last executing test programs: 5m36.60952127s ago: executing program 0 (id=1521): syz_usb_disconnect(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) pselect6(0x0, 0x0, 0x0, &(0x7f0000000040)={0x8, 0x2, 0x708, 0x4, 0x81, 0x5, 0x101, 0x8}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000000104030000000000000000c3c12ba6020500010004"], 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x40840) 5m34.996425419s ago: executing program 0 (id=1526): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44080}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0x4}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000000000}) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, &(0x7f0000000200)={0x40, 0x8, 0x43, {0x43, 0x22, "9e9493ce036227f128d52aaf8c2bfec79e8831f00402cb56ff7bee5c8a5865992dbd6cd8c3e6028503b2294c370d7891d3cecdee9425e9adc4e49723288da23ef2"}}, &(0x7f00000002c0)={0x0, 0x3, 0x20, @string={0x20, 0x3, "1efb93b8b15a712a13aafc33a188855d2786a68287f2f00a5cdff8f74940"}}, 0x0, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0xac2, 0xa, 0x1, {0x22, 0x245}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000500)={0x20, 0x8, 0x6d, "0bb3817a7f02d8fc544b55eb68a1b0b8fced700aecac22e9314561c13d89b8bc772d7839765d6b30924dcb2f79337663ad26eb71e2ce2b97efda323c33ec96ce7eef50996ea21a5f5de4760e4a2e64c04c910aa5de72cf7acbbeadad1f2094659b46d95d30dd67b1b00bbc61e5"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xf3}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x1, 0x40, "70d9a509901aaf75d1e7592f97f9a6696884ac99e2287e063de4daacbff14c629a5811764700f1695b78c08bb8a57d3ac846f8bd8cb785bb47fc054521633c37"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x20, 0x5, 0x1, 'm'}, 0x0, 0x0, 0x0, 0x0}) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000400)={0x44, 0x3ed, 0x10, 0x70bd2d, 0x25dfdbfd, "c642d0fec1593228910c2865ae339caee0a248d7607f416157da85f7b4053ec157af50b77d06c897b296d1e0b8eb39b3a6d4c3"}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000280), 0x4) 5m31.31100158s ago: executing program 0 (id=1541): r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)='GZ', 0x2, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000100)="11868a25ceae01000000000100000010faf231", 0x13) 5m31.170100486s ago: executing program 0 (id=1544): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x20007e860100, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x8a7848, 0x0) 5m30.25836481s ago: executing program 0 (id=1545): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_emit_vhci(0x0, 0x2a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0xa, 0xfff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) getresuid(&(0x7f0000000900)=0x0, &(0x7f0000000940)=0x0, &(0x7f0000000980)) r6 = getgid() ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000001fc0)={0xb3, "3703ddda16dfb8fa454d302b8bb48c1bb58c8daa410d37d9b58fa9b988c04f78", 0xffffffffffffffff}) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) r9 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000002000)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002040)=0x0) sendmmsg$unix(r3, &(0x7f0000004780)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000c80)="4b583a646ec86638007ac68fbcb7adc07184a96810db0a4f1cee131e892a66443dc50af7e65038dfaa6a98faa1dca861d4a024d0b2f606a77cf21f589c2dfab2eefc8cce774befbf333418878e03640c3c951bacaf8f2055b8b999d5a0fe8523fba867375958fcdd6a65077ff8907a5f76db32007c41d50e35874f22498cc124", 0x80}, {&(0x7f0000000480)="ee0def7f4351d37b39ed9ca85f18bd8fbacc6693abec66f7386332e8a7749c7480725a1d42ccbcd833792c161f4f45c7b908e4ccb46d45dd98e6d32fe282e6b2612b39ada81378a07ee738da611793f49599d37bed27c54c8fc03aeebbc93dc1fbf0660493c6e63f8fd49239983b9969503a12762a20e22fbe628cbff8a4d5572adb9192d23005cd3d2ddf", 0x8b}, {&(0x7f0000000580)="a9bb472e6944614fdf17b2f3154efaae21a1d91083c6a16e18a6c0e74f1d5ce6ea74c2597329a9ef054ea2e529c12ba44b1b", 0x32}, {&(0x7f00000005c0)="8116805f09a5ca417a6980be2ad333f9fd8c623b86b66c513a48ef928ea3efbca5e4abb213e94db2f5038f67d05032c750c0326479b17d19f4a1107003375500d3288a292efbfe8b8493f963619bb32d56257b5fc028844326d2d08a9e8cb63a2dda735c8eafbbe4a7eabd40420b51916fd11fc5880b640fc73932cbc7ae5062b183e624d3afc977d3a0085c1459476b4947cc39b24dedcba1b81a", 0x9b}], 0x4, &(0x7f00000006c0)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r0, r9, r3]}}], 0x30, 0x880}}, {{&(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000a80)="d4c98f781bf1804fde9c2886bc25d08218d90eba42a1c53bd3b9a5fb0124bbba9d207b79d875cd4d55acb05cd212a8f0cfffffffffc463ff37020d98a80a60c7e4faabf13fdbe92188061a4e1504516be305c1c5c2ba22989c9a32fe0729c8426d1911accd", 0x65}, {&(0x7f0000000800)="7ff90cc1d3bfd19c13b3f732c89a5eb7a16aa7fb2aca5e1b8d267bc8423540b62e5ca8501baa82ca28f83e72908632d9e6a3ed8a5a94e74e2ce8506368ec374e1bd78fe5930c322fad4108a29325789c634e6eda362745809cdf6e3d1465cb44ef2671e60b36461d3b8a9cffb8934a2149c6af9a1a4872a0ea962aba75aa3fc33bb505efd4ac56b3668477f6bd34edfa0d78ea92581156ab4f013dc161a6", 0x9e}], 0x2, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {r1, r4, r6}}}], 0x20, 0x40000}}, {{&(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a80), 0x0, 0x0, 0x0, 0x4010}}, {{&(0x7f0000001ac0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001b40)}, {&(0x7f0000001b80)="d2582a0e13a8f9a58390c818d247c30022f5265f803de59d41bd737ce77eaf1d64852537c09f472da17514794a6d2c9da111b950eb0c685470eeaee9e519d5c9d1619a85c43e9e969c96a2c9c01b9034722541737456a0b96b390fa019aec5a8eed98a7976f5f2246b17cfcf5e1db6dad6c981ec977fc952d2137a3844a5da0c4f31794820a31120f778611a3814a23b6827bb257a8576f63a96dc19f84f255c8fa40be48033c73a101fd90740ef7b0fee102f15bc5412f598a63c71720abca1429f8de922d76f12a11f2d54e0ceac0185f45fc111a61f0a37a3bebd53", 0xdd}, {&(0x7f0000001c80)="258ef420617685d6eb965b553dc99cbecd15279e9d0f8b4aaab0a0a8162e527e5043f0e6b9247c2f989b9c40633af0893a298f7c91d5a007eee71c82bb9bb85cb0696c53", 0x44}], 0x3, 0x0, 0x0, 0x20000001}}, {{&(0x7f0000001d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001dc0)="fb3663f203f9cb3ec6cb958ec7b374478bdb8075e96720077ec088f5443359f38c84b98c841a12e447df4ab9918b951117cc8b2d87d918307052b18cf254743ccf6b4fbb920002853d824a37f19e913ae517d08d079dfcdc3943f32839beb48341c46e4c31b48c34a2e1f15106bd288708d8514f6e439824b2878a6e", 0x7c}, {&(0x7f0000001e40)}, {&(0x7f0000001e80)="398a0702657fb5a07324db593b44fb117a6db3c8ac1ca1a0ec6e50600529fd55a9a8e5cdb16e8b94a9ab79692645d9f0b88bd10891ee373375227ef1e264fb6381f7813b101bfc6cfce6695504be96659bf2133c694f0ef23f6bb7f8b54fec9696c81462278e2bbb73db9cf44db3a95ca5eb1d4899548c1596fe33cab3a33ac599c2166487fe88ddfcdc55ca376b0b04ecfbb55d62ef4a69253b68aed8a0f77ac901234418be5c06a0b78da7aeb2e49a4fc9e420072c0e73", 0xb8}, {&(0x7f0000001f40)="311153bf99b8789df427a06b9fe2686c0c6175e2eb0eed91f338e6da84ab10aee932288d613b7bcfdf8aca027fd0147536948da529", 0x35}], 0x4, &(0x7f0000000b40)=[@rights={{0x1c, 0x1, 0x1, [r2, r7, r0]}}, @rights={{0x38, 0x1, 0x1, [r8, r2, r9, r2, r0, r3, r3, r2, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r1, r10}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r2, r2, r3, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r2]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r1, r5, r6}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r7, r0, r9, r0, r2, r3]}}], 0x120, 0x41}}, {{&(0x7f0000002300)=@abs={0x1, 0x0, 0x4a24}, 0x6e, &(0x7f0000004680)=[{&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000003380)="40a5ba72b797d592a142f5068bb74a233e82fe80e56101de4dc00512ce3d12d62ef8cb65a68e617b4cb4c6f2cd13ad9a99bcadea78095c9995991c43e404adf654cb118b997766612eb3965bb94a8bb716a14763b4fc89034d87c78ae1c3d11cd90e862a19f74cf2dae145c87d198190d7a1348fbf1650c8c8400037c068a40c85d9f339b1ae4a2105929ef1dbe40079b9812a458db34696a6f5c28a272061e7370e82e60be9a2353d25612a59f9af40f0fa09f6185489c0d7de15f1cbbdf16b0ef0075b4f1361ecd545902c27676296c411f6a6ebfc56cd43cd671201769c2efc89cf62c3d0b14ef26ed8fbe3a6464f505d94267d95c8f4fe8cd355", 0xfc}, {&(0x7f0000003480)="d28b09642c622c4ea4fc364fc95d4d3db70485f21ad01c673bda41ba92ae514e8ce6198d378130d7603e4d593c0c31260ed0af20511b6bad8ec33e89d0d78d66e4d4ee771bc025a844903296596795ada8de00af69b47a07b3c6c55b4f2e6f12191dcae05d7265b991461f3537ed24899f90365c0425cf9dbbe9a39665e15ddd4341bfdf77c8d32b2849b8a9b086039f421b053e99041747d8e224f2976450ad3e3044e20532af0ecc55221a7fc0b75506e1edbf42e7357424cf6d6ead85053c2a84a1a53fac7588a918dae34c2a72b367980656e6be833511ba0a44a070fcebb52be365b153aae8d6301eeef6a92d1effd9c1726d202016fee4fa1f65abf02bb846f4426b360822de9c9bb5c152478eee3628a0fba3cc0eaae1f5d3f1666bf6c16b58e039790ec5c2fc50ba1c383e1c57c274816d043eb433970842c2976fe148e2abe4044f3801c0633e4e22c1d1542634be9fc0d6e16626646abccc162791ee4e98736701890ca8f5bbcbe6077992509c1b4ac6be734306514c310474fffbb7975c9b0392874aea70af9564788ff876ffeeaa5780256dc1c265fc8eb533faf30d2c91d8116b79758b787face2f007c3e078a89601bcb25b531cacfc4292d42e156717d83933284e051535ebc7069613ccb9306456fc3e51ea1912a3b5ce7f39408b40079509a53ba458fc20857176a5375628f26599408ecbf2a816170b14560d5ba87e57c35553234524795e5a311cb250ea5bc0c0c8f9bdb18d807e44b29ddf3e84f00f04b8e4f07122fa59c801bad262fecc36d0dc08906463bb93d46d18e191d6443db68ca6a270032669ddbe31a577d16199172d004d379334aaeda4df2f99ea01ed2485625cb333191a54df967341b3438369c4e7e9b04e7a375605786a2952ccf696d48253aa883e359b0ecb67b7aeb66e3f160e29f97f6df2de74cc65760a6a7d2969fef458bf632462dcd8f4bd964652181e3f3be6c8ae1bf409258ec1d51afbba4df97a89539920cc316565716b3da8d6ee12f29b7a1749a44ad7d3ab30f9388225870994c998a654109b3f7f24451edde1875f97f0607033afa6ea195b5ba1736595b0e67169ce6c11f643cc9e8fb4cbe724c191f3aa7e9b84b6be588f97d14969e1d3a0feb7f332ab4aa435254273441573ef351293f6447e2c9e371451761ea60c277f5a0ce9b2d446da54fff76454b470a0c2d6af1794960526e8e30869bbf6c99c02f8e67b38dcdb08d0958ecdfccf665830a5998510154aef537a2c51482bc138a4cd86b954adc7edeb96560aaaca6c8b966d20ae17e3f0774bbbfdef7000794c771b403e4604a98a0437e04be450ce68b125d68bb6502a71672597cf5fc114fb07cdcf27ae45a540d887948d3fc19f45ac8dc8991b84c9c10174fec4f3c15fc18700f3a6411b49c67d03b11ea643e7ec06237ecca1481ec8d15736b097526d00de43d25178f7901f92b05d1854cfb9b25de2b4fba39b275d5ba5d7c3dd1aed3af77cbab015af516fefbde6940f9a54fae643b485736becd5e43cbb4b197fbacceb5597046deab583c72a79ebb6ac72fecf967217fe08e1a283d356bbb9a8d7b5c53b350948b149551043a4c832b4b37b2983772a2ed5bb198cc0a49286e0bfd87b2afe6287cbe8aded1fb1fd2d51bc259b60615b266d8e59c42fd40c96506cdd8fbcd6fd6c48896848ad55151c704eb1dfacc52ee326344275052505d046ad819ccb3f2a6a4dc46b24aaa8019446abc5498105252d27afcf93a47d2a62c11449ceebc263a7e7eb816fb8e33dda01ea5841f5f2d21a0d80c0d0e781db88a43840ab6a47e1a9793cdc5e17aa4fcfd78e54c88d5ec75a9d8551f5acab17664e494206f603812d080098c8984daeb2ef0c89b40ec55efaec82fd9fe8f568b996a4e8c47eea08960eaa6bfa2a5a982da1df51bc4cc5cbb414d4cfde23ccec504c5c59703865de29f44bad40138721a3de6969a96fbad08eff6fa1e5a715ed321488547ae176a9d57879f03fce34e9a8f9d0f4ea0e2143e0b46a20c13f96cfa33a783b80a749132f6c48e358bc9328c106f12fb33ed36b94716e724b5017110be50d51aac528fe0abe2e05d803d321d4379fdd2736505040b53c17e651fbf12c567e5092d03a5ad2f4149a66eaae27f4ce4daab7ee99d946985e363d6da7533e544d6273823338d7c49885f8b132652b560de96581f5fe32d4eba301f6e70910e4d2952197b50d0d00de5ed8893aebd80594f6d0ce8f1f05f7ca010dc65d406f11b19489a8b5077a44b2ff0151079caca183ab0b434b8c51b4d67cc230dbf2ea9aa1be948f9d3ec24433667f3b3b21bb0affba3c2534087a5051a75217d7643c901860e56320d07fdf6e5e5ecb3c2488860e6e982e66e914c24e5e2cfa1a4d6962c5bb4a82128e2d9637324a3a2a4c7b163948d1f3bf471b100eccb6af784cd198bcb66be8471c1cddc77fb6f0194ac5bf6036d421f056d4c5d8bac67d965902940f1a072598d71c28632a37984e2943e87c1ab0f32b61c7614ed9ca3af7457861abdc678eec0622d000a7e49283c3c48c062d0e39b0175f0b060d8a1eb603acd8d8aab4a4ac604cf63f0f4eaaf77b4fbca91b1727bde234bccf710355b49daced4f62e293313706f07839b9f10438425969f3897b7ad014fa0582e6822c8f41e4e12f155324f4068d9135936c7fabc979ee694bf356f8db479528132a53a16f054c05b03fa662107be91a40a0c58954481acd6fabc21bbc01dd0e475434f5ba2d6ed3ed8237fcf8bf2d4989879247ee48b482080f4dc6a20165165517277b99d86fa98136d2e93c67be4edf3ed11b2b3a01652525b8d51b8c7ead27cbde4b5e4e13da174bcac5cf4db51789fa663e53d289f9282868798b8648246ace67f264bc24fcc1f9065bcd0f45a7955d63b84b69905f1a3bf9807891424cf8fca38ea9d1ddb0f23737bad58d11df105e3f8a3a4bb500e004f4ec16890e2661499b24d1ce0c3bec528190d74957365cb27da96cfa9806507c6d78cf6526b5a76144438d8fbbdd75bdb45194ac7ffe3418e757e64fce46b10b5257c8f131922b7b76908f9c0e1001000063f8b9a66db24e162ca703fc1dd3405fab59db7cf7e19ee1359a05dda37524b23c5f6f01de5f4ef0e0973ed97a16380f88b1cf3cf07a657a7de290064811a64d100ad568e4529138e2859892abcfb53f4c3a8e0e1166b6a20dac439ae7c946f538b58aeadd7863ef67d26dbdac097e34df881eace212a348d0a1188ed37c3ab6960fc3b8935f951be3089d04f6f08141226cdcdbfb560daa34510720fb476258165d3f11f83c1146694e0907b2d2e28d0c80ad48d75ca6b8421f4966bd2578dc101479b446beaf73df0d4ee8bc2f17b349f22522217153f7f60b17d6ff943d828f48cf0d0b482a2408d093bdca1726d4145c9bba0a1cea1b9330bff982ea5d6c9e4d08017f3c23f6c64d38b72538bfe33420c82ba9c367ecc219f665deb00577669bd21436e8e6d6238e04f8661feff5c73765f2e7618bde32c5786deecd3b2c15164204d05dfa1043f6d1fa523c689e29579ffe7c0fa533a7e8d29e43eb761850c723a94fb12c40f756c6100a938c61b23a93983131ad59aa944040aa2f407b2d9fb5673669a4eb3719559b97e3ca01599875d90eaa8610b4bc7746852dc26b7e892a2abb392729d56f536d4621003774a3dcec39c31b5da5b862e41ffd9da85d5935c5d1d2c2e50b15a8428ee68ef168975d9e1e1426a2d79b314baab63673805937ccb87fd50c425f9c77f03a8ebdfa218b1c0507ecb9cdd9ad44af014fe1a9a16e7acb695c7555dfe6bfd987df4a83275c2f62c9d847c8945974a477ba4fba7e77ff875b411158bcb1fcb65a1d7d46cbc288bc982c2964b34ae26e23d4408a74b763260048e2c58193bf1efa1f92f50648d52f4bd38a9fdf04e1fc533ccc97e2fd0cb1cb25d2daabe4ef71834a21712b441a8aed9261dbfd336a852f45c9c0213b72f780228ef0e86dbb56e33ec82cfcdca6e19be422cec8209eac3d31da0b2e005a2b9fe269964d4e23163b6c0ea50c983b9072dc35d5190a3a368c1739edfe8dba659cb3822f12750eee9d327d307b0618d7751a938724a47bbfc99d24012b50f0feb32f09aa74a0283b2cf858df5c353322c529095d4a8098bf5393a51b3a338359174e5607d7e16016928f5b6157ea45d672219e949f45a3e55264ef5ffddba2ee123db754167d16a4bc2a0341dfa09970da52371d7093b191f3ddadc616d9ced0e7bd35f9f77015f995f8e89d252ec280101cdc13847a16aa7c67bee0fd07c81152429ad7d7972a1abb3671ec600ea7d018b7e8ebd111c39f76fbb0bd43407b0271c4b6f0dff69a8a74240d00261322d3825e545369555c88911053df6f00ac03dbab27189fc272da14dc5a31aa2d7d6ad1d38a5269eb920f8c53bdd6c9b5e7edbcb2d48b9c2a14cdc3edca738096bfeb13f65d167053203d2e185f1ce6e23c827b6152addcbf3b5e89caf6bc76045e9a85c4e4c522bb2555fd9776e10987f06d4aefff78b0b7c6babf8a0748f8276c477474f30e6abc005db33becb5971cbc1799572db43de2d48a7443cc87bc9bfab714b41553866128cdda2fab5c79ab581845e69597b9e784ec20b1d7ce5132ded6bda08a0ea73b20174876a18a0ba0fa2cdc8672bbf944539d8ac6eae53c2c6a91ea9a0a2f314c3ba1d40af0ef645f9502112910a59dcec71ebdf4417c80ccfc132f9b28693ac164bd5eb5ae81b88a39231c6523d5e7297457a8240559274530f7d7664a071d81bec617e1743d2fb7de498fa3ad3537595d1659aec5e81ae340d4801e8dd1bf06af43138cadecaef38e400da1e745842baa037bf7455bf98cc4d7669d2f1acd7a6c798f63d524bdd030fe7def5b321446d261c20b3d82794518624a7fc41883ebee52d2f97805d6b28d09faf6a3068479aa9e8f306c67bbaff332322ddf5158b8a19d279845f8d7ad99aee71e5e89f3ae9c55c5330e0791acce1e424f44df1752a6d77fc6cd1202d48cf62414a862ef0752b2a6a4d7f97551776c4d7b1a11019d2aa6017925e7c1df1b7ccfa2ee21ac48f0f8cbd84cd090fed07055484680394e5fbbfb6aba58554e9de3d0649420d950bbf9b64752d4b07b0a4a3ff879a850fdd4f0bf67040361ef578239713e229f479b7afc88cdd54bd788f601788f7f46fbf9d4110a6b092895e6b198360e6dc759912468208dd4ffd1c6119e62f4519be0b43c13ced6b55ca590a0838eb6cfdc40558156ea9580513b3b02d20741c41da7555eb47fe206386132d5151e0b614397b9b13f9c6cf99c969ea0ff570d1459a4b6d9b7ef4d524af8316f9484dabb1193172a681d55bbfd36481e72cbe4814519049aed3b15188f8219180d42c8f597dd0c6662860fc5396e1b006a1823131ff06505ee93596f15316811c47a2f57f3d5279ee9ce01e283bc962f30e4f57583d515cb277735c57ce8161557eadf0067bd3a806dd3390b8b34245a845b723c5cf967047057d25e75aaa7e6d0b2b472eda49b5eb6a94d412fcb81411d44a0706fdbe87084ed783235e1d99920111e2c4d0e19b6c85286ebd525a9164cc19f492e2b17f0da16a2455e39f5e377c237db7a0f385d601928fdfa8c9d6706ce95d3509b066c62cb27c5382f85caa5803d791d7bbdae0c7967fcea7935b2f3a2efca68f2dacc3eed881bec2bd6ac41e69d913f03a832d0fd4a46df0ed0970dc39fa7367d0da78e3e42138c2d35c50dcefdf9c717", 0xff8}, {&(0x7f0000004480)="d25b4be0862fde5fda8ce578c77715f70e1ea78cca8ef4355afa141e09639a3fa3cc871095734e372ec6d88f1d6a7e4e8f6ee924202adafe367ec7724a0659659bc9f6520e94ba463ae53bdf172a486f2cbe6244aeac0da8475147afed17f561ebc3b50f174a9cd8dc910e204b4750e40c654db85fd3b448d1bd083005512ee26791577bacca152083abdb3972097a7ae1e17999ea25cd", 0x97}, {&(0x7f0000004540)="53c1688435dbf06b88d94e00f7c4641c89ed510fd6d945f1351beb1503f52fa0739cc026864335ff8374164fceb877829092d12bcee9010fb624f91742edcbc188edb33c750e36373872f33fbb01a7b2a7eb6fae5325c4927be88cfe639124be944fc72f07cd4f921ba01c762f458831f7f0907cfa82a2339ee299386e7bccd3297c1667776d0422784c43a346e383ac440d5079f71f195fde1b28c0db6b8ceac30ed73cdd493310b40228ba1716134e0d4a8c62149b2d9061d45f74f74155001faafb179461923fdd53a9b39aa101b6667817fedb6f9043b78b37b6346bd9be15cbb77a7835da81e922cd", 0xeb}, {&(0x7f0000004640)="7e9639f1471ba818c167f915b62d37e8598e360f5ecd8ed5ed1e3d7300ee95250a8a61fd684e54e79062582c", 0x2c}], 0x6, &(0x7f0000004700)=[@cred={{0x1c, 0x1, 0x2, {r1, r10}}}, @rights={{0x1c, 0x1, 0x1, [r7, r3, r3]}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0x58, 0xc1}}], 0x6, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, 0x3e9, 0x200, 0x70bd2d, 0x25dfdbfb, {0x8, 0x1, 0x1, r1, 0x1, 0x3, 0xb4, 0x4, 0x0, 0x5, 0x10}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x14010) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x1b) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000000000080001"], 0x68}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r12 = syz_clone(0x200, 0x0, 0xfffffffffffffcdd, 0x0, 0x0, 0x0) ptrace(0x10, r12) ptrace(0x8, r12) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r1, 0x2, &(0x7f0000000340)={&(0x7f00000002c0)="25d92ea6e53f0f9a24253aac6fe469deb96d64e08cc12ff1c6f68be60c0f473304a24af160b66098a65c4be35a4adfe34710468dba0af7e939dd4235166703b9224cabf8b3c097f4eaf5cbb5daab2e33ea6e1b7f8c8b3cb69fd5dba3ea2c652adec6abac7c9c2d9631a38f490f7fc14f", 0x70}) move_pages(0x0, 0x3, &(0x7f0000000080)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000000200), 0x2) 5m27.545676877s ago: executing program 0 (id=1553): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x3, &(0x7f0000000340)=[{0x22, '\x00', @buffer={"b9a60f72ad6cc5f4853700", 0x20}, 0x6}, {0x1c, '\x00', @buffer={"8ffb562e356ee08201cd89e837e04be3f181f074bff0aeb1b042a21d5439a826", 0x20}, 0x80000001}, {0x4, '\x00', @st={0x4, [{0x2}, {0x0, @svalue}, {0x2, @svalue=0x200}, {0x3, @uvalue=0x7}]}, 0x880}]}) poll(0x0, 0x0, 0x9) 5m27.265446385s ago: executing program 32 (id=1553): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x3, &(0x7f0000000340)=[{0x22, '\x00', @buffer={"b9a60f72ad6cc5f4853700", 0x20}, 0x6}, {0x1c, '\x00', @buffer={"8ffb562e356ee08201cd89e837e04be3f181f074bff0aeb1b042a21d5439a826", 0x20}, 0x80000001}, {0x4, '\x00', @st={0x4, [{0x2}, {0x0, @svalue}, {0x2, @svalue=0x200}, {0x3, @uvalue=0x7}]}, 0x880}]}) poll(0x0, 0x0, 0x9) 31.482265001s ago: executing program 4 (id=2501): socket$nl_generic(0x10, 0x3, 0x10) memfd_create(0x0, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) ftruncate(r0, 0x9) fallocate(0xffffffffffffffff, 0x20000, 0x0, 0x9) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583", @ANYBLOB='uG'], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x49b40) 29.205519489s ago: executing program 4 (id=2509): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/201, 0xc9}], 0x1, 0x7fff, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) r2 = dup2(r1, r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000004000/0x1000)=nil], 0x0, &(0x7f0000000100), 0x2) landlock_create_ruleset(&(0x7f00000000c0)={0x104, 0x1, 0x2}, 0x18, 0x3) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000200)=0x5) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0x2020) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) 27.985299133s ago: executing program 4 (id=2513): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_vlan\x00', &(0x7f0000000380)=@ethtool_gstrings={0x1b, 0x1}}) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000270849210c71b11709f220102030109022400030400a0040904ed7900ffb5f7880904ac0100080101080904b209002326ca053a001f6a60d10465b001958a9f7057a7c9a5d54c81ef85fbc3cb6aecd487b861a6a9fdd1d3356149fdeef58f70720b39b17b35724da5a83bea0961f21bef176e9dbdead751cbf3978dd4749356a078bb2a9ceeb3b2769a933607008ea447a3e8c83d3b7506a38e75d3834f7f72c2c72387a572a8deb3d4fba1948486e71129295c47738404e451fb65d8f915dba050f7bde12d8c582648cc3f70"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000270849210c71b11709f220102030109022400030400a0040904ed7900ffb5f7880904ac0100080101080904b209002326ca053a001f6a60d10465b001958a9f7057a7c9a5d54c81ef85fbc3cb6aecd487b861a6a9fdd1d3356149fdeef58f70720b39b17b35724da5a83bea0961f21bef176e9dbdead751cbf3978dd4749356a078bb2a9ceeb3b2769a933607008ea447a3e8c83d3b7506a38e75d3834f7f72c2c72387a572a8deb3d4fba1948486e71129295c47738404e451fb65d8f915dba050f7bde12d8c582648cc3f70"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x6, [@typedef={0x8, 0x0, 0x0, 0x8, 0x2}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0x8}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x1, 0x8}, @float={0x8, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000440)=""/125, 0x62, 0x7d, 0x1, 0x814}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r4, 0x0, 0x11000000}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r4, 0x0, 0x11000000}, 0x38) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r5, 0x407, 0x0) (async) fcntl$setpipe(r5, 0x407, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r6, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0xfea8, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1e, 0x7ff, 0x2c4, 0x3, 0x410, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1e, 0x7ff, 0x2c4, 0x3, 0x410, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)='%+9llu \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%+9llu \x00'}, 0x20) r11 = signalfd4(r0, &(0x7f0000000780)={[0xa]}, 0x8, 0x180000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffff8c7}, [@call={0x85, 0x0, 0x0, 0x41}, @generic={0x7, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @exit, @alu={0x4, 0x1, 0x8, 0x5, 0x1, 0xc, 0x17}, @jmp={0x5, 0x1, 0x5, 0x5, 0x5, 0xfffffffffffffff8, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x200, 0x37, &(0x7f0000000300)=""/55, 0x41000, 0x40, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000500)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xc, 0xfffffffa, 0x36a3981b}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000007c0)=[r4, r5, r7, 0xffffffffffffffff, r8, r9, r10, r11], &(0x7f0000000800)=[{0x2, 0x1, 0x0, 0x8}, {0x3, 0x1, 0xe, 0x6}, {0x4, 0x4, 0x3, 0x8}, {0x4, 0x5, 0xc, 0x3}, {0x0, 0x5, 0xa, 0xa}, {0x0, 0x2, 0x4, 0x6}, {0x5, 0x3, 0x4, 0x4}, {0x5, 0x1, 0xb, 0x8}]}, 0x94) r12 = open(&(0x7f0000002180)='.\x00', 0x101000, 0x8a) fcntl$notify(r12, 0x402, 0x4) (async) fcntl$notify(r12, 0x402, 0x4) connect$unix(r12, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 26.104352244s ago: executing program 4 (id=2514): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@allocspi={0x100, 0x16, 0x501, 0x70bd2c, 0x25dfdbfe, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@multicast2, 0x4e22, 0x6, 0x4e24, 0xfffa, 0x2, 0x80, 0x120, 0x88}, {@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d5, 0x33}, @in6=@remote, {0x1ff, 0xa2, 0x7, 0xfffffffffffffffc, 0x0, 0x4, 0x7fff, 0x48fe}, {0x4, 0x9, 0x5fde, 0xffff}, {0x5, 0xfffffff8, 0x9}, 0x70bd26, 0x0, 0xa, 0x2, 0x7f, 0x1}, 0x3, 0xde}, [@tfcpad={0x8, 0x16, 0x80000000}]}, 0x100}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) (fail_nth: 5) 25.626624256s ago: executing program 4 (id=2520): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x0, 0x1, {0x22, 0x27}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ef, 0x0, 0xb, 0xff}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001340), r2) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001380)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r4 = socket(0x800000000000001, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) r5 = inotify_init() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@newae={0x6c, 0x1e, 0x2, 0x70bd2a, 0x25dfdbfd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0x4d6, 0x2, 0x32}, @in6=@empty, 0x3, 0x3506}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @lifetime_val={0x24, 0x9, {0x7ab, 0x3, 0xffffffffffffffff}}]}, 0x6c}}, 0x1) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x20, 0x23, 0x27, {0x27, 0x8, "9814cba2a4f838aff2deeda319f525479e74aaeb0b67a3ae93d51be9d1bdc668edb7bbe1ea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 22.566950744s ago: executing program 4 (id=2528): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001d80), 0x1, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xff) io_uring_setup(0x3d7d, &(0x7f0000000100)={0x0, 0xb2d0, 0x800, 0x2, 0x1f2}) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x13f, 0x0) epoll_create(0x7e) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20004045) io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0x1c486, 0x200007, 0x3e2}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 11.873002379s ago: executing program 1 (id=2554): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 11.560794387s ago: executing program 1 (id=2556): ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x2, 0x0) eventfd(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xd4ea, 0x2, 0x0, 0x3}) io_uring_enter(r4, 0x6a8a, 0xffefffff, 0x21, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000040)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_LINKAT={0x27, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1400}) io_uring_enter(r8, 0x1, 0x21, 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) keyctl$update(0x2, 0x0, &(0x7f0000000140)="c4", 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xd, 0x7}, {0xa, 0x10}, {0x4, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0xe}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c4}, 0x80) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 11.201582655s ago: executing program 2 (id=2558): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c13, r1) 11.029887103s ago: executing program 5 (id=2559): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) pipe2(0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x6a000, 0x0) r3 = accept4(r2, &(0x7f0000000100)=@isdn, &(0x7f0000000180)=0x80, 0x800) syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) r4 = dup2(r1, r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000000301472d00000000000000000000000a080003"], 0x2c}}, 0x40000) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000200)=0x5) read$FUSE(r4, &(0x7f0000008400)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000002380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8081) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) 10.928851407s ago: executing program 2 (id=2560): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x2, 0x1, 0x4686f6d2, 0x1, 0x4}) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x104) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) syz_usb_connect(0x5, 0x4a5, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0xb9, 0x1c, 0x75, 0x8, 0xcf3, 0x7010, 0x3b97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x493, 0x2, 0x7, 0xfd, 0x30, 0x4, "", [{{0x9, 0x4, 0xb8, 0x6, 0x9, 0x29, 0x1, 0xad, 0x10, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1afb, 0xfff9, 0x8}, {0x6, 0x24, 0x1a, 0x7, 0x10}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3c}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xa}, @network_terminal={0x7, 0x24, 0xa, 0xd, 0x2, 0x80, 0x1}, @country_functional={0xe, 0x24, 0x7, 0x1, 0x8, [0x2b6c, 0xb07, 0x257c, 0x3]}, @dmm={0x7, 0x24, 0x14, 0x0, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}]}], [{{0x9, 0x5, 0x80, 0xb, 0x200, 0x6, 0x6, 0x9}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x4, 0x3, 0xf5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x7fff}, @generic={0x8, 0x30, "4e672880d75a"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x10, 0x72, 0x7, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x4}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x0, 0x5, 0x81, [@generic={0x88, 0x21, "7e879d277829bd6ef7ac23fe7c269e158cc1404c34f9d9aa13a8e9d7b801ea9a96c09e5dd5263ca07842fc991fa5b45a13c40378c94744344e0bdaea808e0609b547b9644f7bd28666ec10e5d038953777925c6ac9b9d7f49986352f36a42ca5224609669d65843c3488a6002d4b8a279fa1fbe76d025656a7517e51cb0518eb28f1798b6e08"}, @generic={0x81, 0x4, "c092ce63b16eb6968469158d80994e1b9b52927773aac100f28a5f5f5631b891a8ef0de31ae990243b5904f2d47426c343ff092fe20a9560c88c2ea0451e9e2bc4bfc730e6369096649c9ba5ee27b727e1d3671326576de5e137e3456defd56874eb31b3e3a6638392ef0e84ccd35eda40abba77951be80f9c6e0fc52604a4"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x6, 0x1}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x2, 0x7, 0xb, [@generic={0xd6, 0x0, "e320e8a1c4c44a37452c05e28bcb727fa0bf312a8f74b7b5f45187a521d7578a49674bdb69081f567ef4d7d34870ce0cbcad8cbc93ee865bb410e5eeb5603783611416c6ed286db27b72c50323f9dc1842bb93be1bd920014abd37d8cf719b578a2018106dd49a3b75174fe2782a93d41d9dd6273739b6bce09785f5bf9c5a3b61de89c4e973a38814a8101089bf9bb38d4618dc72723c47adecfc421f9f97de6268d2999415983d20de71b043121a656e3c67ea82fee17afe139574fcd1fa178f5c2677d0b3435da6bf786f6728cc369c8ba6b4"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xfd, 0xe}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0x9, 0x2, [@generic={0x1f, 0x23, "23e94fb7b865f140c2ae8c6042d1d46da42e9ffac31ea29f3c58c8a500"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0x3, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0xfb, 0x7f, 0x9}}]}}, {{0x9, 0x4, 0xe, 0x9, 0xc, 0x54, 0xf5, 0x85, 0x0, [@generic={0xc, 0x4, "7a1dca21b15fd958b8c7"}], [{{0x9, 0x5, 0x1, 0x0, 0x10, 0x6, 0xc3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x3, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x39}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0xfc, 0x6, 0xad}}, {{0x9, 0x5, 0xd, 0xc, 0x200, 0x9, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0xff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x1, 0x5, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8c, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xb}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x6, 0x4, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1b, 0xa, 0x0, [@generic={0x4b, 0x7, "0b24c2ce221c2700ad179c37a28f1792c72d32492fed5c1add63560a9137cb74c86b5e5e59d11b51c1de97d3a7e4b394979d44b58f7b4623b6baf17e38705ee48aa09f5a80592ad5c0"}, @generic={0xc9, 0x2d, "0a32aa6c35aed3cc102057d27ed93c8358dd94b28905fe2a06974be4d6f7c7be2d6801ce8353b4b53743220556d20ed57469d27faf438ee2acb08bf7b65bb776d324f579baabe9029186a06248cf67cc9fc4b31ac14184fe858a67d873b307c274a8255cc5643b5e509f1ac0e60e45cb7195394a4a13841abb42caeaa597c5f6f05574458c95fff3f8c80879e472aa10b15b1745165c6f6440e422a4360e846cfa9c344736bab066f9dbb614ccfb531cade1b4798c0ca2e7b562a229789ab74be97403a641faf3"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x2, 0x5, 0xf6}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x2, 0xfb, 0x9}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x7, 0x5, 0x90}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0xc0, 0x6, 0x4}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x7, 0xf, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1}]}}]}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x111, 0x9, 0x2, 0x1, 0x20, 0xe0}, 0x1c, &(0x7f00000005c0)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "1fa1734a9a8beaac85620d448f5df9a3"}]}, 0x9, [{0x71, &(0x7f0000000600)=@string={0x71, 0x3, "dc498e171b23873ec5b2479a0b856b1d8bad123f781c620abaf1c812fa22136d7da89568b5a90a20d0f1a910b3b98c5bbae123e5e90e7739948da9639132d1e2e39bb0fa612c1756e8508d4c8216cc52154268451ae2566466218bcf74f1f704baf0f6967404b7d248d9437f4e1df7"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc0c}}, {0xe0, &(0x7f00000006c0)=@string={0xe0, 0x3, "751c7c36fa4374d23ac923dabd810fe22292d727513ee1ecf1db642470653759e01126aa3cfb3d65a9e1e37517248928df15c16e2e791003b7862cbe15950485da5fc0b3c00dd8a580557bedba11d7493ac4b2e0cfe16029b1d3c5650f19d0252ab560c14759f6c8f4a1fd4c32586a8846bc4a67051d5ee429db13f71f1e3899d61d27fdb273ff9db348d7b56aec225edeff80259d69bfea8f5989b15dd289d83662554d4f56c32372092fce90a79750f1bc0bc32b8c52ef53a61a11c050372c600e5097db3092c9658fdf8642bf704e3d105c6de8e5afdfeecda843e090"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x455}}, {0xd3, &(0x7f0000000900)=@string={0xd3, 0x3, "cb1637d476a70a61fb694504be8b4e1ca740477e5e51df1cd4194c90c4df6e081e81c6e58915ef3b5f695d2c349735b280474ccd594af026190118793bd88c30d9566be06da59dd305fb90276c8ac7d73b99c32fc26af1949e9e11a93bcc63d55d8d6f8a5951b217b73bc95c849a5d7b8a0d00a3590f74a2370db5a0ac64b33a9493f1f92e9860b70a5cf6739ffa6c53f29251ff602c96eb3801190a5f7130d97bab5c2ff50dbd3b8b9623d23f6e5c8c471eb88ebc92ee4d9a460e7d6e045209d221c6d9404e606286121e8818a157ced3"}}]}) fchdir(r0) vmsplice(r1, &(0x7f0000000c40)=[{&(0x7f0000000ac0)}, {&(0x7f0000000b00)="2f3df609f13082a5422a8ffef96d0244a3ddef71d09199a0ee6e740f085315d96747038dfeb8f29adc1edde285a2928f57caf04a09e07f984c34b2aed9112a62f902da7e0131a278156cbb8a344e19fbcc7e345541c0c29355230427713f50884a41879b1eb8eac1141b0c7ef74dd0452b0a9a0237fb952e1d00e454729306a394a4bbb8785b93b81eeff6ad84dfad6b45428e7bdbac2f94dd7a6fa1354afbe1beb85586ac24da29d444c9fb02c26b093150e6e4c9718b7825d4cc13a5535ed805acec66", 0xc4}, {&(0x7f0000000c00)="e1a9acf58b5b7a3d901fbe9100f1a53da3659811ec0866128484868f4be77966e8f74a0f543926e33724", 0x2a}], 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000c80)=0x8, 0x4) syz_usb_connect$uac1(0x0, 0xc8, &(0x7f0000000cc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x7cf, 0x6801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x2, 0x30, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x33}, [@mixer_unit={0x8, 0x24, 0x4, 0x2, 0x2, "f0e78a"}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x6, 0x2, [0x4, 0x1], 0xb0}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x1, 0x3, [0x6, 0x1, 0x3], 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x405, 0x6, 0x5, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x5, 0x3, 0x80}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0xff, 0x2, 0x28, 0x3}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x5, 0x4, 0x3, 0x5b, "", "cb"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x2, 0x9, 0xf, "b84e"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x58, 0x0, {0x7, 0x25, 0x1, 0x4, 0x4, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x6, 0x2, {0x7, 0x25, 0x1, 0x8, 0x0, 0x3}}}}}}}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x300, 0x4, 0x9, 0x4, 0x8, 0xf8}, 0x61, &(0x7f0000000e00)={0x5, 0xf, 0x61, 0x3, [@generic={0x52, 0x10, 0x0, "c7d4055530e88036c653ea5a5d307b06a78035e0e3b142c68d6535418ed6e2b89a9c35eaceb86cf63f8bef875880f01089e774cec283156d37285b1b41088edd0a1ffb15245182f8dc78a96d8553c3"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x4, 0x3, 0xff}, @ptm_cap={0x3}]}, 0x3, [{0xb0, &(0x7f0000000e80)=@string={0xb0, 0x3, "652de165b13c87cd7ec04b09f769f70afa180f5ba6a97037a5b5ef1c461347792cff173699a9463b54eb3bd3e031f30a79f8c911b05f8add430198a793a6c788924eeb7329e298a605a1c03278e88922f68be38f77c08b409d87576b9cbb23431265370a846936e5aeb8ac0eb64f067d3de05324ed3799ffaaba77632dafb78a01e84b45774c6f2038434d54f78949beab99a1ce996eb3d79d11a75c84b7bc909a3f04422da095d129dff25dc82d"}}, {0xbb, &(0x7f0000000f40)=@string={0xbb, 0x3, "2f0b7210fb73f1ba09750291a0f412883af442ad111d8eedd8b4e976b8b6e639e132af78e7224550c9962a9c35bd48ee74ea34fb5be75a57cb057fb03bf3b2a0f7cc6cab9a73c98a5a59c2ab984d28705b0e2e5f64aca64c91208e68ff2d8594c395c2e38d2461353be60ca9f41a5feee4716e730b822f2dbe143e57c683affafc0a27ed7cb221b689fcb833d42d99e575d1d257b19bdf021fcc5e41f86735951ec8a67a74289d0db203ae178e8cfed2b4fa0279da0afea489"}}, {0x63, &(0x7f0000001000)=@string={0x63, 0x3, "cec15031012c212fdb5c3b9c27b7113ee87e2e2a43eb4fb0d8e735326a33b23b4d2ef7b9a5159b62397f752ba20bded030b23ff549ab3706cb515ce587b823dd735467c953b7cdc2e99336e5cddde8459dca9361f435ab3375e638d120d9fa1906"}}]}) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000011c0)={r1, &(0x7f00000010c0)='\\,\x00', 0x40, &(0x7f0000001100)={@align=0x400, {0x3, 0xb61, 0x101, 0x5}}, 0x7, &(0x7f0000001140)={@_ha_fsid}, &(0x7f0000001180)=0x7f}) ioctl$VHOST_VDPA_SET_STATUS(r3, 0x4001af72, &(0x7f0000001200)=0xf8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000001280)=0x5) ioctl$VHOST_VDPA_GET_VQS_COUNT(r3, 0x8004af80, &(0x7f00000012c0)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001340), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x68, r5, 0x800, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xab36596b6526c45f}, 0x4000000) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8) 10.580119246s ago: executing program 1 (id=2562): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) syz_open_dev$vcsa(0x0, 0x1, 0x1a1300) unshare(0x4000100) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.318410111s ago: executing program 5 (id=2564): r0 = io_uring_setup(0x57eb, &(0x7f0000000140)={0x0, 0x0, 0x3000}) poll(&(0x7f0000000080)=[{r0, 0x200, 0xfefd}], 0x1, 0x6) 9.316011407s ago: executing program 1 (id=2565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x10b883, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x408000, @mcast2, 0xe3e, 0x1}, 0x20) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.045413599s ago: executing program 5 (id=2566): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001d80), 0x1, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xff) io_uring_setup(0x3d7d, &(0x7f0000000100)={0x0, 0xb2d0, 0x800, 0x2, 0x1f2}) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x13f, 0x0) epoll_create(0x7e) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20004045) io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0x1c486, 0x200007, 0x3e2}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 8.951329375s ago: executing program 3 (id=2567): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000300)={0x1, 0xfffffff, @ioapic={0xffff1000, 0x7, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x1, 0x1, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0xff}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x2, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xc6, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x16, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0, 0x0, 0x11000000}, 0x38) getpriority(0x1, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000004000"], 0x88}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/49, 0x31}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x28, r8, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x28}}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x400c090) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 6.094039707s ago: executing program 1 (id=2568): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44080}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0x4}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000000000}) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, &(0x7f0000000200)={0x40, 0x8, 0x43, {0x43, 0x22, "9e9493ce036227f128d52aaf8c2bfec79e8831f00402cb56ff7bee5c8a5865992dbd6cd8c3e6028503b2294c370d7891d3cecdee9425e9adc4e49723288da23ef2"}}, &(0x7f00000002c0)={0x0, 0x3, 0x20, @string={0x20, 0x3, "1efb93b8b15a712a13aafc33a188855d2786a68287f2f00a5cdff8f74940"}}, &(0x7f0000000300), &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0xac2, 0xa, 0x1, {0x22, 0x245}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000500)={0x20, 0x8, 0x6d, "0bb3817a7f02d8fc544b55eb68a1b0b8fced700aecac22e9314561c13d89b8bc772d7839765d6b30924dcb2f79337663ad26eb71e2ce2b97efda323c33ec96ce7eef50996ea21a5f5de4760e4a2e64c04c910aa5de72cf7acbbeadad1f2094659b46d95d30dd67b1b00bbc61e5"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xf3}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x1, 0x30, "70d9a509901aaf75d1e7592f97f9a6696884ac99e2287e063de4daacbff14c629a5811764700f1695b78c08bb8a57d3a"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x20, 0x5, 0x1, 'm'}, 0x0, 0x0, 0x0, 0x0}) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000400)={0x44, 0x3ed, 0x10, 0x70bd2d, 0x25dfdbfd, "c642d0fec1593228910c2865ae339caee0a248d7607f416157da85f7b4053ec157af50b77d06c897b296d1e0b8eb39b3a6d4c3"}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000280), 0x4) 5.814944805s ago: executing program 2 (id=2569): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @local}}}], 0x20}, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r3, 0x40809440, &(0x7f0000000180)={&(0x7f00000000c0)=[{&(0x7f0000000080)="3e63aa5dae2cc124dee71c9e5c5540c6e3baac5eac601c5be8445b8d3a8689ff0be5beb75acc1406", 0x28}], 0x1, 0x6, 0x0, 0x3a, 0xffffffffffffff7f, 0x2, 0x5, 0xc}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.814090268s ago: executing program 3 (id=2570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095", 0x4a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b", 0x7f}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) 4.46452376s ago: executing program 3 (id=2571): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="17", 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x2, 0x3}}, 0x20) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2100, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0xe, 0x2f, 0x0, @multicast2, @empty}}}}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) pwrite64(r3, &(0x7f0000000380)="cfbb368df16c612535530583a0af0ca274338c8ffbea961a082f34af7b0c4ea2f730332bdff31395ba1197f3363ebe3979e85a3dc84487d58b4f40cecbf1b7b08c0f2e327242412bab0cc5fa1284a8275fe5c32e6fb4697e62f17d1444655771a0dafb2ad71c402144e013a9435aa2ddc9aec0e4b696d29dbae205723a8f13637bb3af8a2f8acb5db61426f1ae40ee9f91e70b4a88d761526ead658d9109ebd4c3df3c3057", 0xa5, 0x7) r6 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x1}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'gre0\x00', r5, 0x700, 0x7, 0x8, 0x300, {{0xd, 0x4, 0x0, 0x1, 0x34, 0x67, 0x0, 0x68, 0x29, 0x0, @remote, @broadcast, {[@ssrr={0x89, 0xb, 0x6, [@rand_addr=0x64010102, @multicast1]}, @lsrr={0x83, 0x13, 0x56, [@rand_addr=0x64010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010101]}]}}}}}) connect$packet(r0, &(0x7f0000000200)={0x11, 0x8, r7, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$FICLONE(r6, 0x40049409, r3) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e24, 0xa, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000240)={0x4, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x6258, &(0x7f0000000040)={0x0, 0x42a2, 0x80, 0x1000}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x39d) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x800) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 4.384933408s ago: executing program 5 (id=2572): ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x2, 0x0) eventfd(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xd4ea, 0x2, 0x0, 0x3}) io_uring_enter(r4, 0x6a8a, 0xffefffff, 0x21, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000040)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_LINKAT={0x27, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1400}) io_uring_enter(r8, 0x1, 0x21, 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) keyctl$update(0x2, 0x0, &(0x7f0000000140)="c4", 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xd, 0x7}, {0xa, 0x10}, {0x4, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0xe}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c4}, 0x80) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.785950554s ago: executing program 3 (id=2573): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) unshare(0x4000100) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000c69800000000020000000000000099097c0000eed7f49e45853ff6de000000", @ANYRES32, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000100"/28], 0x50) 2.783454536s ago: executing program 5 (id=2574): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340)={0x7, 0x6, 0x31, 0x5, 0x80, 0x9, 0x42, 0x9c, 0xb, 0x7, 0x8, 0x8, 0xfe, 0x2}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff9, @loopback, 0x10000}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0xf000, 0x208, 0x1, 0x7, r2}, &(0x7f0000000100)=0x10) syz_open_dev$radio(&(0x7f0000000b80), 0x0, 0x2) r3 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000340), 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0xf02, &(0x7f0000002100)={0x0, 0x191e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x541}, 0x1}) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000104feffff5403000000e6000006", @ANYRES32=r12, @ANYBLOB="600000008008000008000300", @ANYRES32=r9], 0x35}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) io_uring_enter(r4, 0x2864, 0x5edf, 0x0, 0x0, 0x0) 2.737362586s ago: executing program 3 (id=2575): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) syz_open_dev$vcsa(0x0, 0x1, 0x1a1300) unshare(0x4000100) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.641395448s ago: executing program 2 (id=2576): openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c"], 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x7f, 0xac5) syz_clone3(&(0x7f0000000240)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000004640)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) write$smackfs_cipso(r2, &(0x7f0000004680)=ANY=[@ANYBLOB='wlan1\x00 02305'], 0x32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, 0x0}, 0x59) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 2.580130145s ago: executing program 3 (id=2577): socket$nl_generic(0x10, 0x3, 0x10) memfd_create(0x0, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) ftruncate(r0, 0x9) fallocate(0xffffffffffffffff, 0x20000, 0x0, 0x9) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583", @ANYBLOB='uG'], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x49b40) 2.579043129s ago: executing program 1 (id=2578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_connect(0x5, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) kcmp(r0, r0, 0x2, 0xffffffffffffffff, r1) syz_usb_connect$midi(0x6, 0x8f, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2008, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x1, 0x1, 0x6, 0x80, 0xaf, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x10, 0x3, [@midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x0, 0x7, [{0x1, 0x11}, {0xdd, 0x5}, {0x2, 0x5}, {0x9, 0x3}, {0x0, 0x3}, {0x1, 0x76}, {0x2, 0x9}], 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x0, 0x1}], [{{0x9, 0x5, 0xd, 0x0, 0x20, 0x9, 0x2, 0xc9, {0x13, 0x25, 0x1, 0xf, "29420618ac3a09ec5b42148d0ee7fb"}}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0x64, 0xe, 0xcd, {0xf, 0x25, 0x1, 0xb, "ca2626a816c1979ed59d87"}}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0xc, 0x8, 0x3, {0x13, 0x25, 0x1, 0xf, "ab976c1fe2da4c2c914a4b996802d4"}}}]}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x74, &(0x7f00000004c0)={0x5, 0xf, 0x74, 0x1, [@generic={0x6f, 0x10, 0x4, "03b012f5a1e9ebeb14c1ae1a4c2c53ed8476fc48cdb098aa82bb36c97088b45fe6691805b35f58612a8d6e40a8fbcffa15f4939baede53cfd719fbc0a20f6ffd4f45166abc6c39ff569402f6523867786bc5da2756749d66a9f66d0270bb63f3825ab335c2ebddfff54cc479"}]}, 0x1, [{0x0, 0xffffffffffffffff}]}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc0}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000001c0)=r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100ffff000000000500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000800008500000004000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6c, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000300)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0x9, 0x200, 0x38e41e62, 0x64}) socket$kcm(0xa, 0x3, 0x3a) tgkill(0x0, 0x0, 0x21) 2.337595014s ago: executing program 5 (id=2579): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r2, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000300)='0', 0x1}], 0x2, 0xfffffffd, 0x41000) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "b390d19cb5df943a"}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x20000810) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x4, 0x21000, 0x1}, 0x50) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) userfaultfd(0x801) unshare(0x24040400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x24, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x6, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0x1, 0x6, 0x5, 0xa, 0x5, 0x11cb, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x7, 0x3, 0xe, 0x7fff, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x2, 0x3e, 0x18e, 0x2, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x1000, 0x5, 0x8, 0x4, 0x1, 0x40], [0x10100007, 0x9, 0x8000012f, 0x6, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x1006c7, 0x9, 0xfffffffc, 0x3, 0xb1f10, 0x0, 0x5, 0x2f, 0x8000, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x200004, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x8, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x8001], [0x7, 0x408, 0x403, 0x5, 0xfffffffd, 0x100, 0x401, 0x9, 0x7, 0x7ffc, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa0, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x7, 0x3, 0xfffffff7, 0x4, 0x3, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x40000025], [0x9, 0x3, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x0, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0x8, 0xa620, 0x80000001, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x2, 0x1, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0xf3, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf41, 0x2, 0x530e, 0x6c1b, 0x39f, 0x4, 0x6, 0x7fd, 0x800d7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="001600000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.218026519s ago: executing program 2 (id=2580): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r5, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/200, 0xc8}], 0x1, 0x91, 0x2) open(&(0x7f0000002600)='./file0\x00', 0x123a40, 0x140) mount$bpf(0x0, &(0x7f0000004600)='./file0\x00', &(0x7f0000004640), 0x0, &(0x7f0000004680)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '$/'}}]}) openat$adsp1(0xffffffffffffff9c, 0x0, 0xbeeda6fb0c3bb47b, 0x0) r6 = creat(0x0, 0xecf86c37d53049cc) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast2, @empty}, &(0x7f0000000180)=0xc) sendmsg$nl_route_sched_retired(r6, &(0x7f0000001b40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000340)=@newchain={0x17a8, 0x64, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x8, 0xfff3}, {0x5, 0xd}, {0x1, 0xffe0}}, [@f_tcindex={{0xc}, {0x490, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x8, 0x9}}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x6, 0xffff}}, @TCA_TCINDEX_POLICE={0x47c, 0x6, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x6, 0xfffffffd, 0x1, 0xf54, 0x7, 0x5, 0x8, 0x8, 0x5, 0x2f60fb5, 0x8, 0x3, 0x2, 0x4, 0x8000, 0x8, 0x2, 0x3, 0x4, 0x3, 0x9, 0x1, 0x6f, 0x800, 0x0, 0x228000, 0x5, 0x4, 0x488d, 0x6, 0x9, 0x100, 0x9, 0xffffffff, 0x1a3a80, 0x1000, 0x81, 0x5, 0x6f72, 0x8, 0x5, 0xffffff01, 0x6, 0x19, 0xa020, 0x5, 0x3a, 0x6, 0x789, 0x4, 0x8, 0x52e9, 0x9, 0x2, 0x2, 0x7, 0x101, 0xbc, 0x80, 0xfffffffb, 0x6, 0x0, 0x4, 0x5, 0x9, 0xfffffff8, 0x80, 0x0, 0x1, 0x5, 0x1, 0x81, 0x5, 0x0, 0x5, 0xa9, 0x5, 0x80000001, 0x33, 0x7ff, 0x6, 0x16, 0x4, 0x7, 0x9, 0x5, 0x0, 0xd4, 0x1, 0x1cd, 0x2329, 0x1, 0x9, 0x9bd, 0x10001, 0x4, 0x8, 0x101, 0x67fd, 0x5, 0x4, 0x6, 0x7, 0xb, 0x100, 0x4, 0x0, 0x8cf3, 0x6, 0x4, 0xd1f5, 0xffffffff, 0x1, 0x8001, 0xe1, 0x4, 0x1, 0x3, 0x1000, 0x7, 0x1, 0x8, 0x8, 0x8, 0x6, 0x2, 0xc9, 0x1, 0x401, 0x200, 0x3, 0x6, 0x8, 0x9, 0x9, 0x8, 0xc, 0x5, 0xfffffff1, 0x100, 0x0, 0x0, 0x9, 0x2, 0x1, 0x2, 0x7fff, 0x9, 0x8, 0x6, 0x7, 0x1, 0x6c86, 0xf, 0x6, 0x5, 0xd, 0x100, 0xa, 0x218, 0x1, 0x960c, 0xfffffffc, 0x0, 0x10, 0x7, 0xffff6989, 0x9, 0xc0, 0x80000000, 0x7fff, 0x3, 0x6, 0x7f, 0x4, 0x2, 0xe, 0x9, 0x7, 0x3ff, 0x1000, 0x1000, 0x465, 0xcd3, 0x6, 0x7, 0x2, 0xa, 0x4, 0x8, 0x4, 0x7, 0x1, 0x10001, 0x5, 0x7ff, 0x7, 0x8, 0xeb5, 0x9, 0x5, 0xffffffff, 0x7fffffff, 0x7, 0x6, 0x5, 0x101, 0x8ac, 0x7f, 0x8001, 0x6, 0xb, 0x0, 0x9, 0x8, 0x6, 0xfffffff8, 0xc4, 0x9, 0x7fff, 0x10, 0x4, 0xb, 0x1, 0x7, 0x1, 0x80, 0xffff, 0x3, 0x7, 0xfff, 0x7ff, 0x8, 0x7, 0xc, 0x808, 0x10, 0xe64, 0x5b, 0xe1d, 0x80000001, 0x8, 0x81, 0x8, 0x0, 0x9, 0x80000001, 0x660f, 0x1, 0x6, 0x4, 0x0, 0x8, 0x8000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8a, 0xffffffffffffffff, 0x9, 0x0, 0xba6f, {0x0, 0x0, 0x88a4, 0xd1d, 0x6, 0x9e}, {0x40, 0x0, 0x118, 0xd, 0x2f43, 0x4}, 0x8cd, 0x4, 0xb}}]}]}}, @f_rsvp={{0x9}, {0x5e0, 0x2, [@TCA_RSVP_ACT={0x78, 0x6, [@m_tunnel_key={0x74, 0x18, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0x28, 0x6, "fbbf6c3288d036ea4354f037af26003ef66c246cefc467acf2f3b36c8f71f989a08e914a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_RSVP_POLICE={0x464, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0xa4, 0x20000000, 0x6, 0x10, 0x0, {0x1, 0x2, 0xa9, 0xfffb, 0x9, 0x1}, {0x3, 0x1, 0x0, 0x235, 0x2, 0x10000}, 0x5, 0x5, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffc5, 0x3, 0x5, 0x5, 0x800, 0x80, 0x4, 0x4, 0x34bcc1b6, 0x8001, 0x0, 0x7, 0xd8, 0x7, 0x5, 0x1, 0x7, 0xd88, 0xfffffffc, 0xfffffff0, 0x6, 0x8, 0x4, 0x1, 0x8, 0x7, 0x4, 0xfffff001, 0x6, 0x0, 0x9c85, 0x6, 0xd97, 0x4a2, 0x7, 0x81, 0x2, 0x10001, 0x9, 0x400, 0x5, 0x10, 0x8000, 0x6e, 0x2, 0x5, 0x20000, 0x3, 0x3, 0x8, 0x5, 0x1ff, 0x8, 0xc, 0x8, 0x80000000, 0x7, 0x269, 0x1, 0x0, 0x4, 0x5, 0x1, 0x37e74f0a, 0x8, 0x7f, 0x8, 0x1, 0x6, 0x1, 0x23a6, 0xefc, 0x8, 0xc, 0x3, 0xee8252ce, 0x3, 0x0, 0x9, 0x9, 0x9, 0x297, 0x97, 0x2, 0x8, 0x7f, 0x0, 0x0, 0x0, 0x6, 0xff, 0xfffffff9, 0x2, 0x9, 0x80, 0x3, 0x20, 0x80, 0xd, 0x7ab, 0x3, 0x7fffffff, 0x9, 0xd, 0x400, 0xfffffff8, 0x4, 0x7, 0xc, 0xd, 0x3, 0x1, 0x26d2, 0x80000001, 0x5, 0xfffffff7, 0x2, 0x0, 0x7, 0xa, 0x74, 0x8000, 0x800, 0x200, 0x0, 0x1, 0x5, 0x2, 0x401, 0x2, 0x9, 0x7, 0x7, 0x7fffffff, 0x2, 0xc, 0x8, 0x0, 0x7, 0xb7b, 0x69, 0x6, 0x80000000, 0x80000001, 0x3, 0x0, 0x0, 0x9, 0xf3b, 0xfffffffc, 0x4, 0x68a, 0x4, 0x7ff, 0xffffa5f6, 0x3ff, 0x80000000, 0x100, 0x2, 0x16a9fcab, 0x3, 0x81, 0x88, 0xb, 0x7fffffff, 0x7, 0x0, 0x1, 0x7, 0x0, 0x8dc, 0xf, 0x8, 0x9, 0x9, 0x2, 0x1, 0x3, 0xffffffff, 0x7f, 0xe, 0x7, 0x80000000, 0x1, 0x7, 0x80000001, 0x9, 0x3, 0x2, 0x7fffffff, 0x8000, 0x10000, 0x8, 0xfffffffc, 0x4, 0x40, 0xe5, 0xa, 0x371, 0xfffffff4, 0x80000000, 0x0, 0x10000, 0x7, 0x3, 0x80000000, 0x9, 0xc, 0x1, 0x200, 0xf0bb, 0x5, 0x2, 0x44b, 0x6, 0x6, 0x5, 0x10001, 0x200, 0x5, 0x8, 0x4, 0x7, 0x88, 0x9ae2, 0x1, 0x2, 0x0, 0x4, 0x6, 0x1, 0xe86a, 0x4, 0x9, 0xa31, 0x3, 0x5, 0xc47d, 0x8, 0xfa47, 0x80000001, 0xfffffffe, 0x1, 0x9, 0x9a92, 0x7, 0x9, 0x4, 0x6f, 0x3, 0x6, 0x643, 0x9, 0x0, 0x4, 0x80000000]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffe9, 0xfff3}}, @TCA_RSVP_SRC={0x8, 0x3, @multicast1}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x4b8, 0xd, 0x7ff}, {0xd, 0x4, 0x5}, 0x21, 0x5, 0x1}}, @TCA_RSVP_ACT={0xc8, 0x6, [@m_ife={0xc4, 0xf, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x7ff}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7fff}, @IFE_META_PRIO={0x8, 0x3, @val=0x100}]}]}, {0x77, 0x6, "a53f3c30c11a5e252d9d2951ceb71e3310cbdbb6419ae84315eb619add0aac0fd8b2d77146fa1cb542e5e4f90c606e38c9c456db8401c896ed9ceac9d52e1d809a59eb3f6bb7508e53308423e4ff6e0bc61a0a0a8141dcfbfc8dd573917f5e3b31ebcb913e28d1433c7bb5f224408471d0e8ea"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_RSVP_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1a}}]}}, @f_rsvp6={{0xa}, {0x4}}, @f_rsvp6={{0xa}, {0xc78, 0x2, [@TCA_RSVP_POLICE={0xc58, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff7, 0x3ff, 0x0, 0x1000, 0x6, 0xf6, 0x7, 0x3, 0x3, 0x4, 0xf8c7, 0x7, 0xa4, 0x5, 0xfffeffff, 0xc, 0x7f, 0x3, 0xce88, 0x5ce0, 0x800, 0xb0ee, 0xfffffff9, 0x7, 0x2, 0x2, 0x9bab, 0x62d, 0x5be0a469, 0x6, 0x6, 0x8, 0x3, 0x6, 0x1ff, 0xe48, 0x2, 0x80000000, 0x1, 0x3, 0x4, 0x2, 0xf7, 0x1, 0x80000000, 0xac, 0xfffffffb, 0x2, 0xffffffff, 0x6e, 0x3, 0x3ff, 0x2, 0x5, 0x10001, 0x9, 0xea, 0x50711fd8, 0x1, 0x7, 0x100, 0x2, 0xffffffff, 0x6, 0x6, 0x5, 0x80000001, 0x98, 0xffff8785, 0x9, 0x0, 0x6, 0x1, 0x4, 0x0, 0xfffffff4, 0x0, 0x3, 0x7, 0x6, 0x7, 0xc, 0x4, 0x1, 0x0, 0x10000, 0x4, 0x8, 0x2, 0x3, 0xa6, 0x3, 0x80, 0x585, 0xa, 0x974, 0xfffffff9, 0x0, 0x8, 0x800, 0x1, 0x3ff, 0x2, 0x800, 0xe838, 0x1000, 0x3, 0x5, 0x8, 0x9, 0x9, 0x3, 0xffff, 0x7ff, 0x4, 0x0, 0x5, 0x4, 0xfffffffd, 0x4, 0x3, 0x8, 0xfff, 0xb, 0x0, 0x5, 0x10001, 0x6, 0xffffffff, 0x5, 0xffffffc0, 0x6, 0x7f, 0xe, 0x7, 0x9, 0x7, 0x1, 0x2, 0xffffffff, 0xfffffffd, 0x7, 0x101, 0x80200000, 0x1a, 0x304e, 0x3, 0xcc89, 0x5, 0x4, 0x68, 0x0, 0x5, 0x8, 0x9, 0xcd, 0x5c, 0x1, 0x5, 0x1, 0x7, 0x7, 0xc, 0xfff, 0x3, 0x6, 0xfffffffe, 0xde, 0xfb28, 0xf, 0x1c, 0x4, 0x0, 0x84c, 0x0, 0x5, 0x9, 0x4, 0x7, 0x5b5, 0x9, 0x2, 0x2, 0x40, 0x7, 0x2, 0x6, 0x3683697a, 0xb, 0x401, 0x5, 0xa6, 0x2, 0x9, 0x1, 0xdb, 0x9, 0x0, 0x80, 0x5, 0x8, 0x7, 0x80, 0x10001, 0x7f, 0x3, 0x9, 0x6, 0x5, 0xa5, 0xb3e3, 0xd03, 0x3b4ff1c2, 0x2517, 0x9, 0xfff, 0x1, 0x80000001, 0x580c, 0x3, 0x8, 0x80000001, 0x63618906, 0x1, 0x1, 0x4, 0x3c7c0000, 0x6, 0x7, 0x80, 0x7, 0xbf2d, 0x7, 0x6, 0x0, 0x2, 0x5, 0x2, 0x8, 0x401, 0x5, 0x2, 0x3, 0x2, 0xb, 0x187, 0xffffffff, 0x3, 0x8, 0x3, 0x7, 0x6, 0x3, 0xe98c, 0x53c7c448, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x7, 0x9e2, 0x4, 0x25e, 0x1, 0x100, 0xe, 0x0, 0x8, 0x5, 0x401, 0x9, 0x5, 0x6, 0xfce, 0x83b, 0x1, 0x5, 0xc5, 0x5, 0x1, 0x8, 0x0, 0x4, 0x200, 0x200, 0x2, 0x5c, 0x8, 0x1, 0x4, 0x7, 0x4, 0x7, 0x4, 0xffffffff, 0x7, 0x8000, 0x3, 0x7, 0x1a0, 0x696, 0x3, 0x10, 0x3, 0x200, 0xf717, 0x0, 0x652, 0x2, 0x7, 0x0, 0x81, 0x1000, 0x0, 0x3, 0x0, 0x5, 0x101, 0x3, 0x6, 0x1, 0x7, 0x40, 0x2, 0xab8, 0x2d5, 0x5, 0x3, 0x536, 0x4, 0x1000, 0x20000000, 0x3, 0x40, 0x5, 0x4, 0x1000, 0x4, 0x1000, 0xd, 0xe, 0x6, 0x3, 0x10000, 0x1, 0xfffffffa, 0xffffca09, 0xa15, 0x9, 0x4, 0x80000001, 0xfffffff1, 0x40, 0x4f3, 0x90c, 0x2, 0x8, 0xe, 0x2, 0xfffffff7, 0x42c5, 0xff01, 0x7, 0x54ef, 0x2, 0x7, 0xfffffffa, 0x40, 0xfff, 0x9, 0x1, 0xf58, 0xe, 0x2d, 0x3, 0xfffffff8, 0xc, 0x5, 0x7f, 0x8001, 0x83f2, 0x401, 0xffff41a8, 0x5, 0x9, 0x4, 0x43, 0xffffffff, 0xd, 0x3, 0xd9ad, 0x42, 0xe, 0x1b, 0x2, 0xfffffffd, 0xb67, 0x8, 0x1, 0x1, 0x7f, 0x7, 0x9, 0x8, 0x0, 0x400, 0xa427, 0x30, 0xd2a, 0x57dd5cdc, 0x9d75, 0x3, 0x9, 0x9c, 0x0, 0x1, 0x2, 0x1, 0x3, 0xa, 0xe, 0xfffff230, 0x2, 0xffffff81, 0x3, 0x4784, 0x7fff, 0xfff, 0xfffffff8, 0x6, 0x1, 0x9, 0x7, 0xf, 0x5, 0x3ff, 0x1, 0x4, 0x1, 0x80, 0xc8, 0x9, 0x0, 0x8, 0x6, 0x5, 0x8, 0x5, 0x2, 0x5dd, 0x5, 0x7, 0x6, 0x0, 0x6c3, 0x7, 0x6, 0x5, 0x2, 0xc, 0x7, 0x2, 0xffffffff, 0xfffffffc, 0x5, 0x5, 0x3, 0xd, 0x5e1, 0x9, 0xffffffff, 0xfb, 0x7, 0x800, 0x2, 0x3, 0x2, 0x3, 0x2, 0x8, 0x5, 0x7f, 0x7b3a50ce, 0x4, 0xfff, 0x0, 0xa0, 0x7, 0x8, 0x1, 0xf, 0x1, 0x1, 0x6, 0xc, 0x1, 0x0, 0x40, 0x9, 0x4, 0x6, 0x8, 0x6, 0x78e2a6e2, 0x3, 0x3, 0x9, 0x81, 0x4, 0x8, 0x8000, 0x8, 0x0, 0x7ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x4, 0x7242f018, 0xfff, 0xc, 0xca2d, 0x7fff, 0x0, 0x4, 0x75ec3682, 0xf5d, 0x81, 0x6e, 0x7ff, 0x6, 0x1, 0x6, 0x9, 0x5, 0x62, 0x0, 0xab, 0x9, 0x1, 0x5, 0x4, 0x7ff, 0x1, 0xfffffffd, 0x4, 0xd125, 0xfffffffb, 0x3, 0x9a, 0x2, 0xf, 0x7, 0x6, 0x7f, 0x7, 0xff, 0xe5, 0x7, 0x2, 0x7, 0x7, 0x10001, 0xfffffff9, 0x7fff, 0x683, 0x9, 0x9, 0x2, 0x9, 0x0, 0x1, 0x3a, 0x7, 0x200, 0x5, 0x10001, 0x8000, 0x5, 0x2, 0x6, 0x7, 0x96b, 0x8, 0x3, 0xffffffc6, 0x4, 0x6, 0x7, 0x6, 0xba8, 0xfffffffb, 0x74f, 0x7, 0x30d2, 0x100, 0x1, 0x5, 0x3, 0x4, 0x5, 0xaaf, 0x3, 0x9, 0x1, 0x400, 0x5, 0x739b, 0x2, 0x1, 0x5d, 0x8, 0x46, 0x3, 0x3, 0x7fff, 0x6, 0x100, 0x8, 0x4, 0xdae, 0x40, 0x9, 0x1, 0x5, 0x5, 0x2, 0x1, 0x6f66, 0x1a7b, 0x0, 0x1, 0x200, 0x2, 0x3ff, 0x100, 0x80000001, 0x2, 0x5, 0x6, 0x0, 0x74a726f9, 0x9, 0x6, 0x7, 0x7, 0x8, 0x1000, 0x0, 0x3, 0x7, 0x1, 0xffffdcd0, 0x3, 0x0, 0xd710, 0x8, 0x44c7, 0x6, 0x3, 0x8, 0x400, 0x6, 0x400, 0x8, 0x9, 0x7fffffff, 0x7, 0x5, 0x2, 0xffff, 0x1000, 0x4, 0x10001, 0x3, 0x8, 0xce, 0x5, 0xd, 0x9, 0x4, 0x89, 0x7, 0xf, 0x6, 0x3, 0x3, 0x26, 0x0, 0x0, 0x1000, 0x101, 0x1, 0x8, 0x6ec, 0x2, 0x5, 0x1, 0x7, 0x2655, 0x2, 0xfffff211, 0x9, 0x7ff, 0x2, 0xa, 0x3, 0x7, 0x4a6e872c, 0xffff, 0x7, 0x12, 0x8, 0x10000, 0x7fff, 0x7f, 0xb791, 0x9, 0x100, 0x0, 0x60, 0x427e, 0x101, 0xddd5, 0x5, 0x8, 0x98d, 0x4, 0x8000, 0x10000, 0x6, 0x6, 0xf3, 0x9, 0xea45, 0x401, 0x43, 0x1, 0x4, 0x6, 0x0, 0x6, 0x8, 0x3ff, 0x6, 0x1, 0x30, 0x101, 0xa, 0x80, 0xe, 0x8, 0x3, 0xb, 0x4, 0x4, 0x6, 0x1, 0xb14, 0x4, 0x3, 0x6, 0x1, 0x9, 0xa56, 0x0, 0x800, 0xffffffff, 0x40, 0x6a6, 0x5, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4c1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}, @TCA_RSVP_DST={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x9, 0xffff}}]}}, @f_rsvp={{0x9}, {0x5c, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @multicast1}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0x10}}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_SRC={0x8, 0x3, @empty}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xfffffffc, 0xfffffff7, 0x9}, {0x7fff, 0x1, 0x3}, 0x0, 0x1}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0x4}}, @TCA_RSVP_DST={0x8, 0x2, @empty}, @TCA_RSVP_SRC={0x8, 0x3, @local}]}}]}, 0x17a8}, 0x1, 0x0, 0x0, 0x28008}, 0x4000000) setsockopt(r7, 0xffffffff, 0x6, &(0x7f0000000000)="39b74e3cdc9abbb71590ce519e998913d8fe0bc75d60852ed996c178125c13c40af297434ab3b9f8a97071cc30371e6032c53e24928ef69c1c162a10b6ee08f80c8e9e65703229c1b6cbc40b6770e89348db4c2b41d77ce7b8fd926adabe9b", 0x5f) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r9, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) 0s ago: executing program 2 (id=2581): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0x12) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f00000000c0)={0x4, 0x3, 0x2}) unshare(0x20000400) (async) unshare(0x20000400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) copy_file_range(r1, 0x0, r1, 0xffffffffffffffff, 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x6}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x6}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000280)=""/203, 0xcb, 0x0, &(0x7f0000000380)=""/214, 0xd6}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000280)=""/203, 0xcb, 0x0, &(0x7f0000000380)=""/214, 0xd6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES16, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES16, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2f00, 0xe, 0x0, &(0x7f0000000900)="e02742d1680d85ff9782762f0800", 0x0, 0xeaa2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2f00, 0xe, 0x0, &(0x7f0000000900)="e02742d1680d85ff9782762f0800", 0x0, 0xeaa2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0xd0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x240, 0x51) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000580)={{0x1d, @dev={0xac, 0x14, 0x14, 0x24}, 0x4e22, 0x1, 'wlc\x00', 0x21, 0x5f243b21, 0x4c}, {@remote, 0x4e20, 0x0, 0xaba2, 0x8, 0x6}}, 0x44) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x100000, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x100000, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405"], 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001740)={@map=0x1, 0xffffffffffffffff, 0x1f, 0x201e}, 0x20) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x9, 0x6577, 0x7f}) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x2, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000140)={r9}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000140)={r9}) kernel console output (not intermixed with test programs): d: -22 (5/0) [ 719.454974][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 719.455038][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 719.491771][ T10] usb 6-1: USB disconnect, device number 12 [ 720.114345][ T5965] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 720.114615][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 720.258945][ T5965] usb 3-1: device descriptor read/64, error -32 [ 720.494464][ T5965] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 720.494719][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 720.624356][ T5965] usb 3-1: device descriptor read/64, error -32 [ 720.734634][ T5965] usb usb3-port1: attempt power cycle [ 721.206080][ T5965] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 721.228733][ T5965] usb 3-1: Using ep0 maxpacket: 16 [ 721.321144][ T5965] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 721.321934][ T5965] usb 3-1: config 1 has no interface number 0 [ 721.361011][ T5965] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 721.361050][ T5965] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 721.361761][ T5965] usb 3-1: config 1 interface 105 has no altsetting 0 [ 721.512019][ T5965] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 721.513348][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 721.520388][ T5965] usb 3-1: Product: syz [ 721.525842][ T5965] usb 3-1: Manufacturer: syz [ 721.532682][ T5965] usb 3-1: SerialNumber: syz [ 721.710666][T12881] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 721.765328][T12881] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 722.509994][T12881] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 722.510172][T12881] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 722.600360][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 722.714140][ T5965] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 722.720721][ T5965] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 722.744703][ T5965] usb 3-1: USB disconnect, device number 76 [ 722.927262][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 722.944409][ T5797] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 723.127135][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2106'. [ 723.158037][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 723.327132][T12893] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2106'. [ 723.476782][ T5797] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 723.476808][ T5797] usb 5-1: config 0 has no interface number 0 [ 723.476901][ T5797] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.476925][ T5797] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.476960][ T5797] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 723.476981][ T5797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.477951][ T10] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 723.477972][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.477988][ T10] usb 6-1: config 0 has no interface number 0 [ 723.478031][ T10] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 723.478053][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.486194][ T10] usb 6-1: config 0 descriptor?? [ 723.490825][ T5797] usb 5-1: config 0 descriptor?? [ 723.526191][ T10] uvcvideo 6-1:0.64: Found UVC 0.00 device (0bd3:0555) [ 723.526221][ T10] uvcvideo 6-1:0.64: No valid video chain found. [ 723.717814][ T5965] usb 6-1: USB disconnect, device number 13 [ 725.091468][T12892] netlink: 'syz.1.2108': attribute type 2 has an invalid length. [ 725.218815][ T5797] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.0024/input/input27 [ 725.239163][T12886] netlink: 'syz.4.2107': attribute type 29 has an invalid length. [ 726.631549][T12912] autofs: Unknown parameter '0x0000000000000000' [ 726.690092][ T5797] holtek_kbd 0003:04D9:A055.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 726.877023][T12918] random: crng reseeded on system resumption [ 727.144939][T12922] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2116'. [ 728.858001][T12929] erspan1: entered allmulticast mode [ 729.782788][ T5797] usb 5-1: USB disconnect, device number 80 [ 730.274421][T12934] netlink: 'syz.4.2121': attribute type 6 has an invalid length. [ 730.274444][T12934] IPv6: NLM_F_CREATE should be specified when creating new route [ 730.277269][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2121'. [ 730.277291][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2121'. [ 730.410427][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2122'. [ 730.670027][T12947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2122'. [ 731.077351][T12948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.077626][T12948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.229368][T12948] netlink: 'syz.1.2124': attribute type 29 has an invalid length. [ 732.783095][ T5797] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 733.276298][ T5797] usb 4-1: Using ep0 maxpacket: 16 [ 733.290436][ T5797] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 733.290462][ T5797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.290480][ T5797] usb 4-1: config 0 has no interface number 0 [ 733.290522][ T5797] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 733.290544][ T5797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.311920][ T5797] usb 4-1: config 0 descriptor?? [ 733.323453][ T5797] uvcvideo 4-1:0.64: Found UVC 0.00 device (0bd3:0555) [ 733.323484][ T5797] uvcvideo 4-1:0.64: No valid video chain found. [ 733.523454][ T808] usb 4-1: USB disconnect, device number 91 [ 737.453536][T12884] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 737.804973][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2137'. [ 738.097040][T13000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2137'. [ 738.441166][T13012] trusted_key: encrypted_key: insufficient parameters specified [ 739.794410][ T5797] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 739.944504][ T36] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 739.946280][ T5797] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 739.946304][ T5797] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 739.948551][ T5797] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 739.948576][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.948595][ T5797] usb 3-1: Product: syz [ 739.948608][ T5797] usb 3-1: Manufacturer: syz [ 739.948621][ T5797] usb 3-1: SerialNumber: syz [ 739.967723][ T5797] usb 3-1: config 0 descriptor?? [ 739.973771][ T5797] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 740.094343][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 740.096771][ T36] usb 5-1: unable to get BOS descriptor or descriptor too short [ 740.097960][ T36] usb 5-1: config 3 has an invalid interface number: 41 but max is 0 [ 740.097983][ T36] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 740.098000][ T36] usb 5-1: config 3 has no interface number 0 [ 740.098030][ T36] usb 5-1: config 3 interface 41 has no altsetting 0 [ 740.100378][ T36] usb 5-1: New USB device found, idVendor=12d1, idProduct=3e5b, bcdDevice=d8.4b [ 740.100402][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.100421][ T36] usb 5-1: Product: syz [ 740.100434][ T36] usb 5-1: Manufacturer: syz [ 740.100446][ T36] usb 5-1: SerialNumber: syz [ 741.431370][ T5797] gspca_sunplus: reg_r err -110 [ 741.431462][ T5797] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 741.525394][ T36] qmi_wwan 5-1:3.41: bogus CDC Union: master=0, slave=0 [ 741.528487][ T36] qmi_wwan 5-1:3.41: probe with driver qmi_wwan failed with error -22 [ 741.550914][ T36] usb 5-1: USB disconnect, device number 81 [ 742.016263][ T36] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 742.164818][ T36] usb 6-1: Using ep0 maxpacket: 16 [ 742.167166][ T36] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 742.167191][ T36] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.167209][ T36] usb 6-1: config 0 has no interface number 0 [ 742.167253][ T36] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 742.167275][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.228457][ T36] usb 6-1: config 0 descriptor?? [ 742.253036][ T36] uvcvideo 6-1:0.64: Found UVC 0.00 device (0bd3:0555) [ 742.253066][ T36] uvcvideo 6-1:0.64: No valid video chain found. [ 742.374491][ T5965] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 742.398305][T13049] kvm: kvm [13048]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 742.403921][T13049] kvm: kvm [13048]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 742.436982][ T10] usb 6-1: USB disconnect, device number 14 [ 742.606368][ T36] usb 3-1: USB disconnect, device number 77 [ 742.644362][ T5965] usb 4-1: Using ep0 maxpacket: 32 [ 742.647124][ T5965] usb 4-1: unable to get BOS descriptor or descriptor too short [ 742.648263][ T5965] usb 4-1: config 3 has an invalid interface number: 41 but max is 0 [ 742.648286][ T5965] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 742.648303][ T5965] usb 4-1: config 3 has no interface number 0 [ 742.648332][ T5965] usb 4-1: config 3 interface 41 has no altsetting 0 [ 742.651594][ T5965] usb 4-1: New USB device found, idVendor=12d1, idProduct=3e5b, bcdDevice=d8.4b [ 742.651618][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.651637][ T5965] usb 4-1: Product: syz [ 742.651650][ T5965] usb 4-1: Manufacturer: syz [ 742.651663][ T5965] usb 4-1: SerialNumber: syz [ 743.357298][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2158'. [ 743.503695][ T5965] qmi_wwan 4-1:3.41: bogus CDC Union: master=0, slave=0 [ 743.511676][ T5965] qmi_wwan 4-1:3.41: probe with driver qmi_wwan failed with error -22 [ 743.525604][ T5965] usb 4-1: USB disconnect, device number 92 [ 743.958817][T13056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2158'. [ 744.164510][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 744.969782][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 744.971720][ T10] usb 6-1: config 13 has an invalid interface number: 147 but max is 0 [ 744.971745][ T10] usb 6-1: config 13 has no interface number 0 [ 744.971789][ T10] usb 6-1: config 13 interface 147 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 744.971815][ T10] usb 6-1: config 13 interface 147 altsetting 2 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 744.971837][ T10] usb 6-1: config 13 interface 147 altsetting 2 endpoint 0x85 has invalid maxpacket 19262, setting to 64 [ 744.971861][ T10] usb 6-1: config 13 interface 147 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 744.971881][ T10] usb 6-1: config 13 interface 147 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 8 [ 744.971901][ T10] usb 6-1: config 13 interface 147 altsetting 2 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 744.971925][ T10] usb 6-1: config 13 interface 147 has no altsetting 0 [ 744.978903][ T10] usb 6-1: New USB device found, idVendor=093b, idProduct=a003, bcdDevice=ee.49 [ 744.978929][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.978947][ T10] usb 6-1: Product: syz [ 744.978960][ T10] usb 6-1: Manufacturer: syz [ 744.978973][ T10] usb 6-1: SerialNumber: syz [ 745.208288][T13063] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 745.454829][ T10] usb 6-1: USB disconnect, device number 15 [ 745.474948][ T5797] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 745.624680][ T5797] usb 5-1: Using ep0 maxpacket: 8 [ 745.626941][ T5797] usb 5-1: unable to get BOS descriptor or descriptor too short [ 745.628709][ T5797] usb 5-1: config 4 interface 0 has no altsetting 0 [ 745.633050][ T5797] usb 5-1: string descriptor 0 read error: -22 [ 745.633142][ T5797] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 745.633162][ T5797] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 745.704128][ T5797] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 745.717274][ T5797] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 745.717695][ T5797] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 745.717741][ T5797] usb 5-1: media controller created [ 745.766761][ T5797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 745.864365][ T5965] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 746.027868][ T5965] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 746.027894][ T5965] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 746.030733][ T5965] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 746.030757][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.030775][ T5965] usb 4-1: Product: syz [ 746.030788][ T5965] usb 4-1: Manufacturer: syz [ 746.030801][ T5965] usb 4-1: SerialNumber: syz [ 746.054992][ T5965] usb 4-1: config 0 descriptor?? [ 746.063749][ T5965] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 746.716426][ T5965] gspca_sunplus: reg_r err -110 [ 746.717406][ T5965] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 747.126187][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.305353][ T5797] zl10353_read_register: readreg error (reg=127, ret==0) [ 747.324488][T13071] usb 5-1: dvb_usb_au6610: wlen=9, aborting [ 747.459308][ T5797] usb 5-1: USB disconnect, device number 82 [ 747.619652][T13098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.620182][T13098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.335212][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2173'. [ 748.359279][T13100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2173'. [ 748.694323][ T5876] usb 4-1: USB disconnect, device number 93 [ 748.821157][T13110] autofs: Unknown parameter 'fd0x0000000000000000' [ 749.034407][ T5965] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 749.056903][T13118] binder: 13116:13118 ioctl 4018620d 0 returned -22 [ 749.205487][ T5965] usb 3-1: Using ep0 maxpacket: 32 [ 749.210432][ T5965] usb 3-1: unable to get BOS descriptor or descriptor too short [ 749.213160][ T5965] usb 3-1: config 3 has an invalid interface number: 41 but max is 0 [ 749.213183][ T5965] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 749.213201][ T5965] usb 3-1: config 3 has no interface number 0 [ 749.213230][ T5965] usb 3-1: config 3 interface 41 has no altsetting 0 [ 749.261022][ T5965] usb 3-1: New USB device found, idVendor=12d1, idProduct=3e5b, bcdDevice=d8.4b [ 749.261051][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.261068][ T5965] usb 3-1: Product: syz [ 749.261081][ T5965] usb 3-1: Manufacturer: syz [ 749.261093][ T5965] usb 3-1: SerialNumber: syz [ 749.520490][ T5965] qmi_wwan 3-1:3.41: bogus CDC Union: master=0, slave=0 [ 749.532549][ T5965] qmi_wwan 3-1:3.41: probe with driver qmi_wwan failed with error -22 [ 749.556528][ T5965] usb 3-1: USB disconnect, device number 78 [ 749.644364][ T808] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 749.802913][ T808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.802967][ T808] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 749.803005][ T808] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.803027][ T808] usb 5-1: config 0 interface 0 has no altsetting 0 [ 749.803058][ T808] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 749.803080][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.828736][ T808] usb 5-1: config 0 descriptor?? [ 750.075316][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'. [ 750.421433][T13135] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2185'. [ 750.715514][ T808] hid_parser_main: 26 callbacks suppressed [ 750.715530][ T808] cougar 0003:060B:500A.0025: unknown main item tag 0x0 [ 750.715548][ T808] cougar 0003:060B:500A.0025: unknown main item tag 0x0 [ 750.715563][ T808] cougar 0003:060B:500A.0025: unknown main item tag 0x0 [ 750.715578][ T808] cougar 0003:060B:500A.0025: unknown main item tag 0x0 [ 750.715593][ T808] cougar 0003:060B:500A.0025: unknown main item tag 0x0 [ 750.715608][ T808] cougar 0003:060B:500A.0025: unknown main item tag 0x0 [ 750.715623][ T808] cougar 0003:060B:500A.0025: unknown main item tag 0x0 [ 750.715637][ T808] cougar 0003:060B:500A.0025: unknown main item tag 0x0 [ 750.715651][ T808] cougar 0003:060B:500A.0025: unknown main item tag 0x0 [ 750.715671][ T808] cougar 0003:060B:500A.0025: unknown main item tag 0x0 [ 750.731425][ T808] cougar 0003:060B:500A.0025: hidraw0: USB HID v7f.fd Device [HID 060b:500a] on usb-dummy_hcd.4-1/input0 [ 750.788086][T13143] autofs: Unknown parameter 'fd0x0000000000000000' [ 750.864394][ T5965] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 750.910453][ T808] usb 5-1: USB disconnect, device number 83 [ 750.947036][T13144] fido_id[13144]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 751.016122][ T5965] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 751.016155][ T5965] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 751.018431][ T5965] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 751.018456][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.018473][ T5965] usb 6-1: Product: syz [ 751.018486][ T5965] usb 6-1: Manufacturer: syz [ 751.018499][ T5965] usb 6-1: SerialNumber: syz [ 751.082851][ T5965] usb 6-1: config 0 descriptor?? [ 751.093259][ T5965] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 751.260578][T13153] binder: 13152:13153 ioctl 4018620d 0 returned -22 [ 751.594606][ T5965] gspca_sunplus: reg_r err -110 [ 751.594698][ T5965] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 753.144345][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 753.374359][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 753.376966][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 753.378489][ T10] usb 5-1: config 3 has an invalid interface number: 41 but max is 0 [ 753.378512][ T10] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 753.378529][ T10] usb 5-1: config 3 has no interface number 0 [ 753.378558][ T10] usb 5-1: config 3 interface 41 has no altsetting 0 [ 753.381098][ T10] usb 5-1: New USB device found, idVendor=12d1, idProduct=3e5b, bcdDevice=d8.4b [ 753.381122][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.381140][ T10] usb 5-1: Product: syz [ 753.381153][ T10] usb 5-1: Manufacturer: syz [ 753.381166][ T10] usb 5-1: SerialNumber: syz [ 753.612782][ T10] qmi_wwan 5-1:3.41: bogus CDC Union: master=0, slave=0 [ 753.613707][ T10] qmi_wwan 5-1:3.41: probe with driver qmi_wwan failed with error -22 [ 753.632469][ T10] usb 5-1: USB disconnect, device number 84 [ 753.785573][ T808] usb 6-1: USB disconnect, device number 16 [ 754.306259][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2200'. [ 755.673521][T13201] FAULT_INJECTION: forcing a failure. [ 755.673521][T13201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.673557][T13201] CPU: 0 UID: 0 PID: 13201 Comm: syz.5.2207 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 755.673583][T13201] Tainted: [L]=SOFTLOCKUP [ 755.673590][T13201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 755.673602][T13201] Call Trace: [ 755.673610][T13201] [ 755.673619][T13201] dump_stack_lvl+0xe8/0x150 [ 755.673651][T13201] should_fail_ex+0x46b/0x600 [ 755.673680][T13201] _copy_to_user+0x31/0xb0 [ 755.673702][T13201] simple_read_from_buffer+0xe1/0x170 [ 755.673729][T13201] proc_fail_nth_read+0x1be/0x230 [ 755.673755][T13201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 755.673781][T13201] ? rw_verify_area+0x2ac/0x4e0 [ 755.673805][T13201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 755.673828][T13201] vfs_read+0x212/0xa80 [ 755.673861][T13201] ? __pfx_vfs_read+0x10/0x10 [ 755.673888][T13201] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 755.673910][T13201] ? lockdep_hardirqs_on+0x7a/0x110 [ 755.673930][T13201] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 755.673951][T13201] ? mutex_lock_nested+0x152/0x1d0 [ 755.673974][T13201] ? fdget_pos+0x252/0x320 [ 755.674005][T13201] ksys_read+0x156/0x270 [ 755.674032][T13201] ? __pfx_ksys_read+0x10/0x10 [ 755.674055][T13201] ? __pfx_v4l2_ioctl+0x10/0x10 [ 755.674089][T13201] do_syscall_64+0x14d/0xf80 [ 755.674108][T13201] ? trace_irq_disable+0x3b/0x150 [ 755.674128][T13201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.674147][T13201] ? clear_bhb_loop+0x40/0x90 [ 755.674176][T13201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.674194][T13201] RIP: 0033:0x7f4ccf36d04e [ 755.674214][T13201] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 755.674227][T13201] RSP: 002b:00007f4ccd5fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 755.674246][T13201] RAX: ffffffffffffffda RBX: 00007f4ccd5fe6c0 RCX: 00007f4ccf36d04e [ 755.674260][T13201] RDX: 000000000000000f RSI: 00007f4ccd5fe0a0 RDI: 0000000000000004 [ 755.674272][T13201] RBP: 00007f4ccd5fe090 R08: 0000000000000000 R09: 0000000000000000 [ 755.674283][T13201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.674294][T13201] R13: 00007f4ccf626038 R14: 00007f4ccf625fa0 R15: 00007ffe46f06a08 [ 755.674326][T13201] [ 755.980698][T13192] binder: 13191:13192 ioctl 4018620d 0 returned -22 [ 756.464377][ T808] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 756.521460][T13226] random: crng reseeded on system resumption [ 756.616988][ T808] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 756.617016][ T808] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 756.623038][ T808] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 756.623066][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.623137][ T808] usb 3-1: Product: syz [ 756.623151][ T808] usb 3-1: Manufacturer: syz [ 756.623217][ T808] usb 3-1: SerialNumber: syz [ 756.732831][ T808] usb 3-1: config 0 descriptor?? [ 756.750139][T13229] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2217'. [ 756.845969][ T808] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 758.253809][ T808] gspca_sunplus: reg_r err -110 [ 758.253911][ T808] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 758.809202][T13242] FAULT_INJECTION: forcing a failure. [ 758.809202][T13242] name failslab, interval 1, probability 0, space 0, times 0 [ 758.809235][T13242] CPU: 1 UID: 0 PID: 13242 Comm: syz.1.2220 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 758.809260][T13242] Tainted: [L]=SOFTLOCKUP [ 758.809267][T13242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 758.809278][T13242] Call Trace: [ 758.809285][T13242] [ 758.809293][T13242] dump_stack_lvl+0xe8/0x150 [ 758.809322][T13242] should_fail_ex+0x46b/0x600 [ 758.809351][T13242] should_failslab+0xa8/0x100 [ 758.809372][T13242] __kmalloc_noprof+0xdf/0x7b0 [ 758.809389][T13242] ? kfree+0x4d/0x6c0 [ 758.809410][T13242] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 758.809438][T13242] tomoyo_realpath_from_path+0xe3/0x5d0 [ 758.809469][T13242] ? tomoyo_path_number_perm+0x219/0x630 [ 758.809488][T13242] tomoyo_path_number_perm+0x246/0x630 [ 758.809509][T13242] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 758.809531][T13242] ? __lock_acquire+0x6b5/0x2cf0 [ 758.809589][T13242] ? __fget_files+0x2a/0x420 [ 758.809614][T13242] ? __fget_files+0x2a/0x420 [ 758.809633][T13242] ? __fget_files+0x3a6/0x420 [ 758.809653][T13242] ? __fget_files+0x2a/0x420 [ 758.809677][T13242] security_file_ioctl+0xc3/0x2a0 [ 758.809700][T13242] __se_sys_ioctl+0x47/0x170 [ 758.809721][T13242] do_syscall_64+0x14d/0xf80 [ 758.809740][T13242] ? trace_irq_disable+0x3b/0x150 [ 758.809761][T13242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.809778][T13242] ? clear_bhb_loop+0x40/0x90 [ 758.809800][T13242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.809817][T13242] RIP: 0033:0x7f915ed9c819 [ 758.809834][T13242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.809849][T13242] RSP: 002b:00007f915cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 758.809868][T13242] RAX: ffffffffffffffda RBX: 00007f915f015fa0 RCX: 00007f915ed9c819 [ 758.809888][T13242] RDX: 0000200000000200 RSI: 00000000c08c5334 RDI: 0000000000000003 [ 758.809900][T13242] RBP: 00007f915cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 758.809911][T13242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.809923][T13242] R13: 00007f915f016038 R14: 00007f915f015fa0 R15: 00007ffc53242168 [ 758.809954][T13242] [ 758.809962][T13242] ERROR: Out of memory at tomoyo_realpath_from_path. [ 759.409017][ T10] usb 3-1: USB disconnect, device number 79 [ 760.523226][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2221'. [ 761.116738][T13260] binder: 13256:13260 ioctl 4018620d 0 returned -22 [ 761.494328][ T5876] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 761.664486][ T5876] usb 5-1: Using ep0 maxpacket: 32 [ 761.667832][ T5876] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 761.667862][ T5876] usb 5-1: config 0 interface 0 has no altsetting 0 [ 761.667894][ T5876] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 761.667914][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.717012][ T5876] usb 5-1: config 0 descriptor?? [ 761.780572][T13277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.781104][T13277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.975680][T13281] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 762.004674][T13278] [U] [ 764.813540][ T5876] corsair-cpro 0003:1B1C:0C10.0026: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 765.061856][T13301] binder: 13298:13301 ioctl 4018620d 0 returned -22 [ 765.111913][T13302] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2238'. [ 765.193821][ T5876] corsair-cpro 0003:1B1C:0C10.0026: probe with driver corsair-cpro failed with error -110 [ 765.218989][ T5876] usb 5-1: USB disconnect, device number 85 [ 766.078217][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2239'. [ 766.280469][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2245'. [ 766.322294][T13326] netlink: 'syz.3.2246': attribute type 10 has an invalid length. [ 766.485907][T13326] team0: Port device netdevsim0 added [ 766.567424][T13334] FAULT_INJECTION: forcing a failure. [ 766.567424][T13334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.567457][T13334] CPU: 1 UID: 0 PID: 13334 Comm: syz.4.2249 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 766.567480][T13334] Tainted: [L]=SOFTLOCKUP [ 766.567486][T13334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 766.567497][T13334] Call Trace: [ 766.567504][T13334] [ 766.567512][T13334] dump_stack_lvl+0xe8/0x150 [ 766.567541][T13334] should_fail_ex+0x46b/0x600 [ 766.567570][T13334] _copy_from_user+0x2d/0xb0 [ 766.567590][T13334] memdup_user+0x5e/0xd0 [ 766.567613][T13334] strndup_user+0x68/0xd0 [ 766.567636][T13334] __se_sys_mount+0x9d/0x420 [ 766.567658][T13334] ? ksys_write+0x248/0x270 [ 766.567686][T13334] ? __pfx___se_sys_mount+0x10/0x10 [ 766.567714][T13334] ? __x64_sys_mount+0x20/0xc0 [ 766.567738][T13334] do_syscall_64+0x14d/0xf80 [ 766.567757][T13334] ? trace_irq_disable+0x3b/0x150 [ 766.567777][T13334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.567795][T13334] ? clear_bhb_loop+0x40/0x90 [ 766.567817][T13334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.567833][T13334] RIP: 0033:0x7f8a213fc819 [ 766.567850][T13334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.567865][T13334] RSP: 002b:00007f8a1f64e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 766.567890][T13334] RAX: ffffffffffffffda RBX: 00007f8a21675fa0 RCX: 00007f8a213fc819 [ 766.567904][T13334] RDX: 0000200000000180 RSI: 0000200000000300 RDI: 0000000000000000 [ 766.567915][T13334] RBP: 00007f8a1f64e090 R08: 00002000000008c0 R09: 0000000000000000 [ 766.567927][T13334] R10: 0000000002000090 R11: 0000000000000246 R12: 0000000000000001 [ 766.567939][T13334] R13: 00007f8a21676038 R14: 00007f8a21675fa0 R15: 00007ffea4f3b718 [ 766.567968][T13334] [ 766.904472][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 767.094328][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 767.097229][ T10] usb 6-1: config 7 has an invalid interface number: 184 but max is 1 [ 767.097253][ T10] usb 6-1: config 7 has an invalid interface number: 192 but max is 1 [ 767.097278][ T10] usb 6-1: config 7 has an invalid interface number: 14 but max is 1 [ 767.097296][ T10] usb 6-1: config 7 has an invalid interface number: 122 but max is 1 [ 767.097316][ T10] usb 6-1: config 7 has 4 interfaces, different from the descriptor's value: 2 [ 767.097335][ T10] usb 6-1: config 7 has no interface number 0 [ 767.097350][ T10] usb 6-1: config 7 has no interface number 1 [ 767.097366][ T10] usb 6-1: config 7 has no interface number 2 [ 767.097381][ T10] usb 6-1: config 7 has no interface number 3 [ 767.097455][ T10] usb 6-1: config 7 interface 184 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 767.097477][ T10] usb 6-1: config 7 interface 184 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 767.097497][ T10] usb 6-1: config 7 interface 184 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 767.097521][ T10] usb 6-1: config 7 interface 184 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 9 [ 767.097545][ T10] usb 6-1: too many endpoints for config 7 interface 192 altsetting 146: 206, using maximum allowed: 30 [ 767.097590][ T10] usb 6-1: config 7 interface 192 altsetting 146 bulk endpoint 0xB has invalid maxpacket 16 [ 767.097614][ T10] usb 6-1: config 7 interface 192 altsetting 146 has 5 endpoint descriptors, different from the interface descriptor's value: 206 [ 767.097650][ T10] usb 6-1: config 7 interface 14 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 767.097674][ T10] usb 6-1: too many endpoints for config 7 interface 122 altsetting 29: 202, using maximum allowed: 30 [ 767.097707][ T10] usb 6-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x1, skipping [ 767.097727][ T10] usb 6-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x2, skipping [ 767.097748][ T10] usb 6-1: config 7 interface 122 altsetting 29 endpoint 0x9 has an invalid bInterval 252, changing to 11 [ 767.097772][ T10] usb 6-1: config 7 interface 122 altsetting 29 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 767.097794][ T10] usb 6-1: config 7 interface 122 altsetting 29 has an invalid descriptor for endpoint zero, skipping [ 767.097812][ T10] usb 6-1: config 7 interface 122 altsetting 29 has an invalid descriptor for endpoint zero, skipping [ 767.097831][ T10] usb 6-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x9, skipping [ 767.097850][ T10] usb 6-1: config 7 interface 122 altsetting 29 has an invalid descriptor for endpoint zero, skipping [ 767.097868][ T10] usb 6-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x9, skipping [ 767.097888][ T10] usb 6-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0xE, skipping [ 767.097908][ T10] usb 6-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x1, skipping [ 767.097928][ T10] usb 6-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x3, skipping [ 767.097948][ T10] usb 6-1: config 7 interface 122 altsetting 29 has 12 endpoint descriptors, different from the interface descriptor's value: 202 [ 767.097971][ T10] usb 6-1: config 7 interface 184 has no altsetting 0 [ 767.097987][ T10] usb 6-1: config 7 interface 192 has no altsetting 0 [ 767.098003][ T10] usb 6-1: config 7 interface 14 has no altsetting 0 [ 767.098018][ T10] usb 6-1: config 7 interface 122 has no altsetting 0 [ 767.100605][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=3b.97 [ 767.100629][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.100648][ T10] usb 6-1: Product: ᱵ㙼䏺퉴줺膽鈢⟗㹑⑤数夷ᇠꨦלּ攽痣␗⢉ᗟ滁礮̐蚷븬锕蔄忚돀වꗘ喀ᆺ䧗쐺⥠펱旅ᤏ◐딪셠奇죶ꇴ䳽堲衪뱆杊ᴅḟ餸ᷖﴧ玲鷿䢳뗗帢￞▀榝妏놉퉝戶䵕噏⏃ॲ츯Ꞑ傗볱쌋谫ꙓᄚ僀ⰷ๠靐ホ즒轥蛟뽂买ွ浜췮䎨郠 [ 767.100676][ T10] usb 6-1: Manufacturer: ఌ [ 767.100689][ T10] usb 6-1: SerialNumber: й [ 767.372766][T13336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.376088][T13336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.635109][ T10] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 767.653197][ T10] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 767.674855][ T10] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 767.680903][ T10] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 767.702165][ T31] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 767.712635][ T10] usb 6-1: USB disconnect, device number 17 [ 767.896767][ T31] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 767.896793][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 767.899292][ T31] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 767.899318][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.899337][ T31] usb 5-1: Product: syz [ 767.899350][ T31] usb 5-1: Manufacturer: syz [ 767.899363][ T31] usb 5-1: SerialNumber: syz [ 767.960913][ T31] usb 5-1: config 0 descriptor?? [ 767.981032][ T31] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 768.363029][T13370] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2262'. [ 768.484695][ T31] gspca_sunplus: reg_r err -110 [ 768.484777][ T31] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 769.411420][ T41] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 769.974383][ T5904] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 770.127476][ T5904] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 770.127505][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.136828][ T5904] usb 3-1: config 0 descriptor?? [ 770.145516][ T5904] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 770.252995][T13391] No control pipe specified [ 770.366422][ T5904] gp8psk: usb in 128 operation failed. [ 770.542304][ T5797] usb 5-1: USB disconnect, device number 86 [ 770.786624][ T10] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 770.786873][ C0] raw-gadget.3 gadget.3: ignoring, device is not running [ 770.822696][T13398] FAULT_INJECTION: forcing a failure. [ 770.822696][T13398] name failslab, interval 1, probability 0, space 0, times 0 [ 770.822731][T13398] CPU: 1 UID: 0 PID: 13398 Comm: syz.4.2273 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 770.822761][T13398] Tainted: [L]=SOFTLOCKUP [ 770.822768][T13398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 770.822777][T13398] Call Trace: [ 770.822784][T13398] [ 770.822792][T13398] dump_stack_lvl+0xe8/0x150 [ 770.822822][T13398] should_fail_ex+0x46b/0x600 [ 770.822849][T13398] should_failslab+0xa8/0x100 [ 770.822870][T13398] __kmalloc_cache_noprof+0x84/0x690 [ 770.822896][T13398] ? sctp_association_new+0x89/0x25e0 [ 770.822920][T13398] sctp_association_new+0x89/0x25e0 [ 770.822939][T13398] ? sctp_do_bind+0x661/0x9d0 [ 770.822969][T13398] sctp_connect_new_asoc+0x2e4/0x6b0 [ 770.822991][T13398] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 770.823013][T13398] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 770.823037][T13398] ? lockdep_hardirqs_on+0x7a/0x110 [ 770.823056][T13398] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 770.823072][T13398] ? security_sctp_bind_connect+0x7e/0x2c0 [ 770.823094][T13398] sctp_sendmsg+0x14c0/0x2990 [ 770.823132][T13398] ? __pfx_sctp_sendmsg+0x10/0x10 [ 770.823159][T13398] ? __lock_acquire+0x6b5/0x2cf0 [ 770.823193][T13398] ? sock_rps_record_flow+0x19/0x400 [ 770.823213][T13398] ? inet_sendmsg+0x2f4/0x370 [ 770.823234][T13398] ____sys_sendmsg+0x7da/0x9c0 [ 770.823260][T13398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 770.823289][T13398] ? import_iovec+0x73/0xa0 [ 770.823311][T13398] ___sys_sendmsg+0x2a5/0x360 [ 770.823337][T13398] ? __pfx____sys_sendmsg+0x10/0x10 [ 770.823363][T13398] ? kstrtouint+0x6e/0xe0 [ 770.823410][T13398] ? __fget_files+0x2a/0x420 [ 770.823431][T13398] ? __fget_files+0x3a6/0x420 [ 770.823463][T13398] __sys_sendmmsg+0x282/0x4e0 [ 770.823489][T13398] ? __pfx___sys_sendmmsg+0x10/0x10 [ 770.823520][T13398] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 770.823558][T13398] ? ksys_write+0x248/0x270 [ 770.823586][T13398] ? __pfx_ksys_write+0x10/0x10 [ 770.823617][T13398] __x64_sys_sendmmsg+0xa0/0xc0 [ 770.823639][T13398] do_syscall_64+0x14d/0xf80 [ 770.823658][T13398] ? trace_irq_disable+0x3b/0x150 [ 770.823678][T13398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.823697][T13398] ? clear_bhb_loop+0x40/0x90 [ 770.823719][T13398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.823736][T13398] RIP: 0033:0x7f8a213fc819 [ 770.823755][T13398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.823771][T13398] RSP: 002b:00007f8a1f64e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 770.823791][T13398] RAX: ffffffffffffffda RBX: 00007f8a21675fa0 RCX: 00007f8a213fc819 [ 770.823805][T13398] RDX: 0000000000000002 RSI: 0000200000014980 RDI: 0000000000000003 [ 770.823817][T13398] RBP: 00007f8a1f64e090 R08: 0000000000000000 R09: 0000000000000000 [ 770.823828][T13398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.823840][T13398] R13: 00007f8a21676038 R14: 00007f8a21675fa0 R15: 00007ffea4f3b718 [ 770.823870][T13398] [ 770.888110][T13401] tipc: Enabled bearer , priority 14 [ 771.094373][ T10] usb 4-1: device descriptor read/64, error -32 [ 771.166761][T13406] FAULT_INJECTION: forcing a failure. [ 771.166761][T13406] name failslab, interval 1, probability 0, space 0, times 0 [ 771.166795][T13406] CPU: 0 UID: 0 PID: 13406 Comm: syz.1.2275 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 771.166820][T13406] Tainted: [L]=SOFTLOCKUP [ 771.166829][T13406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 771.166840][T13406] Call Trace: [ 771.166848][T13406] [ 771.166855][T13406] dump_stack_lvl+0xe8/0x150 [ 771.166886][T13406] should_fail_ex+0x46b/0x600 [ 771.166916][T13406] should_failslab+0xa8/0x100 [ 771.166937][T13406] __kvmalloc_node_noprof+0x170/0x8e0 [ 771.166958][T13406] ? seq_read_iter+0x203/0xe20 [ 771.166977][T13406] ? mutex_lock_nested+0x152/0x1d0 [ 771.166999][T13406] ? seq_read_iter+0xb8/0xe20 [ 771.167021][T13406] seq_read_iter+0x203/0xe20 [ 771.167038][T13406] ? set_page_refcounted+0x76/0x160 [ 771.167065][T13406] ? __asan_memset+0x22/0x50 [ 771.167094][T13406] copy_splice_read+0x605/0xab0 [ 771.167129][T13406] ? __pfx_copy_splice_read+0x10/0x10 [ 771.167148][T13406] ? rcu_is_watching+0x15/0xb0 [ 771.167171][T13406] ? look_up_lock_class+0x57/0x110 [ 771.167192][T13406] ? register_lock_class+0x31/0x2e0 [ 771.167219][T13406] ? alloc_pipe_info+0x373/0x4d0 [ 771.167238][T13406] ? __pfx_copy_splice_read+0x10/0x10 [ 771.167259][T13406] splice_direct_to_actor+0x483/0xc80 [ 771.167292][T13406] ? __pfx_direct_splice_actor+0x10/0x10 [ 771.167322][T13406] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 771.167355][T13406] do_splice_direct+0x19b/0x2a0 [ 771.167379][T13406] ? __pfx_do_splice_direct+0x10/0x10 [ 771.167402][T13406] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 771.167432][T13406] ? rw_verify_area+0x25b/0x4e0 [ 771.167460][T13406] do_sendfile+0x547/0x7e0 [ 771.167480][T13406] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 771.167508][T13406] ? __pfx_do_sendfile+0x10/0x10 [ 771.167541][T13406] __se_sys_sendfile64+0x144/0x1a0 [ 771.167565][T13406] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 771.167597][T13406] do_syscall_64+0x14d/0xf80 [ 771.167622][T13406] ? trace_irq_disable+0x3b/0x150 [ 771.167642][T13406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.167661][T13406] ? clear_bhb_loop+0x40/0x90 [ 771.167683][T13406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.167701][T13406] RIP: 0033:0x7f915ed9c819 [ 771.167718][T13406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.167734][T13406] RSP: 002b:00007f915cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 771.167753][T13406] RAX: ffffffffffffffda RBX: 00007f915f015fa0 RCX: 00007f915ed9c819 [ 771.167766][T13406] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 771.167777][T13406] RBP: 00007f915cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 771.167788][T13406] R10: 000000000000023b R11: 0000000000000246 R12: 0000000000000001 [ 771.167800][T13406] R13: 00007f915f016038 R14: 00007f915f015fa0 R15: 00007ffc53242168 [ 771.167831][T13406] [ 771.494366][ T10] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 771.644370][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 771.648785][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 771.648894][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 771.648921][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 771.648945][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 771.649017][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 771.650429][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 771.650477][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 771.650551][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 771.650575][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 771.650598][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 771.652385][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 771.652432][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 771.652507][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 771.652530][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 771.652553][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 771.824800][ T10] usb 4-1: string descriptor 0 read error: -22 [ 771.825282][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 771.825308][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.895374][ T10] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 771.953509][ T5904] gp8psk: usb in 146 operation failed. [ 771.953527][ T5904] gp8psk: failed to get FW version [ 771.953945][ T5904] gp8psk: usb in 149 operation failed. [ 771.953964][ T5904] gp8psk: failed to get FPGA version [ 771.976837][ T5904] gp8psk: usb in 138 operation failed. [ 771.976852][ T5904] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 771.976875][ T5904] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 772.008526][ T5904] usb 3-1: USB disconnect, device number 80 [ 772.156350][ T31] usb 4-1: USB disconnect, device number 95 [ 772.211195][T13411] netlink: 'syz.1.2276': attribute type 2 has an invalid length. [ 775.204415][ T5965] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 775.506050][ T5965] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 775.506076][ T5965] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 775.508239][ T5965] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 775.508264][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.508274][ T5965] usb 3-1: Product: syz [ 775.508280][ T5965] usb 3-1: Manufacturer: syz [ 775.508287][ T5965] usb 3-1: SerialNumber: syz [ 775.512501][ T5965] usb 3-1: config 0 descriptor?? [ 775.530036][ T5965] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 776.198875][ T5965] gspca_sunplus: reg_r err -110 [ 776.198968][ T5965] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 779.141652][ T10] usb 3-1: USB disconnect, device number 81 [ 780.368563][T13484] FAT-fs (nullb0): bogus number of reserved sectors [ 780.368585][T13484] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 782.529511][ T37] audit: type=1326 audit(1775940716.466:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13498 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4ccf34db99 code=0x7ffc0000 [ 782.530606][ T37] audit: type=1326 audit(1775940716.466:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13498 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf3ac819 code=0x7ffc0000 [ 782.531245][ T37] audit: type=1326 audit(1775940716.466:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13498 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4ccf34db99 code=0x7ffc0000 [ 782.531530][ T37] audit: type=1326 audit(1775940716.466:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13498 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf3ac819 code=0x7ffc0000 [ 782.531804][ T37] audit: type=1326 audit(1775940716.466:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13498 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf3ac819 code=0x7ffc0000 [ 782.532224][ T37] audit: type=1326 audit(1775940716.466:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13498 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf3ac819 code=0x7ffc0000 [ 782.532478][ T37] audit: type=1326 audit(1775940716.466:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13498 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf3ac819 code=0x7ffc0000 [ 782.536228][ T37] audit: type=1326 audit(1775940716.466:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13498 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf3ac819 code=0x7ffc0000 [ 782.536506][ T37] audit: type=1326 audit(1775940716.476:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13498 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf3ac819 code=0x7ffc0000 [ 782.854478][ T37] audit: type=1326 audit(1775940716.476:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13498 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf3ac819 code=0x7ffc0000 [ 782.891844][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2299'. [ 782.891883][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2299'. [ 783.404329][ T5876] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 783.783613][ T5876] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 783.783641][ T5876] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 783.786050][ T5876] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 783.786075][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.786092][ T5876] usb 5-1: Product: syz [ 783.786105][ T5876] usb 5-1: Manufacturer: syz [ 783.786117][ T5876] usb 5-1: SerialNumber: syz [ 783.796366][ T5876] usb 5-1: config 0 descriptor?? [ 783.801048][ T5876] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 784.383093][ T5876] gspca_sunplus: reg_r err -110 [ 784.383188][ T5876] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 785.535152][T13524] random: crng reseeded on system resumption [ 785.972391][T13526] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2308'. [ 786.604397][ T5965] usb 5-1: USB disconnect, device number 87 [ 788.157404][T13537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2310'. [ 789.014346][ T10] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 789.164322][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 789.166854][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 789.168237][ T10] usb 3-1: config 3 has an invalid interface number: 41 but max is 0 [ 789.168259][ T10] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 789.168277][ T10] usb 3-1: config 3 has no interface number 0 [ 789.168305][ T10] usb 3-1: config 3 interface 41 has no altsetting 0 [ 789.171149][ T10] usb 3-1: New USB device found, idVendor=12d1, idProduct=3e5b, bcdDevice=d8.4b [ 789.171174][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.171192][ T10] usb 3-1: Product: syz [ 789.171222][ T10] usb 3-1: Manufacturer: syz [ 789.171235][ T10] usb 3-1: SerialNumber: syz [ 789.662758][ T10] qmi_wwan 3-1:3.41: bogus CDC Union: master=0, slave=0 [ 789.674602][ T10] qmi_wwan 3-1:3.41: probe with driver qmi_wwan failed with error -22 [ 789.696904][ T10] usb 3-1: USB disconnect, device number 82 [ 790.114333][ T5804] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 790.164341][ T31] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 790.272045][ T5804] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 790.272072][ T5804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.301435][ T5804] usb 6-1: config 0 descriptor?? [ 790.345115][ T31] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 790.345141][ T31] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 790.368476][ T31] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 790.368504][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.368521][ T31] usb 4-1: Product: syz [ 790.368534][ T31] usb 4-1: Manufacturer: syz [ 790.368547][ T31] usb 4-1: SerialNumber: syz [ 790.480293][ T5804] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 790.565166][ T5804] gp8psk: usb in 128 operation failed. [ 790.626056][ T31] usb 4-1: config 0 descriptor?? [ 790.692275][ T31] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 790.982380][T13582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2324'. [ 792.039977][ T31] gspca_sunplus: reg_r err -110 [ 792.040123][ T31] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 792.824631][ T5804] gp8psk: usb in 146 operation failed. [ 792.824648][ T5804] gp8psk: failed to get FW version [ 792.825023][ T5804] gp8psk: usb in 149 operation failed. [ 792.825036][ T5804] gp8psk: failed to get FPGA version [ 792.825381][ T5804] gp8psk: usb in 138 operation failed. [ 792.825396][ T5804] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 792.825430][ T5804] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 792.850708][ T5804] usb 6-1: USB disconnect, device number 18 [ 793.488309][ T10] usb 4-1: USB disconnect, device number 96 [ 793.596201][T13615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2335'. [ 794.766817][T13628] delete_channel: no stack [ 795.004339][ T9] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 795.174358][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 795.176463][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 795.176497][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 795.176508][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 795.176521][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 795.176532][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 795.176553][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 795.176564][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.983135][T13656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2346'. [ 796.999668][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 796.999712][ T9] usbtmc 5-1:16.0: can't read capabilities [ 798.885815][ T9] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 799.034766][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 799.037329][ T9] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 799.037353][ T9] usb 4-1: config 0 has no interface number 0 [ 799.037397][ T9] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 799.037422][ T9] usb 4-1: config 0 interface 85 has no altsetting 0 [ 799.040203][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 799.040227][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.040246][ T9] usb 4-1: Product: syz [ 799.040259][ T9] usb 4-1: Manufacturer: syz [ 799.040272][ T9] usb 4-1: SerialNumber: syz [ 799.150459][ T9] usb 4-1: config 0 descriptor?? [ 799.287998][T13681] random: crng reseeded on system resumption [ 799.608379][T13683] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2354'. [ 799.608434][T13683] tc_dump_action: action bad kind [ 800.035634][ T9] appletouch 4-1:0.85: Geyser mode initialized. [ 800.041583][ T9] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input28 [ 800.226234][T13676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.226515][T13676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.237808][ T9] usb 4-1: USB disconnect, device number 97 [ 800.535105][T13687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.535385][T13687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.538617][ T9] appletouch 4-1:0.85: input: appletouch disconnected [ 800.837220][ T1014] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 801.341960][T13696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2358'. [ 801.961059][T13706] FAULT_INJECTION: forcing a failure. [ 801.961059][T13706] name failslab, interval 1, probability 0, space 0, times 0 [ 801.961145][T13706] CPU: 0 UID: 0 PID: 13706 Comm: syz.2.2360 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 801.961171][T13706] Tainted: [L]=SOFTLOCKUP [ 801.961177][T13706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 801.961188][T13706] Call Trace: [ 801.961196][T13706] [ 801.961205][T13706] dump_stack_lvl+0xe8/0x150 [ 801.961236][T13706] should_fail_ex+0x46b/0x600 [ 801.961265][T13706] should_failslab+0xa8/0x100 [ 801.961286][T13706] __kmalloc_cache_noprof+0x84/0x690 [ 801.961306][T13706] ? snd_pcm_oss_change_params_locked+0x1da/0x3e00 [ 801.961338][T13706] snd_pcm_oss_change_params_locked+0x1da/0x3e00 [ 801.961379][T13706] ? __pfx___schedule+0x10/0x10 [ 801.961401][T13706] ? irqentry_exit+0x59e/0x620 [ 801.961418][T13706] ? rcu_is_watching+0x15/0xb0 [ 801.961442][T13706] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 801.961467][T13706] ? preempt_schedule_thunk+0x16/0x30 [ 801.961489][T13706] ? preempt_schedule_common+0x82/0xd0 [ 801.961509][T13706] ? preempt_schedule_thunk+0x16/0x30 [ 801.961535][T13706] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 801.961556][T13706] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 801.961580][T13706] ? snd_pcm_oss_get_active_substream+0x198/0x280 [ 801.961605][T13706] snd_pcm_oss_get_active_substream+0x20b/0x280 [ 801.961628][T13706] snd_pcm_oss_set_rate+0x1bc/0x4e0 [ 801.961653][T13706] snd_pcm_oss_ioctl+0xc31/0xe00 [ 801.961678][T13706] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 801.961703][T13706] __se_sys_ioctl+0xff/0x170 [ 801.961725][T13706] do_syscall_64+0x14d/0xf80 [ 801.961745][T13706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.961763][T13706] ? clear_bhb_loop+0x40/0x90 [ 801.961785][T13706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.961809][T13706] RIP: 0033:0x7f267a4cc819 [ 801.961827][T13706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.961842][T13706] RSP: 002b:00007f26786fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 801.961861][T13706] RAX: ffffffffffffffda RBX: 00007f267a746090 RCX: 00007f267a4cc819 [ 801.961875][T13706] RDX: 00002000000000c0 RSI: 00000000c0045002 RDI: 0000000000000004 [ 801.961885][T13706] RBP: 00007f26786fd090 R08: 0000000000000000 R09: 0000000000000000 [ 801.961895][T13706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.961903][T13706] R13: 00007f267a746128 R14: 00007f267a746090 R15: 00007fff391cb7d8 [ 801.961919][T13706] [ 804.193696][T13628] delete_channel: no stack [ 804.198012][ T36] usb 5-1: USB disconnect, device number 88 [ 804.519841][T13728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.522802][T13728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.714391][ T5904] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 804.844434][ T5904] usb 5-1: device descriptor read/64, error -71 [ 805.084385][ T5904] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 805.217823][ T5904] usb 5-1: device descriptor read/64, error -71 [ 805.324731][ T5904] usb usb5-port1: attempt power cycle [ 805.664650][ T5904] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 805.729019][ T5904] usb 5-1: device descriptor read/8, error -71 [ 805.976281][ T5904] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 806.049560][ T5904] usb 5-1: device descriptor read/8, error -71 [ 806.160943][ T5904] usb usb5-port1: unable to enumerate USB device [ 806.374975][T13736] netlink: 'syz.1.2369': attribute type 2 has an invalid length. [ 808.081751][T13765] FAULT_INJECTION: forcing a failure. [ 808.081751][T13765] name failslab, interval 1, probability 0, space 0, times 0 [ 808.081841][T13765] CPU: 0 UID: 0 PID: 13765 Comm: syz.1.2376 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 808.081866][T13765] Tainted: [L]=SOFTLOCKUP [ 808.081873][T13765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 808.081883][T13765] Call Trace: [ 808.081891][T13765] [ 808.081899][T13765] dump_stack_lvl+0xe8/0x150 [ 808.081933][T13765] should_fail_ex+0x46b/0x600 [ 808.081955][T13765] should_failslab+0xa8/0x100 [ 808.081971][T13765] __kmalloc_cache_noprof+0x84/0x690 [ 808.081985][T13765] ? file_f_owner_allocate+0x83/0x170 [ 808.082007][T13765] file_f_owner_allocate+0x83/0x170 [ 808.082026][T13765] fcntl_dirnotify+0x1eb/0x6a0 [ 808.082045][T13765] do_fcntl+0x793/0x19e0 [ 808.082066][T13765] ? smack_file_fcntl+0x150/0x320 [ 808.082085][T13765] ? __pfx_do_fcntl+0x10/0x10 [ 808.082104][T13765] ? __pfx_smack_file_fcntl+0x10/0x10 [ 808.082129][T13765] ? __fget_files+0x2a/0x420 [ 808.082150][T13765] ? bpf_lsm_file_fcntl+0x9/0x20 [ 808.082166][T13765] __se_sys_fcntl+0xcb/0x160 [ 808.082188][T13765] do_syscall_64+0x14d/0xf80 [ 808.082204][T13765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.082217][T13765] ? clear_bhb_loop+0x40/0x90 [ 808.082234][T13765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.082247][T13765] RIP: 0033:0x7f915ed9c819 [ 808.082260][T13765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.082272][T13765] RSP: 002b:00007f915cfd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 808.082288][T13765] RAX: ffffffffffffffda RBX: 00007f915f016090 RCX: 00007f915ed9c819 [ 808.082298][T13765] RDX: 0000000000000007 RSI: 0000000000000402 RDI: 0000000000000006 [ 808.082307][T13765] RBP: 00007f915cfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 808.082316][T13765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.082324][T13765] R13: 00007f915f016128 R14: 00007f915f016090 R15: 00007ffc53242168 [ 808.082346][T13765] [ 808.520445][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.600353][T13769] random: crng reseeded on system resumption [ 808.706149][ T5904] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 808.854457][ T5904] usb 6-1: Using ep0 maxpacket: 16 [ 808.901897][T13772] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2378'. [ 808.901954][T13772] tc_dump_action: action bad kind [ 808.924329][ T31] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 809.037336][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.037368][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.037388][ T5904] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 809.037428][ T5904] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 809.037448][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.164598][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 809.174746][ T31] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 809.174771][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.174815][ T31] usb 4-1: config 0 has no interface number 0 [ 809.174878][ T31] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 809.174899][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.217655][ T31] usb 4-1: config 0 descriptor?? [ 811.233205][ T31] uvcvideo 4-1:0.64: Found UVC 0.00 device (0bd3:0555) [ 811.233223][ T31] uvcvideo 4-1:0.64: No valid video chain found. [ 811.236161][ T5904] usb 6-1: config 0 descriptor?? [ 811.236725][ T5904] usb 6-1: can't set config #0, error -71 [ 811.239061][ T5904] usb 6-1: USB disconnect, device number 19 [ 811.745840][ T10] usb 4-1: USB disconnect, device number 98 [ 812.895982][T13793] netlink: 'syz.5.2383': attribute type 2 has an invalid length. [ 815.664564][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 815.814551][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 815.830012][ T10] usb 6-1: config 7 has an invalid interface number: 184 but max is 1 [ 815.830039][ T10] usb 6-1: config 7 has an invalid interface number: 192 but max is 1 [ 815.830056][ T10] usb 6-1: config 7 has an invalid interface number: 14 but max is 1 [ 815.830073][ T10] usb 6-1: config 7 has an invalid interface number: 122 but max is 1 [ 815.830092][ T10] usb 6-1: config 7 has 4 interfaces, different from the descriptor's value: 2 [ 815.830111][ T10] usb 6-1: config 7 has no interface number 0 [ 815.830125][ T10] usb 6-1: config 7 has no interface number 1 [ 815.830139][ T10] usb 6-1: config 7 has no interface number 2 [ 815.830152][ T10] usb 6-1: config 7 has no interface number 3 [ 815.830228][ T10] usb 6-1: config 7 interface 184 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 815.830250][ T10] usb 6-1: config 7 interface 184 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 815.830269][ T10] usb 6-1: config 7 interface 184 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 815.830292][ T10] usb 6-1: config 7 interface 184 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 9 [ 815.830316][ T10] usb 6-1: too many endpoints for config 7 interface 192 altsetting 146: 206, using maximum allowed: 30 [ 815.830354][ T10] usb 6-1: config 7 interface 192 altsetting 146 bulk endpoint 0xB has invalid maxpacket 16 [ 815.830377][ T10] usb 6-1: config 7 interface 192 altsetting 146 has 5 endpoint descriptors, different from the interface descriptor's value: 206 [ 815.830432][ T10] usb 6-1: config 7 interface 14 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 815.830456][ T10] usb 6-1: too many endpoints for config 7 interface 122 altsetting 29: 202, using maximum allowed: 30 [ 815.830490][ T10] usb 6-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x1, skipping [ 815.830511][ T10] usb 6-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x2, skipping [ 815.830532][ T10] usb 6-1: config 7 interface 122 altsetting 29 endpoint 0x9 has an invalid bInterval 252, changing to 11 [ 815.830557][ T10] usb 6-1: config 7 interface 122 altsetting 29 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 815.830580][ T10] usb 6-1: config 7 interface 122 altsetting 29 has an invalid descriptor for endpoint zero, skipping [ 815.830598][ T10] usb 6-1: config 7 interface 122 altsetting 29 has an invalid descriptor for endpoint zero, skipping [ 815.830617][ T10] usb 6-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x9, skipping [ 815.830636][ T10] usb 6-1: config 7 interface 122 altsetting 29 has an invalid descriptor for endpoint zero, skipping [ 815.830655][ T10] usb 6-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x9, skipping [ 815.830674][ T10] usb 6-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0xE, skipping [ 815.830694][ T10] usb 6-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x1, skipping [ 815.830714][ T10] usb 6-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x3, skipping [ 815.830733][ T10] usb 6-1: config 7 interface 122 altsetting 29 has 12 endpoint descriptors, different from the interface descriptor's value: 202 [ 815.830756][ T10] usb 6-1: config 7 interface 184 has no altsetting 0 [ 815.830772][ T10] usb 6-1: config 7 interface 192 has no altsetting 0 [ 815.830787][ T10] usb 6-1: config 7 interface 14 has no altsetting 0 [ 815.830803][ T10] usb 6-1: config 7 interface 122 has no altsetting 0 [ 815.894923][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=3b.97 [ 815.894950][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.894969][ T10] usb 6-1: Product: ᱵ㙼䏺퉴줺膽鈢⟗㹑⑤数夷ᇠꨦלּ攽痣␗⢉ᗟ滁礮̐蚷븬锕蔄忚돀වꗘ喀ᆺ䧗쐺⥠펱旅ᤏ◐딪셠奇죶ꇴ䳽堲衪뱆杊ᴅḟ餸ᷖﴧ玲鷿䢳뗗帢￞▀榝妏놉퉝戶䵕噏⏃ॲ츯Ꞑ傗볱쌋谫ꙓᄚ僀ⰷ๠靐ホ즒轥蛟뽂买ွ浜췮䎨郠 [ 815.894995][ T10] usb 6-1: Manufacturer: ఌ [ 815.895007][ T10] usb 6-1: SerialNumber: й [ 816.034295][ T36] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 816.130812][T13832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.138051][T13832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.184286][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 816.213147][ T36] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 816.213173][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.213190][ T36] usb 5-1: config 0 has no interface number 0 [ 816.213234][ T36] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 816.213255][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.227337][ T10] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 816.295757][ T10] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 816.340472][ T36] usb 5-1: config 0 descriptor?? [ 816.351200][ T10] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 816.384984][ T36] uvcvideo 5-1:0.64: Found UVC 0.00 device (0bd3:0555) [ 816.385014][ T36] uvcvideo 5-1:0.64: No valid video chain found. [ 816.558754][ T36] usb 5-1: USB disconnect, device number 93 [ 816.607859][ T10] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 816.631745][ T10] usb 6-1: USB disconnect, device number 20 [ 818.155393][ T5876] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 818.515256][T13855] netlink: 'syz.1.2402': attribute type 2 has an invalid length. [ 818.534981][ T5876] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 818.535012][ T5876] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 818.535032][ T5876] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 71, changing to 10 [ 818.580692][ T5876] usb 3-1: string descriptor 0 read error: -22 [ 818.580782][ T5876] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 818.580794][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.618274][ T5876] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 818.618327][ T5876] usb 3-1: MIDIStreaming interface descriptor not found [ 818.734657][ T10] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 818.888033][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 818.888062][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.936494][ T10] usb 4-1: config 0 descriptor?? [ 818.939256][ T10] cp210x 4-1:0.0: cp210x converter detected [ 819.449544][ T5904] usb 3-1: USB disconnect, device number 83 [ 819.647640][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 819.737032][ T10] usb 4-1: USB disconnect, device number 99 [ 819.761837][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 820.044602][ T10] cp210x 4-1:0.0: device disconnected [ 822.973872][T13916] FAULT_INJECTION: forcing a failure. [ 822.973872][T13916] name failslab, interval 1, probability 0, space 0, times 0 [ 822.977383][T13916] CPU: 0 UID: 0 PID: 13916 Comm: syz.3.2417 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 822.977414][T13916] Tainted: [L]=SOFTLOCKUP [ 822.977421][T13916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 822.977432][T13916] Call Trace: [ 822.977440][T13916] [ 822.977449][T13916] dump_stack_lvl+0xe8/0x150 [ 822.977479][T13916] should_fail_ex+0x46b/0x600 [ 822.977509][T13916] should_failslab+0xa8/0x100 [ 822.977529][T13916] __kmalloc_noprof+0xdf/0x7b0 [ 822.977546][T13916] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 822.977575][T13916] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 822.977603][T13916] genl_family_rcv_msg_doit+0xd9/0x330 [ 822.977630][T13916] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 822.977650][T13916] ? rcu_is_watching+0x15/0xb0 [ 822.977677][T13916] ? rcu_is_watching+0x15/0xb0 [ 822.977696][T13916] ? cap_capable+0x123/0x490 [ 822.977716][T13916] ? safesetid_security_capable+0xa9/0x1a0 [ 822.977737][T13916] ? bpf_lsm_capable+0x9/0x20 [ 822.977757][T13916] ? security_capable+0x7e/0x2c0 [ 822.977784][T13916] genl_rcv_msg+0x61c/0x7a0 [ 822.977811][T13916] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.977830][T13916] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 822.977849][T13916] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 822.977870][T13916] ? __pfx_nl80211_post_doit+0x10/0x10 [ 822.977894][T13916] ? __pfx_ref_tracker_free+0x10/0x10 [ 822.977916][T13916] ? __skb_clone+0x63/0x7a0 [ 822.977942][T13916] netlink_rcv_skb+0x232/0x4b0 [ 822.977968][T13916] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.977990][T13916] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 822.978029][T13916] ? netlink_deliver_tap+0x2e/0x1b0 [ 822.978056][T13916] ? netlink_deliver_tap+0x2e/0x1b0 [ 822.978088][T13916] genl_rcv+0x28/0x40 [ 822.978106][T13916] netlink_unicast+0x831/0x9f0 [ 822.978138][T13916] ? __pfx_netlink_unicast+0x10/0x10 [ 822.978163][T13916] ? netlink_sendmsg+0x650/0xb40 [ 822.978184][T13916] ? skb_put+0x11b/0x210 [ 822.978207][T13916] netlink_sendmsg+0x813/0xb40 [ 822.978240][T13916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.978266][T13916] ? unwind_get_return_address+0x4d/0x90 [ 822.978289][T13916] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 822.978317][T13916] ____sys_sendmsg+0x94c/0x9c0 [ 822.978344][T13916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 822.978374][T13916] ? import_iovec+0x73/0xa0 [ 822.978396][T13916] ___sys_sendmsg+0x2a5/0x360 [ 822.978422][T13916] ? __pfx____sys_sendmsg+0x10/0x10 [ 822.978479][T13916] ? __fget_files+0x2a/0x420 [ 822.978499][T13916] ? __fget_files+0x3a6/0x420 [ 822.978532][T13916] __x64_sys_sendmsg+0x1c3/0x2a0 [ 822.978555][T13916] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 822.978586][T13916] ? __pfx_ksys_write+0x10/0x10 [ 822.978622][T13916] do_syscall_64+0x14d/0xf80 [ 822.978642][T13916] ? trace_irq_disable+0x3b/0x150 [ 822.978667][T13916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.978685][T13916] ? clear_bhb_loop+0x40/0x90 [ 822.978708][T13916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.978725][T13916] RIP: 0033:0x7f285ca5c819 [ 822.978744][T13916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.978759][T13916] RSP: 002b:00007f285acb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.978779][T13916] RAX: ffffffffffffffda RBX: 00007f285ccd5fa0 RCX: 00007f285ca5c819 [ 822.978793][T13916] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 822.978805][T13916] RBP: 00007f285acb6090 R08: 0000000000000000 R09: 0000000000000000 [ 822.978816][T13916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.978827][T13916] R13: 00007f285ccd6038 R14: 00007f285ccd5fa0 R15: 00007fff60594348 [ 822.978858][T13916] [ 823.316804][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2418'. [ 823.867180][T13924] bridge0: port 3(vlan0) entered blocking state [ 823.867251][T13924] bridge0: port 3(vlan0) entered disabled state [ 823.867407][T13924] vlan0: entered allmulticast mode [ 823.867417][T13924] geneve0: entered allmulticast mode [ 823.868876][T13924] vlan0: entered promiscuous mode [ 823.868885][T13924] geneve0: entered promiscuous mode [ 824.533882][T13923] netlink: 'syz.3.2420': attribute type 2 has an invalid length. [ 824.937862][T13935] comedi comedi3: bad chanlist[0]=0x00000003 chan=3 range length=4 [ 827.789485][T13964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.789831][T13964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.274477][ T5904] sound midiC3D0: rawmidi drain error (avail = 4070, buffer_size = 4096) [ 832.276644][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 832.830288][T13989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.833269][T13989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.972514][T13989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.973021][T13989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.465766][ T37] kauditd_printk_skb: 458 callbacks suppressed [ 834.465782][ T37] audit: type=1326 audit(1775940768.406:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14000 comm="syz.2.2439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f267a4cc819 code=0x0 [ 834.477839][T13990] netlink: 'syz.3.2433': attribute type 2 has an invalid length. [ 834.734352][ T9] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 835.602809][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.602834][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 835.602880][ T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 835.602902][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.839444][ T9] usb 5-1: config 0 descriptor?? [ 836.144347][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 836.144395][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 836.155287][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 836.156150][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 836.156299][ T9] usb 5-1: media controller created [ 836.158972][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 836.191278][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 836.191381][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 836.201266][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 836.210750][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 836.210770][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 836.368843][ T5797] dvb-usb: bulk message failed: -22 (1/0) [ 836.368877][ T5797] dvb-usb: error while querying for an remote control event. [ 836.516656][T14024] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2447'. [ 836.524619][ T5797] dvb-usb: bulk message failed: -22 (1/0) [ 836.524650][ T5797] dvb-usb: error while querying for an remote control event. [ 836.903883][ T5797] dvb-usb: bulk message failed: -22 (1/0) [ 836.903913][ T5797] dvb-usb: error while querying for an remote control event. [ 836.984897][ T31] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 837.204769][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 837.353675][ T31] usb 4-1: config 7 has an invalid interface number: 184 but max is 1 [ 837.353748][ T31] usb 4-1: config 7 has an invalid interface number: 192 but max is 1 [ 837.353873][ T31] usb 4-1: config 7 has an invalid interface number: 14 but max is 1 [ 837.353913][ T31] usb 4-1: config 7 has an invalid interface number: 122 but max is 1 [ 837.353955][ T31] usb 4-1: config 7 has 4 interfaces, different from the descriptor's value: 2 [ 837.354004][ T31] usb 4-1: config 7 has no interface number 0 [ 837.354043][ T31] usb 4-1: config 7 has no interface number 1 [ 837.354080][ T31] usb 4-1: config 7 has no interface number 2 [ 837.354119][ T31] usb 4-1: config 7 has no interface number 3 [ 837.450157][ T31] usb 4-1: config 7 interface 184 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 837.450508][ T31] usb 4-1: config 7 interface 184 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 837.450717][ T31] usb 4-1: config 7 interface 184 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 837.451061][ T31] usb 4-1: config 7 interface 184 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 9 [ 837.451300][ T31] usb 4-1: too many endpoints for config 7 interface 192 altsetting 146: 206, using maximum allowed: 30 [ 837.562898][ T31] usb 4-1: config 7 interface 192 altsetting 146 bulk endpoint 0xB has invalid maxpacket 16 [ 837.562931][ T31] usb 4-1: config 7 interface 192 altsetting 146 has 5 endpoint descriptors, different from the interface descriptor's value: 206 [ 837.562982][ T31] usb 4-1: config 7 interface 14 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 837.563007][ T31] usb 4-1: too many endpoints for config 7 interface 122 altsetting 29: 202, using maximum allowed: 30 [ 837.563043][ T31] usb 4-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x1, skipping [ 837.563063][ T31] usb 4-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x2, skipping [ 837.563085][ T31] usb 4-1: config 7 interface 122 altsetting 29 endpoint 0x9 has an invalid bInterval 252, changing to 11 [ 837.563115][ T31] usb 4-1: config 7 interface 122 altsetting 29 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 837.563139][ T31] usb 4-1: config 7 interface 122 altsetting 29 has an invalid descriptor for endpoint zero, skipping [ 837.563158][ T31] usb 4-1: config 7 interface 122 altsetting 29 has an invalid descriptor for endpoint zero, skipping [ 837.563177][ T31] usb 4-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x9, skipping [ 837.563197][ T31] usb 4-1: config 7 interface 122 altsetting 29 has an invalid descriptor for endpoint zero, skipping [ 837.563216][ T31] usb 4-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x9, skipping [ 837.563236][ T31] usb 4-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0xE, skipping [ 837.563256][ T31] usb 4-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x1, skipping [ 837.563276][ T31] usb 4-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x3, skipping [ 837.563296][ T31] usb 4-1: config 7 interface 122 altsetting 29 has 12 endpoint descriptors, different from the interface descriptor's value: 202 [ 837.563319][ T31] usb 4-1: config 7 interface 184 has no altsetting 0 [ 837.563339][ T31] usb 4-1: config 7 interface 192 has no altsetting 0 [ 837.563355][ T31] usb 4-1: config 7 interface 14 has no altsetting 0 [ 837.563371][ T31] usb 4-1: config 7 interface 122 has no altsetting 0 [ 837.647608][ T37] audit: type=1326 audit(1775940771.586:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14030 comm="syz.1.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915ed9c819 code=0x7fc00000 [ 837.647862][ T5797] dvb-usb: bulk message failed: -22 (1/0) [ 837.647887][ T5797] dvb-usb: error while querying for an remote control event. [ 837.805354][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 837.805385][ T9] dvb-usb: error while querying for an remote control event. [ 837.887393][ T31] usb 4-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=3b.97 [ 837.887421][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.887439][ T31] usb 4-1: Product: ᱵ㙼䏺퉴줺膽鈢⟗㹑⑤数夷ᇠꨦלּ攽痣␗⢉ᗟ滁礮̐蚷븬锕蔄忚돀වꗘ喀ᆺ䧗쐺⥠펱旅ᤏ◐딪셠奇죶ꇴ䳽堲衪뱆杊ᴅḟ餸ᷖﴧ玲鷿䢳뗗帢￞▀榝妏놉퉝戶䵕噏⏃ॲ츯Ꞑ傗볱쌋谫ꙓᄚ僀ⰷ๠靐ホ즒轥蛟뽂买ွ浜췮䎨郠 [ 837.887467][ T31] usb 4-1: Manufacturer: ఌ [ 837.887480][ T31] usb 4-1: SerialNumber: й [ 837.969311][ T5904] dvb-usb: bulk message failed: -22 (1/0) [ 837.969339][ T5904] dvb-usb: error while querying for an remote control event. [ 837.984357][ T5965] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 838.124939][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 838.127507][ T9] dvb-usb: error while querying for an remote control event. [ 838.229341][ T5965] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 838.245031][ T5965] usb 3-1: config 0 has no interface number 0 [ 838.286678][ T5965] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.286708][ T5965] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.286740][ T5965] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 838.286944][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.351693][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 838.352885][ T9] dvb-usb: error while querying for an remote control event. [ 838.592474][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 838.592664][ T9] dvb-usb: error while querying for an remote control event. [ 838.624337][ T9] usb 5-1: USB disconnect, device number 94 [ 838.675429][T14033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.702695][T14033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.725541][ T5965] usb 3-1: config 0 descriptor?? [ 838.772312][ T31] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 838.818341][T14043] netlink: 'syz.5.2453': attribute type 2 has an invalid length. [ 838.820398][ T31] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 838.897968][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 838.989632][ T31] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 839.018691][ T31] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 839.037014][ T31] usb 4-1: USB disconnect, device number 100 [ 839.191788][ T5965] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.0027/input/input30 [ 839.436410][T14050] netlink: 'syz.2.2452': attribute type 29 has an invalid length. [ 841.186067][ T5965] holtek_kbd 0003:04D9:A055.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 841.192714][ T5965] usb 3-1: USB disconnect, device number 84 [ 841.431519][T14073] fido_id[14073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 841.610987][T14087] FAULT_INJECTION: forcing a failure. [ 841.610987][T14087] name failslab, interval 1, probability 0, space 0, times 0 [ 841.611020][T14087] CPU: 1 UID: 0 PID: 14087 Comm: syz.4.2465 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 841.611046][T14087] Tainted: [L]=SOFTLOCKUP [ 841.611053][T14087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 841.611064][T14087] Call Trace: [ 841.611072][T14087] [ 841.611080][T14087] dump_stack_lvl+0xe8/0x150 [ 841.611111][T14087] should_fail_ex+0x46b/0x600 [ 841.611140][T14087] should_failslab+0xa8/0x100 [ 841.611161][T14087] __kmalloc_cache_noprof+0x84/0x690 [ 841.611181][T14087] ? __rdma_create_id+0x65/0x7b0 [ 841.611207][T14087] ? __pfx_ucma_event_handler+0x10/0x10 [ 841.611233][T14087] ? __pfx_ucma_event_handler+0x10/0x10 [ 841.611256][T14087] __rdma_create_id+0x65/0x7b0 [ 841.611284][T14087] ? __pfx_ucma_event_handler+0x10/0x10 [ 841.611308][T14087] rdma_create_user_id+0x81/0xc0 [ 841.611335][T14087] ucma_create_id+0x22e/0x380 [ 841.611366][T14087] ? __pfx_ucma_create_id+0x10/0x10 [ 841.611405][T14087] ucma_write+0x257/0x2f0 [ 841.611430][T14087] ? __pfx_ucma_write+0x10/0x10 [ 841.611455][T14087] ? rw_verify_area+0x25b/0x4e0 [ 841.611484][T14087] vfs_writev+0x4c6/0x9a0 [ 841.611505][T14087] ? __pfx_ucma_write+0x10/0x10 [ 841.611549][T14087] ? __pfx_vfs_writev+0x10/0x10 [ 841.611590][T14087] ? __fget_files+0x2a/0x420 [ 841.611617][T14087] ? __fget_files+0x3a6/0x420 [ 841.611637][T14087] ? __fget_files+0x2a/0x420 [ 841.611666][T14087] do_writev+0x15a/0x2e0 [ 841.611688][T14087] ? __pfx_do_writev+0x10/0x10 [ 841.611719][T14087] do_syscall_64+0x14d/0xf80 [ 841.611738][T14087] ? trace_irq_disable+0x3b/0x150 [ 841.611759][T14087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.611777][T14087] ? clear_bhb_loop+0x40/0x90 [ 841.611799][T14087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.611817][T14087] RIP: 0033:0x7f8a213fc819 [ 841.611834][T14087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.611850][T14087] RSP: 002b:00007f8a1f64e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 841.611870][T14087] RAX: ffffffffffffffda RBX: 00007f8a21675fa0 RCX: 00007f8a213fc819 [ 841.611883][T14087] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000f [ 841.611895][T14087] RBP: 00007f8a1f64e090 R08: 0000000000000000 R09: 0000000000000000 [ 841.611906][T14087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.611917][T14087] R13: 00007f8a21676038 R14: 00007f8a21675fa0 R15: 00007ffea4f3b718 [ 841.611947][T14087] [ 842.985266][ T5965] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 843.456958][T14094] netlink: 'syz.1.2467': attribute type 2 has an invalid length. [ 843.494294][ T5965] usb 3-1: Using ep0 maxpacket: 32 [ 843.502558][ T5965] usb 3-1: unable to get BOS descriptor or descriptor too short [ 843.502707][ T5965] usb 3-1: no configurations [ 843.502720][ T5965] usb 3-1: can't read configurations, error -22 [ 843.624408][ T5965] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 843.935046][T14124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.935331][T14124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.124404][ T5965] usb 3-1: Using ep0 maxpacket: 32 [ 846.642748][ T5965] usb 3-1: unable to get BOS descriptor or descriptor too short [ 846.642831][ T5965] usb 3-1: no configurations [ 846.642843][ T5965] usb 3-1: can't read configurations, error -22 [ 846.664598][ T5965] usb usb3-port1: attempt power cycle [ 848.102842][T14143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.103673][T14143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.288034][T14147] veth0: entered promiscuous mode [ 848.293965][T14149] FAULT_INJECTION: forcing a failure. [ 848.293965][T14149] name failslab, interval 1, probability 0, space 0, times 0 [ 848.293997][T14149] CPU: 0 UID: 0 PID: 14149 Comm: syz.2.2484 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 848.294023][T14149] Tainted: [L]=SOFTLOCKUP [ 848.294029][T14149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 848.294040][T14149] Call Trace: [ 848.294048][T14149] [ 848.294056][T14149] dump_stack_lvl+0xe8/0x150 [ 848.294085][T14149] should_fail_ex+0x46b/0x600 [ 848.294113][T14149] should_failslab+0xa8/0x100 [ 848.294133][T14149] kmem_cache_alloc_noprof+0x87/0x680 [ 848.294169][T14149] ? do_getname+0x2e/0x250 [ 848.294192][T14149] do_getname+0x2e/0x250 [ 848.294209][T14149] ? getname_flags+0x11/0x20 [ 848.294228][T14149] path_setxattrat+0x32d/0x440 [ 848.294253][T14149] ? __pfx_path_setxattrat+0x10/0x10 [ 848.294286][T14149] ? ksys_write+0x248/0x270 [ 848.294309][T14149] ? __pfx_ksys_write+0x10/0x10 [ 848.294336][T14149] __x64_sys_lsetxattr+0xbf/0xe0 [ 848.294362][T14149] do_syscall_64+0x14d/0xf80 [ 848.294380][T14149] ? trace_irq_disable+0x3b/0x150 [ 848.294400][T14149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.294417][T14149] ? clear_bhb_loop+0x40/0x90 [ 848.294437][T14149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.294460][T14149] RIP: 0033:0x7f267a4cc819 [ 848.294481][T14149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.294495][T14149] RSP: 002b:00007f267871e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 848.294530][T14149] RAX: ffffffffffffffda RBX: 00007f267a745fa0 RCX: 00007f267a4cc819 [ 848.294543][T14149] RDX: 00002000000006c0 RSI: 0000200000000500 RDI: 00002000000004c0 [ 848.294560][T14149] RBP: 00007f267871e090 R08: 0000000000000002 R09: 0000000000000000 [ 848.294572][T14149] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 848.294583][T14149] R13: 00007f267a746038 R14: 00007f267a745fa0 R15: 00007fff391cb7d8 [ 848.294611][T14149] [ 848.567976][ T5797] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 849.139493][ T5797] usb 6-1: Using ep0 maxpacket: 8 [ 849.144065][ T5797] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 849.144089][ T5797] usb 6-1: config 179 has no interface number 0 [ 849.144132][ T5797] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 849.144156][ T5797] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 849.144316][ T5797] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 849.144341][ T5797] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 849.144365][ T5797] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 849.144405][ T5797] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 849.144425][ T5797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.165648][T14147] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 849.374138][T14147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.375870][T14147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.409681][T14168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.410134][T14168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.414623][T14147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.682298][T14147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.651974][ T5965] usb 6-1: USB disconnect, device number 21 [ 850.652040][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 850.652099][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 850.777000][T14155] netlink: 'syz.4.2486': attribute type 2 has an invalid length. [ 850.778000][T14146] veth0: left promiscuous mode [ 854.094338][ T10] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 854.287213][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 854.287239][ T10] usb 3-1: config 0 has no interface number 0 [ 854.287281][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.287305][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.287340][ T10] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 854.287361][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.317738][ T10] usb 3-1: config 0 descriptor?? [ 854.664306][ T5876] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 854.814326][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 854.816394][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 854.819151][ T5876] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 854.819174][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.819191][ T5876] usb 5-1: Product: syz [ 854.819204][ T5876] usb 5-1: Manufacturer: syz [ 854.819224][ T5876] usb 5-1: SerialNumber: syz [ 854.854902][ T10] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.0028/input/input31 [ 854.934918][ T5876] usb 5-1: config 0 descriptor?? [ 854.937621][ T5876] hub 5-1:0.0: bad descriptor, ignoring hub [ 854.937640][ T5876] hub 5-1:0.0: probe with driver hub failed with error -5 [ 854.940689][ T5876] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input32 [ 855.045920][T14197] netlink: 'syz.2.2498': attribute type 29 has an invalid length. [ 855.422291][T14222] netlink: 'syz.5.2503': attribute type 2 has an invalid length. [ 855.715481][ T10] holtek_kbd 0003:04D9:A055.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 855.764851][ T10] usb 3-1: USB disconnect, device number 88 [ 855.785586][ T5876] usb 5-1: USB disconnect, device number 95 [ 856.096876][T14224] fido_id[14224]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 856.784402][ T10] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 856.937151][ T10] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 856.937177][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 856.942459][ T10] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 856.942484][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.942503][ T10] usb 3-1: Product: syz [ 856.942515][ T10] usb 3-1: Manufacturer: syz [ 856.942528][ T10] usb 3-1: SerialNumber: syz [ 857.212945][ T10] usb 3-1: config 0 descriptor?? [ 858.689248][ T10] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 858.992140][T14252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.993026][T14252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.996399][T14252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.996805][T14252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.042137][ T5876] kernel read not supported for file [fscontext] (pid: 5876 comm: kworker/1:6) [ 859.194709][ T10] gspca_sunplus: reg_r err -110 [ 859.194807][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 859.214313][ T5804] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 859.376963][T14256] FAULT_INJECTION: forcing a failure. [ 859.376963][T14256] name failslab, interval 1, probability 0, space 0, times 0 [ 859.376997][T14256] CPU: 1 UID: 0 PID: 14256 Comm: syz.4.2514 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 859.377031][T14256] Tainted: [L]=SOFTLOCKUP [ 859.377038][T14256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 859.377049][T14256] Call Trace: [ 859.377057][T14256] [ 859.377066][T14256] dump_stack_lvl+0xe8/0x150 [ 859.377100][T14256] should_fail_ex+0x46b/0x600 [ 859.377130][T14256] should_failslab+0xa8/0x100 [ 859.377152][T14256] kmem_cache_alloc_noprof+0x87/0x680 [ 859.377177][T14256] ? skb_clone+0x212/0x3a0 [ 859.377202][T14256] skb_clone+0x212/0x3a0 [ 859.377226][T14256] __netlink_deliver_tap+0x404/0x850 [ 859.377263][T14256] ? netlink_deliver_tap+0x2e/0x1b0 [ 859.377289][T14256] netlink_deliver_tap+0x19c/0x1b0 [ 859.377314][T14256] netlink_unicast+0x805/0x9f0 [ 859.377345][T14256] ? __pfx_netlink_unicast+0x10/0x10 [ 859.377369][T14256] ? netlink_sendmsg+0x650/0xb40 [ 859.377391][T14256] ? skb_put+0x11b/0x210 [ 859.377412][T14256] netlink_sendmsg+0x813/0xb40 [ 859.377446][T14256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.377471][T14256] ? unwind_get_return_address+0x4d/0x90 [ 859.377494][T14256] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 859.377522][T14256] ____sys_sendmsg+0x94c/0x9c0 [ 859.377550][T14256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 859.377581][T14256] ? import_iovec+0x73/0xa0 [ 859.377602][T14256] ___sys_sendmsg+0x2a5/0x360 [ 859.377627][T14256] ? __pfx____sys_sendmsg+0x10/0x10 [ 859.377682][T14256] ? __fget_files+0x2a/0x420 [ 859.377703][T14256] ? __fget_files+0x3a6/0x420 [ 859.377735][T14256] __x64_sys_sendmsg+0x1c3/0x2a0 [ 859.377756][T14256] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 859.377786][T14256] ? __pfx_ksys_write+0x10/0x10 [ 859.377823][T14256] do_syscall_64+0x14d/0xf80 [ 859.377843][T14256] ? trace_irq_disable+0x3b/0x150 [ 859.377862][T14256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.377880][T14256] ? clear_bhb_loop+0x40/0x90 [ 859.377902][T14256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.377920][T14256] RIP: 0033:0x7f8a213fc819 [ 859.377938][T14256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.377952][T14256] RSP: 002b:00007f8a1f64e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 859.377971][T14256] RAX: ffffffffffffffda RBX: 00007f8a21675fa0 RCX: 00007f8a213fc819 [ 859.377983][T14256] RDX: 000000000000c800 RSI: 00002000000035c0 RDI: 0000000000000003 [ 859.377996][T14256] RBP: 00007f8a1f64e090 R08: 0000000000000000 R09: 0000000000000000 [ 859.378012][T14256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.378024][T14256] R13: 00007f8a21676038 R14: 00007f8a21675fa0 R15: 00007ffea4f3b718 [ 859.378055][T14256] [ 859.784312][ T5876] usb 3-1: USB disconnect, device number 89 [ 860.294842][ T5876] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 860.519854][T14260] netlink: 'syz.3.2518': attribute type 2 has an invalid length. [ 860.544387][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 860.546771][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 860.549507][ T5876] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 860.549531][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.549550][ T5876] usb 3-1: Product: syz [ 860.549563][ T5876] usb 3-1: Manufacturer: syz [ 860.549576][ T5876] usb 3-1: SerialNumber: syz [ 860.554850][ T5876] usb 3-1: config 0 descriptor?? [ 860.556684][ T5876] hub 3-1:0.0: bad descriptor, ignoring hub [ 860.556718][ T5876] hub 3-1:0.0: probe with driver hub failed with error -5 [ 860.635949][ T5876] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input33 [ 860.714310][ T5804] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 860.864638][ T5804] usb 5-1: Using ep0 maxpacket: 32 [ 860.867480][ T5804] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.867509][ T5804] usb 5-1: config 0 interface 0 has no altsetting 0 [ 860.867540][ T5804] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 860.867561][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.936547][ T5804] usb 5-1: config 0 descriptor?? [ 861.211668][ T5804] usbhid 5-1:0.0: can't add hid device: -71 [ 861.211780][ T5804] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 861.260434][ T5804] usb 5-1: USB disconnect, device number 97 [ 862.350856][ T5797] usb 3-1: USB disconnect, device number 90 [ 862.487266][ T7248] udevd[7248]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 862.642029][T14295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.642756][T14295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.447673][T14305] FAULT_INJECTION: forcing a failure. [ 863.447673][T14305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.447707][T14305] CPU: 0 UID: 0 PID: 14305 Comm: syz.3.2530 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 863.447733][T14305] Tainted: [L]=SOFTLOCKUP [ 863.447740][T14305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 863.447752][T14305] Call Trace: [ 863.447759][T14305] [ 863.447767][T14305] dump_stack_lvl+0xe8/0x150 [ 863.447798][T14305] should_fail_ex+0x46b/0x600 [ 863.447827][T14305] _copy_to_user+0x31/0xb0 [ 863.447848][T14305] vmci_host_unlocked_ioctl+0x234a/0x2850 [ 863.447875][T14305] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 863.447916][T14305] ? kasan_quarantine_put+0xbb/0x1f0 [ 863.447949][T14305] ? tomoyo_path_number_perm+0x219/0x630 [ 863.447970][T14305] ? tomoyo_path_number_perm+0x219/0x630 [ 863.447992][T14305] ? do_vfs_ioctl+0x117b/0x1540 [ 863.448014][T14305] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 863.448051][T14305] ? __asan_memset+0x22/0x50 [ 863.448073][T14305] ? smack_file_ioctl+0x263/0x360 [ 863.448101][T14305] ? __pfx_smack_file_ioctl+0x10/0x10 [ 863.448136][T14305] ? __fget_files+0x2a/0x420 [ 863.448157][T14305] ? __fget_files+0x3a6/0x420 [ 863.448177][T14305] ? __fget_files+0x2a/0x420 [ 863.448202][T14305] ? bpf_lsm_file_ioctl+0x9/0x20 [ 863.448221][T14305] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 863.448242][T14305] __se_sys_ioctl+0xff/0x170 [ 863.448263][T14305] do_syscall_64+0x14d/0xf80 [ 863.448283][T14305] ? trace_irq_disable+0x3b/0x150 [ 863.448303][T14305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.448321][T14305] ? clear_bhb_loop+0x40/0x90 [ 863.448344][T14305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.448362][T14305] RIP: 0033:0x7f285ca5c819 [ 863.448385][T14305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.448401][T14305] RSP: 002b:00007f285ac74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 863.448421][T14305] RAX: ffffffffffffffda RBX: 00007f285ccd6180 RCX: 00007f285ca5c819 [ 863.448435][T14305] RDX: 0000200000000140 RSI: 00000000000007a6 RDI: 0000000000000005 [ 863.448446][T14305] RBP: 00007f285ac74090 R08: 0000000000000000 R09: 0000000000000000 [ 863.448458][T14305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.448469][T14305] R13: 00007f285ccd6218 R14: 00007f285ccd6180 R15: 00007fff60594348 [ 863.448499][T14305] [ 864.697391][ T5804] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 864.762050][T10683] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 864.786214][T10683] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 864.791658][T10683] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 864.809421][T10683] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 864.810133][T10683] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 864.836609][ T7241] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 864.860386][ T5804] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 864.860411][ T5804] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 864.862690][ T5804] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 864.862715][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.862733][ T5804] usb 3-1: Product: syz [ 864.862746][ T5804] usb 3-1: Manufacturer: syz [ 864.862759][ T5804] usb 3-1: SerialNumber: syz [ 864.929772][ T5804] usb 3-1: config 0 descriptor?? [ 864.949901][ T5804] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 865.464213][ T5804] gspca_sunplus: reg_r err -110 [ 865.466360][ T5804] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 866.917746][ T5799] Bluetooth: hci2: command tx timeout [ 868.097922][ T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.176823][ T5804] usb 3-1: USB disconnect, device number 91 [ 868.248250][T14335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 868.258145][T14326] netlink: 'syz.5.2533': attribute type 2 has an invalid length. [ 868.443461][T14341] binder: 14340:14341 ioctl c0306201 200000000040 returned -11 [ 868.673920][ T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.874368][ T5804] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 869.001834][ T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.007682][ T5799] Bluetooth: hci2: command tx timeout [ 869.044283][ T5804] usb 6-1: Using ep0 maxpacket: 32 [ 869.046698][ T5804] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 869.046723][ T5804] usb 6-1: config 0 has no interface number 0 [ 869.046769][ T5804] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 869.046804][ T5804] usb 6-1: config 0 interface 85 has no altsetting 0 [ 869.049988][ T5804] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 869.050070][ T5804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.050092][ T5804] usb 6-1: Product: syz [ 869.050107][ T5804] usb 6-1: Manufacturer: syz [ 869.050122][ T5804] usb 6-1: SerialNumber: syz [ 869.134866][ T5804] usb 6-1: config 0 descriptor?? [ 869.164532][ T10] usb 4-1: new low-speed USB device number 101 using dummy_hcd [ 869.329770][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 869.329809][ T10] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 869.329834][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 869.329865][ T10] usb 4-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 869.329886][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.342710][ T10] usb 4-1: config 0 descriptor?? [ 869.356548][ T10] usbhid 4-1:0.0: can't add hid device: -22 [ 869.356646][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 869.363181][ T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.503650][T14363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.504099][T14363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.075671][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.559564][ T5804] appletouch 6-1:0.85: Geyser mode initialized. [ 870.581887][ T5804] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input34 [ 870.802108][T14348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.805282][T14348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.814989][ T5797] usb 6-1: USB disconnect, device number 22 [ 870.917105][T14374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.917539][T14374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.945697][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2547'. [ 870.965404][ T5876] usb 4-1: USB disconnect, device number 101 [ 871.001597][T14378] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 4, id = 0 [ 871.075189][ T5799] Bluetooth: hci2: command tx timeout [ 871.076069][ T5797] appletouch 6-1:0.85: input: appletouch disconnected [ 871.144777][T14317] chnl_net:caif_netlink_parms(): no params data found [ 871.494494][ T31] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 871.576337][ T41] bridge_slave_1: left allmulticast mode [ 871.576356][ T41] bridge_slave_1: left promiscuous mode [ 871.576494][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.654328][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 871.656230][ T41] bridge_slave_0: left allmulticast mode [ 871.656254][ T41] bridge_slave_0: left promiscuous mode [ 871.656937][ T31] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 871.657027][ T31] usb 3-1: config 1 has no interface number 0 [ 871.657072][ T31] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 871.657095][ T31] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 871.657107][ T31] usb 3-1: config 1 interface 105 has no altsetting 0 [ 871.657986][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.716808][ T31] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 871.716835][ T31] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 871.716852][ T31] usb 3-1: Product: syz [ 871.716865][ T31] usb 3-1: Manufacturer: syz [ 871.716877][ T31] usb 3-1: SerialNumber: syz [ 871.778232][T14384] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 871.778339][T14384] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 872.386604][T14384] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 872.386706][T14384] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 873.155193][ T5799] Bluetooth: hci2: command tx timeout [ 873.280062][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.425137][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.450327][ T41] bond0 (unregistering): Released all slaves [ 873.459544][ T41] bond1 (unregistering): Released all slaves [ 873.486950][T14390] netlink: 'syz.5.2550': attribute type 2 has an invalid length. [ 873.721849][T14317] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.721961][T14317] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.722094][T14317] bridge_slave_0: entered allmulticast mode [ 873.725672][T14317] bridge_slave_0: entered promiscuous mode [ 873.738002][T14317] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.738113][T14317] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.738268][T14317] bridge_slave_1: entered allmulticast mode [ 873.743291][T14317] bridge_slave_1: entered promiscuous mode [ 873.906522][ T41] tipc: Left network mode [ 873.997000][T14317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.003744][T14317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.171484][ T31] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 874.171776][ T31] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 874.214984][ T31] usb 3-1: USB disconnect, device number 92 [ 874.362600][T14419] loop8: detected capacity change from 0 to 7 [ 874.376210][T14419] Dev loop8: unable to read RDB block 7 [ 874.376277][T14419] loop8: unable to read partition table [ 874.376514][T14419] loop8: partition table beyond EOD, truncated [ 874.376533][T14419] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 874.471817][T14422] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2559'. [ 874.729948][T14317] team0: Port device team_slave_0 added [ 874.958978][ T9] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 875.085547][T14317] team0: Port device team_slave_1 added [ 875.174870][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 875.701656][ T9] usb 3-1: config 7 has an invalid interface number: 184 but max is 1 [ 875.701685][ T9] usb 3-1: config 7 has an invalid interface number: 192 but max is 1 [ 875.701704][ T9] usb 3-1: config 7 has an invalid interface number: 14 but max is 1 [ 875.701722][ T9] usb 3-1: config 7 has an invalid interface number: 122 but max is 1 [ 875.701741][ T9] usb 3-1: config 7 has 4 interfaces, different from the descriptor's value: 2 [ 875.701760][ T9] usb 3-1: config 7 has no interface number 0 [ 875.701775][ T9] usb 3-1: config 7 has no interface number 1 [ 875.701789][ T9] usb 3-1: config 7 has no interface number 2 [ 875.701803][ T9] usb 3-1: config 7 has no interface number 3 [ 875.701880][ T9] usb 3-1: config 7 interface 184 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 875.701902][ T9] usb 3-1: config 7 interface 184 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 875.701921][ T9] usb 3-1: config 7 interface 184 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 875.701944][ T9] usb 3-1: config 7 interface 184 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 9 [ 875.701969][ T9] usb 3-1: too many endpoints for config 7 interface 192 altsetting 146: 206, using maximum allowed: 30 [ 875.702007][ T9] usb 3-1: config 7 interface 192 altsetting 146 bulk endpoint 0xB has invalid maxpacket 16 [ 875.702031][ T9] usb 3-1: config 7 interface 192 altsetting 146 has 5 endpoint descriptors, different from the interface descriptor's value: 206 [ 875.702068][ T9] usb 3-1: config 7 interface 14 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 875.702093][ T9] usb 3-1: too many endpoints for config 7 interface 122 altsetting 29: 202, using maximum allowed: 30 [ 875.702126][ T9] usb 3-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x1, skipping [ 875.702147][ T9] usb 3-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x2, skipping [ 875.702168][ T9] usb 3-1: config 7 interface 122 altsetting 29 endpoint 0x9 has an invalid bInterval 252, changing to 11 [ 875.702193][ T9] usb 3-1: config 7 interface 122 altsetting 29 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 875.702216][ T9] usb 3-1: config 7 interface 122 altsetting 29 has an invalid descriptor for endpoint zero, skipping [ 875.702235][ T9] usb 3-1: config 7 interface 122 altsetting 29 has an invalid descriptor for endpoint zero, skipping [ 875.702255][ T9] usb 3-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x9, skipping [ 875.702275][ T9] usb 3-1: config 7 interface 122 altsetting 29 has an invalid descriptor for endpoint zero, skipping [ 875.702295][ T9] usb 3-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x9, skipping [ 875.702316][ T9] usb 3-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0xE, skipping [ 875.702336][ T9] usb 3-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x1, skipping [ 875.702356][ T9] usb 3-1: config 7 interface 122 altsetting 29 has a duplicate endpoint with address 0x3, skipping [ 875.702383][ T9] usb 3-1: config 7 interface 122 altsetting 29 has 12 endpoint descriptors, different from the interface descriptor's value: 202 [ 875.702407][ T9] usb 3-1: config 7 interface 184 has no altsetting 0 [ 875.702423][ T9] usb 3-1: config 7 interface 192 has no altsetting 0 [ 875.702439][ T9] usb 3-1: config 7 interface 14 has no altsetting 0 [ 875.702455][ T9] usb 3-1: config 7 interface 122 has no altsetting 0 [ 875.935921][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=3b.97 [ 875.935951][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.935969][ T9] usb 3-1: Product: ᱵ㙼䏺퉴줺膽鈢⟗㹑⑤数夷ᇠꨦלּ攽痣␗⢉ᗟ滁礮̐蚷븬锕蔄忚돀වꗘ喀ᆺ䧗쐺⥠펱旅ᤏ◐딪셠奇죶ꇴ䳽堲衪뱆杊ᴅḟ餸ᷖﴧ玲鷿䢳뗗帢￞▀榝妏놉퉝戶䵕噏⏃ॲ츯Ꞑ傗볱쌋谫ꙓᄚ僀ⰷ๠靐ホ즒轥蛟뽂买ွ浜췮䎨郠 [ 875.935998][ T9] usb 3-1: Manufacturer: ఌ [ 875.936011][ T9] usb 3-1: SerialNumber: й [ 876.167972][T14431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.168495][T14431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.439178][T14452] random: crng reseeded on system resumption [ 879.386757][ T9] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 879.388260][T14464] netlink: 'syz.3.2567': attribute type 2 has an invalid length. [ 879.401917][T14317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.401930][T14317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.401952][T14317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.405705][T14317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.405718][T14317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.405743][T14317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.552434][ T9] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 879.637644][T14469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.639667][ T9] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 879.641791][T14469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.715903][ T9] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 879.892203][T14317] hsr_slave_0: entered promiscuous mode [ 879.917694][T14317] hsr_slave_1: entered promiscuous mode [ 879.918643][T14317] debugfs: 'hsr0' already exists in 'hsr' [ 879.918665][T14317] Cannot create hsr debugfs directory [ 879.922570][ T9] usb 3-1: USB disconnect, device number 93 [ 881.294671][ T41] hsr_slave_0: left promiscuous mode [ 881.334460][ T41] hsr_slave_1: left promiscuous mode [ 881.336047][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.336072][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.386760][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.386786][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.435387][ T41] batman_adv: batadv0: Interface deactivated: macvlan2 [ 881.435411][ T41] batman_adv: batadv0: Removing interface: macvlan2 [ 881.576275][ T41] veth1_macvtap: left promiscuous mode [ 881.576333][ T41] veth0_macvtap: left promiscuous mode [ 881.580092][ T41] veth1_vlan: left promiscuous mode [ 881.580193][ T41] veth0_vlan: left promiscuous mode [ 882.296016][ T41] team0 (unregistering): Port device team_slave_1 removed [ 882.334841][ T41] team0 (unregistering): Port device team_slave_0 removed [ 882.760047][T14509] all: renamed from bridge_slave_1 [ 882.911776][T14520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.912278][T14520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.305104][ T5876] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 883.534819][ T5876] usb 4-1: Using ep0 maxpacket: 16 [ 883.588595][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 883.677269][ T5876] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 883.677348][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.677390][ T5876] usb 4-1: Product: syz [ 883.677567][ T5876] usb 4-1: Manufacturer: syz [ 883.677611][ T5876] usb 4-1: SerialNumber: syz [ 884.049122][ T5876] usb 4-1: config 0 descriptor?? [ 884.066087][ T5876] hub 4-1:0.0: bad descriptor, ignoring hub [ 884.066121][ T5876] hub 4-1:0.0: probe with driver hub failed with error -5 [ 884.119633][ T5876] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input35 [ 884.164317][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 884.531642][ T10] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 884.531671][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.531688][ T10] usb 6-1: Product: syz [ 884.531701][ T10] usb 6-1: Manufacturer: syz [ 884.531714][ T10] usb 6-1: SerialNumber: syz [ 884.550338][ T10] usb 6-1: config 0 descriptor?? [ 885.700525][ T10] usb 6-1: Firmware version (0.0) predates our first public release. [ 885.700551][ T10] usb 6-1: Please update to version 0.2 or newer [ 885.815433][ T31] ================================================================== [ 885.815510][ T31] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 885.815544][ T31] Read of size 8 at addr ffffc90006732008 by task kworker/1:0/31 [ 885.815559][ T31] [ 885.815582][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 885.815607][ T31] Tainted: [L]=SOFTLOCKUP [ 885.815614][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 885.815625][ T31] Workqueue: usb_hub_wq hub_event [ 885.815647][ T31] Call Trace: [ 885.815654][ T31] [ 885.815663][ T31] dump_stack_lvl+0xe8/0x150 [ 885.815688][ T31] print_report+0xba/0x230 [ 885.815709][ T31] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 885.815728][ T31] kasan_report+0x117/0x150 [ 885.815747][ T31] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 885.815772][ T31] __list_del_entry_valid_or_report+0xb5/0x190 [ 885.815794][ T31] kcov_remote_start+0x2af/0x710 [ 885.815816][ T31] hub_event+0x150/0x4f60 [ 885.815836][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 885.815856][ T31] ? look_up_lock_class+0x57/0x110 [ 885.815875][ T31] ? register_lock_class+0x31/0x2e0 [ 885.815893][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 885.815916][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 885.815940][ T31] ? __pfx_hub_event+0x10/0x10 [ 885.815962][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 885.815984][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 885.816005][ T31] process_scheduled_works+0xb6e/0x18c0 [ 885.816040][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 885.816065][ T31] ? assign_work+0x3d5/0x5e0 [ 885.816088][ T31] worker_thread+0xa53/0xfc0 [ 885.816122][ T31] kthread+0x388/0x470 [ 885.816139][ T31] ? __pfx_worker_thread+0x10/0x10 [ 885.816160][ T31] ? __pfx_kthread+0x10/0x10 [ 885.816178][ T31] ret_from_fork+0x51e/0xb90 [ 885.816201][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 885.816221][ T31] ? __switch_to+0xc7d/0x1450 [ 885.816243][ T31] ? __pfx_kthread+0x10/0x10 [ 885.816260][ T31] ret_from_fork_asm+0x1a/0x30 [ 885.816285][ T31] [ 885.816291][ T31] [ 885.816296][ T31] The buggy address belongs to a vmalloc virtual mapping [ 885.816321][ T31] Memory state around the buggy address: [ 885.816331][ T31] ffffc90006731f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 885.816342][ T31] ffffc90006731f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 885.816354][ T31] >ffffc90006732000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 885.816362][ T31] ^ [ 885.816377][ T31] ffffc90006732080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 885.816389][ T31] ffffc90006732100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 885.816397][ T31] ================================================================== [ 885.816570][ T31] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 885.816586][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 885.816610][ T31] Tainted: [L]=SOFTLOCKUP [ 885.816617][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 885.816628][ T31] Workqueue: usb_hub_wq hub_event [ 885.816648][ T31] Call Trace: [ 885.816655][ T31] [ 885.816663][ T31] vpanic+0x56c/0xa60 [ 885.816689][ T31] ? __pfx_vpanic+0x10/0x10 [ 885.816716][ T31] panic+0xc5/0xd0 [ 885.816737][ T31] ? __pfx_panic+0x10/0x10 [ 885.816760][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 885.816782][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 885.816802][ T31] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 885.816823][ T31] check_panic_on_warn+0x89/0xb0 [ 885.816843][ T31] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 885.816863][ T31] end_report+0x73/0x180 [ 885.816880][ T31] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 885.816901][ T31] kasan_report+0x128/0x150 [ 885.816920][ T31] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 885.816945][ T31] __list_del_entry_valid_or_report+0xb5/0x190 [ 885.816968][ T31] kcov_remote_start+0x2af/0x710 [ 885.816989][ T31] hub_event+0x150/0x4f60 [ 885.817010][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 885.817032][ T31] ? look_up_lock_class+0x57/0x110 [ 885.817051][ T31] ? register_lock_class+0x31/0x2e0 [ 885.817069][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 885.817093][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 885.817116][ T31] ? __pfx_hub_event+0x10/0x10 [ 885.817139][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 885.817162][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 885.817185][ T31] process_scheduled_works+0xb6e/0x18c0 [ 885.817221][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 885.817239][ T31] ? assign_work+0x3d5/0x5e0 [ 885.817256][ T31] worker_thread+0xa53/0xfc0 [ 885.817277][ T31] kthread+0x388/0x470 [ 885.817293][ T31] ? __pfx_worker_thread+0x10/0x10 [ 885.817314][ T31] ? __pfx_kthread+0x10/0x10 [ 885.817332][ T31] ret_from_fork+0x51e/0xb90 [ 885.817356][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 885.817383][ T31] ? __switch_to+0xc7d/0x1450 [ 885.817400][ T31] ? __pfx_kthread+0x10/0x10 [ 885.817410][ T31] ret_from_fork_asm+0x1a/0x30 [ 885.817423][ T31] [ 885.817761][ T31] Kernel Offset: disabled