ba6b6555dac3faff382063c303c20b4cd52f132180d40109e9d70d4e72c94dafdfa1f26862bbb994582aaeeec575a324acb69a7567b2104087c7712df69aaceddb75dc541e55f61fda9963f1fe5c0b0041fe550941f6ca6aaa916a292063e7ab7bc9dbbcbac2cedfbe0ba8343eda1e030bc73ed011dd9c71"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x1, 0x4, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x800}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0xa, 0x4, 0xd, [@generic={0x49, 0x8, "269cd16b68dd5abb86a91355170603f24adacd95561c9fed406e515e1b80893d206c99fa39663bb17d923e73540a36bd4d4146a8be464b64df9ed9b909954513fb7aa410faf77a"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x3, 0x5, 0x4, [@generic={0xc2, 0x35, "353e6d3211694b6b33bf47f323e211f4dbbe85410f9685ff8228c55352edb29b9bc4c2b0c1ee17baa04219676fdd4e2d476a70830463e281631b4b255e507022619cdf82adc683c224e0d518a3faeb366ed75bc478009f845371d5fdb473781d15c681bb872460399924ca251c31eb7b997dfc431be39e31187dab69b22ad2c25d5b7c77a48e01d69b2836b183518e7f04a1b845ddba15d3eb5cad25462a50c87e2d6acae9e48ed755810f36acb14fec7f4727b6b1a809c05a7cb7b522e91a80"}, @generic={0x33, 0xb, "cece7e7d38483416ab86d09218ea15905582c9dc589af1798e7eb17f38c112db262f8da02c5de743ca258ec3cf183eec0d"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x9, 0xb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x100}]}}]}}]}}]}}, &(0x7f0000003100)={0xa, &(0x7f0000002f80)={0xa, 0x6, 0xfec198df35236562, 0x81, 0x2, 0xa5, 0x10, 0x6}, 0x2e, &(0x7f0000002fc0)={0x5, 0xf, 0x2e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xa, 0x0, 0xfff}, @wireless={0xb, 0x10, 0x1, 0xa, 0xc0, 0x64, 0xf5, 0xfe00, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "119ab35040362e1d02136e081eb0b539"}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000003000)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000003040)=@lang_id={0x4, 0x3, 0x408}}, {0x57, &(0x7f0000003080)=@string={0x57, 0x3, "6cd96c06e2d568f32d3280ea062b7d99e7c47c033d6a9d088d4557e946e47feb589396ac8f2ab22fcec7a414a6623c554a016f14c71faa80e65a7499f94fab94358771f5ff7aba9d1ca0c76bdb7a3a16e37003d927"}}]}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001600)=@IORING_OP_POLL_REMOVE={0x7, 0x12, 0x0, 0x0, 0x0, 0x12345, 0x4, {0x8}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x5e3f8b2d08cbb781) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = epoll_create1(0x0) dup3(r9, r10, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f00000002c0)={0xa0000013}) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r10, &(0x7f0000000140)={0x80000008}) write(r8, &(0x7f0000000180)='traceon', 0x7) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 21.15235054s ago: executing program 4 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0)="306663353a313232373a3f7092c0f0bc085a193376cf620afaf6379a248d1d6534058f1095109d", 0x27) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000380)=""/97, 0x61}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fsync(r5) r6 = socket(0x29, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f4", 0xb) 19.899168089s ago: executing program 0 (id=462): syz_usb_connect$uac1(0x5, 0x79, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040cc17"], 0x0) setns(0xc9, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, 0x0, 0x0) 17.962436307s ago: executing program 3 (id=463): r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x40) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x5046591a, 0x109040) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c643c, &(0x7f0000000300)={0x0, 0x1000000}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r5, 0x3b64) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendfile(0xffffffffffffffff, r4, &(0x7f0000000380)=0x7fff, 0x9) 17.767791353s ago: executing program 0 (id=464): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x642, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x6) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000003d40), 0x80, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/59, 0x3b}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getflags(r1, 0x401) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) 15.417788399s ago: executing program 0 (id=465): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000002a55225d640cfe2d000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, 0x0, 0x0}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000002940)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000200)={0x24, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x80}, @IEEE802154_ATTR_DEV_INDEX={0xfffffffffffffffa, 0x2, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x140a4054) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0xffc5, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x4}]}, 0x4c}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) setns(0xc9, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r5, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) 7.514847716s ago: executing program 33 (id=460): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x80000000000002, 0x2042) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x5c1, 0x10000, 0xfffffffd, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000080)=0x0) syz_usb_connect(0x4, 0xf63, &(0x7f0000002000)={{0x12, 0x1, 0x201, 0x4b, 0x2, 0x3f, 0x8, 0x19d2, 0xfff3, 0xf4f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf51, 0x4, 0x3, 0x3, 0x50, 0x0, "", [{{0x9, 0x4, 0x3, 0x9, 0xb, 0x7c, 0x2b, 0xc0, 0x8, [], [{{0x9, 0x5, 0x0, 0x10, 0x200, 0x2, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0xfff9}]}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0x81, 0x9b, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x7}, @generic={0x51, 0x21, "a8b91a12fe87ff335c5d3c2cc8ac423c59f0e4cf9793fe4a83eec24b257b27be40d9c5ab9932b331ad514f3be154de76ac6ebf6902fe1844ca2c0b54a80052ac975c00d8551614361e937143a6f717"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x5, 0x6c, 0x64, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x7}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x81, 0x2, 0x1, [@generic={0x1f, 0x5, "f8903c46d24cff8eb875454ea7946fd825724662f04f45f2689f604f17"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81}]}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x8, 0xac, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x212bd952ffb9718d, 0x3, 0x488f}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x80, 0xea, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x1df, 0x4, 0xff, 0x2, [@generic={0xf3, 0x7, "759edf3f2feb94c35a423b960db571bb4a9c1e8114919e625a87c040efc94bd1efc294cc4c018085b6e52393505b481fb263634a817e5e34940378cf8048adc96f175e0079f8678fdefdf4ea486c04d6e6f9ab918d1cfce7cb4b38642aedaf774ca616331c2969e8d68ab6263d820556171e16716a04321a23df98b956a8ceaa652164f41d1271eb75e14b5222e71fab318892604aaaabe40a47ebe72162e220a82884a1a1d71b86da128fd1819eeca882dc643ebe8844dfa25da77d0b7be6fb67536e49aec4a7e87eebad6b53e18facaf18aacd8b33e4983ed88a6e75c58186beb64ba7d181cdfc940c6911cb361189bc"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x19f, 0x6, 0x5, 0xec, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0xfff7}]}}, {{0x9, 0x5, 0xd, 0xf, 0x200, 0x4, 0x1, 0x36, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0xfffa}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x0, 0x6, 0xb5}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x9, 0x6, 0x1, [@generic={0xb5, 0x8, "50a63a0dad8f7e78e52d5ff20798e048cd75d2431c449f286c31eb8862bee5bff4826b1cb403d7eb741136cdef51ddd74bad46d7e90f13bff3de126b7242d57fd3c20634f963ef5c3728c15ddbf94ff9e9d1211f2603291fd6dbb76bbcfdc940921f2f6fe292e5bff83d98fa372bbb580ebfd4ce3de8a01420e94b94311b515f5790106e72a89c6a7d76242a2aaac0dc99794269dc5ab6db99320b38c4ffb660f1540b66d0e89c793fe6354e801bc244193f4a"}]}}]}}, {{0x9, 0x4, 0x3d, 0x6, 0x7, 0xf6, 0xcc, 0x44, 0x1, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x6, 0x9, 0xa, 0x9a}]}], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0x81, 0x1, 0x17}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x0, 0x47, 0x7, [@generic={0x6, 0x11, "a9ef6d86"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0xc2, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xef, 0x200}]}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x0, 0x80, 0xff}}, {{0x9, 0x5, 0x1, 0x10, 0x7ff, 0x5, 0xb, 0x0, [@generic={0xb, 0x6, "3676f27d5e733194a4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2c, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x9, 0x3, 0x1, [@generic={0xd6, 0x21, "900330344be67f3ac0b51059281033fcefb98549ecc14274138f93d1ef2ed25f251dfacb89e5726b88b5e5a67e00246caf07b9ac891d7890617e3b3761e699f60edd561bf91adf4cf6795ec93ff91a2a7e1aca60582689510a185ba2ff64efe483a2819f7851ec706c3dad4373d0e05d1d2d270415167ba106e66df4b19006956af6361cee0ef8ef679acf881312f1cf12e699526daaf653f472cff353f292a7a4c5fe1239c7e14c419cc37e3658ff91b478020565c0933fa51a51b304471714c92d25a06f00d338161b927f4f9a1bddb0b5730f"}, @generic={0xbf, 0x9, "797c201bdf0179bfe0fab76b95d6dfeeb5836f9b131ae91c714f3bbd8c70006d9fd53cfc048e144e7252183c9fecab46319944afa7cfe96683cb01427ed9f55bcdc2553a6d3924f5d6efb4f2c9bc391a6e50d846d06259b27d2b59597b8afa488d9268e1093c596a83bef33730d08117cde0a4c7357cb0cbd42c23b540e9400b36f25e94c61a8e6976ed2f4e9c6e9374c5478e0bbcaa3f64e51d747a743f39e50c9d7a57a7e14bba8ef6cd8ccdf5ca16e41f16330b1d198e45f8760deb"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x0, 0x1, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x400}]}}]}}, {{0x9, 0x4, 0x97, 0x6, 0xe, 0xc, 0x3e, 0x36, 0x2, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "8d65cd"}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x6d4, 0x9, 0x9, 0x7}, {0x6, 0x24, 0x1a, 0x8, 0x9}}], [{{0x9, 0x5, 0x6, 0x10, 0x400, 0x1, 0x1, 0x41}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x3, 0xd0, 0x2a, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x401}]}}, {{0x9, 0x5, 0x5, 0x10, 0x408, 0x4, 0x9, 0x5, [@generic={0x6d, 0x9, "0a295f608ed4d706862f0a092d2cfd7d152510623813a824446c874a0ee5bc785e772a943e4b8b6835720bf18f21d44721d02fb1e57d8034fcc50b008d75b5af721a76b35db02964c78594a5bc3a547c91f4994f1882e1d268101454bb24045e16d374fe1fc3d7aab5c623"}, @generic={0x9, 0x3, "38f2089540a3fc"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x39f, 0x4, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x59b}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x7}]}}, {{0x9, 0x5, 0xb, 0x28, 0x420, 0x4, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x89, 0x3, 0x2, [@generic={0xe8, 0x21, "cb1193cb3eb6ff8b21fb0da2454aa2c12d0d3fccd98556c85645d81a0d2592b8feb439bbb7d2e19e6554686352de7a6f16ca9af5ae710544e6991330071afcc16deba6f6f0957a5fbca0596baf9c12b2de5d7a57e05356ba171959fd6ee0b16763fea7409c4bb3459081b1ad7fe44dbb683a94ee0ef6461d145a2593d274e8c38c45ae0cf6d96910534955f23bb845553f667b02729e72ce33de63be786d080b87e110ed0076be59b9c10a12a4a04d061000bda2c7c8c9e3602010a9008065b1719c7ecaec7488f60394ea48fb17ab7e32c1ca623ef48ea79d7ff66eb776d5c51c922bc5497d"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x6, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4369}, @generic={0x15, 0x21, "d694dc1cd710b053bdde61a5b044d6993172af"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x0, 0x8, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1}]}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x8, 0x5, 0x3}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x9, 0x8, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x1, 0x8, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7b, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0x101}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x7, 0x0, 0x1, [@generic={0xc7, 0x11, "cc4044f3bf27dfb0df71461a874c1e0e6abc307a26da813a26decf2ca6387475bca9e63416c398affdc6d9ec602f9507d267b94c6dd3dbc57d888591f88a6fa483a95de45322eecdb3319e0918c7feae4cd0f584cc862dfdffe52d03d4287c086e5e451bdc31c01f469b2a1031e32587c0a3985c64b933822d5805535b45192ff4aa77ef9fdd085173a3edaa1eaf9446a297cfc81bb2f81dabfcd3df1d02ba5fdd6da6fa11b2a909953119ac9a0a0cea3bc6a4137683f987e7ba5277193769400a464c35ab"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xff, 0x0, 0x9, [@generic={0x63, 0x3, "e80cddf9d58555a5a55e6842d712c59ffc8e2c8213c969dc2759e36bb27958e38425e1c60bdd838d4a57975f74e6c1df2fe8e24f15026e8accd97aa63f33acc35d99191ac06a7850932e302e6e17e1bf903c2a54be3da4525e2804e4a8a1e10fb3"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x10, 0x28, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x5}]}}]}}, {{0x9, 0x4, 0x75, 0xfb, 0xf, 0x47, 0x3b, 0xea, 0x3, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0xbac, 0x7}, {0x6, 0x24, 0x1a, 0x101, 0x1c}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x40}]}], [{{0x9, 0x5, 0x6, 0xc, 0x40, 0xa, 0x4, 0xf, [@generic={0xcc, 0x30, "94d6bab137c495665f3bb15e9d6878facffd6b8c453d4b34e9e6d8e0a2b27541bca119a2ecd0d7db48b76f4bd9045cf5ab9d410871f238b4f567209087c5466af66534c512a3a0016daba97d048e1d1cbae37e1dc0edb3a7986e7974de258abd013fbc5cd271b4ab1619f003975f3ec1f17db6c33f6c72406c729fe37a3b1406be41f2139df79feecdcddaf9374cdc8f6e0b70bc0d60629163998216eb6006d72717a1ed89103ae60fc59db23573459f5dbf4aad6146c7023022a62950a662fe875d2f51660d9448ce83"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xfe, 0x8}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ef, 0xfe, 0x3, 0x9f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x3}, @generic={0xac, 0x22, "c432ef3c5ef1180cf27f8708d7c5fd2f25a602bf57975c416e84602b6574a9d8097a2e99fd6fe86dc7521b0fefb033328f260955b78677da1373c16042e66098ff794695fca5f6f2eef49a2999a0c885eb0c8f9a3ed1caa33cc14e3cd54d23b35233209b5b8133903e83908a1a6dbadd2b4bb12b67f414f8b654e0023aa0ea7b784450f3d6ad6baa9eaa29863fa5d132b21cf6c31079272a257e6261d6d76fc240f4878d51c32eeca873"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x8, 0xa, 0xf6, [@generic={0xbb, 0x24, "3660f9bb56fcc73873081130d396247231b31ae1e77e1161b59d7f9bc77f35e64e2754efb418dd0306aa25d65dff244491146e05bcbfbae2125fc8a8a687b718928311a02b4e9972eedbd35e600d8209cd622d649113a968abec3e11947eab55e17157a518cf47d936255c28d6c02774c999ef62bab355efefd4e3712dec8724abcde95f1e769e586b33aa95b4cb85709f6034c4fee518d62798e85f8f4446405c68489a402be34779fb34e8c5502d105bde98f65ba86c8231"}, @generic={0x66, 0x8, "2211b2c968b4d2f5679feae6e2121686ddc836e6c7a8d866eb17fb18251643e103ac662771ccff43f266b46988bd9e541bca61d01bb83336808335e967f9ee2a1915f08d9c72165b05df9260c74d97f81c70be5908313b7d1365d07b81f86a3933e43d87"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x7, 0x81, 0x0, [@generic={0x8, 0x8, "fbef5390d142"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x210, 0x6, 0x14, 0x4, [@generic={0xaf, 0xc, "1c0041a29657830efbc6e9ddbc25bd108eab4bebbbb36c79c8b5954563f31b96425945abf913c403ee1e4ad696e297af13500ecb1644d8768460a082e7eeaee11f4695a5d6d27a4580938d1769a7af6f5ea6c0ea01c98386ab9702936c6274b8914c15283953d06648c995142347c1a8a45c3dc683f1cfd6439ac9a0ccf5c8c42fb0ea8a61866f8a5275676f6a09c63a071cb4062f66d205988049151233cfd2305c60fb76c7a752f0baab2ebb"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xc, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6}, @generic={0x8f, 0x7, "fc19f834e828c1504a20eabaf320a2de9fcd2eff37f55d9ccbd210a8b4bb908e230df6c739a9961de7b51cb1f9ee2704e92f5f094b3ddf3a268e4afa7ee87457837c861e4a1bc0ef839618c3aaf407c5feee4583bc8d926f59cf8fa17cafb1df894a766af4ec04ffea4df98fe5a2a204d00f1b791603be02692b607677881d4ec8cad96b7fb59409f64af73657"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x40, 0x3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0xff}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x0, 0x8a, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x9, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x55, 0x23b0}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x26, 0x6}]}}, {{0x9, 0x5, 0x9, 0xb, 0x200, 0x6, 0xbf, 0xa7, [@generic={0x4c, 0x0, "e1ac1a46a635db4976f3af2623a851e677331f567e8a746124711659ac94961a2dcfb82a2badc201ec8f29072e412bf72fa9be0412b1b1d19912bac952091d9b3498abf914b6941eec2f"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0xc, 0x80, 0x0, [@generic={0xa3, 0x5, "20d2a4cf21cde7851d749bf37b1eb2ca74c0b18cc3c0be81ccc8f634872be5e1a0568b87b8884931b8ba6b6555dac3faff382063c303c20b4cd52f132180d40109e9d70d4e72c94dafdfa1f26862bbb994582aaeeec575a324acb69a7567b2104087c7712df69aaceddb75dc541e55f61fda9963f1fe5c0b0041fe550941f6ca6aaa916a292063e7ab7bc9dbbcbac2cedfbe0ba8343eda1e030bc73ed011dd9c71"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x1, 0x4, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x800}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0xa, 0x4, 0xd, [@generic={0x49, 0x8, "269cd16b68dd5abb86a91355170603f24adacd95561c9fed406e515e1b80893d206c99fa39663bb17d923e73540a36bd4d4146a8be464b64df9ed9b909954513fb7aa410faf77a"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x3, 0x5, 0x4, [@generic={0xc2, 0x35, "353e6d3211694b6b33bf47f323e211f4dbbe85410f9685ff8228c55352edb29b9bc4c2b0c1ee17baa04219676fdd4e2d476a70830463e281631b4b255e507022619cdf82adc683c224e0d518a3faeb366ed75bc478009f845371d5fdb473781d15c681bb872460399924ca251c31eb7b997dfc431be39e31187dab69b22ad2c25d5b7c77a48e01d69b2836b183518e7f04a1b845ddba15d3eb5cad25462a50c87e2d6acae9e48ed755810f36acb14fec7f4727b6b1a809c05a7cb7b522e91a80"}, @generic={0x33, 0xb, "cece7e7d38483416ab86d09218ea15905582c9dc589af1798e7eb17f38c112db262f8da02c5de743ca258ec3cf183eec0d"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x9, 0xb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x100}]}}]}}]}}]}}, &(0x7f0000003100)={0xa, &(0x7f0000002f80)={0xa, 0x6, 0xfec198df35236562, 0x81, 0x2, 0xa5, 0x10, 0x6}, 0x2e, &(0x7f0000002fc0)={0x5, 0xf, 0x2e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xa, 0x0, 0xfff}, @wireless={0xb, 0x10, 0x1, 0xa, 0xc0, 0x64, 0xf5, 0xfe00, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "119ab35040362e1d02136e081eb0b539"}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000003000)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000003040)=@lang_id={0x4, 0x3, 0x408}}, {0x57, &(0x7f0000003080)=@string={0x57, 0x3, "6cd96c06e2d568f32d3280ea062b7d99e7c47c033d6a9d088d4557e946e47feb589396ac8f2ab22fcec7a414a6623c554a016f14c71faa80e65a7499f94fab94358771f5ff7aba9d1ca0c76bdb7a3a16e37003d927"}}]}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001600)=@IORING_OP_POLL_REMOVE={0x7, 0x12, 0x0, 0x0, 0x0, 0x12345, 0x4, {0x8}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x5e3f8b2d08cbb781) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = epoll_create1(0x0) dup3(r9, r10, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f00000002c0)={0xa0000013}) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r10, &(0x7f0000000140)={0x80000008}) write(r8, &(0x7f0000000180)='traceon', 0x7) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 6.004979042s ago: executing program 34 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0)="306663353a313232373a3f7092c0f0bc085a193376cf620afaf6379a248d1d6534058f1095109d", 0x27) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000380)=""/97, 0x61}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fsync(r5) r6 = socket(0x29, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f4", 0xb) 1.977128907s ago: executing program 35 (id=463): r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x40) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x5046591a, 0x109040) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c643c, &(0x7f0000000300)={0x0, 0x1000000}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r5, 0x3b64) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendfile(0xffffffffffffffff, r4, &(0x7f0000000380)=0x7fff, 0x9) 0s ago: executing program 36 (id=465): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000002a55225d640cfe2d000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, 0x0, 0x0}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000002940)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000200)={0x24, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x80}, @IEEE802154_ATTR_DEV_INDEX={0xfffffffffffffffa, 0x2, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x140a4054) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0xffc5, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x4}]}, 0x4c}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) setns(0xc9, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r5, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) kernel console output (not intermixed with test programs): 1 [ 106.558631][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.558866][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.559100][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.559339][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.559574][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.559809][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.560050][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.560289][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.560525][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.560760][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.561014][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.561247][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.561480][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.561715][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.561963][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.562196][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.562430][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.562663][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.562958][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.563184][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.565303][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.565530][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.565779][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.566012][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.566278][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.566518][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.566746][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.566980][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.567214][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.567442][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.567663][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.568436][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.570707][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.570943][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.571185][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.571408][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.571640][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.574542][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.574777][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.575000][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.575230][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.575450][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.575669][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.575888][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.576111][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.576333][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.576589][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.576844][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.577069][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.577291][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.577535][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.577774][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.578009][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.578230][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.578449][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.578701][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.578938][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.579186][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.579420][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.579653][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.579887][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.581018][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.581265][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.581503][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.581742][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.581986][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.582222][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.582455][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.582687][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.582916][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.583145][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.583374][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.583610][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.583843][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.584084][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.584378][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.584613][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.584845][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.585078][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.585311][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.585545][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.585784][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.586016][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.586248][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.586599][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.586837][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.587087][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.587310][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.587550][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.587782][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.588009][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.588235][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.588462][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.588689][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.588918][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.589148][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.589385][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.589608][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.589832][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.590054][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.590275][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.590505][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.590800][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.591029][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.591251][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.591473][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.591694][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.591926][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.592157][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.592443][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.592681][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.592906][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.593131][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.593361][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.593582][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.593810][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.594037][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.594261][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.594494][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.594715][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.594938][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.595178][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.595401][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.595629][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.595857][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.596085][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.596311][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.596541][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.596771][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.597008][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.597299][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.597523][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.597751][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.599434][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.599664][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.599889][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.600115][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.600346][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.600570][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.600795][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.601029][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.601258][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.601492][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.601716][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.601943][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.602171][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.602392][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.602612][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.602842][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.603063][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.603282][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.603500][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.603722][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.603940][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.604169][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.604387][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.604604][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.604833][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.605092][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.605321][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.605551][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.605778][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.606002][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.606232][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.606533][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.606765][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.606996][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.607220][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.607442][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.607664][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.607886][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.608105][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.608323][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.608550][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.610401][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.610632][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.610857][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.611078][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.611300][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.611546][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.611766][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 106.612023][ C0] usb 2-1: hanwang_irq - urb shutting down with status: -2 [ 106.698497][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.698542][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.698576][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.698611][ T5788] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.698643][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.698676][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.698710][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.474420][ T5840] random: crng reseeded on system resumption [ 107.772909][ T5572] usb 2-1: USB disconnect, device number 2 [ 110.517522][ T5847] misc userio: Invalid payload size [ 113.015990][ T5855] random: crng reseeded on system resumption [ 113.796414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.918991][ T5862] gfs2: error -5 reading superblock [ 114.616826][ T5864] FAULT_INJECTION: forcing a failure. [ 114.616826][ T5864] name failslab, interval 1, probability 0, space 0, times 0 [ 114.616866][ T5864] CPU: 1 UID: 0 PID: 5864 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 114.616888][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.616903][ T5864] Call Trace: [ 114.616911][ T5864] [ 114.616919][ T5864] dump_stack_lvl+0xe8/0x150 [ 114.616962][ T5864] should_fail_ex+0x46b/0x600 [ 114.616994][ T5864] should_failslab+0xa8/0x100 [ 114.617016][ T5864] kmem_cache_alloc_node_noprof+0xac/0x660 [ 114.617042][ T5864] ? preload_this_cpu_lock+0x49/0xc0 [ 114.617068][ T5864] ? preload_this_cpu_lock+0x49/0xc0 [ 114.617096][ T5864] ? alloc_vmap_area+0x21c/0x1420 [ 114.617122][ T5864] preload_this_cpu_lock+0x49/0xc0 [ 114.617150][ T5864] alloc_vmap_area+0x3c3/0x1420 [ 114.617187][ T5864] ? __pfx_alloc_vmap_area+0x10/0x10 [ 114.617212][ T5864] ? __get_vm_area_node+0x155/0x2f0 [ 114.617240][ T5864] __get_vm_area_node+0x200/0x2f0 [ 114.617271][ T5864] __vmalloc_node_range_noprof+0x343/0x1540 [ 114.617296][ T5864] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 114.617351][ T5864] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 114.617383][ T5864] ? kernel_text_address+0xa5/0xe0 [ 114.617412][ T5864] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 114.617438][ T5864] __vmalloc_noprof+0xd2/0x120 [ 114.617462][ T5864] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 114.617492][ T5864] bpf_prog_alloc_no_stats+0x47/0x560 [ 114.617518][ T5864] ? bpf_prog_alloc+0x2a/0x1a0 [ 114.617548][ T5864] bpf_prog_alloc+0x3c/0x1a0 [ 114.617578][ T5864] bpf_prog_load+0x7f8/0x1c20 [ 114.617617][ T5864] ? __pfx_bpf_prog_load+0x10/0x10 [ 114.617668][ T5864] __sys_bpf+0xd0d/0xd90 [ 114.617703][ T5864] ? __pfx___sys_bpf+0x10/0x10 [ 114.617729][ T5864] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 114.617753][ T5864] ? rt_mutex_slowunlock+0x219/0x460 [ 114.617794][ T5864] ? ksys_write+0x248/0x270 [ 114.617817][ T5864] ? __pfx_ksys_write+0x10/0x10 [ 114.617844][ T5864] __x64_sys_bpf+0xba/0xd0 [ 114.617871][ T5864] do_syscall_64+0x166/0x520 [ 114.617890][ T5864] ? trace_irq_disable+0x3b/0x140 [ 114.617913][ T5864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.617933][ T5864] ? clear_bhb_loop+0x70/0xc0 [ 114.617956][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.617975][ T5864] RIP: 0033:0x7facfb1be159 [ 114.618006][ T5864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.618023][ T5864] RSP: 002b:00007facf9416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.618048][ T5864] RAX: ffffffffffffffda RBX: 00007facfb445fa0 RCX: 00007facfb1be159 [ 114.618062][ T5864] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 114.618073][ T5864] RBP: 00007facf9416090 R08: 0000000000000000 R09: 0000000000000000 [ 114.618085][ T5864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.618096][ T5864] R13: 00007facfb446038 R14: 00007facfb445fa0 R15: 00007ffc683d0098 [ 114.618127][ T5864] [ 122.527964][ T5571] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.959739][ T5892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.110501][ T5892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.626410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.656404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.666403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.676406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.686405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.696412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.706406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.716404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.786412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.138276][ T5571] usb 5-1: unable to get BOS descriptor or descriptor too short [ 126.138345][ T5571] usb 5-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 126.148569][ T5571] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 126.148604][ T5571] usb 5-1: can't read configurations, error -71 [ 132.781495][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.781585][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.566680][ T5968] program syz.3.41 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.257519][ T5991] FAULT_INJECTION: forcing a failure. [ 140.257519][ T5991] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 140.257673][ T5991] CPU: 1 UID: 0 PID: 5991 Comm: syz.3.46 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 140.257696][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.257708][ T5991] Call Trace: [ 140.257716][ T5991] [ 140.257725][ T5991] dump_stack_lvl+0xe8/0x150 [ 140.257759][ T5991] should_fail_ex+0x46b/0x600 [ 140.257792][ T5991] _copy_from_user+0x2d/0xb0 [ 140.257822][ T5991] kstrtouint_from_user+0xd6/0x180 [ 140.257849][ T5991] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 140.257872][ T5991] ? irqentry_exit+0x218/0x910 [ 140.257896][ T5991] ? irqentry_exit+0x218/0x910 [ 140.257927][ T5991] proc_fail_nth_write+0x8e/0x210 [ 140.257953][ T5991] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 140.257976][ T5991] ? preempt_schedule_thunk+0x16/0x40 [ 140.258006][ T5991] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 140.258030][ T5991] vfs_write+0x29f/0xbb0 [ 140.258064][ T5991] ? __pfx_vfs_write+0x10/0x10 [ 140.258090][ T5991] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 140.258114][ T5991] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 140.258135][ T5991] ? mutex_lock_nested+0x152/0x1d0 [ 140.258162][ T5991] ? fdget_pos+0x252/0x320 [ 140.258193][ T5991] ksys_write+0x156/0x270 [ 140.258220][ T5991] ? __pfx_ksys_write+0x10/0x10 [ 140.258255][ T5991] do_syscall_64+0x166/0x520 [ 140.258276][ T5991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.258296][ T5991] ? clear_bhb_loop+0x70/0xc0 [ 140.258320][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.258339][ T5991] RIP: 0033:0x7fc599c1e98e [ 140.258358][ T5991] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 140.258375][ T5991] RSP: 002b:00007fc597e52fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.258397][ T5991] RAX: ffffffffffffffda RBX: 00007fc597e536c0 RCX: 00007fc599c1e98e [ 140.258417][ T5991] RDX: 0000000000000001 RSI: 00007fc597e530a0 RDI: 000000000000000a [ 140.258430][ T5991] RBP: 00007fc597e53090 R08: 0000000000000000 R09: 0000000000000000 [ 140.258443][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.258455][ T5991] R13: 00007fc599ee6308 R14: 00007fc599ee6270 R15: 00007fffcedce698 [ 140.258488][ T5991] [ 141.586892][ T5995] netlink: 'syz.3.48': attribute type 8 has an invalid length. [ 148.012974][ T37] kauditd_printk_skb: 260 callbacks suppressed [ 148.012989][ T37] audit: type=1800 audit(1790639411.935:270): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.47" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 148.615814][ T6039] capability: warning: `syz.0.58' uses 32-bit capabilities (legacy support in use) [ 153.965682][ T5601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.017927][ T5601] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.037257][ T5601] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.067380][ T5601] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.075731][ T5601] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.426823][ T6076] FAULT_INJECTION: forcing a failure. [ 154.426823][ T6076] name failslab, interval 1, probability 0, space 0, times 0 [ 154.426858][ T6076] CPU: 1 UID: 0 PID: 6076 Comm: syz.1.69 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.426880][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.426892][ T6076] Call Trace: [ 154.426900][ T6076] [ 154.426909][ T6076] dump_stack_lvl+0xe8/0x150 [ 154.426942][ T6076] should_fail_ex+0x46b/0x600 [ 154.426975][ T6076] should_failslab+0xa8/0x100 [ 154.426997][ T6076] __kmalloc_cache_noprof+0xa1/0x680 [ 154.427024][ T6076] ? x509_cert_parse+0x99/0x7a0 [ 154.427042][ T6076] ? x509_cert_parse+0x99/0x7a0 [ 154.427068][ T6076] x509_cert_parse+0x99/0x7a0 [ 154.427087][ T6076] ? __pfx_down_read+0x10/0x10 [ 154.427112][ T6076] x509_key_preparse+0x64/0x6d0 [ 154.427135][ T6076] ? __pfx_smack_key_permission+0x10/0x10 [ 154.427166][ T6076] asymmetric_key_preparse+0xb9/0x1b0 [ 154.427196][ T6076] __key_create_or_update+0x3a9/0xa80 [ 154.427226][ T6076] ? __pfx___key_create_or_update+0x10/0x10 [ 154.427251][ T6076] ? lookup_user_key+0xb68/0x1150 [ 154.427291][ T6076] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 154.427320][ T6076] ? __pfx_keyring_search_iterator+0x10/0x10 [ 154.427347][ T6076] key_create_or_update+0x42/0x60 [ 154.427371][ T6076] __se_sys_add_key+0x349/0x420 [ 154.427398][ T6076] ? __pfx___se_sys_add_key+0x10/0x10 [ 154.427431][ T6076] ? __x64_sys_add_key+0x20/0xc0 [ 154.427457][ T6076] do_syscall_64+0x166/0x520 [ 154.427477][ T6076] ? trace_irq_disable+0x3b/0x140 [ 154.427501][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.427521][ T6076] ? clear_bhb_loop+0x70/0xc0 [ 154.427552][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.427571][ T6076] RIP: 0033:0x7f8def18e159 [ 154.427590][ T6076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.427606][ T6076] RSP: 002b:00007f8ded3e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 154.427628][ T6076] RAX: ffffffffffffffda RBX: 00007f8def415fa0 RCX: 00007f8def18e159 [ 154.427642][ T6076] RDX: 0000200000000b40 RSI: 0000000000000000 RDI: 0000200000000040 [ 154.427655][ T6076] RBP: 00007f8ded3e6090 R08: 0000000002106621 R09: 0000000000000000 [ 154.427668][ T6076] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000001 [ 154.427680][ T6076] R13: 00007f8def416038 R14: 00007f8def415fa0 R15: 00007fff42e36a18 [ 154.427713][ T6076] [ 154.832088][ T6079] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 154.832288][ T6079] overlayfs: missing 'lowerdir' [ 157.070824][ T5601] Bluetooth: hci5: command tx timeout [ 158.306774][ T6100] ======================================================= [ 158.306774][ T6100] WARNING: The mand mount option has been deprecated and [ 158.306774][ T6100] and is ignored by this kernel. Remove the mand [ 158.306774][ T6100] option from the mount to silence this warning. [ 158.306774][ T6100] ======================================================= [ 160.081137][ T5590] Bluetooth: hci5: command tx timeout [ 161.062134][ T6120] random: crng reseeded on system resumption [ 161.821386][ T6124] gfs2: error -5 reading superblock [ 162.139497][ T5590] Bluetooth: hci5: command tx timeout [ 163.947125][ T6133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.81'. [ 163.947170][ T6133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.81'. [ 164.220646][ T5590] Bluetooth: hci5: command tx timeout [ 168.386316][ T6154] random: crng reseeded on system resumption [ 168.910971][ T6159] gfs2: error -5 reading superblock [ 173.739374][ T37] audit: type=1326 audit(1790639438.575:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6175 comm="syz.1.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8def18e159 code=0x7ffc0000 [ 173.739424][ T37] audit: type=1326 audit(1790639438.575:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6175 comm="syz.1.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8def18e159 code=0x7ffc0000 [ 173.739463][ T37] audit: type=1326 audit(1790639438.575:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6175 comm="syz.1.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8def18e159 code=0x7ffc0000 [ 173.739502][ T37] audit: type=1326 audit(1790639438.575:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6175 comm="syz.1.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8def18e159 code=0x7ffc0000 [ 173.744182][ T37] audit: type=1326 audit(1790639438.575:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6175 comm="syz.1.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f8def18e159 code=0x7ffc0000 [ 173.744228][ T37] audit: type=1326 audit(1790639438.575:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6175 comm="syz.1.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8def18e159 code=0x7ffc0000 [ 173.744268][ T37] audit: type=1326 audit(1790639438.575:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6175 comm="syz.1.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8def18e159 code=0x7ffc0000 [ 173.808287][ T37] audit: type=1326 audit(1790639438.645:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6175 comm="syz.1.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8def18e159 code=0x7ffc0000 [ 173.808335][ T37] audit: type=1326 audit(1790639438.645:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6175 comm="syz.1.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8def18e159 code=0x7ffc0000 [ 173.808588][ T6182] Bluetooth: ISO socket layer initialized [ 173.860084][ T37] audit: type=1326 audit(1790639438.695:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6175 comm="syz.1.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8def18e159 code=0x7ffc0000 [ 173.873750][ T5866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.526526][ T5846] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 174.700017][ T5846] usb 5-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=30.00 [ 174.742444][ T5846] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.742481][ T5846] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 174.742510][ T5846] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 174.768094][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.768111][ T5846] usb 5-1: Product: syz [ 174.768119][ T5846] usb 5-1: Manufacturer: syz [ 174.768127][ T5846] usb 5-1: SerialNumber: syz [ 174.868667][ T6200] 0x000000000000-0x000000020000 : "" [ 175.539411][ T6200] ftl_cs: FTL header not found. [ 175.558720][ T5846] r8152-cfgselector 5-1: Unknown version 0x0000 [ 175.919645][ T5846] r8152 5-1:1.0: Expected endpoints are not found [ 175.932313][ T5866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.128177][ T5846] r8152-cfgselector 5-1: USB disconnect, device number 4 [ 177.851861][ T6229] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 177.852010][ T6229] overlayfs: missing 'lowerdir' [ 178.499491][ T5866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.659906][ T6233] random: crng reseeded on system resumption [ 179.055615][ T6233] gfs2: error -5 reading superblock [ 179.113293][ T6235] fuse: Bad value for 'fd' [ 180.873420][ T6246] FAULT_INJECTION: forcing a failure. [ 180.873420][ T6246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.873454][ T6246] CPU: 1 UID: 0 PID: 6246 Comm: syz.4.108 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 180.873491][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.873502][ T6246] Call Trace: [ 180.873510][ T6246] [ 180.873519][ T6246] dump_stack_lvl+0xe8/0x150 [ 180.873553][ T6246] should_fail_ex+0x46b/0x600 [ 180.873585][ T6246] _copy_to_user+0x31/0xb0 [ 180.873615][ T6246] simple_read_from_buffer+0xe1/0x170 [ 180.873643][ T6246] proc_fail_nth_read+0x1be/0x230 [ 180.873670][ T6246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.873697][ T6246] ? rw_verify_area+0x250/0x4d0 [ 180.873722][ T6246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.873746][ T6246] vfs_read+0x219/0xa90 [ 180.873777][ T6246] ? __pfx_vfs_read+0x10/0x10 [ 180.873803][ T6246] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 180.873829][ T6246] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 180.873849][ T6246] ? mutex_lock_nested+0x152/0x1d0 [ 180.873873][ T6246] ? fdget_pos+0x252/0x320 [ 180.873902][ T6246] ksys_read+0x156/0x270 [ 180.873928][ T6246] ? __pfx_ksys_read+0x10/0x10 [ 180.873963][ T6246] do_syscall_64+0x166/0x520 [ 180.873983][ T6246] ? trace_irq_disable+0x3b/0x140 [ 180.874014][ T6246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.874035][ T6246] ? clear_bhb_loop+0x70/0xc0 [ 180.874058][ T6246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.874077][ T6246] RIP: 0033:0x7f7c7b10e98e [ 180.874096][ T6246] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.874112][ T6246] RSP: 002b:00007f7c793a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.874133][ T6246] RAX: ffffffffffffffda RBX: 00007f7c793a66c0 RCX: 00007f7c7b10e98e [ 180.874148][ T6246] RDX: 000000000000000f RSI: 00007f7c793a60a0 RDI: 0000000000000005 [ 180.874161][ T6246] RBP: 00007f7c793a6090 R08: 0000000000000000 R09: 0000000000000000 [ 180.874173][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.874185][ T6246] R13: 00007f7c7b3d6038 R14: 00007f7c7b3d5fa0 R15: 00007ffc381c7118 [ 180.874218][ T6246] [ 182.743660][ T5866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.967629][ T6259] FAULT_INJECTION: forcing a failure. [ 182.967629][ T6259] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 182.967665][ T6259] CPU: 1 UID: 0 PID: 6259 Comm: syz.4.111 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 182.967687][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.967699][ T6259] Call Trace: [ 182.967707][ T6259] [ 182.967715][ T6259] dump_stack_lvl+0xe8/0x150 [ 182.967747][ T6259] should_fail_ex+0x46b/0x600 [ 182.967779][ T6259] prepare_alloc_pages+0x223/0x650 [ 182.967820][ T6259] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 182.967852][ T6259] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 182.967884][ T6259] ? __pfx_policy_nodemask+0x10/0x10 [ 182.967905][ T6259] ? reacquire_held_locks+0x117/0x1a0 [ 182.967931][ T6259] ? rt_spin_lock+0x1e2/0x400 [ 182.967961][ T6259] alloc_pages_mpol+0xd4/0x280 [ 182.967985][ T6259] alloc_pages_noprof+0xd2/0x2f0 [ 182.968008][ T6259] __pmd_alloc+0x3a/0x5e0 [ 182.968037][ T6259] handle_mm_fault+0x2198/0x28c0 [ 182.968067][ T6259] ? handle_mm_fault+0xeb/0x28c0 [ 182.968100][ T6259] ? __pfx_handle_mm_fault+0x10/0x10 [ 182.968138][ T6259] ? __lock_acquire+0x747/0x2de0 [ 182.968167][ T6259] ? lock_mm_and_find_vma+0xa7/0x340 [ 182.968201][ T6259] do_user_addr_fault+0x746/0x1340 [ 182.968238][ T6259] exc_page_fault+0x6a/0xc0 [ 182.968259][ T6259] asm_exc_page_fault+0x26/0x30 [ 182.968279][ T6259] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 182.968305][ T6259] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 182.968321][ T6259] RSP: 0018:ffffc90006f2fd58 EFLAGS: 00050216 [ 182.968340][ T6259] RAX: 00007ffffffff001 RBX: 0000000000000030 RCX: 0000000000000030 [ 182.968354][ T6259] RDX: 0000000000000001 RSI: 00002000000007c0 RDI: ffffc90006f2fe30 [ 182.968368][ T6259] RBP: ffffc90006f2fee0 R08: ffffc90006f2fe5f R09: 1ffff92000de5fcb [ 182.968382][ T6259] R10: dffffc0000000000 R11: fffff52000de5fcc R12: 000000000000003a [ 182.968396][ T6259] R13: ffffc90006f2fe30 R14: ffffc90006f2fe30 R15: 00002000000007c0 [ 182.968428][ T6259] _copy_from_user+0x7a/0xb0 [ 182.968458][ T6259] __se_sys_rt_tgsigqueueinfo+0xdf/0x510 [ 182.968482][ T6259] ? __pfx___se_sys_rt_tgsigqueueinfo+0x10/0x10 [ 182.968506][ T6259] ? fput+0xa0/0xd0 [ 182.968525][ T6259] ? ksys_write+0x248/0x270 [ 182.968565][ T6259] do_syscall_64+0x166/0x520 [ 182.968585][ T6259] ? trace_irq_disable+0x3b/0x140 [ 182.968610][ T6259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.968629][ T6259] ? clear_bhb_loop+0x70/0xc0 [ 182.968652][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.968671][ T6259] RIP: 0033:0x7f7c7b14e159 [ 182.968689][ T6259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.968705][ T6259] RSP: 002b:00007f7c793a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 182.968725][ T6259] RAX: ffffffffffffffda RBX: 00007f7c7b3d5fa0 RCX: 00007f7c7b14e159 [ 182.968738][ T6259] RDX: 000000000000003a RSI: 0000000000000058 RDI: 0000000000000057 [ 182.968751][ T6259] RBP: 00007f7c793a6090 R08: 0000000000000000 R09: 0000000000000000 [ 182.968763][ T6259] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 182.968776][ T6259] R13: 00007f7c7b3d6038 R14: 00007f7c7b3d5fa0 R15: 00007ffc381c7118 [ 182.968814][ T6259] [ 183.568358][ T5846] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 183.717418][ T5846] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.00 [ 183.717479][ T5846] usb 5-1: too many configurations: 16, using maximum allowed: 8 [ 183.787649][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.787679][ T5846] usb 5-1: Product: syz [ 183.787694][ T5846] usb 5-1: Manufacturer: syz [ 183.787709][ T5846] usb 5-1: SerialNumber: syz [ 184.321003][ T6261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.323933][ T6261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.893018][ T5846] ath6kl: Failed to submit usb control message: -110 [ 185.893074][ T5846] ath6kl: unable to send the bmi data to the device: -110 [ 185.893090][ T5846] ath6kl: Unable to send get target info: -110 [ 185.957224][ T5846] ath6kl: Failed to init ath6kl core: -110 [ 185.976871][ T5846] ath6kl_usb 5-1:1.0: probe with driver ath6kl_usb failed with error -110 [ 186.158097][ T5898] usb 5-1: USB disconnect, device number 5 [ 186.500088][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.500297][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.500496][ T6070] bridge_slave_0: entered allmulticast mode [ 186.504064][ T6070] bridge_slave_0: entered promiscuous mode [ 186.594726][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.594874][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.595041][ T6070] bridge_slave_1: entered allmulticast mode [ 186.626471][ T6070] bridge_slave_1: entered promiscuous mode [ 186.921764][ T6070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.010460][ T6070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.264709][ T6293] random: crng reseeded on system resumption [ 187.993252][ T6295] gfs2: error -5 reading superblock [ 190.120180][ T5866] bridge_slave_1: left allmulticast mode [ 190.120295][ T5866] bridge_slave_1: left promiscuous mode [ 190.662437][ T6299] FAULT_INJECTION: forcing a failure. [ 190.662437][ T6299] name failslab, interval 1, probability 0, space 0, times 0 [ 190.662492][ T6299] CPU: 0 UID: 0 PID: 6299 Comm: syz.0.120 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 190.662516][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.662527][ T6299] Call Trace: [ 190.662536][ T6299] [ 190.662544][ T6299] dump_stack_lvl+0xe8/0x150 [ 190.662569][ T6299] should_fail_ex+0x46b/0x600 [ 190.662588][ T6299] should_failslab+0xa8/0x100 [ 190.662599][ T6299] __kmalloc_cache_node_noprof+0xac/0x670 [ 190.662616][ T6299] ? __get_vm_area_node+0x155/0x2f0 [ 190.662628][ T6299] ? __get_vm_area_node+0x155/0x2f0 [ 190.662644][ T6299] __get_vm_area_node+0x155/0x2f0 [ 190.662660][ T6299] __vmalloc_node_range_noprof+0x343/0x1540 [ 190.662674][ T6299] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 190.662697][ T6299] ? __pfx___schedule+0x10/0x10 [ 190.662721][ T6299] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.662735][ T6299] ? irqentry_exit+0x218/0x910 [ 190.662747][ T6299] ? irqentry_exit+0x218/0x910 [ 190.662758][ T6299] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 190.662773][ T6299] __vmalloc_noprof+0xd2/0x120 [ 190.662786][ T6299] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 190.662803][ T6299] bpf_prog_alloc_no_stats+0x47/0x560 [ 190.662819][ T6299] ? bpf_prog_alloc+0x2a/0x1a0 [ 190.662835][ T6299] bpf_prog_alloc+0x3c/0x1a0 [ 190.662852][ T6299] bpf_prog_load+0x7f8/0x1c20 [ 190.662874][ T6299] ? __pfx_bpf_prog_load+0x10/0x10 [ 190.662902][ T6299] __sys_bpf+0xd0d/0xd90 [ 190.662921][ T6299] ? __pfx___sys_bpf+0x10/0x10 [ 190.662958][ T6299] __x64_sys_bpf+0xba/0xd0 [ 190.662973][ T6299] do_syscall_64+0x166/0x520 [ 190.662984][ T6299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.662995][ T6299] ? clear_bhb_loop+0x70/0xc0 [ 190.663008][ T6299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.663019][ T6299] RIP: 0033:0x7facfb1be159 [ 190.663030][ T6299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.663039][ T6299] RSP: 002b:00007facf93f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 190.663051][ T6299] RAX: ffffffffffffffda RBX: 00007facfb446090 RCX: 00007facfb1be159 [ 190.663072][ T6299] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 190.663080][ T6299] RBP: 00007facf93f5090 R08: 0000000000000000 R09: 0000000000000000 [ 190.663086][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.663093][ T6299] R13: 00007facfb446128 R14: 00007facfb446090 R15: 00007ffc683d0098 [ 190.663109][ T6299] [ 190.663295][ T6299] syz.0.120: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 190.663792][ T6299] CPU: 0 UID: 0 PID: 6299 Comm: syz.0.120 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 190.663816][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.663826][ T6299] Call Trace: [ 190.663834][ T6299] [ 190.663841][ T6299] dump_stack_lvl+0xe8/0x150 [ 190.663870][ T6299] warn_alloc+0x24d/0x270 [ 190.663886][ T6299] ? __kasan_kmalloc+0x22/0xb0 [ 190.663904][ T6299] ? __pfx_warn_alloc+0x10/0x10 [ 190.663918][ T6299] ? __get_vm_area_node+0x155/0x2f0 [ 190.663934][ T6299] ? __get_vm_area_node+0x2a9/0x2f0 [ 190.663951][ T6299] __vmalloc_node_range_noprof+0x36b/0x1540 [ 190.663971][ T6299] ? __pfx___schedule+0x10/0x10 [ 190.663993][ T6299] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.664007][ T6299] ? irqentry_exit+0x218/0x910 [ 190.664019][ T6299] ? irqentry_exit+0x218/0x910 [ 190.664030][ T6299] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 190.664045][ T6299] __vmalloc_noprof+0xd2/0x120 [ 190.664064][ T6299] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 190.664082][ T6299] bpf_prog_alloc_no_stats+0x47/0x560 [ 190.664097][ T6299] ? bpf_prog_alloc+0x2a/0x1a0 [ 190.664113][ T6299] bpf_prog_alloc+0x3c/0x1a0 [ 190.664130][ T6299] bpf_prog_load+0x7f8/0x1c20 [ 190.664151][ T6299] ? __pfx_bpf_prog_load+0x10/0x10 [ 190.664179][ T6299] __sys_bpf+0xd0d/0xd90 [ 190.664198][ T6299] ? __pfx___sys_bpf+0x10/0x10 [ 190.664234][ T6299] __x64_sys_bpf+0xba/0xd0 [ 190.664250][ T6299] do_syscall_64+0x166/0x520 [ 190.664261][ T6299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.664272][ T6299] ? clear_bhb_loop+0x70/0xc0 [ 190.664284][ T6299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.664295][ T6299] RIP: 0033:0x7facfb1be159 [ 190.664305][ T6299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.664314][ T6299] RSP: 002b:00007facf93f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 190.664324][ T6299] RAX: ffffffffffffffda RBX: 00007facfb446090 RCX: 00007facfb1be159 [ 190.664332][ T6299] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 190.664339][ T6299] RBP: 00007facf93f5090 R08: 0000000000000000 R09: 0000000000000000 [ 190.664345][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.664351][ T6299] R13: 00007facfb446128 R14: 00007facfb446090 R15: 00007ffc683d0098 [ 190.664367][ T6299] [ 190.664395][ T6299] Mem-Info: [ 190.664404][ T6299] active_anon:182 inactive_anon:21825 isolated_anon:0 [ 190.664404][ T6299] active_file:22384 inactive_file:37688 isolated_file:0 [ 190.664404][ T6299] unevictable:0 dirty:106 writeback:0 [ 190.664404][ T6299] slab_reclaimable:11730 slab_unreclaimable:100981 [ 190.664404][ T6299] mapped:39570 shmem:17154 pagetables:1142 [ 190.664404][ T6299] sec_pagetables:0 bounce:0 [ 190.664404][ T6299] kernel_misc_reclaimable:0 [ 190.664404][ T6299] free:1289402 free_pcp:11297 free_cma:0 [ 190.664482][ T6299] Node 0 active_anon:728kB inactive_anon:87300kB active_file:89328kB inactive_file:150752kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158280kB dirty:424kB writeback:0kB shmem:68616kB kernel_stack:13032kB pagetables:4416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 190.664552][ T6299] Node 1 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 190.664618][ T6299] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.664749][ T6299] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 190.664874][ T6299] Node 0 DMA32 free:1205252kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:728kB inactive_anon:87296kB active_file:89328kB inactive_file:150752kB unevictable:0kB writepending:420kB zspages:0kB present:3129332kB managed:2559032kB mlocked:0kB bounce:0kB free_pcp:45180kB local_pcp:17176kB free_cma:0kB [ 190.664975][ T6299] lowmem_reserve[]: 0 0 1 1 1 [ 190.665077][ T6299] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1808kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 190.665173][ T6299] lowmem_reserve[]: 0 0 0 0 0 [ 190.665270][ T6299] Node 1 Normal free:3936996kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.665367][ T6299] lowmem_reserve[]: 0 0 0 0 0 [ 190.665465][ T6299] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 190.666192][ T6299] Node 0 DMA32: 911*4kB (UM) 1246*8kB (UM) 514*16kB (UME) 113*32kB (UM) 82*64kB (UM) 169*128kB (UME) 52*256kB (UM) 20*512kB (UME) 11*1024kB (UM) 6*2048kB (UM) 270*4096kB (UM) = 1205356kB [ 190.666854][ T6299] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 190.667306][ T6299] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 7*16kB (UM) 9*32kB (UM) 5*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 0*2048kB 960*4096kB (M) = 3936996kB [ 190.668086][ T6299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.668123][ T6299] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 190.668159][ T6299] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.668195][ T6299] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 190.668231][ T6299] 77224 total pagecache pages [ 190.668266][ T6299] 0 pages in swap cache [ 190.668292][ T6299] Free swap = 124996kB [ 190.668322][ T6299] Total swap = 124996kB [ 190.668352][ T6299] 2097051 pages RAM [ 190.668381][ T6299] 0 pages HighMem/MovableOnly [ 190.668410][ T6299] 425225 pages reserved [ 190.668440][ T6299] 0 pages cma reserved [ 193.465326][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.971321][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.971397][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.271534][ T5866] bridge_slave_0: left allmulticast mode [ 195.271570][ T5866] bridge_slave_0: left promiscuous mode [ 195.271809][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.592945][ T6316] loop8: detected capacity change from 0 to 1 [ 195.709343][ T6316] Dev loop8: unable to read RDB block 1 [ 195.709391][ T6316] loop8: unable to read partition table [ 195.709612][ T6316] loop8: partition table beyond EOD, truncated [ 195.709648][ T6316] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 195.899365][ T6320] netlink: 36 bytes leftover after parsing attributes in process `syz.0.121'. [ 196.381005][ T6324] fuse: Unknown parameter 'user_id00000000000000000000' [ 196.492654][ T6327] FAULT_INJECTION: forcing a failure. [ 196.492654][ T6327] name fail_futex, interval 1, probability 0, space 0, times 1 [ 196.492691][ T6327] CPU: 1 UID: 0 PID: 6327 Comm: syz.1.123 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 196.492715][ T6327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.492728][ T6327] Call Trace: [ 196.492736][ T6327] [ 196.492743][ T6327] dump_stack_lvl+0xe8/0x150 [ 196.492779][ T6327] should_fail_ex+0x46b/0x600 [ 196.492811][ T6327] get_futex_key+0x1b4/0x1580 [ 196.492842][ T6327] ? __lock_acquire+0x747/0x2de0 [ 196.492873][ T6327] ? kasan_save_track+0x3e/0x80 [ 196.492901][ T6327] ? __kasan_slab_free+0x5c/0x80 [ 196.492928][ T6327] ? kmem_cache_free+0x187/0x6d0 [ 196.492960][ T6327] ? __pfx_get_futex_key+0x10/0x10 [ 196.493000][ T6327] futex_wake+0x119/0x600 [ 196.493027][ T6327] ? __pfx_futex_wake+0x10/0x10 [ 196.493065][ T6327] do_futex+0x458/0x4e0 [ 196.493089][ T6327] ? __pfx_do_futex+0x10/0x10 [ 196.493108][ T6327] ? kmem_cache_free+0x187/0x6d0 [ 196.493135][ T6327] ? do_sys_openat2+0x14e/0x200 [ 196.493161][ T6327] __se_sys_futex+0x3a8/0x450 [ 196.493183][ T6327] ? exc_page_fault+0x6a/0xc0 [ 196.493208][ T6327] ? __pfx___se_sys_futex+0x10/0x10 [ 196.493236][ T6327] ? __x64_sys_futex+0x21/0xf0 [ 196.493261][ T6327] do_syscall_64+0x166/0x520 [ 196.493282][ T6327] ? trace_irq_disable+0x3b/0x140 [ 196.493308][ T6327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.493330][ T6327] ? clear_bhb_loop+0x70/0xc0 [ 196.493354][ T6327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.493376][ T6327] RIP: 0033:0x7f8def18e159 [ 196.493396][ T6327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.493415][ T6327] RSP: 002b:00007f8ded3a40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 196.493437][ T6327] RAX: ffffffffffffffda RBX: 00007f8def416188 RCX: 00007f8def18e159 [ 196.493453][ T6327] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8def41618c [ 196.493467][ T6327] RBP: 00007f8def416180 R08: 3fffffffffffffff R09: 0000000000000000 [ 196.493483][ T6327] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 196.493496][ T6327] R13: 00007f8def416218 R14: 00007fff42e36930 R15: 00007fff42e36a18 [ 196.493537][ T6327] [ 197.077002][ T5866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.157983][ T5866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.218764][ T5866] bond0 (unregistering): Released all slaves [ 199.357948][ T6070] team0: Port device team_slave_0 added [ 199.393921][ T6070] team0: Port device team_slave_1 added [ 199.701951][ T6342] random: crng reseeded on system resumption [ 199.902577][ T6070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.902644][ T6070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.902687][ T6070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.054750][ T6346] gfs2: error -5 reading superblock [ 202.558089][ T6070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.558108][ T6070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.558135][ T6070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.243903][ T37] kauditd_printk_skb: 121 callbacks suppressed [ 206.243923][ T37] audit: type=1800 audit(1790639471.075:402): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.137" name=02 dev="sda1" ino=2049 res=0 errno=0 [ 206.316280][ T6385] Zero length message leads to an empty skb [ 206.337672][ T5244] 8021q: adding VLAN 0 to HW filter on device eth1 [ 206.550006][ T5591] Bluetooth: hci3: command 0x0406 tx timeout [ 206.550142][ T5591] Bluetooth: hci1: command 0x0406 tx timeout [ 206.550168][ T5591] Bluetooth: hci4: command 0x0406 tx timeout [ 206.550275][ T5591] Bluetooth: hci2: command 0x0406 tx timeout [ 206.784756][ T6070] hsr_slave_0: entered promiscuous mode [ 206.786010][ T6070] hsr_slave_1: entered promiscuous mode [ 206.835565][ T6399] capability: warning: `syz.1.140' uses deprecated v2 capabilities in a way that may be insecure [ 206.888463][ T6070] debugfs: 'hsr0' already exists in 'hsr' [ 206.888492][ T6070] Cannot create hsr debugfs directory [ 208.556477][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 208.936450][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 208.937265][ T10] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 208.940344][ T10] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 208.940370][ T10] usb 2-1: config 0 has no interface number 0 [ 208.940418][ T10] usb 2-1: config 0 interface 12 has no altsetting 0 [ 208.942871][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.942896][ T10] usb 2-1: Product: syz [ 208.942911][ T10] usb 2-1: Manufacturer: syz [ 208.942926][ T10] usb 2-1: SerialNumber: syz [ 208.980630][ T6423] syzkaller1: tun_chr_ioctl cmd 35108 [ 208.981241][ T6423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.146'. [ 209.056152][ T10] usb 2-1: config 0 descriptor?? [ 209.759632][ T10] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 209.759690][ T10] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 209.759708][ T10] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 209.759811][ T10] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 209.852680][ T10] usb 2-1: USB disconnect, device number 3 [ 209.987830][ T5866] hsr_slave_0: left promiscuous mode [ 210.028851][ T5866] hsr_slave_1: left promiscuous mode [ 210.034159][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.034347][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.093260][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.093288][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.225686][ T5866] veth1_macvtap: left promiscuous mode [ 210.225952][ T5866] veth0_macvtap: left promiscuous mode [ 210.226244][ T5866] veth1_vlan: left promiscuous mode [ 210.247510][ T5866] veth0_vlan: left promiscuous mode [ 210.625296][ T6452] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 211.060031][ T5590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.064792][ T5590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.066513][ T5590] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.076290][ T5590] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.108254][ T5590] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.147991][ T5705] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 211.418431][ T5705] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 211.422075][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 211.422109][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.422147][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.504043][ T5705] usb 5-1: config 0 descriptor?? [ 213.336520][ T4898] Bluetooth: hci0: command tx timeout [ 214.061359][ T6472] netlink: 84 bytes leftover after parsing attributes in process `syz.1.152'. [ 214.679962][ T5705] usbhid 5-1:0.0: can't add hid device: -71 [ 214.680093][ T5705] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 214.777676][ T5705] usb 5-1: USB disconnect, device number 6 [ 216.357927][ T4898] Bluetooth: hci0: command tx timeout [ 216.371844][ T5866] team0 (unregistering): Port device team_slave_1 removed [ 216.429800][ T5866] team0 (unregistering): Port device team_slave_0 removed [ 218.366483][ T4898] Bluetooth: hci0: command tx timeout [ 218.393326][ T5244] 8021q: adding VLAN 0 to HW filter on device eth2 [ 219.092500][ T6495] gfs2: error -5 reading superblock [ 220.456506][ T4898] Bluetooth: hci0: command tx timeout [ 221.864946][ T6502] netlink: 32 bytes leftover after parsing attributes in process `syz.4.155'. [ 221.864974][ T6502] netlink: 32 bytes leftover after parsing attributes in process `syz.4.155'. [ 222.576030][ T6507] gfs2: error -5 reading superblock [ 225.412889][ T5898] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 225.546464][ T5898] usb 5-1: device descriptor read/64, error -71 [ 226.410658][ T5898] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 226.860685][ T5898] usb 5-1: device descriptor read/64, error -71 [ 227.053570][ T5898] usb usb5-port1: attempt power cycle [ 230.318095][ T5244] 8021q: adding VLAN 0 to HW filter on device eth3 [ 230.425827][ T6542] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 230.425893][ T6542] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 231.818373][ T5866] bridge_slave_1: left allmulticast mode [ 231.818409][ T5866] bridge_slave_1: left promiscuous mode [ 231.819099][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.035634][ T6558] gfs2: error -5 reading superblock [ 232.053668][ T5866] bridge_slave_0: left allmulticast mode [ 232.053942][ T5866] bridge_slave_0: left promiscuous mode [ 232.055051][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.396839][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 235.519456][ T6573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.173'. [ 235.519474][ T6573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.173'. [ 235.566488][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 235.568676][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=051c, bcdDevice= 0.40 [ 235.570015][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.570048][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.570086][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.620524][ T10] usb 4-1: config 0 descriptor?? [ 235.663355][ T10] hub 4-1:0.0: USB hub found [ 235.713429][ T5866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.787252][ T5866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.850100][ T5866] bond0 (unregistering): Released all slaves [ 236.217854][ T10] hub 4-1:0.0: 5 ports detected [ 236.318965][ T10] hub 4-1:0.0: insufficient power available to use all downstream ports [ 236.498185][ T10] hub 4-1:0.0: config failed, can't get hub status (err -5) [ 236.630917][ T6584] syz.0.176 (6584) used greatest stack depth: 18560 bytes left [ 236.646567][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 236.767723][ T6580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.794330][ T6580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.805459][ T31] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 236.818803][ T31] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 236.818829][ T31] usb 5-1: config 0 has no interface number 0 [ 236.818876][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.868377][ T31] usb 5-1: config 0 descriptor?? [ 236.882500][ T31] cp210x 5-1:0.32: cp210x converter detected [ 237.290923][ T31] cp210x 5-1:0.32: failed to get vendor val 0x000e size 3: -32 [ 237.500481][ T31] cp210x 5-1:0.32: GPIO initialisation failed: -19 [ 237.604334][ T31] usb 5-1: cp210x converter now attached to ttyUSB0 [ 237.604818][ T5866] hsr_slave_0: left promiscuous mode [ 237.685961][ T5866] hsr_slave_1: left promiscuous mode [ 237.697653][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.771588][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.772043][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.772839][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.942833][ T10] hid-generic 0003:046D:051C.0001: hidraw0: USB HID v8.00 Device [HID 046d:051c] on usb-dummy_hcd.3-1/input0 [ 238.692867][ T5866] team0 (unregistering): Port device team_slave_1 removed [ 238.776018][ T10] usb 4-1: USB disconnect, device number 2 [ 240.093338][ T5866] team0 (unregistering): Port device team_slave_0 removed [ 240.169108][ T31] usb 5-1: USB disconnect, device number 10 [ 240.624207][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 240.694010][ T31] cp210x 5-1:0.32: device disconnected [ 240.994779][ T6642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.186'. [ 240.994807][ T6642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.186'. [ 241.992333][ T5244] 8021q: adding VLAN 0 to HW filter on device eth4 [ 242.517142][ T6653] FAULT_INJECTION: forcing a failure. [ 242.517142][ T6653] name failslab, interval 1, probability 0, space 0, times 0 [ 242.517176][ T6653] CPU: 0 UID: 0 PID: 6653 Comm: syz.4.190 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 242.517199][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.517224][ T6653] Call Trace: [ 242.517232][ T6653] [ 242.517240][ T6653] dump_stack_lvl+0xe8/0x150 [ 242.517273][ T6653] should_fail_ex+0x46b/0x600 [ 242.517303][ T6653] should_failslab+0xa8/0x100 [ 242.517324][ T6653] __kmalloc_noprof+0xfb/0x790 [ 242.517351][ T6653] ? tomoyo_encode+0x2ad/0x570 [ 242.517378][ T6653] ? tomoyo_encode+0x2ad/0x570 [ 242.517411][ T6653] tomoyo_encode+0x2ad/0x570 [ 242.517442][ T6653] tomoyo_realpath_from_path+0x5fa/0x640 [ 242.517479][ T6653] ? tomoyo_path_number_perm+0x219/0x5f0 [ 242.517503][ T6653] tomoyo_path_number_perm+0x246/0x5f0 [ 242.517529][ T6653] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 242.517552][ T6653] ? __lock_acquire+0x747/0x2de0 [ 242.517590][ T6653] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 242.517609][ T6653] ? hook_file_ioctl+0x1f5/0x610 [ 242.517647][ T6653] ? __fget_files+0x2a/0x420 [ 242.517689][ T6653] ? __fget_files+0x2a/0x420 [ 242.517709][ T6653] ? __fget_files+0x3a8/0x420 [ 242.517727][ T6653] ? __fget_files+0x2a/0x420 [ 242.517753][ T6653] security_file_ioctl+0xc3/0x2a0 [ 242.517781][ T6653] __se_sys_ioctl+0x47/0x170 [ 242.517811][ T6653] do_syscall_64+0x166/0x520 [ 242.517829][ T6653] ? trace_irq_disable+0x3b/0x140 [ 242.517853][ T6653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.517872][ T6653] ? clear_bhb_loop+0x70/0xc0 [ 242.517894][ T6653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.517913][ T6653] RIP: 0033:0x7f7c7b14e159 [ 242.517931][ T6653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.517947][ T6653] RSP: 002b:00007f7c793a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.517967][ T6653] RAX: ffffffffffffffda RBX: 00007f7c7b3d5fa0 RCX: 00007f7c7b14e159 [ 242.517980][ T6653] RDX: 0000200000000280 RSI: 0000000000008982 RDI: 0000000000000003 [ 242.517991][ T6653] RBP: 00007f7c793a6090 R08: 0000000000000000 R09: 0000000000000000 [ 242.518003][ T6653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.518013][ T6653] R13: 00007f7c7b3d6038 R14: 00007f7c7b3d5fa0 R15: 00007ffc381c7118 [ 242.518042][ T6653] [ 242.539598][ T6653] ERROR: Out of memory at tomoyo_realpath_from_path. [ 243.493195][ T6461] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.493383][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.493524][ T6461] bridge_slave_0: entered allmulticast mode [ 243.498614][ T6461] bridge_slave_0: entered promiscuous mode [ 243.501879][ T6461] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.502084][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.542327][ T6461] bridge_slave_1: entered allmulticast mode [ 243.551572][ T6461] bridge_slave_1: entered promiscuous mode [ 244.187282][ T6680] netlink: 16 bytes leftover after parsing attributes in process `syz.0.196'. [ 244.187310][ T6680] netlink: 16 bytes leftover after parsing attributes in process `syz.0.196'. [ 245.055244][ T6461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.073142][ T6461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.395461][ T6696] Bluetooth: MGMT ver 1.23 [ 246.899880][ T6694] FAULT_INJECTION: forcing a failure. [ 246.899880][ T6694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.899904][ T6694] CPU: 1 UID: 0 PID: 6694 Comm: syz.1.198 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 246.899917][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.899924][ T6694] Call Trace: [ 246.899929][ T6694] [ 246.899934][ T6694] dump_stack_lvl+0xe8/0x150 [ 246.899955][ T6694] should_fail_ex+0x46b/0x600 [ 246.899976][ T6694] fpu__restore_sig+0x209/0x11f0 [ 246.899997][ T6694] ? __pfx_fpu__restore_sig+0x10/0x10 [ 246.900027][ T6694] __ia32_sys_rt_sigreturn+0x756/0x8c0 [ 246.900048][ T6694] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 246.900078][ T6694] ? rcu_is_watching+0x16/0xb0 [ 246.900100][ T6694] do_syscall_64+0x166/0x520 [ 246.900112][ T6694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.900123][ T6694] ? clear_bhb_loop+0x70/0xc0 [ 246.900136][ T6694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.900146][ T6694] RIP: 0033:0x7f8def18e157 [ 246.900158][ T6694] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 246.900167][ T6694] RSP: 002b:00007f8ded3e6028 EFLAGS: 00000246 [ 246.900184][ T6694] RAX: 000000000000002d RBX: 00007f8def415fa0 RCX: 00007f8def18e159 [ 246.900192][ T6694] RDX: fffffffffffffdab RSI: 0000200000002800 RDI: 0000000000000003 [ 246.900199][ T6694] RBP: 00007f8ded3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 246.900206][ T6694] R10: 0000000000000017 R11: 0000000000000246 R12: 0000000000000001 [ 246.900212][ T6694] R13: 00007f8def416038 R14: 00007f8def415fa0 R15: 00007fff42e36a18 [ 246.900228][ T6694] [ 246.981628][ T6461] team0: Port device team_slave_0 added [ 247.211239][ T6461] team0: Port device team_slave_1 added [ 247.706300][ T6706] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 247.708014][ T6706] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 248.914787][ T6714] Invalid ELF header type: 3 != 1 [ 248.979862][ T6461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.979880][ T6461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.979907][ T6461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.002165][ T6461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.002183][ T6461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.002207][ T6461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.348232][ T6461] hsr_slave_0: entered promiscuous mode [ 249.349507][ T6461] hsr_slave_1: entered promiscuous mode [ 249.352372][ T6461] debugfs: 'hsr0' already exists in 'hsr' [ 249.352398][ T6461] Cannot create hsr debugfs directory [ 249.683326][ T6723] FAULT_INJECTION: forcing a failure. [ 249.683326][ T6723] name failslab, interval 1, probability 0, space 0, times 0 [ 249.683365][ T6723] CPU: 1 UID: 0 PID: 6723 Comm: syz.4.205 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 249.683387][ T6723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.683399][ T6723] Call Trace: [ 249.683406][ T6723] [ 249.683415][ T6723] dump_stack_lvl+0xe8/0x150 [ 249.683447][ T6723] should_fail_ex+0x46b/0x600 [ 249.683481][ T6723] should_failslab+0xa8/0x100 [ 249.683503][ T6723] __kmalloc_noprof+0xfb/0x790 [ 249.683530][ T6723] ? tomoyo_encode+0x2ad/0x570 [ 249.683558][ T6723] ? tomoyo_encode+0x2ad/0x570 [ 249.683593][ T6723] tomoyo_encode+0x2ad/0x570 [ 249.683628][ T6723] tomoyo_realpath_from_path+0x5fa/0x640 [ 249.683666][ T6723] ? tomoyo_path_number_perm+0x219/0x5f0 [ 249.683691][ T6723] tomoyo_path_number_perm+0x246/0x5f0 [ 249.683720][ T6723] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 249.683743][ T6723] ? __lock_acquire+0x747/0x2de0 [ 249.683780][ T6723] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 249.683800][ T6723] ? hook_file_ioctl+0x1f5/0x610 [ 249.683842][ T6723] ? __fget_files+0x2a/0x420 [ 249.683866][ T6723] ? __fget_files+0x2a/0x420 [ 249.683887][ T6723] ? __fget_files+0x3a8/0x420 [ 249.683913][ T6723] ? __fget_files+0x2a/0x420 [ 249.683939][ T6723] security_file_ioctl+0xc3/0x2a0 [ 249.683968][ T6723] __se_sys_ioctl+0x47/0x170 [ 249.683997][ T6723] do_syscall_64+0x166/0x520 [ 249.684017][ T6723] ? trace_irq_disable+0x3b/0x140 [ 249.684041][ T6723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.684061][ T6723] ? clear_bhb_loop+0x70/0xc0 [ 249.684085][ T6723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.684107][ T6723] RIP: 0033:0x7f7c7b14e159 [ 249.684125][ T6723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.684142][ T6723] RSP: 002b:00007f7c793a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.684164][ T6723] RAX: ffffffffffffffda RBX: 00007f7c7b3d5fa0 RCX: 00007f7c7b14e159 [ 249.684178][ T6723] RDX: 0000200000000980 RSI: 00000000000089f1 RDI: 0000000000000003 [ 249.684192][ T6723] RBP: 00007f7c793a6090 R08: 0000000000000000 R09: 0000000000000000 [ 249.684204][ T6723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.684216][ T6723] R13: 00007f7c7b3d6038 R14: 00007f7c7b3d5fa0 R15: 00007ffc381c7118 [ 249.684248][ T6723] [ 249.756432][ T6723] ERROR: Out of memory at tomoyo_realpath_from_path. [ 250.331581][ T6729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.206'. [ 250.528170][ T6735] jffs2: notice: (6735) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 254.398499][ T6756] netlink: 72 bytes leftover after parsing attributes in process `syz.0.212'. [ 255.654193][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.654263][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.475263][ T6461] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 256.658554][ T6461] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 256.660607][ T6461] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 256.870500][ T6461] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 256.889516][ T6461] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 257.023529][ T6461] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 257.053583][ T6461] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 257.115899][ T6461] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 257.293315][ T6796] random: crng reseeded on system resumption [ 257.315554][ T6796] gfs2: error -5 reading superblock [ 259.809318][ T6461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.180082][ T6830] random: crng reseeded on system resumption [ 260.266299][ T6833] gfs2: error -5 reading superblock [ 262.402336][ T6461] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.468977][ T1610] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.470398][ T1610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.542130][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.542357][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.093945][ T6848] netlink: 'syz.1.226': attribute type 2 has an invalid length. [ 263.095837][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'. [ 265.260361][ T6902] ALSA: seq fatal error: cannot create timer (-22) [ 265.274597][ T6902] netlink: 22 bytes leftover after parsing attributes in process `syz.0.236'. [ 265.426437][ T5705] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 265.623157][ T5705] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 265.626207][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 265.626239][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.626276][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.637647][ T6461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.704123][ T5705] usb 5-1: config 0 descriptor?? [ 265.751344][ T6914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.237'. [ 265.751394][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 266.504583][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 267.327671][ T5590] Bluetooth: hci0: command 0x0405 tx timeout [ 268.869992][ T6923] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.162861][ T5705] usbhid 5-1:0.0: can't add hid device: -71 [ 269.162985][ T5705] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 269.302980][ T5705] usb 5-1: USB disconnect, device number 11 [ 274.188832][ T4898] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.253222][ T4898] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.255192][ T4898] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.271380][ T4898] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.272600][ T4898] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.446436][ T5590] Bluetooth: hci5: command tx timeout [ 277.193394][ T37] audit: type=1800 audit(1790639541.825:403): pid=7011 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.253" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 279.108327][ T5590] Bluetooth: hci5: command tx timeout [ 279.117896][ T37] audit: type=1800 audit(1790639543.155:404): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.254" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 279.745313][ T7022] netlink: 'syz.0.255': attribute type 8 has an invalid length. [ 279.932621][ T7029] binder: BINDER_SET_CONTEXT_MGR already set [ 279.932639][ T7029] binder: 7026:7029 ioctl 4018620d 2000000002c0 returned -16 [ 280.749335][ T7037] gfs2: error -5 reading superblock [ 281.171142][ T5590] Bluetooth: hci5: command tx timeout [ 283.248160][ T5590] Bluetooth: hci5: command tx timeout [ 284.286679][ T5718] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 284.457080][ T5718] usb 1-1: Using ep0 maxpacket: 8 [ 284.461852][ T5718] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 284.463910][ T5718] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 284.463942][ T5718] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 284.463968][ T5718] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 284.463989][ T5718] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.464028][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.565664][ T7051] nvme nvme0: rdma connection establishment failed (-104) [ 284.985893][ T5718] usb 1-1: GET_CAPABILITIES returned 0 [ 284.985923][ T5718] usbtmc 1-1:16.0: can't read capabilities [ 287.982234][ T5897] usb 1-1: USB disconnect, device number 2 [ 288.156530][ T7075] netlink: 'syz.0.268': attribute type 8 has an invalid length. [ 291.226531][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.226997][ T6984] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.230455][ T6984] bridge_slave_0: entered allmulticast mode [ 291.262176][ T6984] bridge_slave_0: entered promiscuous mode [ 291.351401][ T6984] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.351544][ T6984] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.351707][ T6984] bridge_slave_1: entered allmulticast mode [ 291.438180][ T6984] bridge_slave_1: entered promiscuous mode [ 292.285506][ T6984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.390944][ T6984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.649973][ T7117] sctp: [Deprecated]: syz.3.278 (pid 7117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.649973][ T7117] Use struct sctp_sack_info instead [ 292.651166][ T6984] team0: Port device team_slave_0 added [ 292.678943][ T36] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 292.772832][ T6984] team0: Port device team_slave_1 added [ 292.855069][ T36] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 292.887341][ T36] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.887398][ T36] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.887411][ T36] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 292.924273][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.924299][ T36] usb 2-1: Product: syz [ 292.924315][ T36] usb 2-1: Manufacturer: syz [ 292.924329][ T36] usb 2-1: SerialNumber: syz [ 293.212049][ T6984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.212068][ T6984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.212095][ T6984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.265468][ T6984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.265484][ T6984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.265510][ T6984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.335441][ T36] snd-usb-caiaq 2-1:1.0: invalid EPs [ 293.335475][ T36] usb 2-1: unable to init card! (ret=-22) [ 293.382715][ T36] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 293.733878][ T7112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.735990][ T7112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.821972][ T7135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.852191][ T7135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.878960][ T7139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.880661][ T7139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.913498][ T1610] bridge_slave_1: left allmulticast mode [ 293.913533][ T1610] bridge_slave_1: left promiscuous mode [ 293.935933][ T1610] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.327515][ T1610] bridge_slave_0: left allmulticast mode [ 294.327540][ T1610] bridge_slave_0: left promiscuous mode [ 294.327701][ T1610] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.790181][ T7152] kernel read not supported for file /file0 (pid: 7152 comm: syz.4.285) [ 295.832496][ T37] audit: type=1800 audit(1790639560.625:405): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.285" name="file0" dev="mqueue" ino=13562 res=0 errno=0 [ 296.405206][ T9] usb 2-1: USB disconnect, device number 4 [ 296.722063][ T7160] gfs2: error -5 reading superblock [ 297.841187][ T1610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.693956][ T1610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.825232][ T1610] bond0 (unregistering): Released all slaves [ 299.311343][ T7171] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 299.311830][ T7171] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 300.030856][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 300.347497][ T6984] hsr_slave_0: entered promiscuous mode [ 300.351410][ T6984] hsr_slave_1: entered promiscuous mode [ 300.352076][ T6984] debugfs: 'hsr0' already exists in 'hsr' [ 300.352097][ T6984] Cannot create hsr debugfs directory [ 300.352409][ T7190] warning: `syz.1.296' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 300.456413][ T5705] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 300.654038][ T1610] hsr_slave_0: left promiscuous mode [ 300.678019][ T1610] hsr_slave_1: left promiscuous mode [ 300.679433][ T1610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.504590][ T1610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.506163][ T5705] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 301.527872][ T5705] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.527935][ T5705] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 301.527958][ T5705] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.527984][ T5705] usb 1-1: config 0 interface 0 has no altsetting 0 [ 301.532146][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 301.532162][ T5705] usb 1-1: SerialNumber: syz [ 301.618216][ T5705] usb 1-1: config 0 descriptor?? [ 302.095881][ T7205] program syz.1.299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.527909][ T9] usb 1-1: USB disconnect, device number 3 [ 305.040601][ T7229] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 305.041093][ T7229] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 307.016966][ T36] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 309.327843][ T1610] team0 (unregistering): Port device team_slave_1 removed [ 309.417247][ T1610] team0 (unregistering): Port device team_slave_0 removed [ 309.673134][ T7252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.310'. [ 309.673163][ T7252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.310'. [ 309.685050][ T5244] 8021q: adding VLAN 0 to HW filter on device eth5 [ 313.650805][ T7282] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 313.652581][ T7282] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 316.700119][ T36] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 317.144072][ T7310] gfs2: error -5 reading superblock [ 317.238236][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.238492][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.779100][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 317.881888][ T36] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 319.312543][ T36] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 319.312679][ T36] usb 2-1: can't read configurations, error -71 [ 321.127596][ T5244] 8021q: adding VLAN 0 to HW filter on device eth6 [ 323.366979][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'. [ 325.224212][ T7384] FAULT_INJECTION: forcing a failure. [ 325.224212][ T7384] name failslab, interval 1, probability 0, space 0, times 0 [ 325.224271][ T7384] CPU: 1 UID: 0 PID: 7384 Comm: syz.0.337 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 325.224302][ T7384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.224314][ T7384] Call Trace: [ 325.224323][ T7384] [ 325.224332][ T7384] dump_stack_lvl+0xe8/0x150 [ 325.224366][ T7384] should_fail_ex+0x46b/0x600 [ 325.224401][ T7384] should_failslab+0xa8/0x100 [ 325.224424][ T7384] __kmalloc_noprof+0xfb/0x790 [ 325.224449][ T7384] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 325.224475][ T7384] ? nsim_fib_event_nb+0x283/0x1200 [ 325.224499][ T7384] ? nsim_fib_event_nb+0x283/0x1200 [ 325.224532][ T7384] nsim_fib_event_nb+0x283/0x1200 [ 325.224572][ T7384] notifier_call_chain+0x1a5/0x3d0 [ 325.224598][ T7384] ? atomic_notifier_call_chain+0x26/0x180 [ 325.224621][ T7384] atomic_notifier_call_chain+0xda/0x180 [ 325.224644][ T7384] call_fib_notifiers+0x31/0x60 [ 325.224668][ T7384] fib6_del+0x1053/0x15a0 [ 325.224712][ T7384] ? preempt_schedule_thunk+0x16/0x40 [ 325.224738][ T7384] ? __pfx_fib6_del+0x10/0x10 [ 325.224757][ T7384] ? rcu_is_watching+0x16/0xb0 [ 325.224793][ T7384] ? __pfx_rt_spin_lock+0x10/0x10 [ 325.224821][ T7384] ? rcu_is_watching+0x16/0xb0 [ 325.224846][ T7384] ? __local_bh_disable_ip+0x3d/0x420 [ 325.224875][ T7384] ? __ip6_del_rt+0x8d/0x1a0 [ 325.224897][ T7384] ? __ip6_del_rt+0x8d/0x1a0 [ 325.224921][ T7384] __ip6_del_rt+0xaf/0x1a0 [ 325.224948][ T7384] ip6_route_del+0xf9a/0x1110 [ 325.224984][ T7384] ? ip6_route_del+0xe2/0x1110 [ 325.225010][ T7384] ? __pfx_ip6_route_del+0x10/0x10 [ 325.225037][ T7384] ? bpf_lsm_capable+0x9/0x20 [ 325.225060][ T7384] ? security_capable+0x7e/0x2c0 [ 325.225097][ T7384] ipv6_route_ioctl+0x375/0x4e0 [ 325.225129][ T7384] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 325.225191][ T7384] inet6_ioctl+0x246/0x2e0 [ 325.225219][ T7384] ? __pfx_inet6_ioctl+0x10/0x10 [ 325.225246][ T7384] ? tomoyo_path_number_perm+0x219/0x5f0 [ 325.225282][ T7384] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 325.225323][ T7384] sock_do_ioctl+0x101/0x320 [ 325.225352][ T7384] ? __pfx_sock_do_ioctl+0x10/0x10 [ 325.225376][ T7384] ? hook_file_ioctl+0x1f5/0x610 [ 325.225401][ T7384] ? __asan_memset+0x22/0x50 [ 325.225426][ T7384] ? smack_file_ioctl+0x265/0x370 [ 325.225458][ T7384] sock_ioctl+0x57d/0x7f0 [ 325.225486][ T7384] ? __pfx_sock_ioctl+0x10/0x10 [ 325.225512][ T7384] ? __fget_files+0x2a/0x420 [ 325.225533][ T7384] ? __fget_files+0x3a8/0x420 [ 325.225553][ T7384] ? __fget_files+0x2a/0x420 [ 325.225579][ T7384] ? bpf_lsm_file_ioctl+0x9/0x20 [ 325.225602][ T7384] ? __pfx_sock_ioctl+0x10/0x10 [ 325.225627][ T7384] __se_sys_ioctl+0xff/0x170 [ 325.225656][ T7384] do_syscall_64+0x166/0x520 [ 325.225677][ T7384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.225697][ T7384] ? clear_bhb_loop+0x70/0xc0 [ 325.225722][ T7384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.225742][ T7384] RIP: 0033:0x7facfb1be159 [ 325.225762][ T7384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.225779][ T7384] RSP: 002b:00007facf93d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.225800][ T7384] RAX: ffffffffffffffda RBX: 00007facfb446180 RCX: 00007facfb1be159 [ 325.225815][ T7384] RDX: 00002000000001c0 RSI: 000000000000890c RDI: 0000000000000003 [ 325.225829][ T7384] RBP: 00007facf93d4090 R08: 0000000000000000 R09: 0000000000000000 [ 325.225841][ T7384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.225854][ T7384] R13: 00007facfb446218 R14: 00007facfb446180 R15: 00007ffc683d0098 [ 325.225889][ T7384] [ 333.299793][ T4898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.345851][ T4898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.359642][ T4898] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.388965][ T4898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.392043][ T4898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.171238][ T5590] Bluetooth: hci0: command tx timeout [ 338.748064][ T5590] Bluetooth: hci0: command tx timeout [ 339.371955][ T7472] binder: 7470:7472 ioctl c0306201 200000000680 returned -14 [ 341.012379][ T7501] binder: 7500:7501 ioctl c0306201 200000000680 returned -14 [ 341.012412][ T7501] FAULT_INJECTION: forcing a failure. [ 341.012412][ T7501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.012440][ T7501] CPU: 0 UID: 0 PID: 7501 Comm: syz.4.359 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 341.012463][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.012474][ T7501] Call Trace: [ 341.012481][ T7501] [ 341.012490][ T7501] dump_stack_lvl+0xe8/0x150 [ 341.012524][ T7501] should_fail_ex+0x46b/0x600 [ 341.012557][ T7501] _copy_to_user+0x31/0xb0 [ 341.012588][ T7501] simple_read_from_buffer+0xe1/0x170 [ 341.012616][ T7501] proc_fail_nth_read+0x1be/0x230 [ 341.012644][ T7501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 341.012672][ T7501] ? rw_verify_area+0x250/0x4d0 [ 341.012700][ T7501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 341.012723][ T7501] vfs_read+0x219/0xa90 [ 341.012756][ T7501] ? __pfx_vfs_read+0x10/0x10 [ 341.012782][ T7501] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 341.012806][ T7501] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 341.012827][ T7501] ? mutex_lock_nested+0x152/0x1d0 [ 341.012852][ T7501] ? fdget_pos+0x252/0x320 [ 341.012882][ T7501] ksys_read+0x156/0x270 [ 341.012908][ T7501] ? __pfx_ksys_read+0x10/0x10 [ 341.012930][ T7501] ? __pfx_binder_ioctl+0x10/0x10 [ 341.012967][ T7501] do_syscall_64+0x166/0x520 [ 341.012988][ T7501] ? trace_irq_disable+0x3b/0x140 [ 341.013012][ T7501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.013033][ T7501] ? clear_bhb_loop+0x70/0xc0 [ 341.013057][ T7501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.013076][ T7501] RIP: 0033:0x7f7c7b10e98e [ 341.013101][ T7501] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 341.013118][ T7501] RSP: 002b:00007f7c793a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 341.013139][ T7501] RAX: ffffffffffffffda RBX: 00007f7c793a66c0 RCX: 00007f7c7b10e98e [ 341.013154][ T7501] RDX: 000000000000000f RSI: 00007f7c793a60a0 RDI: 0000000000000006 [ 341.013167][ T7501] RBP: 00007f7c793a6090 R08: 0000000000000000 R09: 0000000000000000 [ 341.013180][ T7501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.013192][ T7501] R13: 00007f7c7b3d6038 R14: 00007f7c7b3d5fa0 R15: 00007ffc381c7118 [ 341.013224][ T7501] [ 341.147272][ T5590] Bluetooth: hci0: command tx timeout [ 343.178354][ T5590] Bluetooth: hci0: command tx timeout [ 344.934644][ T7520] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 344.934675][ T7520] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 345.126803][ T7533] ublk_ctrl_add_dev: dev id not match 4294967295 9 [ 345.163412][ T7520] vhci_hcd vhci_hcd.0: Device attached [ 345.847064][ T5698] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 346.015495][ T5898] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 346.040357][ T5698] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 346.041549][ T5698] usb 1-1: config 0 has no interfaces? [ 346.041584][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.255065][ T5698] usb 1-1: config 0 descriptor?? [ 346.357805][ T7536] binder: BINDER_SET_CONTEXT_MGR already set [ 346.357825][ T7536] binder: 7526:7536 ioctl 4018620d 200000004a80 returned -16 [ 346.590907][ T7522] vhci_hcd: connection closed [ 346.603331][ T5718] usb 1-1: USB disconnect, device number 4 [ 346.676458][ T5898] usb 33-1: device descriptor read/64, error -71 [ 346.676565][ T5571] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 346.732592][ T13] vhci_hcd vhci_hcd.0: stop threads [ 346.736428][ T13] vhci_hcd vhci_hcd.0: release socket [ 346.763073][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 346.827206][ T5571] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 346.828823][ T5571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 346.828856][ T5571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.828894][ T5571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.866527][ T5898] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 347.009837][ T5571] usb 5-1: config 0 descriptor?? [ 350.918863][ T5571] usbhid 5-1:0.0: can't add hid device: -71 [ 350.918984][ T5571] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 350.993274][ T5571] usb 5-1: USB disconnect, device number 13 [ 354.656017][ T7428] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.656230][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.656564][ T7428] bridge_slave_0: entered allmulticast mode [ 354.659180][ T7428] bridge_slave_0: entered promiscuous mode [ 354.662313][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.662530][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.662691][ T7428] bridge_slave_1: entered allmulticast mode [ 354.665346][ T7428] bridge_slave_1: entered promiscuous mode [ 354.866529][ T7602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.380'. [ 354.962985][ T7605] FAULT_INJECTION: forcing a failure. [ 354.962985][ T7605] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 354.963023][ T7605] CPU: 1 UID: 0 PID: 7605 Comm: syz.4.382 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 354.963046][ T7605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.963059][ T7605] Call Trace: [ 354.963067][ T7605] [ 354.963076][ T7605] dump_stack_lvl+0xe8/0x150 [ 354.963114][ T7605] should_fail_ex+0x46b/0x600 [ 354.963148][ T7605] prepare_alloc_pages+0x223/0x650 [ 354.963188][ T7605] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 354.963223][ T7605] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 354.963267][ T7605] ? __pfx_policy_nodemask+0x10/0x10 [ 354.963298][ T7605] alloc_pages_mpol+0xd4/0x280 [ 354.963323][ T7605] alloc_pages_noprof+0xd2/0x2f0 [ 354.963349][ T7605] pte_alloc_one+0x22/0x380 [ 354.963377][ T7605] __pte_alloc+0x25/0x1a0 [ 354.963403][ T7605] do_pte_missing+0x1bda/0x28f0 [ 354.963436][ T7605] ? rt_spin_unlock+0x165/0x200 [ 354.963470][ T7605] ? __pmd_alloc+0x41b/0x5e0 [ 354.963501][ T7605] handle_mm_fault+0xf64/0x28c0 [ 354.963535][ T7605] ? handle_mm_fault+0xeb/0x28c0 [ 354.963573][ T7605] ? __pfx_handle_mm_fault+0x10/0x10 [ 354.963620][ T7605] ? lock_mm_and_find_vma+0xa7/0x340 [ 354.963653][ T7605] do_user_addr_fault+0x746/0x1340 [ 354.963692][ T7605] exc_page_fault+0x6a/0xc0 [ 354.963714][ T7605] asm_exc_page_fault+0x26/0x30 [ 354.963734][ T7605] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 354.963763][ T7605] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 354.963782][ T7605] RSP: 0018:ffffc90005db7728 EFLAGS: 00050246 [ 354.963801][ T7605] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 354.963815][ T7605] RDX: 0000000000000000 RSI: ffff888020e9fde0 RDI: 0000000000000000 [ 354.963829][ T7605] RBP: ffffc90005db7bd0 R08: ffff888020e9fde7 R09: 1ffff110041d3fbc [ 354.963845][ T7605] R10: dffffc0000000000 R11: ffffed10041d3fbd R12: 0000000000000008 [ 354.963861][ T7605] R13: 00007ffffffff000 R14: ffff888020e9fde0 R15: 0000000000000000 [ 354.963890][ T7605] _copy_to_user+0x8a/0xb0 [ 354.963924][ T7605] ucma_query+0x1557/0x19a0 [ 354.963951][ T7605] ? finish_task_switch+0x40e/0xc60 [ 354.963975][ T7605] ? lockdep_hardirqs_on+0x7b/0x110 [ 354.964000][ T7605] ? rcu_is_watching+0x16/0xb0 [ 354.964033][ T7605] ? __pfx_ucma_query+0x10/0x10 [ 354.964059][ T7605] ? __lock_acquire+0x747/0x2de0 [ 354.964098][ T7605] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 354.964137][ T7605] ? lock_acquire+0x115/0x350 [ 354.964164][ T7605] ? futex_unqueue+0x22/0x240 [ 354.964196][ T7605] ? __lock_acquire+0x747/0x2de0 [ 354.964226][ T7605] ? futex_unqueue+0x22/0x240 [ 354.964265][ T7605] ? futex_unqueue+0x211/0x240 [ 354.964293][ T7605] ? __futex_wait+0x1e3/0x410 [ 354.964320][ T7605] ? __futex_wait+0x35a/0x410 [ 354.964354][ T7605] ? lock_acquire+0x115/0x350 [ 354.964407][ T7605] ucma_write+0x257/0x2f0 [ 354.964434][ T7605] ? __pfx_ucma_write+0x10/0x10 [ 354.964458][ T7605] ? security_file_permission+0x75/0x260 [ 354.964488][ T7605] ? rw_verify_area+0x209/0x4d0 [ 354.964515][ T7605] ? __pfx_ucma_write+0x10/0x10 [ 354.964539][ T7605] vfs_write+0x29f/0xbb0 [ 354.964575][ T7605] ? __pfx_vfs_write+0x10/0x10 [ 354.964603][ T7605] ? __fget_files+0x2a/0x420 [ 354.964628][ T7605] ? __fget_files+0x2a/0x420 [ 354.964648][ T7605] ? __fget_files+0x3a8/0x420 [ 354.964671][ T7605] ? __fget_files+0x2a/0x420 [ 354.964702][ T7605] ksys_write+0x156/0x270 [ 354.964729][ T7605] ? __pfx_ksys_write+0x10/0x10 [ 354.964765][ T7605] do_syscall_64+0x166/0x520 [ 354.964786][ T7605] ? trace_irq_disable+0x3b/0x140 [ 354.964813][ T7605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.964833][ T7605] ? clear_bhb_loop+0x70/0xc0 [ 354.964857][ T7605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.964879][ T7605] RIP: 0033:0x7f7c7b14e159 [ 354.964900][ T7605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.964919][ T7605] RSP: 002b:00007f7c793a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 354.964941][ T7605] RAX: ffffffffffffffda RBX: 00007f7c7b3d5fa0 RCX: 00007f7c7b14e159 [ 354.964958][ T7605] RDX: 0000000000000018 RSI: 0000200000000240 RDI: 0000000000000004 [ 354.964972][ T7605] RBP: 00007f7c7b1e506b R08: 0000000000000000 R09: 0000000000000000 [ 354.964987][ T7605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.965000][ T7605] R13: 00007f7c7b3d6038 R14: 00007f7c7b3d5fa0 R15: 00007ffc381c7118 [ 354.965035][ T7605] [ 355.017138][ T7428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.048246][ T7428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.216412][ T5718] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 356.083992][ T5718] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 356.111682][ T5718] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 356.111710][ T5718] usb 2-1: config 0 has no interface number 0 [ 356.111742][ T5718] usb 2-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 356.111782][ T5718] usb 2-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 356.111811][ T5718] usb 2-1: config 0 interface 48 has no altsetting 0 [ 356.147848][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 356.147875][ T5718] usb 2-1: Product: syz [ 356.147890][ T5718] usb 2-1: Manufacturer: syz [ 356.147905][ T5718] usb 2-1: SerialNumber: syz [ 356.315835][ T5718] usb 2-1: config 0 descriptor?? [ 357.675321][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.380'. [ 357.739932][ T7428] team0: Port device team_slave_0 added [ 357.905183][ T7428] team0: Port device team_slave_1 added [ 361.050719][ T5718] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 361.051907][ T5718] gspca_sn9c2028: read1 error -71 [ 361.052316][ T5718] gspca_sn9c2028: read1 error -71 [ 361.052708][ T5718] gspca_sn9c2028: read1 error -71 [ 361.052809][ T5718] sn9c2028 2-1:0.48: probe with driver sn9c2028 failed with error -71 [ 361.061402][ T5718] usb 2-1: USB disconnect, device number 7 [ 361.789378][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.789396][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.789422][ T7428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.808084][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.808100][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.808127][ T7428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.997861][ T7641] FAULT_INJECTION: forcing a failure. [ 361.997861][ T7641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.997950][ T7641] CPU: 0 UID: 0 PID: 7641 Comm: syz.3.390 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 361.997973][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.997989][ T7641] Call Trace: [ 361.997998][ T7641] [ 361.998007][ T7641] dump_stack_lvl+0xe8/0x150 [ 361.998040][ T7641] should_fail_ex+0x46b/0x600 [ 361.998073][ T7641] _copy_to_user+0x31/0xb0 [ 361.998110][ T7641] simple_read_from_buffer+0xe1/0x170 [ 361.998138][ T7641] proc_fail_nth_read+0x1be/0x230 [ 361.998167][ T7641] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.998195][ T7641] ? rw_verify_area+0x250/0x4d0 [ 361.998221][ T7641] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.998245][ T7641] vfs_read+0x219/0xa90 [ 361.998276][ T7641] ? __pfx_vfs_read+0x10/0x10 [ 361.998302][ T7641] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 361.998327][ T7641] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 361.998347][ T7641] ? mutex_lock_nested+0x152/0x1d0 [ 361.998372][ T7641] ? fdget_pos+0x252/0x320 [ 361.998403][ T7641] ksys_read+0x156/0x270 [ 361.998429][ T7641] ? __pfx_ksys_read+0x10/0x10 [ 361.998464][ T7641] do_syscall_64+0x166/0x520 [ 361.998485][ T7641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.998505][ T7641] ? clear_bhb_loop+0x70/0xc0 [ 361.998529][ T7641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.998552][ T7641] RIP: 0033:0x7fc599c1e98e [ 361.998571][ T7641] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 361.998588][ T7641] RSP: 002b:00007fc597e73fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 361.998609][ T7641] RAX: ffffffffffffffda RBX: 00007fc597e746c0 RCX: 00007fc599c1e98e [ 361.998624][ T7641] RDX: 000000000000000f RSI: 00007fc597e740a0 RDI: 0000000000000008 [ 361.998637][ T7641] RBP: 00007fc597e74090 R08: 0000000000000000 R09: 0000000000000000 [ 361.998649][ T7641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.998662][ T7641] R13: 00007fc599ee6218 R14: 00007fc599ee6180 R15: 00007fffcedce698 [ 361.998695][ T7641] [ 364.367189][ T211] bridge_slave_1: left allmulticast mode [ 364.367228][ T211] bridge_slave_1: left promiscuous mode [ 364.368289][ T211] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.520256][ T211] bridge_slave_0: left allmulticast mode [ 364.520292][ T211] bridge_slave_0: left promiscuous mode [ 364.520559][ T211] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.017580][ T7669] FAULT_INJECTION: forcing a failure. [ 367.017580][ T7669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.017610][ T7669] CPU: 1 UID: 0 PID: 7669 Comm: syz.1.399 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 367.017628][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.017637][ T7669] Call Trace: [ 367.017643][ T7669] [ 367.017651][ T7669] dump_stack_lvl+0xe8/0x150 [ 367.017680][ T7669] should_fail_ex+0x46b/0x600 [ 367.017706][ T7669] _copy_to_user+0x31/0xb0 [ 367.017731][ T7669] put_user_ifreq+0x6a/0xc0 [ 367.017751][ T7669] sock_do_ioctl+0x26d/0x320 [ 367.017774][ T7669] ? __pfx_sock_do_ioctl+0x10/0x10 [ 367.017796][ T7669] ? hook_file_ioctl+0x1f5/0x610 [ 367.017817][ T7669] ? __asan_memset+0x22/0x50 [ 367.017839][ T7669] ? smack_file_ioctl+0x265/0x370 [ 367.017861][ T7669] sock_ioctl+0x57d/0x7f0 [ 367.017880][ T7669] ? __pfx_sock_ioctl+0x10/0x10 [ 367.017898][ T7669] ? __fget_files+0x2a/0x420 [ 367.017913][ T7669] ? __fget_files+0x3a8/0x420 [ 367.017926][ T7669] ? __fget_files+0x2a/0x420 [ 367.017943][ T7669] ? bpf_lsm_file_ioctl+0x9/0x20 [ 367.017961][ T7669] ? __pfx_sock_ioctl+0x10/0x10 [ 367.017979][ T7669] __se_sys_ioctl+0xff/0x170 [ 367.018002][ T7669] do_syscall_64+0x166/0x520 [ 367.018018][ T7669] ? trace_irq_disable+0x3b/0x140 [ 367.018038][ T7669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.018054][ T7669] ? clear_bhb_loop+0x70/0xc0 [ 367.018075][ T7669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.018092][ T7669] RIP: 0033:0x7f8def18e159 [ 367.018118][ T7669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.018130][ T7669] RSP: 002b:00007f8ded3e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.018146][ T7669] RAX: ffffffffffffffda RBX: 00007f8def415fa0 RCX: 00007f8def18e159 [ 367.018156][ T7669] RDX: 0000200000000240 RSI: 0000000000008933 RDI: 0000000000000003 [ 367.018166][ T7669] RBP: 00007f8ded3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 367.018175][ T7669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.018184][ T7669] R13: 00007f8def416038 R14: 00007f8def415fa0 R15: 00007fff42e36a18 [ 367.018207][ T7669] [ 367.044796][ C0] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 367.075639][ T211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.128295][ T7670] snd_dummy snd_dummy.0: control 0:0:0:syz0:16640 is already present [ 367.299904][ T1609] IPVS: starting estimator thread 0... [ 367.381908][ T211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.408090][ T7671] IPVS: using max 9 ests per chain, 21600 per kthread [ 367.487964][ T211] bond0 (unregistering): Released all slaves [ 367.534852][ T7428] hsr_slave_0: entered promiscuous mode [ 367.535822][ T7428] hsr_slave_1: entered promiscuous mode [ 367.549765][ T7428] debugfs: 'hsr0' already exists in 'hsr' [ 367.549793][ T7428] Cannot create hsr debugfs directory [ 367.574965][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.398'. [ 367.602827][ T5698] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 367.760556][ T5698] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 1.00 [ 367.765077][ T5698] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.765111][ T5698] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.765150][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.186748][ T211] hsr_slave_0: left promiscuous mode [ 369.206645][ T5898] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 369.226490][ T211] hsr_slave_1: left promiscuous mode [ 369.228788][ T211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.268396][ T211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.403469][ T5898] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 369.430508][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.430562][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.430664][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.569322][ T5898] usb 4-1: config 0 descriptor?? [ 369.589729][ T7697] gfs2: error -5 reading superblock [ 369.761407][ T5898] qmi_wwan 4-1:0.0: bogus CDC Union: master=25, slave=0 [ 369.811011][ T5898] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 370.122991][ T5898] usb 4-1: USB disconnect, device number 3 [ 370.787070][ T211] team0 (unregistering): Port device team_slave_1 removed [ 370.819846][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 370.880285][ T211] team0 (unregistering): Port device team_slave_0 removed [ 371.095762][ T5698] usbtouchscreen 2-1:1.0: Failed to read FW rev: -71 [ 371.096054][ T5698] usbtouchscreen 2-1:1.0: probe with driver usbtouchscreen failed with error -71 [ 371.141474][ T5698] usb 2-1: USB disconnect, device number 8 [ 371.358685][ T7684] macsec1: entered promiscuous mode [ 373.999342][ T5244] 8021q: adding VLAN 0 to HW filter on device eth5 [ 374.573522][ T7732] Bluetooth: MGMT ver 1.23 [ 374.573562][ T7732] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 377.169241][ T7761] gfs2: error -5 reading superblock [ 378.530043][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.530113][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.083283][ T7772] netlink: 'syz.4.419': attribute type 4 has an invalid length. [ 380.127035][ T7774] netlink: 'syz.4.419': attribute type 4 has an invalid length. [ 380.399364][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 380.647139][ T5244] 8021q: adding VLAN 0 to HW filter on device eth6 [ 380.982467][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 390.180947][ T7847] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 390.181379][ T7847] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 394.438872][ T4898] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 394.506900][ T4898] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 394.512153][ T4898] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 394.525742][ T4898] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 394.531894][ T4898] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 395.475815][ T5571] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 395.584596][ T7892] gfs2: error -5 reading superblock [ 395.748377][ T5571] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 395.751651][ T5571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 395.751861][ T5571] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 395.751889][ T5571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 395.751912][ T5571] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 395.752060][ T5571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.202125][ T5571] usb 2-1: config 0 descriptor?? [ 396.766443][ T4898] Bluetooth: hci5: command tx timeout [ 397.061066][ T5571] hdpvr 2-1:0.0: firmware version 0x81 dated _$Ywїzr/ľj)7ݛt-- [ 397.061106][ T5571] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 397.246546][ T5571] hdpvr 2-1:0.0: device init failed [ 397.246654][ T5571] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 398.873475][ T4898] Bluetooth: hci5: command tx timeout [ 399.062544][ T5571] usb 2-1: USB disconnect, device number 9 [ 401.420649][ T4898] Bluetooth: hci5: command tx timeout [ 403.513991][ T4898] Bluetooth: hci5: command tx timeout [ 405.221162][ T37] audit: type=1800 audit(1790639669.785:406): pid=7940 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.447" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 406.098539][ T7933] Can't find ip_set type hash:ip,ma [ 408.456518][ T5898] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 409.233805][ T7968] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 409.234315][ T7968] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 409.746169][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 409.752900][ T5898] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 409.761585][ T5898] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 409.761610][ T5898] usb 4-1: config 0 has no interface number 0 [ 409.761657][ T5898] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 409.761748][ T5898] usb 4-1: config 0 interface 85 has no altsetting 0 [ 409.765960][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.765984][ T5898] usb 4-1: Product: syz [ 409.765999][ T5898] usb 4-1: Manufacturer: syz [ 409.766013][ T5898] usb 4-1: SerialNumber: syz [ 409.783733][ T5898] usb 4-1: config 0 descriptor?? [ 410.255833][ T7976] misc userio: Invalid payload size [ 410.491179][ T5898] appletouch 4-1:0.85: Failed to request geyser raw mode [ 410.558904][ T7983] FAULT_INJECTION: forcing a failure. [ 410.558904][ T7983] name failslab, interval 1, probability 0, space 0, times 0 [ 410.558966][ T7983] CPU: 1 UID: 0 PID: 7983 Comm: syz.1.452 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 410.558990][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.559001][ T7983] Call Trace: [ 410.559010][ T7983] [ 410.559019][ T7983] dump_stack_lvl+0xe8/0x150 [ 410.559052][ T7983] should_fail_ex+0x46b/0x600 [ 410.559085][ T7983] should_failslab+0xa8/0x100 [ 410.559107][ T7983] __kmalloc_cache_noprof+0xa1/0x680 [ 410.559135][ T7983] ? ip_vs_rht_alloc+0x5e/0x890 [ 410.559160][ T7983] ? ip_vs_rht_alloc+0x5e/0x890 [ 410.559191][ T7983] ip_vs_rht_alloc+0x5e/0x890 [ 410.559218][ T7983] ? ip_vs_rht_alloc+0x75b/0x890 [ 410.559247][ T7983] ip_vs_conn_tab_alloc+0x60/0x110 [ 410.559274][ T7983] ip_vs_add_service+0x8be/0x2060 [ 410.559307][ T7983] ? ip_vs_add_service+0x1f5/0x2060 [ 410.559338][ T7983] ? rcu_read_unlock+0x87/0xa0 [ 410.559365][ T7983] do_ip_vs_set_ctl+0x8ce/0xaf0 [ 410.559395][ T7983] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 410.559442][ T7983] ? lockdep_hardirqs_on+0x7b/0x110 [ 410.559463][ T7983] ? irqentry_exit+0x218/0x910 [ 410.559495][ T7983] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 410.559529][ T7983] nf_setsockopt+0x26f/0x290 [ 410.559552][ T7983] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 410.559583][ T7983] do_sock_setsockopt+0x17c/0x1b0 [ 410.559610][ T7983] __x64_sys_setsockopt+0x143/0x1b0 [ 410.559638][ T7983] do_syscall_64+0x166/0x520 [ 410.559659][ T7983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.559679][ T7983] ? clear_bhb_loop+0x70/0xc0 [ 410.559703][ T7983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.559723][ T7983] RIP: 0033:0x7f8def18e159 [ 410.559741][ T7983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.559758][ T7983] RSP: 002b:00007f8ded3a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 410.559780][ T7983] RAX: ffffffffffffffda RBX: 00007f8def416180 RCX: 00007f8def18e159 [ 410.559795][ T7983] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000005 [ 410.559807][ T7983] RBP: 00007f8ded3a4090 R08: 000000000000002c R09: 0000000000000000 [ 410.559820][ T7983] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.559833][ T7983] R13: 00007f8def416218 R14: 00007f8def416180 R15: 00007fff42e36a18 [ 410.559866][ T7983] [ 412.526428][ T5898] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 415.460821][ T5898] usb 4-1: USB disconnect, device number 4 [ 415.484078][ T7874] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.484194][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.484364][ T7874] bridge_slave_0: entered allmulticast mode [ 415.585487][ T7874] bridge_slave_0: entered promiscuous mode [ 415.803581][ T37] audit: type=1800 audit(1790639680.635:407): pid=8002 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.457" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 416.842238][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.842387][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.842713][ T7874] bridge_slave_1: entered allmulticast mode [ 416.860602][ T7874] bridge_slave_1: entered promiscuous mode [ 417.138111][ T7874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.732659][ T7874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.813737][ T8017] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 419.814162][ T8017] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 420.874373][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 421.080880][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 421.080944][ T31] usb 1-1: New USB device found, idVendor=17cc, idProduct=0000, bcdDevice= 0.00 [ 421.080996][ T31] usb 1-1: no configurations [ 421.081009][ T31] usb 1-1: can't read configurations, error -22 [ 425.071015][ T8033] netlink: 32 bytes leftover after parsing attributes in process `syz.0.465'. [ 433.095271][ T4898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 433.151932][ T4898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 433.172745][ T4898] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 433.174989][ T4898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 433.196717][ T4898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 434.582229][ T5590] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 434.621586][ T5590] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 434.625265][ T5590] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 434.644357][ T5590] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 434.645508][ T5590] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 435.246391][ T4898] Bluetooth: hci0: command tx timeout [ 436.766579][ T4898] Bluetooth: hci6: command tx timeout [ 437.326497][ T4898] Bluetooth: hci0: command tx timeout [ 438.571304][ T5590] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 438.614987][ T5590] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 438.623892][ T5590] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 438.640696][ T5590] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 438.642998][ T5590] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 438.846510][ T4898] Bluetooth: hci6: command tx timeout [ 439.406347][ T4898] Bluetooth: hci0: command tx timeout [ 439.968849][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.968920][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.577548][ T5590] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 440.641475][ T5590] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 440.644014][ T5590] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 440.663614][ T5590] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 440.664787][ T5590] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 440.776873][ T4898] Bluetooth: hci7: command tx timeout [ 440.926528][ T4898] Bluetooth: hci6: command tx timeout [ 441.486366][ T4898] Bluetooth: hci0: command tx timeout [ 442.766476][ T4898] Bluetooth: hci8: command tx timeout [ 442.846324][ T4898] Bluetooth: hci7: command tx timeout [ 443.006478][ T4898] Bluetooth: hci6: command tx timeout [ 444.846448][ T4898] Bluetooth: hci8: command tx timeout [ 444.926361][ T4898] Bluetooth: hci7: command tx timeout [ 446.926356][ T4898] Bluetooth: hci8: command tx timeout [ 447.006535][ T4898] Bluetooth: hci7: command tx timeout [ 449.007071][ T4898] Bluetooth: hci8: command tx timeout [ 454.951438][ T5590] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 454.993505][ T5590] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 455.007772][ T5590] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 455.031528][ T5590] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 455.032341][ T5590] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 457.086353][ T4898] Bluetooth: hci9: command tx timeout [ 459.166504][ T4898] Bluetooth: hci9: command tx timeout [ 461.246340][ T4898] Bluetooth: hci9: command tx timeout [ 463.326483][ T4898] Bluetooth: hci9: command tx timeout [ 493.645849][ T5590] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 493.688517][ T5590] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 493.705293][ T5590] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 493.715153][ T5590] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 493.735624][ T5590] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 495.104698][ T4898] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 495.145108][ T4898] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 495.164348][ T4898] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 495.181412][ T4898] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 495.208667][ T4898] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 495.806387][ T4898] Bluetooth: hci10: command tx timeout [ 497.326378][ T4898] Bluetooth: hci11: command tx timeout [ 497.886316][ T4898] Bluetooth: hci10: command tx timeout [ 499.406350][ T4898] Bluetooth: hci11: command tx timeout [ 499.609822][ T5590] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 499.651691][ T5590] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 499.655789][ T5590] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 499.686760][ T5590] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 499.727809][ T5590] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 499.967784][ T4898] Bluetooth: hci10: command tx timeout [ 501.091390][ T5590] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 501.138300][ T5590] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 501.142043][ T5590] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 501.144168][ T5590] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 501.145538][ T5590] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 501.417718][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.417795][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.486361][ T4898] Bluetooth: hci11: command tx timeout [ 501.886355][ T4898] Bluetooth: hci12: command tx timeout [ 502.046398][ T5590] Bluetooth: hci10: command tx timeout [ 503.326443][ T4898] Bluetooth: hci13: command tx timeout [ 503.566495][ T4898] Bluetooth: hci11: command tx timeout [ 503.966762][ T4898] Bluetooth: hci12: command tx timeout [ 505.406375][ T4898] Bluetooth: hci13: command tx timeout [ 506.046334][ T4898] Bluetooth: hci12: command tx timeout [ 507.486510][ T4898] Bluetooth: hci13: command tx timeout [ 508.126371][ T4898] Bluetooth: hci12: command tx timeout [ 509.566381][ T4898] Bluetooth: hci13: command tx timeout [ 515.732112][ T8104] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 515.774907][ T8104] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 515.789008][ T8104] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 515.791432][ T8104] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 515.822011][ T8104] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 517.886514][ T4898] Bluetooth: hci14: command tx timeout [ 519.966461][ T4898] Bluetooth: hci14: command tx timeout [ 522.046342][ T4898] Bluetooth: hci14: command tx timeout [ 523.546229][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 523.553200][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16 [ 523.560345][ C0] rcu: (detected by 0, t=10502 jiffies, g=22853, q=10967 ncpus=2) [ 523.568224][ C0] task:ktimers/0 state:R running task stack:22392 pid:16 tgid:16 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 523.581762][ C0] Call Trace: [ 523.585022][ C0] [ 523.587845][ C0] sched_show_task+0x4aa/0x5f0 [ 523.592605][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 523.597875][ C0] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 523.603078][ C0] ? wq_watchdog_touch+0xf9/0x160 [ 523.608099][ C0] print_other_cpu_stall+0xfbf/0x1350 [ 523.613450][ C0] ? notifier_call_chain+0x1a5/0x3d0 [ 523.618719][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 523.624503][ C0] ? __timekeeping_advance+0xe58/0x1370 [ 523.630030][ C0] ? __timekeeping_advance+0xe58/0x1370 [ 523.635555][ C0] rcu_sched_clock_irq+0x9fe/0x10e0 [ 523.640736][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 523.646346][ C0] ? rcu_is_watching+0x16/0xb0 [ 523.651094][ C0] ? trace_softirq_raise+0x3b/0x130 [ 523.656272][ C0] update_process_times+0x234/0x2d0 [ 523.661456][ C0] tick_nohz_handler+0x38f/0x6b0 [ 523.666378][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 523.671823][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 523.676913][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 523.682360][ C0] __hrtimer_run_queues+0x3a0/0xaf0 [ 523.687544][ C0] hrtimer_interrupt+0x4c2/0xa80 [ 523.692472][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 523.698429][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 523.704041][ C0] [ 523.706948][ C0] [ 523.709857][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 523.715813][ C0] RIP: 0010:lock_is_held_type+0x106/0x150 [ 523.721511][ C0] Code: 1b 00 00 b8 ff ff ff ff 65 0f c1 05 34 8d 4d 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 48 c7 [ 523.741092][ C0] RSP: 0018:ffffc90000157ab8 EFLAGS: 00000206 [ 523.747136][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000046 [ 523.755088][ C0] RDX: 0000000000000000 RSI: ffffffff8dae07db RDI: ffffffff8bcc4b80 [ 523.763034][ C0] RBP: 00000000ffffffff R08: 0000000000000100 R09: 0000000000000100 [ 523.770983][ C0] R10: dffffc0000000000 R11: fffffbfff1f64570 R12: 0000000000000246 [ 523.778930][ C0] R13: ffff88801cac0000 R14: ffff88802b72c400 R15: 0000000000000004 [ 523.786892][ C0] advance_sched+0x169/0xc90 [ 523.791494][ C0] ? __pfx_advance_sched+0x10/0x10 [ 523.796585][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 523.801770][ C0] hrtimer_run_softirq+0x1e1/0x2e0 [ 523.806859][ C0] handle_softirqs+0x1da/0x6d0 [ 523.811621][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 523.816629][ C0] run_ktimerd+0x6a/0x100 [ 523.820940][ C0] smpboot_thread_fn+0x565/0xa70 [ 523.825861][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 523.830872][ C0] kthread+0x38b/0x470 [ 523.834919][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 523.840360][ C0] ? __pfx_kthread+0x10/0x10 [ 523.844925][ C0] ret_from_fork+0x514/0xb70 [ 523.849493][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 523.854579][ C0] ? __switch_to+0xc89/0x1420 [ 523.859239][ C0] ? __pfx_kthread+0x10/0x10 [ 523.863806][ C0] ret_from_fork_asm+0x1a/0x30 [ 523.868556][ C0] [ 523.871560][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10133 jiffies! g22853 f0x0 RCU_GP_WAIT_FQS(5) ->state=I [ 523.883524][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=18341 [ 523.891393][ C0] rcu: rcu_preempt kthread starved for 10134 jiffies! g22853 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=0 [ 523.902404][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 523.912359][ C0] rcu: RCU grace-period kthread stack dump: [ 523.918267][ C0] task:rcu_preempt state:I stack:27208 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 523.930173][ C0] Call Trace: [ 523.933431][ C0] [ 523.936347][ C0] __schedule+0x16d9/0x5700 [ 523.940853][ C0] ? __pfx___schedule+0x10/0x10 [ 523.945685][ C0] ? lock_acquire+0x115/0x350 [ 523.950350][ C0] ? schedule+0x90/0x2b0 [ 523.954587][ C0] schedule+0x164/0x2b0 [ 523.958731][ C0] schedule_timeout+0x152/0x2c0 [ 523.963581][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 523.968972][ C0] ? __pfx_process_timeout+0x10/0x10 [ 523.974244][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 523.980027][ C0] ? prepare_to_swait_event+0x322/0x350 [ 523.985560][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 523.990405][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 523.996544][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 524.001808][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 524.006988][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 524.012783][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 524.017359][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 524.022560][ C0] ? __kthread_parkme+0x71/0x1f0 [ 524.027481][ C0] ? __kthread_parkme+0x199/0x1f0 [ 524.032489][ C0] kthread+0x38b/0x470 [ 524.036553][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 524.041733][ C0] ? __pfx_kthread+0x10/0x10 [ 524.046323][ C0] ret_from_fork+0x514/0xb70 [ 524.050893][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 524.055982][ C0] ? __switch_to+0xc89/0x1420 [ 524.060655][ C0] ? __pfx_kthread+0x10/0x10 [ 524.065257][ C0] ret_from_fork_asm+0x1a/0x30 [ 524.070031][ C0] [ 524.073037][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 524.079344][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 524.088885][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 524.098917][ C0] RIP: 0010:lock_is_held_type+0x106/0x150 [ 524.104616][ C0] Code: 1b 00 00 b8 ff ff ff ff 65 0f c1 05 34 8d 4d 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 48 c7 [ 524.124200][ C0] RSP: 0018:ffffc90000157ab8 EFLAGS: 00000206 [ 524.130248][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000046 [ 524.138198][ C0] RDX: 0000000000000000 RSI: ffffffff8dae07db RDI: ffffffff8bcc4b80 [ 524.146156][ C0] RBP: 00000000ffffffff R08: 0000000000000100 R09: 0000000000000100 [ 524.154109][ C0] R10: dffffc0000000000 R11: fffffbfff1f64570 R12: 0000000000000246 [ 524.156407][ T4898] Bluetooth: hci14: command tx timeout [ 524.167489][ C0] R13: ffff88801cac0000 R14: ffff88802b72c400 R15: 0000000000000004 [ 524.175466][ C0] FS: 0000000000000000(0000) GS:ffff888125bc4000(0000) knlGS:0000000000000000 [ 524.184400][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 524.190965][ C0] CR2: 0000001b31a03ff8 CR3: 0000000030bec000 CR4: 00000000003526f0 [ 524.198917][ C0] Call Trace: [ 524.202180][ C0] [ 524.205095][ C0] advance_sched+0x169/0xc90 [ 524.209694][ C0] ? __pfx_advance_sched+0x10/0x10 [ 524.214842][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 524.220044][ C0] hrtimer_run_softirq+0x1e1/0x2e0 [ 524.225168][ C0] handle_softirqs+0x1da/0x6d0 [ 524.229930][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 524.234936][ C0] run_ktimerd+0x6a/0x100 [ 524.239249][ C0] smpboot_thread_fn+0x565/0xa70 [ 524.244188][ C0] ? smpboot_thread_fn+0x4e/0xa70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 524.249197][ C0] kthread+0x38b/0x470 [ 524.253244][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 524.258684][ C0] ? __pfx_kthread+0x10/0x10 [ 524.263265][ C0] ret_from_fork+0x514/0xb70 [ 524.267839][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 524.272932][ C0] ? __switch_to+0xc89/0x1420 [ 524.277598][ C0] ? __pfx_kthread+0x10/0x10 [ 524.282198][ C0] ret_from_fork_asm+0x1a/0x30 [ 524.286949][ C0]