last executing test programs: 1m45.111794183s ago: executing program 2 (id=1981): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xc00) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0xc, &(0x7f00000002c0)={0x0, 0x79af, 0x800, 0xffffffff, 0x40024e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, 0x2e, 0x1, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) lseek(r1, 0x0, 0x2) 1m44.520492425s ago: executing program 2 (id=1982): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000800001fefeff03020000000000000000", @ANYRES32=0x0, @ANYBLOB="0012ce8800010067766512006dee2bb1a7337930cae27fec3d8c8940f1d9a85720921b143f17b65e9ff4aa2cc26e7c343619dfc5"], 0x3c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x4c01, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000340)=0x7, 0x4) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000240), 0x0) syz_open_dev$dri(0x0, 0x418, 0x10000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x6d5) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x1}) close_range(r8, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0) 1m44.160520929s ago: executing program 2 (id=1984): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$ppp(0xffffff9c, &(0x7f0000000280), 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getresuid(&(0x7f0000000100), &(0x7f0000000340), &(0x7f00000003c0)) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000026c0)={0x324, 0x2d, 0x100, 0x0, 0x0, "", [@nested={0xf7, 0x0, 0x0, 0x1, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}, @generic="f0ce6f170e726f231f685586c693f9db910908db48c435a7aa8045b1d000fee5bc0cf732ac76a7a3bfc3713d2e302af19b33e2e0691c8a0cb26569c434e95133482763f25917fae3a3f5dd632952c7fda6391440b23ca5588174f38a5071", @generic="b8620d1cd056bf06e3", @generic="f60537a6e13b32e4098e7213c14a24179d72ee46a59644fd6ce7cdec26581cb0efdbbb61450ddf29c3397853ed528a332ffc6b52bfa359b8a41342bab1a726c08f27e6a9dcb8e534396f3c84d91d471c5fb7c68cab6c8565612e338098426beba71c14cc347074661df232227bdf38b5d68d47af3ed14e0b7a0a901daf21c1254e1f179ef5f5098e111230edcae1de22c014a26f4dc8d1164f12fbe93ee5a73a7d9098d9ea42c93f6140d129c6f9dffdc853acbd711c226f79e67850ba682b5dc38af27c84aa83d31159e3e218", @generic="66b414d180f11541f96c90d107a1a4d338941551f798076bd186d9357c68b18d744f25754c944d227591aeb7409cea3cb70c73ce80e9942a9b65456a563f6a727e972048809a36382b83d8d5106998f1a544b3c38c746d928bc26e9d7cb33e87e72bb289c00de8994520ad80fe9f043955b64be4e60bbe73cbe9119b9cd8578f883962c37705ae8c64d5aa55dc375cf42a0791d25d28a3ba92bb056d29f4f8bbd4ebd2f88e7f2bc2e7ad0fb107345ff25062603efbf5f960678a9b18a147afb6f09b2536a822fbfd72a0b737ef3e65ef4c", @generic="7957431353167c99b03ab868c774", @typed={0x5, 0x11b, 0x0, 0x0, @str='\x00'}]}, 0x324}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x1011, 0xffffffffffffffff, 0x0, 0x0}) write$binfmt_misc(r1, &(0x7f0000000000)="a5ce", 0xfed0) r6 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r6, 0x0, 0xcea5, 0x6) 44.71090649s ago: executing program 2 (id=1986): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) io_submit(0x0, 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x28f101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/106, 0x6a}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x3, &(0x7f0000003080)=""/20, 0x14}, 0x40000000) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) 44.500776536s ago: executing program 2 (id=2072): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0xb, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c1}, 0xc8c4) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000dc0)={0x0, "507cea5a1af14db701e8ffbbe3d2a2d6"}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0x2, 0x0, {0x2, 0x2, 0x8000, 0x0, 0x7}}) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a0000120002800c001480080001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x0, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x28000) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x2) 35.811444053s ago: executing program 2 (id=2085): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x6, "", [{{0x9, 0x4, 0x0, 0x4, 0x11, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x6, 0x1, 0x1, {0x22, 0x2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x40, 0x81}}}}}]}}]}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7, 0x1, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x0, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200009, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x1, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x81, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x3, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x8, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x2, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x8001, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x7, 0x4, 0x9, 0x5, 0x8, 0x0, 0x5, 0xb, 0x2, 0x5, 0x200005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0xf, 0x303c, 0xfffffffa, 0xb, 0x9, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9f, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0x80000c1, 0x2, 0x3, 0x7ff, 0x12b, 0x7, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x20080801, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x10005, 0x1, 0x2000002, 0x14c, 0x60a7, 0x10006, 0xa, 0xffffffff, 0x80000000, 0x5, 0x2, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xf8a4, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000140)={0x20, 0x2, 0x74, {0x74, 0xa, "fd62c1f96687089a57d2fadc331fc85dbeb234b3c8251bbed098411a64799a24aa6b102e45092f2ed1a4fbb1ac0c4d70f59edf31bd6755df74560e613bb8493729f51cd13b37eefee39835a7be9ae238dfdc3cb5f3546052a56e050bdcbcceead19d5a91e09d414e1c0e48c89f2f9b045d76"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000000200)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x2, "21b2d080"}, @local=@item_012={0x0, 0x2, 0x1}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x518}}}}, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x20, 0x9, 0xc, "64cc9ab06b7dcbebf618d6c8"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0x20, 0x1, 0x16, "81d5fc792b5da02f1876f41e683718fbfa0bded0c091"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x2}}) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x371, {0xfffb, 0x21, 0x7, 0x0, 0x1, {0x22, 0xfff8}}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 33.903492864s ago: executing program 32 (id=2085): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x6, "", [{{0x9, 0x4, 0x0, 0x4, 0x11, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x6, 0x1, 0x1, {0x22, 0x2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x40, 0x81}}}}}]}}]}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7, 0x1, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x0, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200009, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x1, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x81, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x3, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x8, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x2, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x8001, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x7, 0x4, 0x9, 0x5, 0x8, 0x0, 0x5, 0xb, 0x2, 0x5, 0x200005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0xf, 0x303c, 0xfffffffa, 0xb, 0x9, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9f, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0x80000c1, 0x2, 0x3, 0x7ff, 0x12b, 0x7, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x20080801, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x10005, 0x1, 0x2000002, 0x14c, 0x60a7, 0x10006, 0xa, 0xffffffff, 0x80000000, 0x5, 0x2, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xf8a4, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000140)={0x20, 0x2, 0x74, {0x74, 0xa, "fd62c1f96687089a57d2fadc331fc85dbeb234b3c8251bbed098411a64799a24aa6b102e45092f2ed1a4fbb1ac0c4d70f59edf31bd6755df74560e613bb8493729f51cd13b37eefee39835a7be9ae238dfdc3cb5f3546052a56e050bdcbcceead19d5a91e09d414e1c0e48c89f2f9b045d76"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000000200)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x2, "21b2d080"}, @local=@item_012={0x0, 0x2, 0x1}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x518}}}}, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x20, 0x9, 0xc, "64cc9ab06b7dcbebf618d6c8"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0x20, 0x1, 0x16, "81d5fc792b5da02f1876f41e683718fbfa0bded0c091"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x2}}) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x371, {0xfffb, 0x21, 0x7, 0x0, 0x1, {0x22, 0xfff8}}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.060010035s ago: executing program 4 (id=2127): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f00000001c0)}) ioctl$KVM_SET_CLOCK(r7, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0xb, 0x100a}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f00000001c0)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, 0x0, 0x290}, 0x8011) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f00000002c0)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc4cec0f01310f019c09000f01c2", 0x6f}], 0x1, 0x7d, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r7, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) fcntl$dupfd(r0, 0x0, r0) 13.45859703s ago: executing program 3 (id=2129): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000500)=@newqdisc={0x1bc, 0x24, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x9}, {0x7, 0x5}, {0x0, 0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc0, 0x1, 0x1000, 0x200, 0x2, 0xffff, 0x4}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x55}, @TCA_RATE={0x6, 0x5, {0x21, 0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x4, 0x5, 0x40, 0x1, 0x7fff, 0x4, 0x3}}, {0xa, 0x2, [0x8000, 0x7, 0x4]}}, {{0x1c, 0x1, {0x58, 0x4, 0x2, 0x0, 0x2, 0xfffffffd, 0x80000001, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x1, 0x3, 0x5, 0x1ee7, 0x0, 0x6, 0x40, 0x8}}, {0x14, 0x2, [0x9, 0x4, 0x2, 0x7, 0x5, 0x3, 0x20b3, 0xfff7]}}, {{0x1c, 0x1, {0x0, 0x0, 0xffff, 0xb, 0x1, 0x8, 0x7, 0x5}}, {0xe, 0x2, [0x1, 0x334, 0x2, 0x5, 0x5]}}, {{0x1c, 0x1, {0x8, 0xf1, 0x7, 0x4, 0x1, 0x0, 0x7, 0x1}}, {0x6, 0x2, [0x4a]}}, {{0x1c, 0x1, {0x2, 0xea, 0xc, 0x9, 0x2, 0x2, 0x4, 0x6}}, {0x10, 0x2, [0x0, 0x4, 0x81, 0x7fff, 0x66, 0x6]}}, {{0x1c, 0x1, {0x7f, 0x5, 0x6, 0xa1, 0x1, 0x2, 0x8001, 0x7}}, {0x12, 0x2, [0x1ff, 0x401, 0x101, 0xffb2, 0x181, 0x9, 0x5]}}, {{0x1c, 0x1, {0x81, 0xff, 0x7fff, 0x3, 0x2, 0xfa, 0x6, 0x3}}, {0xa, 0x2, [0x6, 0x5, 0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x19, 0x9b}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180), 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x1002, 0x2}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c00)="0beea728", 0x4}], 0x1}}], 0x1, 0x4080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r8, &(0x7f0000001c00), 0x400000000000159, 0x40840) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x20343059, [], [0x5f], 0x1}}}) 11.894200049s ago: executing program 4 (id=2132): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/anycast6\x00') read$FUSE(r2, &(0x7f00000061c0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x89a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x804}, 0x1c) listen(r3, 0x2) syz_emit_ethernet(0x62, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f900f5002c0601fe8000000000000000000000000000aafe8000000000000000000000000000aa00014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0307000000070000001e0c018000"/30, @ANYRESDEC], 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) unshare(0x6a040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000009ba55c7380139dd61d2500012f8bffae5305030000000000000000030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x68890) recvmsg(r4, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x142) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000220000080003400000000a14000000110001"], 0x64}}, 0x2000054) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r5, 0x7a9, &(0x7f00000003c0)={{@host, 0x7ff}, 0x8, 0xffffffffffffffff, 0x0, 0x80000000000000, 0x9, 0x2, 0x1, 0x992}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) preadv(r8, &(0x7f0000000200), 0x0, 0x7, 0xfffffffc) 11.752438235s ago: executing program 0 (id=2133): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) capset(0x0, &(0x7f0000000000)={0x0, 0xb, 0x2, 0x209, 0x977e, 0x2}) socket$kcm(0x2, 0x5, 0x84) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xfffbfffd}, {0x2, 0x0, 0x10, 0x8}]}, 0x94) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000008"], 0x14}], 0x1}, 0x0) gettimeofday(0x0, &(0x7f0000000100)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x3, 0x1) (async) socket$nl_audit(0x10, 0x3, 0x9) (async, rerun: 32) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (rerun: 32) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 64) syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, 0x0) (async) syz_usb_control_io(r5, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000280)={@loopback, @local, @local}, 0xc) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x43339d41532428b}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000)=r7, 0x4) 10.108100546s ago: executing program 3 (id=2134): setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/wakeup_count', 0x2843, 0x10a) unshare(0x28040600) sendfile(r0, r0, 0x0, 0x400) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x2, 0x5, 0x10, 0x8d0f}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x3, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0xa, 0x4d, 0xfffffbf2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x8, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0x51e, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x0, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0xc, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0x2, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x4, 0xea4, 0xa, 0x5, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x29, 0x6, 0x1000007, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0xfffffffd, 0x3, 0x8080, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x4, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d5, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0xb, 0x1000000b, 0x3e7, 0x100005, 0x5, 0x4, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x8, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x2], [0xc805, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x4, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000006, 0x5, 0x8, 0xff, 0x3, 0x2, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0xfffff001, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0a, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x918) 9.853626644s ago: executing program 0 (id=2135): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) landlock_restrict_self(r1, 0x1) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x80a, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 9.716294505s ago: executing program 1 (id=2136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000206040200000000000000cb6e3dd66536232b56d0da21fd1d39c591d0216801ccf98ba19cb994a0d1cd5af575a0f97297e6000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCXONC(r2, 0x540a, 0x0) r4 = socket(0x2b, 0x803, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a00"], 0x0, 0x28}, 0x28) r6 = socket(0x15, 0x80805, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='\"', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NFT_BATCH(r5, 0x0, 0x4000003) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 9.394743529s ago: executing program 3 (id=2137): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000640)=0x101, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000000)=0x7, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xfffd, 0x3}, 0x6) r2 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r2) writev(r3, &(0x7f0000001380)=[{&(0x7f0000000000)="846cb78afbe02da52bdb47824464b1", 0xf}, {&(0x7f0000000380)="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", 0x1000}], 0x2) 8.89629307s ago: executing program 4 (id=2138): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x129240, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, &(0x7f0000000180)={0x20, 0x0, 0x0, 0xffffff, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@deltaction={0x15c, 0x31, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6a}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1015, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x4}]}, 0x15c}, 0x1, 0x0, 0x0, 0x24040005}, 0x14040080) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2000c004) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) syz_usb_connect$uac1(0x0, 0xb9, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902a70003010070000904000000010100000a24010800000201020d2406000103080000000000000c24020601010608000010000c240208000003000000000009240605060101000009240300000000050011240606020506000400060008"], 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000500000000000000800000008500000075000000181100", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000018000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f000000"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRES8=r5], &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r7 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000140)={0xffff, {"2ac7d502ff049538909f874a88417c00", "f977000000000000000000000300", "47010b1889b9ff01ffff470300"}, 0x4, 0x7}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1}, 0x94) 7.986326975s ago: executing program 0 (id=2139): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000000400"], 0x50) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(0x0, 0x80, 0x102) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.284656956s ago: executing program 3 (id=2140): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r5 = syz_io_uring_setup(0x2751, &(0x7f0000000000)={0x0, 0x4627, 0x0, 0x0, 0x2eb}, 0x0, 0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x3, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b40)={r9, 0xffffffffffffffff, 0x39, 0x0, @val=@netkit}, 0x1c) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000005f00)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000540)=[{&(0x7f00000004c0)="749a22180ce759d3363e80d3393584e003040f884d1046df2b77c5776b20b6bb09280faa904e7ef031e7c834b50a4d2b00e46f8a963f471aaeca34a4669cb8a2ab6bb12773", 0x45}], 0x1, &(0x7f0000000740)=[@rights={{0x1c, 0x1, 0x1, [r5, r7, r7]}}, @rights={{0x28, 0x1, 0x1, [r10, r5, 0xffffffffffffffff, r4, r5, r2]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0x88, 0x40}}, {{0x0, 0x0, &(0x7f0000000a80), 0x0, 0x0, 0x0, 0x48040}}, {{&(0x7f0000000ac0)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000000b80)="23f75d50bdedba11c9009a55ed4dc12a45c2cd64708a05513c8eb98e2c601cd57dfc60d8bfd244dc34519dfa72603a5ef5efdd6079f0c8471ee7dfd1917ee2d04697ec1362c92586d023337f48808c13c16c4576491144d00d22a10a433093dc9986f021d877a0664fa9a4306d8aded7e4171b714319a19e5025fa317b75e20dda711e6e4ecaf06938d92672c49f04e8a73af3e3aac3e86339afa17bcd57828c68e69193b899fe37ce7e688450acdde137b11d6be9c08e", 0xb7}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)="0fb371df8640a6b9f482209e246757e0006be6dbe3f6d46a0f8153534b2e2695fdf11d5ed135b71300003d6b6a899495da1943f219302dafe116fef7af8ef165ef9b6bf0ff014eff567ed23513fa85b4cb779934aaadb89e14b8b84ea8ca70a77a2bdcadaa080642eca73e8e9fb0f80a119385e86006bc7031b58df95e", 0x7d}, {&(0x7f0000000d00)="ee946174c2daaa50d735c56a64af783b0c49b4b92a4cbfbc619237153a200d3fa5c9d2", 0x23}, {&(0x7f0000000d40)="200c92f1899a05158d8d2c2c0513b1e9754eab9d14be7e432e4f8120a070378e593fb873a769ec4325debd8e9f", 0x2d}, {&(0x7f0000000d80)="77bdceebfa42622ce8f131861dca601f15c72460a467fc841d1792be71ccafd61c49977055c0dad09b8dd204f4a34d9e3b803d3c0f0dc819d157cf36a3df0b4b00f12258dac9ed13f2afdd8cf6281fc34c08015399ad96d180f40704", 0x5c}, {&(0x7f0000000e00)="49fca7f077e95c20e4b7f7971e9cebd78578ced62e12cbfe61d03a783f4c9da62875f3c6dcba11bcfb1cacece4c85a0538a3253b9662941df832f75f0f3010f5ba7bbe5f0a7f9ec936049408439e6eff80af59c36a94a030d37bb6f377bad06ee876b4d660d3a920254960a2c36dab167b0aad76725c37b08f0d5b01cf0f95335c9eaa11e42d18549342eda901a9027389a8489288d2665b79b68f89e0158f4e98074a08ff928e49bdd5a3c08ed5378fd3bf41e354bb1e76e275697d44488a0fd768260bf56ec70807c74eaa6f58f8bcd0ae94e9fec0fe650a3e256baae80cbebfe15522db8d3408fa954739dc1014fe7a99cae18c90b3f05fd791b4c533301b036d10f1648c494f129fd777936d25b6e20295a5274668c5a53464d478554e08436f385dca79c93dbfdfdfede91ed2dd4de16975e77adf7913db1d18d2bfac50d9a3b2a78feaaec2438d2fe87d6e0245adcd7cbf9c75ea285eccdfae4b36b89e2d2f9170c162442e22396b515f67bad1bce8cd33a995e7a4a5d915d83bf81759ce191e652fc0050120368886de7dba9e399e8a514f73ccc84d9e53812ee9090830fadafd208231c76b9ca523eb54d86af8e8de80cd6af73ec1f9e2ed754700844f9020d41a6af63e84211a3350aa40b830e3fb17959074dc9695f37ab08209e1321e5a31febd3e42935abf460b1b1f9a18ff99c8c94579782dd953d6d980d170763867b5dbcef2e0d9500817d290945030ca927195cc89cd6c293296e95f1cfcd32c9906fae8203860320768c91ba3ec44c4ac756cd842e30f17ae1591c92a1edd3e04c150b167f26bc3b9a90efadf6f9de2a405403c80804238953427a2bd4b4255bef3a8f996cee05563fd4a360d3e17fb06c0828d60a5fe5db2aa9efd0de247b0aeaaedba52e2c052c5f9a195fe4ffcf455b5c8c3ddfe34189697b7ee73741af7fe94d1ee3c03cde1a797209de88ab88abd4592c0b2044221901cdebbc2c0e1acbf3f53778b1c88229ba65a215e7b8efc079230511a854cdf23ea42e6dd9c56dbf5df45aee4081f843ef524b2f6928a7ab0e2046419b8f823e49f5b9b69b7a26307995a588e374ed19ae1ab1110a430b71bbc71fa45d55542ce4d5f5ca06bb957d688df5dd59095bbd4a1eee11cecaa671697c6f94d2a76859eb151d5da63ce99e68802a1e13c7857508b26a5c8a4b8a81f905204a2c7cafc777fdd3f15e3ddadd309928a8b931f1ab028a14d59a04ed8fae63910be3b03442adb52993f51ad5059d1394ccb2085dd4b9bc870db5bc4b1269624cd3366bedd6a98b94de5d7f2af9be49f7685218b63001305ba34214296b79a0abb169bcfad8ff2cdd93c15b94afb7fa7d7eed53ead72f083988d7fa8afdf68d43a1b31f59dfbd79e717a2c94ad61365236533bbcd4660168fc85173be02c4552127631a772056dde2ebb278d6478d064352b84559e46d0f4340661a081e4d5045296503130be0f29ab955f35508c35266739c9f670761ef89f14d14fb46e6b18543a6b2589358524f7c34e0b05991454053be18536ccaacd7070f3626862b0cd7c1a0e15cc2d2a0cf7163edc205efb5f45e57b18d3144a10718f46ad701f69d51c58f8bd51b09988be4a2ccce7def5ce59491e6e0aadf3f7f686841559c6c6a97c2fda3734f3dc65f38fb999c87376488cbf9e297887799399bd82ba97b5dc2120f6c859219828b6c205767600895f93a089f7f032aada29da175411c00a7e0c087cec32f05810ed917bd52f5759cd22271ddc83bb979c6c9cc17721ea6229f930348754536c1ef0dc719f0e3975fe338f1544134e09260bc6b874b14aaa0b91173a6ea5e5ba258cb6f4e70d5fc0384c8f6e1e73ccd619308727235b3ce2bc8741ed86a91a5ab805d53c6bac4494b419fd5d59f0647e5a381a8a4dc9bbe79e796dbe340469d62745362812576902bd085cb468dfb0add93b1c9c46f6f7dccff6a41a3bbee62073a6b0dd489d84f8ffc7aaadeeb391f39e7ba4aaf594e37fa5ee1c84bfa40dbcffc9d259551efbe2c9678ab9a73288bf1a812d974761b959c57bea538a9ba1f765b8a97c9b308ea04867acb316e30a493a760f62534e71e7c37052dc8d3c1a0efd74682cc4a46a9144cad72902ca7d8c2181c8ec3f8655ed7e9a568ddbb9ee5350ea5274b326bdce01a07f51c0eb546771d824fdb335c5d47fb94a2ae5f1a241d7ff48dc72bfadc951e27fec791b18d63ebd1a369d96edc7957268c064bc6fa3748aabb4bbd1bd7235f2da7daa5b101cc3b58aed784bd989e6c6902f04cbf6d25c88f44117b2418c4cd3a4f213d24b39ca5b4c97c8933b3e060f9fade5989ebfd785d07bd197822d02362f6d11ab34051813bb812cfd0cef11530116d277e91717963ef2b6fa2ef8d4ab29fd0af570b7896f3ac5bbbd80abb0458299cf7460b3cc11986c7467bfb5b80a60666c5dafeb07d648ef2a0b4ff77564bfa5706893a4d2f8c03c2f3b2d66b51dba704b98e90e06f3faed411e6a313bc0f9b26036bd59f11410818608f9cc360a5af5b7534167e6eaa7d42f4adc99ef219748abe1837d1d33de9a74b4bf25672043411b179b7d6ab2169ced32c92bd65a5f6c1e697429c3d038ef65f4f0baeabc9044431f530b10114b23d5a533e76c652762d1fdc72e0c9f2629fbb2c0d7bd76dcd44252d51cde234169f3625c4d1d630e1297f98c70c5815033a52754738b957ebe20b26eb7f05eacf4d70e793fb44323b5172b06ed0bee50262e7191c0090eb05a0637f6435032208cbc71e1cc7142695e0273cb98fdc0984d1d25bf3eb40cf9ea797f2139eee8aedf636c438eab5c259c25537e2392b8b4918dae044ebf2011ad58025b321f77a3b5d012bbd255d2a179155855e9d8d84c4f0b3d003499c67aa1e4e9f6d8db1fac58e23f61bf48205ee491584ba6208f664205bdeb24009cd5ad2bb52bbdf32c9632e8e59b8296bafdd07d362699f1d3dedb4058c40ef5ad8361369cf695ab8bbc7876bbe26e5440496cfe3273a4f56286ff4a92743588ebb7e74d26643806309cda5fc186409007a1c1c6e594ad1c2600b328a02cae2f9d50872eb0cfcb2edfb7edca92efe9e6f355e27a8f56e3429c1268c59480af328fc0cd102747caa295dbc97207fb7886993db526fd0953cc4473383ffdfe2da015347d304ead96f4495761e15864c64e54b9df82173ef9bfbf648076e69946c5daca3648595997374e3ae18e999e15a2c036e425421a73c85e6a59affe0a8f7d7fcfac6f860fdf59129e080d8ce9b0791b5f4915449cc2ea738c20bfa2f41acaa987ca424144537d697f914d55b56088c0414516be5afdb6b368c56d154c519f502a496867442c8cecc01ff9ab89ffcfef60e398f4f5e7a9bc0c43816f881879af3600c03f9a5a8e9d37b54a262c64571f3362c8d1a3816ce4cb118f1ee7ee61d348bcd96262fe5f33c2ede5f1cc02088e096ff1a2da929b67cf1de2ba4cd9a576379902ce9b66f58ebfe80ef97ced1559f292cbd7565369c9bfd77b33deb8ee626e7f07fc1ae7770dad679a9c4a1c91ae28cc76bdbe7317457cfd8935cbef5bcc12da91f1cf2f576cb43b8ef0264e89e98fe2624f47648688746852205aa723531b3d1b1c866aa5e9eb26cb91cb7bd1e7ddd21f3b1e0d9ff15fbb2dcdca9ebd7305d9c8377e8bab9852ef8c02319f76ef45ac1ec064d60c31fb0c4051a374819a6e9a4871f17974596938d828e8a12341ca40a1be501c05d93ccb5dfadf22c6499044cd8fccd0075614ef82e32fd139d793c7590be6bbeaf5df3c72354a2d012ccd5f18f38f96ad0216b3f62ba17ea85ea4c6f3fffb54d13d0e0246a900c2b08bf03f0be738851e58df45d9c428a119efe235cc767291c97b8d0a7b832e04d8cc403fb830105c8406a41e9901736fbf8f2434659ba9360e77c0d508c74a7abae236577c4688ed53ce32478f781eb2e3b1ae8d6ae7d511cb6ad47ad00f9f58dd4ab7a009a919eaf96151e7704e98e0416108423a257052ae19222a23c9bf6b9106640e20cdd11356f7524113919319f2765288f007303d4a0f19c9d62648f67a41268d0677579c24461289a6de674634b77e93dc62e5bad8dfb21837e2b86621f3ed3ac6b19da92fa3e1495846aa593e2692a5896952b6439376d39177fdf97ac1a2d6089d5e63246a862d912796d3ed4372e31d72f1454a16c884c9437d41cfd3a80d2e372c8740925d08aed0a9cfb1106f893400cfe1412b9b61b562dda15050f0a27566d0002e0031d830a7e785230c2f09115bb17c414f17333c81f0d543084cfd97c89a0869d065a6c7d4ca5309c35227fa56d9245423ec1401dc51c3281b4bb15b064dcaa08b53e3734cfcb4b2cfdd82775ffd82b3b839cc1a4f068643afe1103e540de7605c80bdc66ee65119bad2dbcbdf41e958d3f4db76df81efe50551e47ac03788aaff4ba7b9fc74d2e00a2388dd4ddbdd2499af65a900868a9950f599b062cc8aa4c3057daa025e894dfec60d76e5be3c9b8f5e0f1723e467cc43ff5bdd07f5fd4f968303d6c21774e8bf6dc0966d746b941f76c77e359c176d5bddba550fec669eb44fa1adb2e5a1839a1349cb7e5431617d5eba028ef26f1841553c1800d1d638551a1e44e4331679e41749ae5b21bbf50e3da40d7bd4e8b1f06b47fca0f25f7f58030e5fde009834e8cf40fc921c6c4678d3ab50c7967adef9035d0e32dcf87c3468c5d92a7d6bb30b511727ce9816462e96ce66a151d581f30f95b287bc828958d6d3ce8ebfc61667e446abe88b1b5f2132888411e9a0334f124f2154cc95b88b1a8354949165a19492bccb4fd202f27f791bb75855511d97aa2d31f637d43f768020b342e0c7eca1922fbf20b57ba3c6ed2947696ef08fb20ce6db47f91533eed072a1aa3cd6de1fccf0630d453f0d685f592a1fb992b60f4d7437ed0a98b1a7a91ca5e67cd0cfecefba1c3ac9c44550cd87846518069570d4dafb682883d543c6b600ace73095abe7dfa66bb71569af28ac9642ddadd71bba20e70dbe46257c3bcecca34fc22c23d389baeee63d7648dccd51dc1fcf6cdcf5fd77291a5dfea380817bf996478b4e83375edd141d2318951d27b6cccebba3aec67ef8cec6177806c7754e2675e2b0fc20f06404fdd1a08c1355bf6303cf63647b0e46f1f4ebc4c7f95d4e64f26486770ca6fb7820b8a49f1c60a558ba80ec45eec3191a728e4562ec68b30d0721fa1a218d2f79eb8d79429a6fb9c82477cdb1d184cc0816d72483b4972dba87ab628dd8c51c3151e928c94652239a22db300446b09a96f03e580f18559ef1999cd9972bc113cb2e32610c531c2c711521c4859f1de9c46d884ace7789e2ef66055b7e4ac0baa5c3123352dedae514b4749406c5e79b6806abecb2ff6faeb7c66d45dc518d5b7853669c43ba0468babc1d09de2999a65484f1c5e98a7f377da2698025c07bcc5a7bda5c5e830f6e68af89e18a9c3830b44c733d36da015bcd46b2d3ed5d219fb4c4d4541c13434a37d8654ef8f9c1e3c48356d4afebf2555797eb9ea3610e2bb2376cbf7017c1f4c943ec67e4853f82f3f455206a7947dd110bc6d1046dbd5b3061a12513c98dba898ffb3090cda949b10244644d11292f80df8c5b145dba0fe867380aad07c581ceeed7bdb1af2c92b2e9dc04ac1edbe3883bb66eeccf96839d886fb774c771abf00f304607c921f9e80aa4b282bf95fdf35db7b4f345c0d3656833757315e0f7d37f1812415a92b9cfd9b1e3a6f48816bbf2d4408469d22ddb766e0b46dd1e", 0x1000}], 0x7, &(0x7f0000002100)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r4]}}, @rights={{0x38, 0x1, 0x1, [r2, r10, 0xffffffffffffffff, 0xffffffffffffffff, r5, r1, r3, r0, 0xffffffffffffffff, r4]}}, @rights={{0x28, 0x1, 0x1, [r9, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0, 0x8000}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f00000021c0)="747835f18898e36d7b5752616c269ed7b8adc91bc98e256411f3c06257592cad8846ae058e46dd02a38af0dfba4a5394efd1ef1e3d31ed53f645f08345f708874a6f7c81cc9a537449640550b7c293eef215986ae77bb63ed45280bacbf4c5eb8bfec5b60094a471a550856787d2a59eed27e662f37cd172b778170afa2d43912bd372a8b6fd26f9c9", 0x89}, {&(0x7f0000002280)="4f3c36d7299c46a15a1a2fa8f81972b18f2dc910df94200ac1c43a06fcce47a2d4c35ffe5d82281cc3cd8bf49f8bf63d0f2cee81", 0x34}], 0x2, &(0x7f0000002300)=[@rights={{0x18, 0x1, 0x1, [r2, r3]}}], 0x18, 0x1}}, {{&(0x7f0000002340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f00000023c0)="cc82c67d6c3e31c45d0527aaf34b0ccdf33a5d3217aca5b4b0c38643d8dd50b54ae19ad578328777033b1e8985df1fe09031e56ac68e6f60b4cffa2bd4231bbd07109f5b58fb52662d970c694ad6f302ad5f413f2b44f18e64203a25f8356bf2ad", 0x61}, {&(0x7f0000002440)="c0a27aed8627b842497669af5a2bf7f6f25caf5a10dc256f425e96d5c3dd38e7a5e5bae25331f9b1f2cd58af54f85571e7525641fe572f1065cc05d278d48f5343f9c80179b12f0c5e7129d3c52625839f560b079c32d94692192390e3728202444208223ef47da330b57335324f47e1843a63f691f6d3c98d9b745c025e295d06f9302cb0f31efdc728810f8d10bb28a11bace9049e81eb48375931106de56aa255fcaad22a532b6b255d42568aed7ba8cc49626d54b2e6c12c138d868c93b66525f0559dd72a02575fc9d58eb4f5317a4fc34edf829e326e2509b055a6408e035c96b30b2db702f4c0", 0xea}], 0x2, &(0x7f0000002580)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10, r2, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r3, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, r4, r4, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0xc8, 0x20008005}}, {{&(0x7f0000002680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000002700)="b628ca7d2fef7caf7d3b541495352018d89af871636bb3ec4d21976911b8b8a6d7c01c0e46874dd66b8fdbde442df4a0621b1dfab632ba41e1e70cc00d9119a33d6a87d39bf5c4ffeb9e7fd0864d8969d4cd68d1b6a9d6e761b8137090e8c3599f1d05125014d6fb517ec165f6236a77651840675cde9ab810474bbcc2a0c61e2128c5e03d01f2aefd583cd04c89b2d6a843cbec7ec338cbcb5af29933b3941dfcfbe7bad6bbdb10e76b083041a3cb3ea96b89408e292e456d4e3b304e491ef598bfeaf966b77f", 0xc7}], 0x1, &(0x7f0000002a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r10, r10]}}], 0x70, 0x4008044}}, {{&(0x7f0000002a80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002b00)="9bf91f9327ed208aaaff48ef430933d72c4a7f0591004bf677409246fb195723ee20eb6f7417561af08c42e311ce82e2613ef135caef59345144a9a29e4b29b45c1b53d956c196f43ecb267c63cff100a2fd83008dafe4eca39ab74c1c944586e76d1fb0804cfcedcefa464f4f722170b439a774cf781f8923680dfb1338bf3cf82cb6b55d6c6902c8bd8143b6dda988a882b6490f1273e484ddce7be2", 0x9d}, {&(0x7f0000002bc0)="c7db90717d0f0620803d7089d311672826a25fc291a697cb774a65f93e3df0fda275971d6807c29131097af9ee7de1255db1895b312d2980f7f93c023da5ebb94ab01607749f668034b7836bb9b2df26bdd4aae8378b43eb0296006204024fb486b0c89877d69525298b4127e25cb94f1c6b806d1d90c1eef37bb5f1c62a6bebeb9cdb67c9ea9f69fc8991a61cf76bd5e454", 0x92}, {&(0x7f0000002c80)="ec7c6f5b58e8207dc9dfc92e1e0092fce91182f93181aa944c4882f02d68dc8c2d69dabf2a49eab42e9b4bf33b303794ababe0d45e7072282c7bb08e18afc37cbff667770e88707d94df6fabe487f093c410de741dcfc47be6ef85fe12097f63969adcd54eb41bb087c3aa40bad72414672c3092e8b6d304b47aa47f94708944e0f5a14d06157b2f816ae2d9c0760623a982c82e51fc0ec47f43656e49f1e11c367a62be9a089531a28690711eab8933a742abed1abfccd916ef7b326c06a368f98fa0aea578afb4339dd83b2547a67b511cfba4f7bcb9eb1e", 0xd9}, {&(0x7f0000002d80)="466707a4df3e217033fd0f8bcc665543427c95be039049c789056e8f5eddb3f03a59d4f6880248a6dff6", 0x2a}], 0x4, 0x0, 0x0, 0x1}}, {{&(0x7f0000002e00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000042c0)=[{&(0x7f0000002e80)="e9b68cca272b50de7745e9e47b10c18fcaacb713d9081a8cf3e706c7967341c137e0a1232067a46c8c7f4f69d07a8723dad2dae6", 0x34}, {&(0x7f0000002ec0)="9a3f007741ae9d1a52e0ecf862221ebf6d0fa49b4ca151ec6040f98ad8a7fbca18eba28866a7c3bb65d4f953d0cb4934d368493b62129f45f1d641cec39c935665ee51f11f1c8034457e4233a6313b4c0f4783bc3b9225fe4f4e8539431f3fdebe72da2b2e132767bb9ba68cc789bc96a197fca9b756c2de84b36e1a0fdd1f2f4cc11c5cc37a9ae7d84c121d934609f0faf7db1bb07cc164cf0e6771702bea2dec8c6df1c307cd9dadc2e8848842048b42147b1727630641cd735d0937ff294bb01ff9d99735e589ce8c3295d3afb8eda6acdfffca7f4ccef20b7edbb6566953333b31950550fc7dde208c9bab8f8ffae0", 0xf1}, {&(0x7f0000002fc0)="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", 0xffffffda}, {&(0x7f0000003fc0)='a', 0x1}, {&(0x7f0000000580)="d8fff7a09a1d272129b4", 0xa}, {&(0x7f0000004040)="b772bbab6e59f79ce8ad6c6511f25a5fcd6764bca9b555107d833a973e86402aa5325265404dd6e1278f270c2ee0aaf1c5c080db752d84de5048ec31238802639d9f623f8ba36ab5fc2e96d9bfae8d4d7ffad19074883690c30f75685a0ae342fe5c37d5e5d839b51aeec6223936a2907cc81094c6b31a43ce832a6c32d6e7c8b6c56e236ad4da491c48657251433e4d3cfa395bf0104e9539a3391d6d5f16054e7c558e5d8e07ab8ba435b3c3cf5c81901a0a0c87378a79066b7cb7c91cd6c299c3e6e4", 0xc4}, {&(0x7f00000005c0)="a82dda7275b900000000000040802e83aaf5cda9aed3d1467e5b823ba3451e68425ee6d23f1244d1fd69a26f374dfa9ab3381fcc13524ce7f19600000000000000000000fa892f44991de0a6cf91455872eeb33a32a952e333e06426d4eb59e5153e95bfc3dc7567cfb32d16953a305c344da8de63da854f9630a9", 0x7b}, {&(0x7f0000004180)="47cb448e004a860f61ef97d540e3efbe2d014cde23ec1a03bb76603f1a9aa5bd2557eb159188f70efdcd26fc0aa6aa63045c847291591d2ed749a8082e573d3eebb1aa0514b8f1ddabecc2526f025348b09cdc1e630afdfa87e8a3a329208912ac1480710c9ea40f4a64053eee23a128cc40917a1f226cd12eda0fa0e9c4539136d92bfddda5e23a5eaecc10599e140dd2fe8917f220425b8be1d409cd2c10c93270121f", 0xa4}, {&(0x7f0000004240)="577863be6572d2511500009ac38d96b7a777014f19a023cbba209e8bb9901fe0c83bacffdec0b3848ee1e3d45657d455783d9c258091a15e98670ff4b297175ab22ed4dd73001594cde87831605d8b32c3eb7094d953a7853e212ec0c88a76d66871", 0x62}], 0x9, &(0x7f0000004380)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r7]}}], 0x18, 0x800}}, {{&(0x7f00000043c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005980)=[{&(0x7f0000004440)="b2829f870d40246df29cc73b85fc05f30312beb81ade58c92f7af5c22b5e167ded5692c2ae711eb1ab191fda195fc2dbd54033f036e35ccdd49bdebbbab3cd712642ad751c3916", 0x47}, {&(0x7f00000044c0)="ebfe23660f4d55", 0x7}, {&(0x7f0000004500)}, {&(0x7f0000004540)="77f74e562964849138f86441618cf0b3be4a949435539313282f49458583a961c3fc99f539", 0x25}, {&(0x7f0000004580)="61d8e04802d884fc410fae5e03749eb2aa3863efd5434be1b64c4737fc8a68aeeb0bb361b05451723cc2ed361cdf98c425d2b38fa93b5077523f6f58c497cf09a0707ba7ac20654817abf72b81c6a3d041e725ccaf9d98c6bab022b819d7815f7cfdc2c3d2c779bf60dd3a35a694b62d8e48c52f4ca28545134f38d5aa1e49c45eda3f16b35b320c59032b8f3911ce596120d12609351daf706860b53a3ce3d68ee5ef40874dd96fc36c9743bbc4b99a21c3f8f72e139bb0f41afd4f8109d68c111322fd60894afc1ed554588b967e2ec307a4302473712de809c91073", 0xdd}, {&(0x7f0000004680)="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", 0x1000}, {&(0x7f0000005680)="8c3ffcb75d916c9f1a3181ce8e67c713fbc9077d58fb10cdad766a37b35a877db84f4ae605290b114e0c41b4c06f7eda5e83e85eaa0a751c634072947f57a72a2e57b8c9c8834ca8645b81e4411fd3d27aec2f8371cff1c7fd2efbbac4fbfd49e61aeee4d87b2013e794c6313225420a4748aa75fc746baf25632d5c4805e72dc95a6d", 0x83}, {&(0x7f0000005740)="723b7de64ed3e13cb79eba9ac05d2a52351d7e240ebd19ebc38cf57b85c972853ec3e1d96d17688d7681e49630865ec03a85015dd36d0c4d2faadf037e9441727f46a10a5e430fceb8f6d19c9fa94b63bd608d34bc5b94eabc7233ea941e8bb437eb8badb9f6600b695601d051156cde137b97f01ea142ea44c02b72caa7b3ec491afbd7a53746a2b1931e9d6bee463cff9f3639a38422bbea1ffb78a14b369740ebe701704f52a9a79cf449c837c4ba0006dcdee5e5ec4cb77ed64508655c03cf2d283806f09ca387e6278cc87a7f8c", 0xd0}, {&(0x7f0000005840)}, {&(0x7f0000005880)="a6ae26cbb9b9a933fd320325c6b0d8fd810b228c27e1cb3a969bf711865cabe15b5296c1d10c73b8c523aba78f250201b8e9f055cb271936121953e03800da1ba1a501e08f2f0675967b334c321b7597cd31e3fb21ee92990a54a5bae36180acb7fa49e380787a37843e8b38762d5e73af22ac57eea49b58a1f3ed5a0fe757ddf824e35431d66a4ea276d67be2d5f52917a5accc3f107f8dab049b632fda1cfce97fc92f88ca79889f5cbc337e23cbe1d8d742c615b0954683ed3dcc56b48a6be65675a20da192d1d72b3e90c5c7d918a778b31d5d5ac2c61b", 0xd9}], 0xa, &(0x7f0000005a40)}}, {{0x0, 0x0, &(0x7f0000005e00)=[{&(0x7f0000005a80)="c3613e1c49f7408af95bf11092c5ba2cbea2abdc4194bce7f768bffc222714252444250cec2ca1e7819ff9406ec12294c136022f0dffb19c30e88b580989dadc72c7d063a1ad461ec8116b50d92cf544ba6b1dc23b3f0ee801b981585f141eac84f1", 0x62}, {&(0x7f0000005b00)="c2b83bb9e41c3b75777bccbeb277458742317b2ed63993cb7aca1610d36b152a688c4ea992b2d2fa04902c2aed77acefedb19ca389a679974f75b15b04aa28132f6a405ebb3919afc29deef23394a0d79454a0f0930f14da32a147c4daf213", 0x5f}, {&(0x7f0000005b80)="3c9df284895f01aec5b950d749d9e1bd905290d72f078222c99445d7b90334dfd7b5f79a399f4c463ead4ade35948bcbc481226d0263ebe607f1784e7b5285e2469deab1303c52f598b4d8cd1d2fc48f30a99a9ddc5453f12df6665597255b90948c2eaf61aeb645b190138b610b8c62da8a06c2b42a8ebd9b360d6d", 0x7c}, {&(0x7f0000005c00)="e7b20d7f3a35ffa57d24a5aa8b8b64a88a2404aefeb80858033b4d20c82192686847eef25524e0463caa75ff706e4115c389a6938aca6140313575f2b0aa48ad08e1532c5845b558a2abe14a69070d3ceee8fa8bee0468bbd69d9fe3b39a57977dd69ea4419069ed1b9cca9217c47cf4676b1a7a5dde1b8f51ccf568c910d424c67015886040f8d6548fda5ee547b8a4abdebc49aa7fd343822740f1d515d51257eaeec540fadb5e71c664ece6cba65d43c72e92efbe1cf37e1ca9fbed550b106da1baab3a13af2f2af7877f245316b5b5bc6399d430f96bdac0113c7729d96243b2fc8b73751e1b69a1c33ce942d4f2b1441ef71506d650c3", 0xf9}, {&(0x7f0000005d00)="eab69f9c512ab4a3ad3a6848eb175dfd2807ef09dddb0232523629c7084086e3c6d482a5328380f5be907ec284c2ddf8fd09b54f5060b0adee774bf46b60ef9a0b5d9be2fc4428a0d3f98c83d5f26b7721bdaafa4a39c9df8461ce90341472b2ae0a", 0x62}, {&(0x7f0000005d80)="b6f966dcc8315e009109bda5eeda667f7f8f20fda1a487999f8eac4d7687342f214f36b5d256965c107e6dad515205a0f5464f1b2bbbc2ec6462457310af45f354716f1ca4836470ad14b79dc50386aefb74953fd7495010cdcb0f", 0x5b}], 0x6, &(0x7f0000005ec0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x8000}}], 0xa, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) r11 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x88001, 0x82, 0x2c}, 0x18) mkdirat(r11, &(0x7f0000000340)='./file0\x00', 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r12, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r13, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x120000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x5) 6.312823215s ago: executing program 1 (id=2141): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b405000000000000611034000000000063012e00000000009500000000000000f4c32bf3df05a034da1b7fdcf645f3580fe49be316bdb665f1b42ff7ef474df46c0f44ef6fb5e031f7cfef720e05af49fad256a74dbc05ae220102a88002814a88e2fac93f6bba2d4d44db49d45e449d31fa52c326486bc1c908dd9b372f7a455c9566ed5ee0a65f3909cfe1219a0a38b416dc55927f32ab452e0ccaf193c27af10a12c42ef8a3199d0fad0a9521094cc7acdcdff80231586f968fab531515e8aaaa1d4a225592ebf062bba60775d0b7daa8ba68c0cd0642ce3efca015362a7b63f629629efb"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x100}, 0x10}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="64000000100019002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a70d040036110700300012800e00ee0069703667326772657461700000001c000280060011004e23000006001000052400000600f7ff01000000140003006970366772657461"], 0x64}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8050) 6.178132739s ago: executing program 0 (id=2142): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2], [0x200, 0x40000000, 0xfffffffd], [0x0, 0x20000232, 0x200006, 0x0, 0x0, 0x0, 0x1]], '\x00', [{0x4000000, 0xfffffffe, 0x1}, {0x7, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x1}, {0x400000}, {}, {0x0, 0x400}, {}, {0x0, 0x9}, {0x7ff}, {0x8, 0xfffffffc}]}) 5.739181686s ago: executing program 4 (id=2143): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 5.563975649s ago: executing program 0 (id=2144): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) ioctl$UBLK_U_CMD_START_USER_RECOVERY(0xffffffffffffffff, 0xc0207510, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 5.563485012s ago: executing program 1 (id=2145): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x64000522) vmsplice(r1, &(0x7f0000001700)=[{&(0x7f00000001c0)="80", 0x1}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000008c0)="a5f0", 0x2}], 0x1}, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x300480d0}, 0x0) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xc) sendmmsg$unix(r1, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="7e0d8f6d7ffe5b4cdfa33129a25be4568c1d670d85a5947b65f57b1fd0fc791d7822dd4689a55873bfead93ece24a8f7c339d675dbcdf0e409f18dc6e5397fbbbc8d8219d8cc9936518e31f8f58bd416468e01bf99d37ec7e15642c60820c582137949ba08968ad006d4bd75e84678c6a6a4960beb6c5654949f1e1319835926f9a84ea96a285a215e473d74ebe4e09f926283911442ee52eda42d252da17ebec28ee137fe", 0xa5}, {&(0x7f0000000480)="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", 0xfa}, {&(0x7f0000000580)="7afa5e5215907a2879dcb745afce2131f12af2c7bf41eae234cc57da71d43a0ec6a2a455f42b60a6b4311a3296532ae15d07e4a064d872ef106542", 0x3b}, {&(0x7f00000005c0)="3caa12d1a8a651993ad4630a33fc9b6317853354a3096a93868e426ba07c7da355542c0b2567c9ba0a708c3a252bf63b3a75db5231b7a10963fce9bc7e142ee247a0874431f37ce4c30bff2c46c41f52d53914dbcaed2ea98401d8af26368e10c6d2f72fb1b82241b234fb5fbe8f23265a62f13c1c43f858662edea56eb347986743d4806d27787c837d0260c358b4eefd53ac007ad20b3339dc5cd671b4", 0x9e}], 0x4, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r2, r2]}}], 0x40, 0x801}}, {{&(0x7f00000007c0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000a00), 0x0, &(0x7f0000000e00)=[@rights={{0x28, 0x1, 0x1, [r0, r2, r1, r1, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1]}}], 0xd0, 0x20000011}}, {{0x0, 0x0, &(0x7f0000000f00), 0x0, &(0x7f0000000940)=[@rights={{0x34, 0x1, 0x1, [r2, r2, r2, 0xffffffffffffffff, r0, r1, r2, r6, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, r1, r2, r0, 0xffffffffffffffff, r2, r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r6, r2]}}], 0xc8}}, {{&(0x7f0000001140)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001580)=[{&(0x7f00000011c0)="4e88c77bb6e75cde3291818f9892a0df7ece839e78305101e827414fd81f515175d23ee279bf6dae77fff6edb18716ee197a97bff4cd07d5fd44d0ecc045f3a2c9f862f3034a381f8bdf5be662c14780e14e4668fe63df3dbbe54f6a3c80687bfdccd5344358f7709005a5b87e464fa7bb16b7f7ad59894d1446859081e7bf033166e2461604cee3234e4663250d4537c6b7030882e6", 0x96}, {&(0x7f0000001280)="944d82a9c2d1c8af5383b14af12f38ed4b236b76f1ac4585066b7ab9b245599eb3812e7ba41feb2158fbd03f7d327a664ac52ca5f95da21542fd6c7bcd89df7546f6dcdac850cbda19ca53e7a91456ff6307bc3cd9579a260dd5a47e42b17852b8d6f286662a112e2e23587b317f5d525fbe797ac4f581ae741328c5f03146853dbcbdc50d8e480e61f97b8cd718c8c6606986360539b1bb0bfeeca91418c808f4109b579c81c6", 0xa7}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001600)="38a0ce7cac60d7f39746beaa56963c7f4d042d47b3de105b754625b195f15efe5861a57ce171bfa4bc820bccfc4fe696531dc57e9a91e44d461808c3f5178f9aba360f7f4659db2cd3535ef9f5185a54ce72772b4d2f3e25133d4c86c65d4678db199a0142f2e156fb00325dcb41d1d3b47e3621f5a2379ac7d52a9c19282764f5c6612d0815e678d62e03c58946469398d3ade83e07c1b9eacbeb4add9e021be0489c1de7430047cadabdd82962b65f2ffa14d2e76bbdac753d5265aa4d16dd2dc7a5d9", 0xc4}, {&(0x7f0000001740)="79faab0398a49418ff699910a6936ddd5b64fef60164a7da171ec0e030aab8e9026c66649083d714147a38f3857412ccf8b2d11af354c8c6dba0fc66b90235fc79a282a3fe9b07ae73a26b9734d78e17a58de12d9bd8fff21be752e5ec29acfa0a18bb13e34d46006743bd22ac888f8fc02b2b7a7662f249a1be887257eaa5dd36164037394f39020c50fddc5632da6e0b39bd34875627fef32a63ed82f4ee3e07815778dc3be9250f0257d520a86f6c855a603be1a9003c", 0xb8}, {&(0x7f0000001840)="ab44e4731cd976ed3f26559150b8789aed079c8408e6c749733d80b0683d6a0c23d961d329bdee1feacd7769308f92469f07aacfa0a381c00733d8bf0c9f52afc9e5634c018993cfedb1399896d543bb8da458e30b086554c2f64b3a91c5274b3e1d93dc63682502b992ed1156b896a2c59b354c947c202f272fd4c6905748a35f930657ed4ec29ccb6b99458bfc2a7cce74d71b31c2e9a85fbf63b5f6a50f9bbf960485c7dc36d4", 0xa8}], 0x3, &(0x7f0000001940), 0x0, 0x40001}}], 0x5, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x40505330, &(0x7f0000000240)={0x800100, 0xfffffffd, 0x22, 0x26, 0x1101, 0x280}) capget(&(0x7f0000000040)={0x19980330, r3}, &(0x7f0000000080)={0x3, 0x7, 0x2, 0x6fc4, 0x5, 0x4}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) splice(r0, 0x0, r9, 0x0, 0x1, 0xb) r10 = syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$getregset(0x4204, r10, 0x202, 0x0) 5.468647185s ago: executing program 4 (id=2146): setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/wakeup_count', 0x2843, 0x10a) unshare(0x28040600) sendfile(r0, r0, 0x0, 0x400) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x2, 0x5, 0x10, 0x8d0f}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x3, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0xa, 0x4d, 0xfffffbf2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x8, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0x51e, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x0, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0xc, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0x2, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x4, 0xea4, 0xa, 0x5, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x29, 0x6, 0x1000007, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0xfffffffd, 0x3, 0x8080, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x4, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d5, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0xb, 0x1000000b, 0x3e7, 0x100005, 0x5, 0x4, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x8, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x2], [0xc805, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x4, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000006, 0x5, 0x8, 0xff, 0x3, 0x2, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0xfffff001, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0a, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x918) 3.372634588s ago: executing program 1 (id=2147): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\t\x00', 0x8, 0x3a, 0x1, @remote={0xfe, 0x7}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x80, 0x2}}}}}}, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) inotify_init() syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0xe, 0x6, 0x401, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x44010) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020000084c00048018000180080001006f7366000c000280080001000000000430000180080001006e6174002400028008000140000000000800054000000017080006400000191608000240000000020900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xc, "e8"}], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x70, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0xc0, 0x2}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="e1"]}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}]}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x24}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r8, &(0x7f0000001b80)=[{&(0x7f0000000100)=""/27, 0x1b}], 0x1, 0x60, 0x2732bd8c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 3.244048104s ago: executing program 0 (id=2148): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x8, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x0, 0x6, 0x2f, {0x2f, 0x23, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077366b487a48abbd6dbbae"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.72972861s ago: executing program 4 (id=2149): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_usb_connect(0x5, 0x164, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007af28810d30bf4055b000000000109025201010000000009044000000e0100008c2406"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_connect$cdc_ecm(0x5, 0x13d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12b, 0x1, 0x1, 0x4, 0xd0, 0xe, "", [{{0x9, 0x4, 0x0, 0x9c, 0x3, 0x2, 0x6, 0x0, 0xb7, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x81, 0xff62, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x0, 0x5, 0xf3, 0x7, 0x80}, @country_functional={0xc, 0x24, 0x7, 0x9, 0x3, [0x6, 0x6, 0xa0]}, @acm={0x4}, @mdlm_detail={0xc5, 0x24, 0x13, 0x4, "cd0b951400b206fecd545b1d087d52d736d7146ba10ef13d410dc494e5ba4ee7ab5206b6312ff0b5221f020576c02361452eae2aeb20ded6d3b592e22130762949d15ed8f5383c4cf4ce5cd60a26557e2c546d78648119a1c39ad8783db6286cc337ceffeb5a42e5772ba24c927045831c92472eab00fbc0d60b875e142ec0120ff25541bb66b199f510644a9d5d302146a80cc5d57e5a6a640286d07c1dfaab7a9913b0318091b422096c8dc1a025002e9dc4094463c3a63febed793af8a82e52"}, @ncm={0x6, 0x24, 0x1a, 0xb, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb3, 0x10, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x2, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xf, 0x0, 0x6}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x0, 0x9, 0x5, 0x2, 0x20, 0x4}, 0x8b, &(0x7f0000000200)={0x5, 0xf, 0x8b, 0x4, [@generic={0x5c, 0x10, 0x1, "91e91724f0c80e2af47b020ec4485ad1c1ab210595221ca3107b5aca73303a788dbfa48b5261e1ad4cf0ff5d943af0c32b7f259132b1ae1b63763d6c75c728fad9d52e6ad9db10d7f033077fd967802d43c0fe0552f68bee01"}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x1ff, 0x1e, 0x3, [0x0, 0xc000, 0x3fc0]}, @generic={0x8, 0x10, 0x2, "c9d853026b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1, 0x4, 0x7}]}, 0x6, [{0x23, &(0x7f0000000300)=@string={0x23, 0x3, "526176f00ee626e6192c7e064d8eb70474c5073c97067c25bd90e8ed38d135fbd1"}}, {0x5c, &(0x7f0000000380)=@string={0x5c, 0x3, "34c1814c41e769a59e93928f585a674c5825e2e1bd616c157deb4da138d589f1907f0fa2c10ddc1b5c071ae9f90c7d82d126c3d73598ecde86efde74e341765b14ffa85adf348582c814c83648e2016c8dea25186cfd030ec943"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x404}}, {0x62, &(0x7f0000000440)=@string={0x62, 0x3, "33393661b5aac4875f04167590e7742701174a3b158ad189e87026b03b928ea18e35e25f069043284732072cc0f8da0518d3faf9fe47da039695a34726295c6c93177fe6407f755c7584179f4d6898baaeac9e79444af1f4566ce603791476b0"}}, {0xf3, &(0x7f00000004c0)=@string={0xf3, 0x3, "d9f019a1e794264bfb89295cfc1322a136c3fc521ac16b6bf16d06e8024e3bf69e96c439964dd21460542526349f0787f430ab81fdd79cd0cc549b4a7b7f4b91e07e4088f87b1df8d28b66992bfc5c72c28195965b908562d8b13a8d1895caa0685182550ef4108a40e52f65d9eb6a6cd738ffcc91f065bae3354647aa4353f6c23b7c098947fa673e9bf8fa7fb944e05b21ce6bb19a6174ab9f6d128339233cd418138802c71fe5f97e7b90ae3c4526fe0495480b251b0bb30418387d7214af46c54a17a814b1039d743ced7f343ff441800754c757985e72a7f6688f10666ec56fd5dc6bc40d210139335cc61effbfa7"}}, {0xff, &(0x7f00000005c0)=@string={0xff, 0x3, "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"}}]}) syz_usb_disconnect(r0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)="846cb78afbe02da52bdb47824464b1", 0xf}], 0x1) 2.688110026s ago: executing program 3 (id=2150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r3 = socket$inet(0x2, 0x1, 0x6) fsetxattr$smack_xattr_label(r3, &(0x7f0000000280)='security.SMACK64IPOUT\x00', 0x0, 0x8, 0x1) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 1.51064813s ago: executing program 1 (id=2151): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000000400"], 0x50) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(0x0, 0x80, 0x102) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 353.035746ms ago: executing program 3 (id=2152): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES16=r0], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000240)={0x13, 0x10, 0x7, {0x0, r3, 0x67ccf4569e629c31}}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="00022cbd7000ffdbdf6504000000040029806dc2b740320f5cbdfc9fffac03888fd9ec036b8da05ef9e3e47331d209b360ea"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4000840) 0s ago: executing program 1 (id=2153): io_setup(0x6, &(0x7f0000000100)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0xffffffff}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff) syz_emit_ethernet(0xb5, &(0x7f0000000180)={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @igmp={{0x11, 0x4, 0x1, 0x3, 0xa3, 0x65, 0x0, 0x3, 0x2, 0x0, @loopback, @broadcast, {[@timestamp_prespec={0x44, 0x4, 0x82, 0x3, 0x9}, @timestamp_prespec={0x44, 0x2c, 0xf1, 0x3, 0x5, [{@empty, 0xffffffff}, {@multicast2, 0x6}, {@loopback, 0xa}, {@empty, 0x1}, {@empty, 0xff}]}]}}, {0x15, 0xf8, 0x0, @remote, "e9bbb266df9457ff7f59256412011365ccbdbe59f3ca1c05b49f4b1a65645cbc929a9b23363650181ee11d722ffec9cec792f0fe9cc70d4c4a48c836df340b65bf3c1e7431a2dc78e84d9940a2582c425dc833fb1d2e2f"}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x26d, 0x0, 0x9800000002000000}]}) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): 04.825380][ T5738] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 504.825392][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.047083][ T5738] usb 4-1: GET_CAPABILITIES returned 0 [ 505.047114][ T5738] usbtmc 4-1:16.0: can't read capabilities [ 505.177399][ T9876] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 505.177985][ T9876] overlayfs: overlapping lowerdir path [ 505.233378][ T5698] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 505.330554][ T9862] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1433'. [ 505.332058][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1433'. [ 505.332119][ T9862] bridge_slave_0: left allmulticast mode [ 505.332136][ T9862] bridge_slave_0: left promiscuous mode [ 505.376794][ T9862] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.393196][ T5698] usb 5-1: Using ep0 maxpacket: 32 [ 505.397230][ T5698] usb 5-1: unable to get BOS descriptor or descriptor too short [ 505.399109][ T5698] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 505.399131][ T5698] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 505.399150][ T5698] usb 5-1: config 14 has no interface number 0 [ 505.399172][ T5698] usb 5-1: config 14 has no interface number 1 [ 505.399277][ T5698] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 505.399301][ T5698] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 505.399324][ T5698] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 505.399347][ T5698] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 505.399372][ T5698] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 505.399396][ T5698] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.399417][ T5698] usb 5-1: config 14 interface 57 has no altsetting 0 [ 505.399433][ T5698] usb 5-1: config 14 interface 228 has no altsetting 0 [ 505.402350][ T5698] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 505.402374][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.402391][ T5698] usb 5-1: Product: syz [ 505.402404][ T5698] usb 5-1: Manufacturer: syz [ 505.402416][ T5698] usb 5-1: SerialNumber: syz [ 506.000679][ T5698] legousbtower 5-1:14.57: interrupt endpoints not found [ 506.237295][ T5738] usb 4-1: USB disconnect, device number 41 [ 506.404346][ T5698] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 506.437519][ T5698] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 506.812453][ T9908] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.813837][ T9908] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.814509][ T9908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.986968][ T9914] usb 5-1: LEGO USB Tower reset control request failed [ 507.004459][ T9869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.005055][ T9869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.035405][ T13] Bluetooth: (null): Invalid header checksum [ 507.175164][ T186] Bluetooth: (null): Invalid header checksum [ 507.237719][ T13] Bluetooth: (null): Invalid header checksum [ 507.343677][ T175] Bluetooth: (null): Invalid header checksum [ 507.454195][ T13] Bluetooth: (null): Invalid header checksum [ 507.599879][ T3339] Bluetooth: (null): Invalid header checksum [ 507.699285][ T186] Bluetooth: (null): Invalid header checksum [ 507.784687][ T3339] Bluetooth: (null): Invalid header checksum [ 507.894339][ T13] Bluetooth: (null): Invalid header checksum [ 508.004359][ T178] Bluetooth: (null): Invalid header checksum [ 508.128313][ T5841] usb 5-1: USB disconnect, device number 27 [ 508.134995][ T5738] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 508.234861][ T5841] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 508.283182][ T5738] usb 4-1: Using ep0 maxpacket: 32 [ 508.301323][ T5738] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 508.301350][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.301368][ T5738] usb 4-1: Product: syz [ 508.301379][ T5738] usb 4-1: Manufacturer: syz [ 508.301387][ T5738] usb 4-1: SerialNumber: syz [ 508.339937][ T5738] usb 4-1: config 0 descriptor?? [ 508.350308][ T5738] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 509.097078][ T5738] gspca_topro: reg_w err -110 [ 509.123614][ T5738] gspca_topro: Sensor soi763a [ 509.463332][ T5737] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 509.613140][ T5737] usb 1-1: Using ep0 maxpacket: 16 [ 509.618076][ T5737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.618100][ T5737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 509.618113][ T5737] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 509.618135][ T5737] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 509.618146][ T5737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.643049][ T5614] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 509.688741][ T5737] usb 1-1: config 0 descriptor?? [ 509.773067][ T5614] usb 5-1: device descriptor read/64, error -71 [ 510.013122][ T5614] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 510.149004][ T5614] usb 5-1: device descriptor read/64, error -71 [ 510.175993][ T5737] nintendo 0003:057E:2019.0004: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 510.253653][ T5614] usb usb5-port1: attempt power cycle [ 510.499978][ T5842] usb 4-1: USB disconnect, device number 42 [ 510.554498][ T9941] nbd: must specify a size in bytes for the device [ 510.557704][ T9941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.558207][ T9941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.559498][ T9941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.559970][ T9941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.636893][ T5737] nintendo 0003:057E:2019.0004: Failed to get joycon info; ret=-71 [ 510.636915][ T5737] nintendo 0003:057E:2019.0004: Failed to retrieve controller info; ret=-71 [ 510.637013][ T5737] nintendo 0003:057E:2019.0004: Failed to initialize controller; ret=-71 [ 510.673438][ T5614] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 510.697478][ T5614] usb 5-1: device descriptor read/8, error -71 [ 510.754933][ T5737] nintendo 0003:057E:2019.0004: probe - fail = -71 [ 510.755174][ T5737] nintendo 0003:057E:2019.0004: probe with driver nintendo failed with error -71 [ 510.837965][ T5737] usb 1-1: USB disconnect, device number 37 [ 510.933060][ T5614] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 510.953531][ T5614] usb 5-1: device descriptor read/8, error -71 [ 511.063383][ T5614] usb usb5-port1: unable to enumerate USB device [ 511.244407][ T4919] Bluetooth: hci3: command 0x0406 tx timeout [ 511.383057][ T5737] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 511.540402][ T5737] usb 4-1: Using ep0 maxpacket: 8 [ 511.542687][ T5737] usb 4-1: unable to get BOS descriptor or descriptor too short [ 511.558852][ T5737] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 254, changing to 7 [ 511.558881][ T5737] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 511.558914][ T5737] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 106, changing to 7 [ 511.589489][ T5737] usb 4-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 511.589516][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.589533][ T5737] usb 4-1: Product: syz [ 511.589554][ T5737] usb 4-1: Manufacturer: syz [ 511.589567][ T5737] usb 4-1: SerialNumber: syz [ 511.929345][ T5737] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 512.026753][ T5737] usb 4-1: USB disconnect, device number 43 [ 512.153767][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 512.972959][ T5737] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 513.123034][ T5737] usb 1-1: Using ep0 maxpacket: 8 [ 513.125067][ T5737] usb 1-1: config 1 interface 0 altsetting 121 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 513.125105][ T5737] usb 1-1: config 1 interface 0 has no altsetting 0 [ 513.128677][ T5737] usb 1-1: string descriptor 0 read error: -22 [ 513.128805][ T5737] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.40 [ 513.128828][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.609130][ T5737] ntrig 0003:1B96:000A.0005: unknown main item tag 0x5 [ 513.609164][ T5737] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 513.609188][ T5737] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 513.609212][ T5737] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 513.609236][ T5737] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 513.609260][ T5737] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 513.609284][ T5737] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 513.609307][ T5737] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 513.609331][ T5737] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 513.609354][ T5737] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 513.730827][ T5737] ntrig 0003:1B96:000A.0005: hidraw0: USB HID v0.08 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 514.001922][ T5737] usb 1-1: USB disconnect, device number 38 [ 515.391390][T10057] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1514'. [ 516.612799][ T5714] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 517.052740][ T5714] usb 4-1: Using ep0 maxpacket: 32 [ 517.056378][ T5714] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 517.056400][ T5714] usb 4-1: config 0 has no interface number 0 [ 517.066041][ T5714] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 517.066066][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.066083][ T5714] usb 4-1: Product: syz [ 517.066096][ T5714] usb 4-1: Manufacturer: syz [ 517.066107][ T5714] usb 4-1: SerialNumber: syz [ 517.108123][ T5714] usb 4-1: config 0 descriptor?? [ 517.118884][ T5714] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 517.118968][ T5714] usb 4-1: selecting invalid altsetting 1 [ 517.118984][ T5714] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 517.202075][ T5714] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 517.245825][ T5714] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 517.246044][ T5714] usb 4-1: media controller created [ 518.804233][T10095] usb 4-1: dvb_usb_ce6230: I2C read not implemented [ 518.810648][ T5714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 519.002137][ T5714] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 519.002262][ T5714] zl10353_read_register: readreg error (reg=127, ret==-71) [ 519.004963][ T5714] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 519.297705][ T5714] usb 4-1: USB disconnect, device number 44 [ 520.059168][ T5738] hid_parser_main: 3045 callbacks suppressed [ 520.059190][ T5738] hid-generic 99A1:E260D13B:624ADF33.0006: unknown main item tag 0x0 [ 520.059224][ T5738] hid-generic 99A1:E260D13B:624ADF33.0006: unknown main item tag 0x0 [ 520.059248][ T5738] hid-generic 99A1:E260D13B:624ADF33.0006: unknown main item tag 0x0 [ 520.059271][ T5738] hid-generic 99A1:E260D13B:624ADF33.0006: unknown main item tag 0x0 [ 520.059295][ T5738] hid-generic 99A1:E260D13B:624ADF33.0006: unknown main item tag 0x0 [ 520.059319][ T5738] hid-generic 99A1:E260D13B:624ADF33.0006: unknown main item tag 0x0 [ 520.059340][ T5738] hid-generic 99A1:E260D13B:624ADF33.0006: unknown main item tag 0x0 [ 520.059360][ T5738] hid-generic 99A1:E260D13B:624ADF33.0006: unknown main item tag 0x0 [ 520.059382][ T5738] hid-generic 99A1:E260D13B:624ADF33.0006: unknown main item tag 0x0 [ 520.059406][ T5738] hid-generic 99A1:E260D13B:624ADF33.0006: unknown main item tag 0x0 [ 520.180236][ T5738] hid-generic 99A1:E260D13B:624ADF33.0006: hidraw0: HID v306f9c.17 Device [] on ¢ã9OÇRù] K÷Ð8çÿÆåS›?c‹›93;mà‡Æç›m•›fš$[gó˜~ó [ 520.232194][T10113] fido_id[10113]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 520.322634][ T31] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 520.462719][ T31] usb 2-1: device descriptor read/64, error -71 [ 520.794923][ T31] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 521.282631][ T31] usb 2-1: device descriptor read/64, error -71 [ 521.433874][ T31] usb usb2-port1: attempt power cycle [ 521.564250][T10126] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.152658][ T31] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 522.173486][ T31] usb 2-1: device descriptor read/8, error -71 [ 522.412759][ T31] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 522.433115][ T31] usb 2-1: device descriptor read/8, error -71 [ 522.542857][ T31] usb usb2-port1: unable to enumerate USB device [ 522.602984][ T5614] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 524.607361][ T5614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.607394][ T5614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.607428][ T5614] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 524.607448][ T5614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.667708][ T5614] usb 1-1: config 0 descriptor?? [ 525.167844][ T5614] hid_parser_main: 3456 callbacks suppressed [ 525.167866][ T5614] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 525.234920][ T5614] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 525.316987][ T5614] cp2112 0003:10C4:EA90.0007: error requesting version [ 525.413566][ T5614] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -32 [ 525.492604][ T5698] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 525.654298][ T5698] usb 4-1: Using ep0 maxpacket: 8 [ 525.658843][ T5698] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 525.658868][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.658886][ T5698] usb 4-1: Product: syz [ 525.658911][ T5698] usb 4-1: Manufacturer: syz [ 525.658924][ T5698] usb 4-1: SerialNumber: syz [ 526.095453][ T5698] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 526.095551][ T5698] mxuport 4-1:254.0: probe with driver mxuport failed with error -5 [ 526.307274][T10159] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1551'. [ 526.408147][ T5698] usb 4-1: USB disconnect, device number 45 [ 526.843209][T10187] netlink: 'syz.4.1560': attribute type 1 has an invalid length. [ 526.843223][T10187] netlink: 476 bytes leftover after parsing attributes in process `syz.4.1560'. [ 526.843250][T10187] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1560'. [ 526.844152][T10187] netlink: 'syz.4.1560': attribute type 1 has an invalid length. [ 526.844210][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.844219][T10187] IPv6: NLM_F_CREATE should be set when creating new route [ 529.064154][ T5698] usb 1-1: USB disconnect, device number 39 [ 529.350741][T10211] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 530.403850][ T9970] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 530.552316][ T9970] usb 5-1: Using ep0 maxpacket: 8 [ 530.557816][ T9970] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 530.557843][ T9970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.557861][ T9970] usb 5-1: Product: syz [ 530.557873][ T9970] usb 5-1: Manufacturer: syz [ 530.557886][ T9970] usb 5-1: SerialNumber: syz [ 531.238554][ T9970] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 531.238653][ T9970] mxuport 5-1:254.0: probe with driver mxuport failed with error -5 [ 531.450754][T10228] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1571'. [ 531.592486][ T5698] bridge0: entered promiscuous mode [ 531.616999][ T9970] usb 5-1: USB disconnect, device number 32 [ 532.709028][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1596'. [ 534.395719][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1600'. [ 535.331942][T10307] ieee802154 phy0 wpan0: encryption failed: -22 [ 535.341213][T10308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 537.152579][T10322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 543.575304][T10372] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 544.143874][ T4919] Bluetooth: hci4: command 0x0406 tx timeout [ 544.416734][T10385] batadv0: entered allmulticast mode [ 546.404854][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1647'. [ 546.707906][T10420] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 552.761781][ T6517] Bluetooth: hci4: command 0x0406 tx timeout [ 552.893429][T10521] FAULT_INJECTION: forcing a failure. [ 552.893429][T10521] name failslab, interval 1, probability 0, space 0, times 0 [ 552.893466][T10521] CPU: 1 UID: 0 PID: 10521 Comm: syz.2.1674 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 552.893491][T10521] Tainted: [L]=SOFTLOCKUP [ 552.893498][T10521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 552.893508][T10521] Call Trace: [ 552.893515][T10521] [ 552.893523][T10521] dump_stack_lvl+0xe8/0x150 [ 552.893549][T10521] should_fail_ex+0x46b/0x600 [ 552.893578][T10521] should_failslab+0xa8/0x100 [ 552.893599][T10521] __kmalloc_noprof+0xdf/0x7b0 [ 552.893619][T10521] ? io_cache_alloc_new+0x40/0x100 [ 552.893639][T10521] io_cache_alloc_new+0x40/0x100 [ 552.893656][T10521] __io_prep_rw+0x2bd/0xed0 [ 552.893682][T10521] ? __pfx___io_prep_rw+0x10/0x10 [ 552.893706][T10521] ? xas_start+0x396/0x780 [ 552.893733][T10521] io_prep_rwv+0x8d/0x430 [ 552.893751][T10521] ? __pfx_io_prep_rwv+0x10/0x10 [ 552.893766][T10521] ? io_req_defer_failed+0x29f/0x3d0 [ 552.893786][T10521] ? __asan_memset+0x22/0x50 [ 552.893802][T10521] ? blk_start_plug_nr_ios+0x7e/0x1c0 [ 552.893823][T10521] io_submit_sqes+0xbd3/0x22e0 [ 552.893880][T10521] __se_sys_io_uring_enter+0x34a/0x1c40 [ 552.893906][T10521] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 552.893933][T10521] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 552.893952][T10521] ? fput+0xa0/0xd0 [ 552.893976][T10521] ? ksys_write+0x248/0x270 [ 552.893999][T10521] ? __pfx_ksys_write+0x10/0x10 [ 552.894023][T10521] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 552.894043][T10521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.894063][T10521] do_syscall_64+0x174/0x580 [ 552.894085][T10521] ? trace_irq_disable+0x3b/0x140 [ 552.894105][T10521] ? clear_bhb_loop+0x40/0x90 [ 552.894127][T10521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.894145][T10521] RIP: 0033:0x7fb3e85ace59 [ 552.894160][T10521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.894175][T10521] RSP: 002b:00007fb3e6806028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 552.894195][T10521] RAX: ffffffffffffffda RBX: 00007fb3e8825fa0 RCX: 00007fb3e85ace59 [ 552.894208][T10521] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 552.894218][T10521] RBP: 00007fb3e6806090 R08: 0000000000000000 R09: 0000000000000000 [ 552.894229][T10521] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 552.894240][T10521] R13: 00007fb3e8826038 R14: 00007fb3e8825fa0 R15: 00007ffc242a3dd8 [ 552.894270][T10521] [ 553.026340][T10520] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 553.612606][ T5698] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 553.796943][ T5698] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 553.796960][ T5698] usb 4-1: config 0 has no interface number 0 [ 553.796984][ T5698] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 553.796998][ T5698] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 553.797020][ T5698] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 553.797032][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.868751][ T5698] usb 4-1: config 0 descriptor?? [ 553.881265][T10532] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 554.244616][ T5698] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 554.270663][ T5698] usb 4-1: USB disconnect, device number 46 [ 557.012480][T10589] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 560.159350][T10617] CUSE: unknown device info "" [ 560.159360][T10617] CUSE: unknown device info "" [ 560.159365][T10617] CUSE: unknown device info "" [ 560.159370][T10617] CUSE: unknown device info "ÿÿÿÿ" [ 560.159374][T10617] CUSE: DEVNAME unspecified [ 560.311580][ T5842] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 560.461591][ T5842] usb 5-1: Using ep0 maxpacket: 8 [ 560.464787][ T5842] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 560.464804][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.555976][ T5842] pvrusb2: Hardware description: Terratec Grabster AV400 [ 560.555992][ T5842] pvrusb2: ********** [ 560.555998][ T5842] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 560.556009][ T5842] pvrusb2: Important functionality might not be entirely working. [ 560.556017][ T5842] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 560.556027][ T5842] pvrusb2: ********** [ 560.650149][T10627] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 560.756401][T10614] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1699'. [ 560.889055][ T5842] usb 5-1: USB disconnect, device number 33 [ 560.916341][ T2386] pvrusb2: Invalid write control endpoint [ 561.191544][ T5738] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 561.345815][ T5738] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 561.345841][ T5738] usb 4-1: config 0 has no interface number 0 [ 561.345882][ T5738] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 561.345907][ T5738] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 561.345945][ T5738] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 561.345965][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.361963][ T5738] usb 4-1: config 0 descriptor?? [ 561.365475][T10636] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 561.399812][ T5738] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 561.640400][ T9970] usb 4-1: USB disconnect, device number 47 [ 561.640498][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 561.659529][ T2386] pvrusb2: Invalid write control endpoint [ 561.659543][ T2386] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 561.659551][ T2386] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 561.659558][ T2386] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 561.659565][ T2386] pvrusb2: Device being rendered inoperable [ 561.723911][ T2386] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 561.726310][ T2386] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 561.829926][ T31] IPVS: starting estimator thread 0... [ 561.924955][T10653] IPVS: using max 8 ests per chain, 19200 per kthread [ 562.176573][ T5737] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 562.366636][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.366698][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.527038][ T2386] pvrusb2: Attached sub-driver cx25840 [ 562.527141][ T2386] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 562.527152][ T2386] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 562.581576][ T5737] usb 1-1: Using ep0 maxpacket: 8 [ 562.584327][ T5737] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 131, setting to 64 [ 562.584357][ T5737] usb 1-1: config 0 interface 0 has no altsetting 0 [ 562.638842][ T5737] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 562.638867][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.638882][ T5737] usb 1-1: Product: syz [ 562.638893][ T5737] usb 1-1: Manufacturer: syz [ 562.638906][ T5737] usb 1-1: SerialNumber: syz [ 562.747727][ T5737] usb 1-1: config 0 descriptor?? [ 562.814572][ T5737] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 562.961736][ T5737] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 562.967427][ T5737] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 563.205542][ T5698] usb 1-1: USB disconnect, device number 40 [ 564.626914][T10703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.825234][T10720] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 568.961379][T10750] FAULT_INJECTION: forcing a failure. [ 568.961379][T10750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.961402][T10750] CPU: 1 UID: 0 PID: 10750 Comm: syz.0.1738 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 568.961416][T10750] Tainted: [L]=SOFTLOCKUP [ 568.961420][T10750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 568.961426][T10750] Call Trace: [ 568.961430][T10750] [ 568.961434][T10750] dump_stack_lvl+0xe8/0x150 [ 568.961450][T10750] should_fail_ex+0x46b/0x600 [ 568.961467][T10750] _copy_from_iter+0x1d3/0x1670 [ 568.961480][T10750] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 568.961497][T10750] ? __pfx_policy_nodemask+0x10/0x10 [ 568.961511][T10750] ? __pfx__copy_from_iter+0x10/0x10 [ 568.961526][T10750] ? alloc_pages_mpol+0x2ae/0x380 [ 568.961541][T10750] copy_page_from_iter+0x220/0x2d0 [ 568.961556][T10750] tun_get_user+0x1bfa/0x4400 [ 568.961571][T10750] ? is_bpf_text_address+0x292/0x2b0 [ 568.961585][T10750] ? tun_get_user+0x8a1/0x4400 [ 568.961607][T10750] ? __pfx_tun_get_user+0x10/0x10 [ 568.961621][T10750] ? __lock_acquire+0x6b5/0x2cf0 [ 568.961640][T10750] ? ref_tracker_alloc+0x332/0x4a0 [ 568.961653][T10750] ? get_pid_task+0x20/0x1f0 [ 568.961666][T10750] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 568.961680][T10750] ? tun_get+0x1c/0x2f0 [ 568.961693][T10750] ? tun_get+0x1c/0x2f0 [ 568.961708][T10750] ? tun_get+0x1c/0x2f0 [ 568.961720][T10750] ? tun_get+0x1c/0x2f0 [ 568.961735][T10750] tun_chr_write_iter+0x119/0x200 [ 568.961749][T10750] vfs_write+0x629/0xba0 [ 568.961765][T10750] ? __pfx_vfs_write+0x10/0x10 [ 568.961781][T10750] ? __fget_files+0x2a/0x420 [ 568.961797][T10750] ksys_write+0x156/0x270 [ 568.961809][T10750] ? __pfx_ksys_write+0x10/0x10 [ 568.961824][T10750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.961834][T10750] do_syscall_64+0x174/0x580 [ 568.961848][T10750] ? trace_irq_disable+0x3b/0x140 [ 568.961860][T10750] ? clear_bhb_loop+0x40/0x90 [ 568.961871][T10750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.961881][T10750] RIP: 0033:0x7f7f0bafd68e [ 568.961891][T10750] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 568.961899][T10750] RSP: 002b:00007f7f09d8dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 568.961910][T10750] RAX: ffffffffffffffda RBX: 00007f7f09d8e6c0 RCX: 00007f7f0bafd68e [ 568.961917][T10750] RDX: 0000000000000011 RSI: 0000200000000300 RDI: 00000000000000c8 [ 568.961924][T10750] RBP: 00007f7f09d8e090 R08: 0000000000000000 R09: 0000000000000000 [ 568.961930][T10750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.961936][T10750] R13: 00007f7f0bdb6038 R14: 00007f7f0bdb5fa0 R15: 00007fff5e8162e8 [ 568.961950][T10750] [ 571.113764][T10781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1749'. [ 571.114339][T10781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1749'. [ 572.829114][T10804] FAULT_INJECTION: forcing a failure. [ 572.829114][T10804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.829169][T10804] CPU: 0 UID: 0 PID: 10804 Comm: syz.2.1755 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 572.829195][T10804] Tainted: [L]=SOFTLOCKUP [ 572.829201][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 572.829211][T10804] Call Trace: [ 572.829219][T10804] [ 572.829226][T10804] dump_stack_lvl+0xe8/0x150 [ 572.829253][T10804] should_fail_ex+0x46b/0x600 [ 572.829283][T10804] _copy_to_user+0x31/0xb0 [ 572.829304][T10804] simple_read_from_buffer+0xe1/0x170 [ 572.829335][T10804] proc_fail_nth_read+0x1be/0x230 [ 572.829357][T10804] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 572.829379][T10804] ? rw_verify_area+0x2ac/0x4e0 [ 572.829397][T10804] ? lockdep_hardirqs_on+0x7a/0x110 [ 572.829421][T10804] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 572.829441][T10804] vfs_read+0x212/0xa80 [ 572.829464][T10804] ? preempt_schedule_thunk+0x16/0x30 [ 572.829492][T10804] ? __pfx_vfs_read+0x10/0x10 [ 572.829511][T10804] ? preempt_schedule_thunk+0x16/0x30 [ 572.829541][T10804] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 572.829566][T10804] ? mutex_lock_nested+0x152/0x1d0 [ 572.829586][T10804] ? fdget_pos+0x252/0x320 [ 572.829611][T10804] ksys_read+0x156/0x270 [ 572.829634][T10804] ? __pfx_ksys_read+0x10/0x10 [ 572.829663][T10804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.829683][T10804] do_syscall_64+0x174/0x580 [ 572.829709][T10804] ? clear_bhb_loop+0x40/0x90 [ 572.829731][T10804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.829748][T10804] RIP: 0033:0x7fb3e856d68e [ 572.829765][T10804] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 572.829780][T10804] RSP: 002b:00007fb3e67c3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 572.829800][T10804] RAX: ffffffffffffffda RBX: 00007fb3e67c46c0 RCX: 00007fb3e856d68e [ 572.829813][T10804] RDX: 000000000000000f RSI: 00007fb3e67c40a0 RDI: 0000000000000009 [ 572.829824][T10804] RBP: 00007fb3e67c4090 R08: 0000000000000000 R09: 0000000000000000 [ 572.829835][T10804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.829847][T10804] R13: 00007fb3e8826218 R14: 00007fb3e8826180 R15: 00007ffc242a3dd8 [ 572.829876][T10804] [ 575.404396][ T43] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 575.542154][ T43] usb 5-1: device descriptor read/64, error -71 [ 575.781386][ T43] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 575.911377][ T43] usb 5-1: device descriptor read/64, error -71 [ 576.021629][ T43] usb usb5-port1: attempt power cycle [ 576.970888][ T9970] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 577.031320][ T43] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 577.056290][ T43] usb 5-1: device descriptor read/8, error -71 [ 577.181403][ T9970] usb 4-1: Using ep0 maxpacket: 8 [ 577.183530][ T9970] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 577.183554][ T9970] usb 4-1: config 0 has no interface number 0 [ 577.183590][ T9970] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 577.183610][ T9970] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 577.183632][ T9970] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 577.183654][ T9970] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 577.183689][ T9970] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 577.183710][ T9970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.188902][ T9970] usb 4-1: config 0 descriptor?? [ 577.201799][ T9970] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 577.301248][ T43] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 577.321955][ T43] usb 5-1: device descriptor read/8, error -71 [ 577.431954][ T43] usb usb5-port1: unable to enumerate USB device [ 578.203782][ T43] usb 4-1: USB disconnect, device number 48 [ 578.203855][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 578.236849][T10836] ldusb 4-1:0.55: Couldn't submit interrupt_out_urb -19 [ 578.238261][ T43] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 578.441608][ T5698] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 578.617092][ T5698] usb 1-1: unable to get BOS descriptor or descriptor too short [ 578.618229][ T5698] usb 1-1: not running at top speed; connect to a high speed hub [ 578.620671][ T5698] usb 1-1: config 133 has an invalid interface number: 87 but max is 1 [ 578.620686][ T5698] usb 1-1: config 133 has an invalid interface number: 144 but max is 1 [ 578.620696][ T5698] usb 1-1: config 133 has no interface number 0 [ 578.620704][ T5698] usb 1-1: config 133 has no interface number 1 [ 578.620738][ T5698] usb 1-1: config 133 interface 144 has no altsetting 0 [ 578.661668][ T5698] usb 1-1: New USB device found, idVendor=0af0, idProduct=7801, bcdDevice=45.6a [ 578.661695][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.661713][ T5698] usb 1-1: Product: syz [ 578.661725][ T5698] usb 1-1: Manufacturer: syz [ 578.661738][ T5698] usb 1-1: SerialNumber: syz [ 578.864250][T10511] syz_tun (unregistering): left allmulticast mode [ 579.240709][ T5698] hso 1-1:133.87: Not our interface [ 579.284020][ T5698] usb 1-1: USB disconnect, device number 41 [ 579.840189][ T6517] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 579.897629][ T6517] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 579.915826][ T6517] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 579.917531][ T6517] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 579.918261][ T6517] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 581.416147][T10894] FAULT_INJECTION: forcing a failure. [ 581.416147][T10894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.416180][T10894] CPU: 0 UID: 0 PID: 10894 Comm: syz.2.1790 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 581.416204][T10894] Tainted: [L]=SOFTLOCKUP [ 581.416210][T10894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 581.416220][T10894] Call Trace: [ 581.416228][T10894] [ 581.416235][T10894] dump_stack_lvl+0xe8/0x150 [ 581.416260][T10894] should_fail_ex+0x46b/0x600 [ 581.416290][T10894] _copy_to_user+0x31/0xb0 [ 581.416310][T10894] simple_read_from_buffer+0xe1/0x170 [ 581.416341][T10894] proc_fail_nth_read+0x1be/0x230 [ 581.416363][T10894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 581.416384][T10894] ? rw_verify_area+0x2ac/0x4e0 [ 581.416411][T10894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 581.416431][T10894] vfs_read+0x212/0xa80 [ 581.416459][T10894] ? __pfx_vfs_read+0x10/0x10 [ 581.416482][T10894] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 581.416507][T10894] ? lockdep_hardirqs_on+0x7a/0x110 [ 581.416531][T10894] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 581.416556][T10894] ? mutex_lock_nested+0x152/0x1d0 [ 581.416575][T10894] ? fdget_pos+0x252/0x320 [ 581.416601][T10894] ksys_read+0x156/0x270 [ 581.416623][T10894] ? __pfx_ksys_read+0x10/0x10 [ 581.416651][T10894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.416671][T10894] do_syscall_64+0x174/0x580 [ 581.416694][T10894] ? trace_irq_disable+0x3b/0x140 [ 581.416714][T10894] ? clear_bhb_loop+0x40/0x90 [ 581.416739][T10894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.416756][T10894] RIP: 0033:0x7fb3e856d68e [ 581.416773][T10894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 581.416788][T10894] RSP: 002b:00007fb3e6805fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 581.416807][T10894] RAX: ffffffffffffffda RBX: 00007fb3e68066c0 RCX: 00007fb3e856d68e [ 581.416820][T10894] RDX: 000000000000000f RSI: 00007fb3e68060a0 RDI: 0000000000000004 [ 581.416831][T10894] RBP: 00007fb3e6806090 R08: 0000000000000000 R09: 0000000000000000 [ 581.416841][T10894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.416851][T10894] R13: 00007fb3e8826038 R14: 00007fb3e8825fa0 R15: 00007ffc242a3dd8 [ 581.416877][T10894] [ 582.041205][ T4919] Bluetooth: hci4: command tx timeout [ 583.171198][ T5714] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 583.355004][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.355031][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.355051][ T5714] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 583.355063][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.367258][ T5714] usb 5-1: config 0 descriptor?? [ 583.562374][T10878] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.562490][T10878] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.562707][T10878] bridge_slave_0: entered allmulticast mode [ 583.606120][T10878] bridge_slave_0: entered promiscuous mode [ 583.665684][T10878] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.665819][T10878] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.666020][T10878] bridge_slave_1: entered allmulticast mode [ 583.710263][T10878] bridge_slave_1: entered promiscuous mode [ 583.904535][T10937] FAULT_INJECTION: forcing a failure. [ 583.904535][T10937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.904568][T10937] CPU: 1 UID: 0 PID: 10937 Comm: syz.1.1803 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 583.904593][T10937] Tainted: [L]=SOFTLOCKUP [ 583.904598][T10937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 583.904608][T10937] Call Trace: [ 583.904614][T10937] [ 583.904621][T10937] dump_stack_lvl+0xe8/0x150 [ 583.904645][T10937] should_fail_ex+0x46b/0x600 [ 583.904717][T10937] _copy_from_user+0x2d/0xb0 [ 583.904737][T10937] vhost_vring_ioctl+0x7d9/0x1960 [ 583.904767][T10937] ? __pfx_vhost_vring_ioctl+0x10/0x10 [ 583.904787][T10937] ? do_vfs_ioctl+0x117b/0x1540 [ 583.904812][T10937] ? vhost_dev_ioctl+0x3d1/0x1170 [ 583.904848][T10937] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 583.904873][T10937] ? lockdep_hardirqs_on+0x7a/0x110 [ 583.904896][T10937] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 583.904920][T10937] ? mutex_lock_nested+0x152/0x1d0 [ 583.904939][T10937] ? vhost_vsock_dev_ioctl+0x223/0xed0 [ 583.904967][T10937] vhost_vsock_dev_ioctl+0x268/0xed0 [ 583.904996][T10937] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 583.905024][T10937] ? ksys_write+0x202/0x270 [ 583.905052][T10937] ? bpf_lsm_file_ioctl+0x9/0x20 [ 583.905072][T10937] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 583.905096][T10937] __se_sys_ioctl+0xff/0x170 [ 583.905117][T10937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.905136][T10937] do_syscall_64+0x174/0x580 [ 583.905160][T10937] ? trace_irq_disable+0x3b/0x140 [ 583.905180][T10937] ? clear_bhb_loop+0x40/0x90 [ 583.905202][T10937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.905219][T10937] RIP: 0033:0x7fe2ea94ce59 [ 583.905237][T10937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.905252][T10937] RSP: 002b:00007fe2e8b9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 583.905271][T10937] RAX: ffffffffffffffda RBX: 00007fe2eabc5fa0 RCX: 00007fe2ea94ce59 [ 583.905284][T10937] RDX: 00002000000001c0 RSI: 000000004008af22 RDI: 0000000000000003 [ 583.905296][T10937] RBP: 00007fe2e8b9e090 R08: 0000000000000000 R09: 0000000000000000 [ 583.905307][T10937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.905318][T10937] R13: 00007fe2eabc6038 R14: 00007fe2eabc5fa0 R15: 00007fff1a94f138 [ 583.905349][T10937] [ 583.925469][ T5714] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 583.960228][ T5714] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 584.121138][ T4919] Bluetooth: hci4: command tx timeout [ 584.162873][ T5714] cp2112 0003:10C4:EA90.0008: error requesting version [ 584.298068][ T5714] cp2112 0003:10C4:EA90.0008: probe with driver cp2112 failed with error -32 [ 584.453834][T10878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.493609][T10878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.824663][T10878] team0: Port device team_slave_0 added [ 584.827881][T10878] team0: Port device team_slave_1 added [ 585.031475][T10878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.031490][T10878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.031513][T10878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.040121][T10878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.040135][T10878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.040158][T10878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.218715][T10878] hsr_slave_0: entered promiscuous mode [ 585.219530][T10878] hsr_slave_1: entered promiscuous mode [ 585.220121][T10878] debugfs: 'hsr0' already exists in 'hsr' [ 585.220135][T10878] Cannot create hsr debugfs directory [ 585.424053][T10958] FAULT_INJECTION: forcing a failure. [ 585.424053][T10958] name failslab, interval 1, probability 0, space 0, times 0 [ 585.424085][T10958] CPU: 0 UID: 0 PID: 10958 Comm: syz.2.1811 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 585.424109][T10958] Tainted: [L]=SOFTLOCKUP [ 585.424116][T10958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 585.424126][T10958] Call Trace: [ 585.424133][T10958] [ 585.424140][T10958] dump_stack_lvl+0xe8/0x150 [ 585.424166][T10958] should_fail_ex+0x46b/0x600 [ 585.424194][T10958] should_failslab+0xa8/0x100 [ 585.424218][T10958] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 585.424242][T10958] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 585.424262][T10958] ? rcu_is_watching+0x15/0xb0 [ 585.424287][T10958] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 585.424310][T10958] krealloc_node_align_noprof+0x19a/0x390 [ 585.424337][T10958] kvrealloc_node_align_noprof+0x7b/0xf0 [ 585.424361][T10958] bpf_iarray_realloc+0x34/0xa0 [ 585.424386][T10958] bpf_check+0x491/0x49f0 [ 585.424405][T10958] ? pcpu_memcg_post_alloc_hook+0x2a4/0x630 [ 585.424433][T10958] ? pcpu_memcg_post_alloc_hook+0x2a4/0x630 [ 585.424462][T10958] ? ktime_get_with_offset+0x93/0x2d0 [ 585.424489][T10958] ? ktime_get_with_offset+0x93/0x2d0 [ 585.424517][T10958] ? __pfx_bpf_check+0x10/0x10 [ 585.424539][T10958] ? __asan_memset+0x22/0x50 [ 585.424556][T10958] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 585.424580][T10958] ? security_bpf_prog_load+0x125/0x3c0 [ 585.424604][T10958] bpf_prog_load+0x1406/0x1a10 [ 585.424636][T10958] ? __pfx_bpf_prog_load+0x10/0x10 [ 585.424657][T10958] ? __might_fault+0xaf/0x130 [ 585.424692][T10958] ? bpf_lsm_bpf+0x9/0x20 [ 585.424710][T10958] ? security_bpf+0x7e/0x2d0 [ 585.424730][T10958] __sys_bpf+0x618/0x950 [ 585.424750][T10958] ? __pfx___sys_bpf+0x10/0x10 [ 585.424768][T10958] ? rt_mutex_slowunlock+0x1cb/0x300 [ 585.424801][T10958] ? ksys_write+0x248/0x270 [ 585.424823][T10958] ? __pfx_ksys_write+0x10/0x10 [ 585.424848][T10958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.424868][T10958] __x64_sys_bpf+0x7c/0x90 [ 585.424887][T10958] do_syscall_64+0x174/0x580 [ 585.424910][T10958] ? trace_irq_disable+0x3b/0x140 [ 585.424930][T10958] ? clear_bhb_loop+0x40/0x90 [ 585.424952][T10958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.424969][T10958] RIP: 0033:0x7fb3e85ace59 [ 585.424986][T10958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.425001][T10958] RSP: 002b:00007fb3e6806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 585.425020][T10958] RAX: ffffffffffffffda RBX: 00007fb3e8825fa0 RCX: 00007fb3e85ace59 [ 585.425033][T10958] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 585.425044][T10958] RBP: 00007fb3e6806090 R08: 0000000000000000 R09: 0000000000000000 [ 585.425056][T10958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 585.425066][T10958] R13: 00007fb3e8826038 R14: 00007fb3e8825fa0 R15: 00007ffc242a3dd8 [ 585.425095][T10958] [ 586.429364][ T4919] Bluetooth: hci4: command tx timeout [ 587.200060][ T5738] usb 5-1: USB disconnect, device number 38 [ 587.914060][ T5738] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 588.089714][ T5738] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 588.089733][ T5738] usb 5-1: config 0 has no interface number 0 [ 588.089759][ T5738] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 588.089772][ T5738] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 588.089795][ T5738] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 588.089806][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.103565][T10878] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.535748][ T4919] Bluetooth: hci4: command tx timeout [ 588.941563][ T5738] usb 5-1: config 0 descriptor?? [ 588.961524][T10983] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 589.089723][ T5738] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 589.227371][ T5698] usb 5-1: USB disconnect, device number 39 [ 589.227569][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 589.543226][T10999] FAULT_INJECTION: forcing a failure. [ 589.543226][T10999] name failslab, interval 1, probability 0, space 0, times 0 [ 589.543248][T10999] CPU: 1 UID: 0 PID: 10999 Comm: syz.1.1828 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 589.543263][T10999] Tainted: [L]=SOFTLOCKUP [ 589.543266][T10999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 589.543272][T10999] Call Trace: [ 589.543276][T10999] [ 589.543281][T10999] dump_stack_lvl+0xe8/0x150 [ 589.543296][T10999] should_fail_ex+0x46b/0x600 [ 589.543313][T10999] should_failslab+0xa8/0x100 [ 589.543327][T10999] __kmalloc_noprof+0xdf/0x7b0 [ 589.543338][T10999] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 589.543354][T10999] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 589.543369][T10999] genl_family_rcv_msg_doit+0xd9/0x330 [ 589.543382][T10999] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 589.543392][T10999] ? rcu_is_watching+0x15/0xb0 [ 589.543407][T10999] ? rcu_is_watching+0x15/0xb0 [ 589.543420][T10999] ? cap_capable+0x123/0x460 [ 589.543434][T10999] ? safesetid_security_capable+0xa9/0x1a0 [ 589.543450][T10999] ? bpf_lsm_capable+0x9/0x20 [ 589.543462][T10999] ? security_capable+0x7e/0x2c0 [ 589.543475][T10999] genl_rcv_msg+0x61c/0x7a0 [ 589.543489][T10999] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.543498][T10999] ? ref_tracker_free+0x673/0x820 [ 589.543511][T10999] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 589.543522][T10999] ? __pfx_nl80211_del_key+0x10/0x10 [ 589.543533][T10999] ? __pfx_nl80211_post_doit+0x10/0x10 [ 589.543544][T10999] ? __pfx_ref_tracker_free+0x10/0x10 [ 589.543556][T10999] ? __asan_memcpy+0x40/0x70 [ 589.543565][T10999] ? __skb_clone+0x63/0x7a0 [ 589.543583][T10999] netlink_rcv_skb+0x232/0x4b0 [ 589.543597][T10999] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.543608][T10999] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 589.543627][T10999] ? netlink_deliver_tap+0x2e/0x1b0 [ 589.543639][T10999] ? netlink_deliver_tap+0x2e/0x1b0 [ 589.543654][T10999] genl_rcv+0x28/0x40 [ 589.543662][T10999] netlink_unicast+0x780/0x920 [ 589.543680][T10999] netlink_sendmsg+0x813/0xb40 [ 589.543698][T10999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.543712][T10999] ? unwind_get_return_address+0x4d/0x90 [ 589.543735][T10999] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 589.543747][T10999] ____sys_sendmsg+0x94c/0x9c0 [ 589.543764][T10999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 589.543782][T10999] ? import_iovec+0x73/0xa0 [ 589.543799][T10999] ___sys_sendmsg+0x2a5/0x360 [ 589.543811][T10999] ? __lock_acquire+0x6b5/0x2cf0 [ 589.543826][T10999] ? __pfx____sys_sendmsg+0x10/0x10 [ 589.543858][T10999] ? __fget_files+0x2a/0x420 [ 589.543867][T10999] ? __fget_files+0x3a6/0x420 [ 589.543882][T10999] __x64_sys_sendmsg+0x1c3/0x2a0 [ 589.543896][T10999] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 589.543917][T10999] ? __pfx_ksys_write+0x10/0x10 [ 589.543934][T10999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.543944][T10999] do_syscall_64+0x174/0x580 [ 589.543957][T10999] ? trace_irq_disable+0x3b/0x140 [ 589.543969][T10999] ? clear_bhb_loop+0x40/0x90 [ 589.543981][T10999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.543990][T10999] RIP: 0033:0x7fe2ea94ce59 [ 589.544001][T10999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.544009][T10999] RSP: 002b:00007fe2e8b9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.544021][T10999] RAX: ffffffffffffffda RBX: 00007fe2eabc5fa0 RCX: 00007fe2ea94ce59 [ 589.544028][T10999] RDX: 0000000000000800 RSI: 00002000000006c0 RDI: 0000000000000003 [ 589.544035][T10999] RBP: 00007fe2e8b9e090 R08: 0000000000000000 R09: 0000000000000000 [ 589.544041][T10999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.544046][T10999] R13: 00007fe2eabc6038 R14: 00007fe2eabc5fa0 R15: 00007fff1a94f138 [ 589.544062][T10999] [ 589.801220][ T5738] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 590.091120][ T5738] usb 1-1: Using ep0 maxpacket: 8 [ 590.109664][ T5738] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 590.109692][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.109709][ T5738] usb 1-1: Product: syz [ 590.109722][ T5738] usb 1-1: Manufacturer: syz [ 590.109734][ T5738] usb 1-1: SerialNumber: syz [ 590.379053][T10878] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.708371][ T5738] mxuport 1-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 590.708431][ T5738] mxuport 1-1:254.0: probe with driver mxuport failed with error -5 [ 590.915928][T10997] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1827'. [ 590.951833][T10878] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.157199][ T5738] usb 1-1: USB disconnect, device number 42 [ 591.548309][T10878] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.595488][T10878] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 593.665780][T10878] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 593.666674][T10878] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 593.941657][T10878] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 593.944438][T10878] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 593.985200][T10878] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 593.986147][T10878] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 594.502329][T10878] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 595.004416][T10878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.148540][T10878] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.245328][T11066] FAULT_INJECTION: forcing a failure. [ 595.245328][T11066] name failslab, interval 1, probability 0, space 0, times 0 [ 595.245362][T11066] CPU: 0 UID: 0 PID: 11066 Comm: syz.2.1849 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 595.245387][T11066] Tainted: [L]=SOFTLOCKUP [ 595.245394][T11066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 595.245404][T11066] Call Trace: [ 595.245411][T11066] [ 595.245419][T11066] dump_stack_lvl+0xe8/0x150 [ 595.245444][T11066] should_fail_ex+0x46b/0x600 [ 595.245473][T11066] should_failslab+0xa8/0x100 [ 595.245496][T11066] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 595.245516][T11066] ? __alloc_skb+0x1d0/0x7d0 [ 595.245537][T11066] ? lockdep_hardirqs_on+0x7a/0x110 [ 595.245567][T11066] __alloc_skb+0x1d0/0x7d0 [ 595.245593][T11066] netlink_sendmsg+0x5d4/0xb40 [ 595.245626][T11066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.245651][T11066] ? unwind_get_return_address+0x4d/0x90 [ 595.245678][T11066] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 595.245700][T11066] ____sys_sendmsg+0x94c/0x9c0 [ 595.245730][T11066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 595.245763][T11066] ? import_iovec+0x73/0xa0 [ 595.245790][T11066] ___sys_sendmsg+0x2a5/0x360 [ 595.245814][T11066] ? __lock_acquire+0x6b5/0x2cf0 [ 595.245840][T11066] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.245896][T11066] ? __fget_files+0x2a/0x420 [ 595.245913][T11066] ? __fget_files+0x3a6/0x420 [ 595.245939][T11066] __x64_sys_sendmsg+0x1c3/0x2a0 [ 595.245967][T11066] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 595.246006][T11066] ? __pfx_ksys_write+0x10/0x10 [ 595.246035][T11066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.246054][T11066] do_syscall_64+0x174/0x580 [ 595.246078][T11066] ? trace_irq_disable+0x3b/0x140 [ 595.246098][T11066] ? clear_bhb_loop+0x40/0x90 [ 595.246119][T11066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.246136][T11066] RIP: 0033:0x7fb3e85ace59 [ 595.246151][T11066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.246165][T11066] RSP: 002b:00007fb3e6806028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.246184][T11066] RAX: ffffffffffffffda RBX: 00007fb3e8825fa0 RCX: 00007fb3e85ace59 [ 595.246196][T11066] RDX: 0000000000000044 RSI: 0000200000000080 RDI: 0000000000000003 [ 595.246207][T11066] RBP: 00007fb3e6806090 R08: 0000000000000000 R09: 0000000000000000 [ 595.246217][T11066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.246227][T11066] R13: 00007fb3e8826038 R14: 00007fb3e8825fa0 R15: 00007ffc242a3dd8 [ 595.246256][T11066] [ 595.363528][ T3427] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.370179][ T3427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.472304][ T3427] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.472427][ T3427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.836959][T11074] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 28 [ 595.837679][T11069] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1851'. [ 596.706244][ T36] audit: type=1326 audit(1780792581.920:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11087 comm="syz.2.1856" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e85ace59 code=0x7ffc0000 [ 596.706294][ T36] audit: type=1326 audit(1780792581.920:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11087 comm="syz.2.1856" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e85ace59 code=0x7ffc0000 [ 596.706334][ T36] audit: type=1326 audit(1780792581.920:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11087 comm="syz.2.1856" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e85ace59 code=0x7ffc0000 [ 596.706371][ T36] audit: type=1326 audit(1780792581.920:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11087 comm="syz.2.1856" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e85ace59 code=0x7ffc0000 [ 596.706410][ T36] audit: type=1326 audit(1780792581.920:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11087 comm="syz.2.1856" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fb3e85ace59 code=0x7ffc0000 [ 596.706448][ T36] audit: type=1326 audit(1780792581.920:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11087 comm="syz.2.1856" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e85ace59 code=0x7ffc0000 [ 596.706487][ T36] audit: type=1326 audit(1780792581.920:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11087 comm="syz.2.1856" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e85ace59 code=0x7ffc0000 [ 596.706525][ T36] audit: type=1326 audit(1780792581.920:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11087 comm="syz.2.1856" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e85ace59 code=0x7ffc0000 [ 596.706564][ T36] audit: type=1326 audit(1780792581.920:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11087 comm="syz.2.1856" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e85ace59 code=0x7ffc0000 [ 596.706602][ T36] audit: type=1326 audit(1780792581.920:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11087 comm="syz.2.1856" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb3e85ace59 code=0x7ffc0000 [ 599.010788][T10878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.450400][T10878] veth0_vlan: entered promiscuous mode [ 599.465524][T10878] veth1_vlan: entered promiscuous mode [ 599.576847][T10878] veth0_macvtap: entered promiscuous mode [ 599.600055][T10878] veth1_macvtap: entered promiscuous mode [ 599.710401][T10878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.919213][T10878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.987850][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.003791][ T6648] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.009607][ T6648] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.010058][ T6648] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.812270][ T6648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.812288][ T6648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.914809][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.914829][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.513839][T11141] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 604.513856][T11141] CIFS mount error: No usable UNC path provided in device string! [ 604.513856][T11141] [ 604.514013][T11141] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 604.950925][ T5841] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 606.064618][ T5841] usb 1-1: config 87 has an invalid interface number: 83 but max is 1 [ 606.064644][ T5841] usb 1-1: config 87 has an invalid descriptor of length 0, skipping remainder of the config [ 606.064662][ T5841] usb 1-1: config 87 has 1 interface, different from the descriptor's value: 2 [ 606.064680][ T5841] usb 1-1: config 87 has no interface number 0 [ 606.064721][ T5841] usb 1-1: config 87 interface 83 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 606.064744][ T5841] usb 1-1: config 87 interface 83 has no altsetting 0 [ 606.091307][ T5841] usb 1-1: New USB device found, idVendor=049f, idProduct=ffff, bcdDevice=ef.cd [ 606.091333][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.091351][ T5841] usb 1-1: Product: syz [ 606.091364][ T5841] usb 1-1: Manufacturer: syz [ 606.091374][ T5841] usb 1-1: SerialNumber: syz [ 607.350082][T11147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.350644][T11147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.354276][T11147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.354867][T11147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.712535][ T5841] safe_serial 1-1:87.83: safe_serial converter detected [ 608.712751][ T5841] safe_serial 1-1:87.83: probe with driver safe_serial failed with error -22 [ 608.750943][ T5841] usb 1-1: USB disconnect, device number 43 [ 608.985726][ T6517] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 609.055226][ T6517] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 609.125763][ T6517] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 609.127058][ T6517] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 609.127890][ T6517] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 609.370994][ T5714] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 609.523529][ T5714] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 609.523556][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.559512][ T5714] usb 4-1: config 0 descriptor?? [ 609.583774][ T5714] cp210x 4-1:0.0: cp210x converter detected [ 609.989997][ T5714] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 610.032075][T11167] IPv6: addrconf: prefix option has invalid lifetime [ 610.032091][T11167] IPv6: addrconf: prefix option has invalid lifetime [ 611.171254][ T5714] usb 4-1: cp210x converter now attached to ttyUSB0 [ 611.370549][ T6517] Bluetooth: hci5: command tx timeout [ 611.387937][ T36] kauditd_printk_skb: 254 callbacks suppressed [ 611.387954][ T36] audit: type=1107 audit(1780792596.591:784): pid=11166 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 613.205896][ T5738] usb 4-1: USB disconnect, device number 49 [ 613.402963][ T6517] Bluetooth: hci5: command tx timeout [ 614.206410][ T5738] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 614.906633][ T186] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.429249][ T5738] cp210x 4-1:0.0: device disconnected [ 615.647164][ T6517] Bluetooth: hci5: command tx timeout [ 616.107503][ T186] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.585794][ T186] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.719598][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1900'. [ 617.722112][ T6517] Bluetooth: hci5: command tx timeout [ 618.049881][ T186] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.769404][T11164] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.769471][T11164] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.769647][T11164] bridge_slave_0: entered allmulticast mode [ 619.772674][T11164] bridge_slave_0: entered promiscuous mode [ 619.775800][T11164] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.775950][T11164] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.776110][T11164] bridge_slave_1: entered allmulticast mode [ 619.783805][T11164] bridge_slave_1: entered promiscuous mode [ 619.866420][T11164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.869531][T11164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.556889][T11164] team0: Port device team_slave_0 added [ 621.635574][T11164] team0: Port device team_slave_1 added [ 622.246012][T11164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.246029][T11164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.246054][T11164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.452888][T11164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.452904][T11164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.452929][T11164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.897112][T11164] hsr_slave_0: entered promiscuous mode [ 622.909470][T11164] hsr_slave_1: entered promiscuous mode [ 622.941609][T11164] debugfs: 'hsr0' already exists in 'hsr' [ 622.941636][T11164] Cannot create hsr debugfs directory [ 623.374458][T11275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.375009][T11275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.580815][ T43] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 623.732250][ T43] usb 3-1: not running at top speed; connect to a high speed hub [ 623.732804][ T186] bridge_slave_1: left allmulticast mode [ 623.733045][ T186] bridge_slave_1: left promiscuous mode [ 623.733489][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.733509][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 623.733600][ T43] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 623.735810][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 623.735834][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.735851][ T43] usb 3-1: Product: syz [ 623.735864][ T43] usb 3-1: Manufacturer: syz [ 623.735877][ T43] usb 3-1: SerialNumber: syz [ 623.796980][ T5841] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 623.823299][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.823364][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.883729][ T186] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.022284][ T5841] usb 4-1: Using ep0 maxpacket: 32 [ 624.026450][ T5841] usb 4-1: unable to get BOS descriptor or descriptor too short [ 624.031093][ T5841] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 624.031124][ T5841] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 624.031143][ T5841] usb 4-1: config 14 has no interface number 0 [ 624.031157][ T5841] usb 4-1: config 14 has no interface number 1 [ 624.031221][ T5841] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 624.031243][ T5841] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 624.031266][ T5841] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 624.031289][ T5841] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 624.031314][ T5841] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 624.031337][ T5841] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 624.031360][ T5841] usb 4-1: config 14 interface 57 has no altsetting 0 [ 624.031376][ T5841] usb 4-1: config 14 interface 228 has no altsetting 0 [ 624.040501][ T5841] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 624.040525][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.040542][ T5841] usb 4-1: Product: syz [ 624.040554][ T5841] usb 4-1: Manufacturer: syz [ 624.040567][ T5841] usb 4-1: SerialNumber: syz [ 624.215411][ T43] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 624.249261][ T43] usb 3-1: USB disconnect, device number 13 [ 624.398363][ T186] bridge_slave_0: left allmulticast mode [ 624.398395][ T186] bridge_slave_0: left promiscuous mode [ 624.429645][ T186] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.529122][ T5841] legousbtower 4-1:14.57: interrupt endpoints not found [ 624.922060][ T5841] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 624.925029][ T5841] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 625.506567][T11294] usb 4-1: LEGO USB Tower reset control request failed [ 625.840462][T11277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.841120][T11277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.192150][ T66] Bluetooth: (null): Invalid header checksum [ 626.305002][ T155] Bluetooth: (null): Invalid header checksum [ 626.411986][ T3427] Bluetooth: (null): Invalid header checksum [ 626.532875][ T66] Bluetooth: (null): Invalid header checksum [ 626.641092][ T3427] Bluetooth: (null): Invalid header checksum [ 627.883682][ T66] Bluetooth: (null): Invalid header checksum [ 627.974586][ T3339] Bluetooth: (null): Invalid header checksum [ 628.200364][ T5841] usb 4-1: USB disconnect, device number 50 [ 628.307000][ T5841] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 628.920342][T11318] syz.3.1924 (11318) used greatest stack depth: 15680 bytes left [ 628.993091][ T186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.083968][ T186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.123619][ T186] bond0 (unregistering): Released all slaves [ 629.419702][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1 [ 629.420170][T11316] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 630.180741][ T5714] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 630.353190][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.353220][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.353254][ T5714] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 630.353274][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.357856][ T5714] usb 4-1: config 0 descriptor?? [ 630.637867][T11346] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 630.842683][ T5714] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 630.939022][ T5714] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 631.002789][ T5714] cp2112 0003:10C4:EA90.0009: error requesting version [ 631.162866][ T5714] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -32 [ 633.493732][T11384] netlink: 83 bytes leftover after parsing attributes in process `syz.4.1936'. [ 633.890118][ T5738] usb 4-1: USB disconnect, device number 51 [ 634.476923][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2 [ 635.403771][ T186] hsr_slave_0: left promiscuous mode [ 635.442177][ T186] hsr_slave_1: left promiscuous mode [ 635.443352][ T186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.443516][ T186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.523666][ T186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.523691][ T186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.651815][ T186] veth1_macvtap: left promiscuous mode [ 636.683142][ T186] veth0_macvtap: left promiscuous mode [ 636.683466][ T186] veth1_vlan: left promiscuous mode [ 636.683889][ T186] veth0_vlan: left promiscuous mode [ 637.311691][ T9970] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 637.466340][ T9970] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 637.466367][ T9970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.498677][ T9970] usb 1-1: config 0 descriptor?? [ 637.530370][ T9970] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 637.842277][ T186] team0 (unregistering): Port device team_slave_1 removed [ 637.883505][ T186] team0 (unregistering): Port device team_slave_0 removed [ 638.118377][ T9970] gp8psk: usb out operation failed. [ 638.118474][ T9970] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 638.118514][ T9970] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 638.165649][ T9970] usb 1-1: USB disconnect, device number 44 [ 638.590030][T11417] smc: net device team0 applied user defined pnetid SYZ2 [ 639.578834][T11466] binder: 11465:11466 ioctl c0306201 200000000040 returned -22 [ 639.881672][ T5842] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 640.047285][ T5842] usb 1-1: Using ep0 maxpacket: 16 [ 640.059080][ T5842] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.059103][ T5842] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 640.062266][ T5842] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 640.062291][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.062308][ T5842] usb 1-1: Product: syz [ 640.062321][ T5842] usb 1-1: Manufacturer: syz [ 640.062333][ T5842] usb 1-1: SerialNumber: syz [ 640.144873][ T5842] usb 1-1: 0:2 : does not exist [ 640.152894][ T5842] usb 1-1: unit 2 not found! [ 640.628782][T11466] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 640.628807][T11466] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 640.646369][ T5842] usb 1-1: USB disconnect, device number 45 [ 640.653567][T11164] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 640.685213][T11164] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 640.686232][T11164] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 640.797420][T11164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 640.799532][T11164] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 640.955941][T11485] sg_write: data in/out 1048540/14 bytes for SCSI command 0x0-- guessing data in; [ 640.955941][T11485] program syz.3.1962 not setting count and/or reply_len properly [ 641.451997][T11164] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 641.469439][T11164] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 641.539728][T11164] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 641.884629][T11164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.929336][T11164] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.946190][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.946417][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.001280][ T178] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.001404][ T178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.028856][T11509] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 644.677977][ T6517] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 644.880659][ T5737] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 644.946053][T11164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.051524][ T5737] usb 5-1: Using ep0 maxpacket: 32 [ 645.058483][ T5737] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 645.058508][ T5737] usb 5-1: config 0 has no interface number 0 [ 645.077285][T11164] veth0_vlan: entered promiscuous mode [ 645.104170][ T5737] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 645.104198][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.104215][ T5737] usb 5-1: Product: syz [ 645.104227][ T5737] usb 5-1: Manufacturer: syz [ 645.104239][ T5737] usb 5-1: SerialNumber: syz [ 645.158895][T11164] veth1_vlan: entered promiscuous mode [ 645.161009][ T5737] usb 5-1: config 0 descriptor?? [ 645.323851][T11164] veth0_macvtap: entered promiscuous mode [ 645.347024][T11164] veth1_macvtap: entered promiscuous mode [ 645.419231][T11164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.515533][T11164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.563585][ T3350] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.579617][ T5737] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 645.579643][ T5737] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 645.603621][ T3350] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.609576][ T186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.611481][ T186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.109496][ T6648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.109516][ T6648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.909825][T11574] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 648.024486][ T178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.024504][ T178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.742526][ T5737] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000000: -71 [ 650.742812][ T5737] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 650.854660][ T5737] usb 5-1: USB disconnect, device number 40 [ 651.049498][T11594] binder: 11593:11594 ioctl c0306201 200000000040 returned -22 [ 651.290591][ T9970] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 651.291116][ T36] audit: type=1326 audit(1780792636.661:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.1.1987" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f320f8ece59 code=0x0 [ 651.414513][ T4919] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 651.471992][ T9970] usb 1-1: Using ep0 maxpacket: 16 [ 651.480023][ T9970] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.480045][ T9970] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 651.482765][ T4919] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 651.514727][ T4919] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 651.524726][ T4919] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 651.537228][ T4919] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 651.565944][ T9970] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 651.565971][ T9970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.565987][ T9970] usb 1-1: Product: syz [ 651.566000][ T9970] usb 1-1: Manufacturer: syz [ 651.566010][ T9970] usb 1-1: SerialNumber: syz [ 651.659361][ T9970] usb 1-1: 0:2 : does not exist [ 651.659410][ T9970] usb 1-1: unit 2 not found! [ 652.107503][T11606] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 652.107527][T11606] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 652.131770][ T5714] usb 1-1: USB disconnect, device number 46 [ 652.167168][ T5603] syz_tun (unregistering): left allmulticast mode [ 653.517812][T11618] netlink: 'syz.1.1991': attribute type 2 has an invalid length. [ 653.650651][ T6517] Bluetooth: hci2: command tx timeout [ 655.737165][ T6517] Bluetooth: hci2: command tx timeout [ 656.947553][ T9970] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 656.989793][ T66] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.103976][ T9970] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 657.104002][ T9970] usb 1-1: config 0 has no interface number 0 [ 657.104044][ T9970] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 657.104068][ T9970] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 657.104106][ T9970] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 657.104127][ T9970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.180089][ T9970] usb 1-1: config 0 descriptor?? [ 657.180874][T11632] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 657.218268][ T9970] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 657.459684][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 657.459690][ T9970] usb 1-1: USB disconnect, device number 47 [ 657.807324][ T6517] Bluetooth: hci2: command tx timeout [ 658.818330][ T66] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.874102][T11643] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 659.881846][ T6517] Bluetooth: hci2: command tx timeout [ 663.498452][ T36] audit: type=1326 audit(1780792648.871:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11655 comm="syz.1.1999" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320f8ece59 code=0x7ffc0000 [ 663.498735][ T36] audit: type=1326 audit(1780792648.871:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11655 comm="syz.1.1999" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320f8ece59 code=0x7ffc0000 [ 663.498949][ T36] audit: type=1326 audit(1780792648.871:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11655 comm="syz.1.1999" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320f8ece59 code=0x7ffc0000 [ 663.499213][ T36] audit: type=1326 audit(1780792648.871:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11655 comm="syz.1.1999" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320f8ece59 code=0x7ffc0000 [ 663.499566][ T36] audit: type=1326 audit(1780792648.871:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11655 comm="syz.1.1999" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f320f8ece59 code=0x7ffc0000 [ 663.499741][ T36] audit: type=1326 audit(1780792648.871:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11655 comm="syz.1.1999" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320f8ece59 code=0x7ffc0000 [ 663.654135][ T36] audit: type=1326 audit(1780792648.871:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11655 comm="syz.1.1999" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320f8ece59 code=0x7ffc0000 [ 663.654171][ T36] audit: type=1326 audit(1780792648.871:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11655 comm="syz.1.1999" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320f8ece59 code=0x7ffc0000 [ 663.654195][ T36] audit: type=1326 audit(1780792648.871:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11655 comm="syz.1.1999" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f320f8ece59 code=0x7ffc0000 [ 663.654217][ T36] audit: type=1326 audit(1780792648.871:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11655 comm="syz.1.1999" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320f8ece59 code=0x7ffc0000 [ 664.206651][T11668] binder: 11667:11668 ioctl c0306201 200000000040 returned -22 [ 664.460927][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 664.610703][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 664.612780][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.612801][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 664.614779][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 664.614802][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.614816][ T10] usb 2-1: Product: syz [ 664.614827][ T10] usb 2-1: Manufacturer: syz [ 664.614838][ T10] usb 2-1: SerialNumber: syz [ 664.641893][ T10] usb 2-1: 0:2 : does not exist [ 664.641971][ T10] usb 2-1: unit 2 not found! [ 664.714882][ T66] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.981662][T11668] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 664.981687][T11668] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 665.018569][ T9970] usb 2-1: USB disconnect, device number 25 [ 665.253464][ T66] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.411243][T11599] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.411443][T11599] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.411605][T11599] bridge_slave_0: entered allmulticast mode [ 666.415731][T11599] bridge_slave_0: entered promiscuous mode [ 666.458497][T11599] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.458620][T11599] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.458737][T11599] bridge_slave_1: entered allmulticast mode [ 666.460098][T11599] bridge_slave_1: entered promiscuous mode [ 666.533183][T11599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.536192][T11599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.171180][T11599] team0: Port device team_slave_0 added [ 668.172697][T11700] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 668.286557][T11599] team0: Port device team_slave_1 added [ 668.518617][T11599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.518640][T11599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.518665][T11599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.571173][T11599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.571187][T11599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.571211][T11599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.987261][T11599] hsr_slave_0: entered promiscuous mode [ 669.020614][T11599] hsr_slave_1: entered promiscuous mode [ 669.021653][T11599] debugfs: 'hsr0' already exists in 'hsr' [ 669.021677][T11599] Cannot create hsr debugfs directory [ 670.503785][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 670.678870][ T10] usb 1-1: device descriptor read/64, error -71 [ 670.679224][ T66] bridge_slave_1: left allmulticast mode [ 670.679251][ T66] bridge_slave_1: left promiscuous mode [ 670.679481][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.093569][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 672.108825][ T66] bridge_slave_0: left allmulticast mode [ 672.108856][ T66] bridge_slave_0: left promiscuous mode [ 672.109070][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.220498][ T10] usb 1-1: device descriptor read/64, error -71 [ 672.383957][ T10] usb usb1-port1: attempt power cycle [ 673.528873][T11749] binder: 11748:11749 ioctl c0306201 200000000040 returned -22 [ 673.780483][ T31] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 673.930789][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 673.958213][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 673.958238][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 673.998990][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 673.999018][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.999086][ T31] usb 4-1: Product: syz [ 673.999139][ T31] usb 4-1: Manufacturer: syz [ 673.999153][ T31] usb 4-1: SerialNumber: syz [ 674.618030][ T31] usb 4-1: 0:2 : does not exist [ 674.618485][ T31] usb 4-1: unit 2 not found! [ 674.887789][T11749] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 674.887806][T11749] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 674.942502][ T31] usb 4-1: USB disconnect, device number 52 [ 675.068088][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 675.210972][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.233390][ T66] bond0 (unregistering): Released all slaves [ 675.239493][ T66] bond1 (unregistering): Released all slaves [ 675.821061][T11760] netlink: 'syz.4.2020': attribute type 2 has an invalid length. [ 677.312961][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1 [ 677.720670][ T31] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 677.873348][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 677.874693][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.874714][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 677.874758][ T31] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 677.874793][ T31] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 677.874831][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 677.874854][ T31] usb 4-1: config 1 interface 1 has no altsetting 0 [ 677.878257][ T31] usb 4-1: string descriptor 0 read error: -22 [ 677.878401][ T31] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 677.878425][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.631442][ T31] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 682.008828][ T31] usb 4-1: USB disconnect, device number 53 [ 682.168922][ T5604] udevd[5604]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 682.169067][ T5604] udevd[5604]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 682.182350][T11787] sctp: [Deprecated]: syz.0.2025 (pid 11787) Use of struct sctp_assoc_value in delayed_ack socket option. [ 682.182350][T11787] Use struct sctp_sack_info instead [ 682.791098][T11796] netlink: 'syz.0.2029': attribute type 1 has an invalid length. [ 682.791169][T11796] netlink: 'syz.0.2029': attribute type 1 has an invalid length. [ 682.791182][T11796] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2029'. [ 682.908131][T11796] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 683.205443][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2 [ 685.486726][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.486790][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.854051][ T66] hsr_slave_0: left promiscuous mode [ 687.913477][ T66] hsr_slave_1: left promiscuous mode [ 687.915059][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.915084][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.971732][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.971760][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.132101][ T66] veth1_macvtap: left promiscuous mode [ 688.140524][ T5738] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 688.152053][ T66] veth0_macvtap: left promiscuous mode [ 688.152300][ T66] veth1_vlan: left promiscuous mode [ 688.152452][ T66] veth0_vlan: left promiscuous mode [ 688.300500][ T5738] usb 4-1: Using ep0 maxpacket: 16 [ 688.303571][ T5738] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.303621][ T5738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 688.303646][ T5738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 688.303665][ T5738] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 688.303686][ T5738] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 688.310493][ T5738] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 688.310517][ T5738] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 688.310543][ T5738] usb 4-1: Manufacturer: syz [ 688.321613][ T5738] usb 4-1: config 0 descriptor?? [ 688.671875][ T5738] rc_core: IR keymap rc-hauppauge not found [ 688.671894][ T5738] Registered IR keymap rc-empty [ 688.672855][ T5738] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 688.704620][ T5738] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 688.754048][ T5738] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 688.769213][ T5738] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 688.950207][ T5738] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 688.973951][ T5738] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 688.990565][ T5738] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 689.033629][ T5738] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 689.053552][ T5738] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 689.073787][ T5738] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 689.090756][ T5738] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 689.110465][ T5738] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 689.133103][ T5738] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 689.150527][ T5738] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 689.196067][ T5738] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 689.196122][ T5738] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 689.200451][ T5842] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 689.455547][ T5842] usb 2-1: config 0 has no interfaces? [ 689.469897][ T5842] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 689.469925][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 689.469952][ T5842] usb 2-1: Product: syz [ 689.469965][ T5842] usb 2-1: Manufacturer: syz [ 689.470060][ T5842] usb 2-1: SerialNumber: syz [ 689.529545][ T5842] usb 2-1: config 0 descriptor?? [ 689.819468][ T5738] usb 2-1: USB disconnect, device number 26 [ 690.570507][ T5738] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 690.591979][ T66] team0 (unregistering): Port device team_slave_1 removed [ 690.691195][ T66] team0 (unregistering): Port device team_slave_0 removed [ 690.720600][ T5738] usb 1-1: Using ep0 maxpacket: 8 [ 690.729363][ T5738] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 690.729443][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.729461][ T5738] usb 1-1: Product: syz [ 690.729474][ T5738] usb 1-1: Manufacturer: syz [ 690.729486][ T5738] usb 1-1: SerialNumber: syz [ 691.145395][ T5842] usb 4-1: USB disconnect, device number 54 [ 691.186355][ T5738] mxuport 1-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 691.186416][ T5738] mxuport 1-1:254.0: probe with driver mxuport failed with error -5 [ 691.386455][T11858] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2038'. [ 692.872124][ T5842] usb 1-1: USB disconnect, device number 51 [ 694.029424][T11888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2045'. [ 696.747270][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2049'. [ 696.837539][T11910] gtp0: entered promiscuous mode [ 696.837564][T11910] gtp0: entered allmulticast mode [ 698.031241][T11599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 698.109159][T11599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 698.118820][T11599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 698.161736][T11599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 698.162789][T11599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 698.209465][T11599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 698.218287][T11599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 698.247605][T11599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 699.974942][T11599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.066725][T11599] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.171410][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.171546][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.227276][ T6648] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.227583][ T6648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.262978][T11972] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 701.545036][T11599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.785782][T11599] veth0_vlan: entered promiscuous mode [ 701.842820][T11599] veth1_vlan: entered promiscuous mode [ 701.921494][T11599] veth0_macvtap: entered promiscuous mode [ 702.005242][T11599] veth1_macvtap: entered promiscuous mode [ 702.310182][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2060'. [ 702.970423][ T9970] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 703.002221][T11599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.022554][T11599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.128798][ T9970] usb 2-1: unable to get BOS descriptor or descriptor too short [ 703.144389][ T9970] usb 2-1: not running at top speed; connect to a high speed hub [ 703.228023][ T9970] usb 2-1: config 2 has an invalid interface number: 48 but max is 1 [ 703.228086][ T9970] usb 2-1: config 2 has an invalid descriptor of length 48, skipping remainder of the config [ 703.228136][ T9970] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 703.228187][ T9970] usb 2-1: config 2 has no interface number 0 [ 703.228263][ T9970] usb 2-1: too many endpoints for config 2 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 703.228341][ T9970] usb 2-1: config 2 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 703.228373][ T9970] usb 2-1: config 2 interface 48 has no altsetting 0 [ 703.640447][ T9970] usb 2-1: string descriptor 0 read error: -22 [ 703.640572][ T9970] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 703.640594][ T9970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.794462][ T3350] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.795421][ T3350] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.795832][ T3350] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.796108][ T3350] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.866772][ T9970] snd-usb-6fire 2-1:2.48: unable to receive device firmware state. [ 704.866844][ T9970] snd-usb-6fire 2-1:2.48: probe with driver snd-usb-6fire failed with error -71 [ 704.869293][ T9970] usb 2-1: USB disconnect, device number 27 [ 707.357498][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.357518][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.585753][ T186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.585774][ T186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.676659][T12044] geneve2: entered promiscuous mode [ 710.676675][T12044] geneve2: entered allmulticast mode [ 710.691452][ T3314] Bluetooth: (null): Too short H5 packet [ 710.691527][ T3314] Bluetooth: (null): Invalid header checksum [ 711.691752][T12045] afs: Unknown parameter 'fl' [ 711.727699][ T13] Bluetooth: (null): Too short H5 packet [ 711.727787][ T13] Bluetooth: (null): Invalid header checksum [ 711.727993][ T13] Bluetooth: (null): Invalid header checksum [ 712.211735][T12053] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 712.211735][T12053] Please contact the netfilter-devel mailing list or update your nftables rules. [ 715.131062][T12061] netlink: 'syz.1.2074': attribute type 2 has an invalid length. [ 716.136187][ T3427] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.342141][T12069] FAULT_INJECTION: forcing a failure. [ 716.342141][T12069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.342175][T12069] CPU: 0 UID: 0 PID: 12069 Comm: syz.0.2079 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 716.342197][T12069] Tainted: [L]=SOFTLOCKUP [ 716.342202][T12069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 716.342213][T12069] Call Trace: [ 716.342219][T12069] [ 716.342227][T12069] dump_stack_lvl+0xe8/0x150 [ 716.342253][T12069] should_fail_ex+0x46b/0x600 [ 716.342282][T12069] _copy_to_user+0x31/0xb0 [ 716.342302][T12069] simple_read_from_buffer+0xe1/0x170 [ 716.342333][T12069] proc_fail_nth_read+0x1be/0x230 [ 716.342354][T12069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 716.342374][T12069] ? rw_verify_area+0x2ac/0x4e0 [ 716.342392][T12069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 716.342411][T12069] vfs_read+0x212/0xa80 [ 716.342437][T12069] ? __pfx_vfs_read+0x10/0x10 [ 716.342460][T12069] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 716.342485][T12069] ? lockdep_hardirqs_on+0x7a/0x110 [ 716.342508][T12069] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 716.342532][T12069] ? mutex_lock_nested+0x152/0x1d0 [ 716.342550][T12069] ? fdget_pos+0x252/0x320 [ 716.342576][T12069] ksys_read+0x156/0x270 [ 716.342597][T12069] ? __pfx_ksys_read+0x10/0x10 [ 716.342624][T12069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.342643][T12069] do_syscall_64+0x174/0x580 [ 716.342665][T12069] ? trace_irq_disable+0x3b/0x140 [ 716.342694][T12069] ? clear_bhb_loop+0x40/0x90 [ 716.342714][T12069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.342730][T12069] RIP: 0033:0x7f7f0bafd68e [ 716.342748][T12069] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 716.342762][T12069] RSP: 002b:00007f7f09d8dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 716.342783][T12069] RAX: ffffffffffffffda RBX: 00007f7f09d8e6c0 RCX: 00007f7f0bafd68e [ 716.342795][T12069] RDX: 000000000000000f RSI: 00007f7f09d8e0a0 RDI: 0000000000000004 [ 716.342805][T12069] RBP: 00007f7f09d8e090 R08: 0000000000000000 R09: 0000000000000000 [ 716.342815][T12069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.342825][T12069] R13: 00007f7f0bdb6038 R14: 00007f7f0bdb5fa0 R15: 00007fff5e8162e8 [ 716.342854][T12069] [ 718.294112][ T3427] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.328729][T12071] syz_tun: entered allmulticast mode [ 718.649920][ T5842] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 718.914077][ T5842] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 718.914103][ T5842] usb 1-1: config 0 has no interface number 0 [ 718.914143][ T5842] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 718.914167][ T5842] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 718.914204][ T5842] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 718.914226][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.004360][ T5842] usb 1-1: config 0 descriptor?? [ 719.005124][T12078] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 719.085547][ T4919] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 719.135102][ T4919] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 719.136575][ T4919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 719.166555][ T4919] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 719.167412][ T4919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 719.192105][ T3427] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.208325][ T5842] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 719.335729][ T5842] usb 1-1: USB disconnect, device number 52 [ 719.877047][ T3427] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.340598][ T5842] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 721.240559][T12086] Bluetooth: hci0: command tx timeout [ 721.381279][ T5842] usb 5-1: Using ep0 maxpacket: 32 [ 721.384924][ T5842] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 721.384951][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.424446][ T5842] usb 5-1: config 0 descriptor?? [ 721.641659][ T5842] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 721.667169][ T5842] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 721.668297][ T5842] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 721.668348][ T5842] usb 5-1: media controller created [ 721.753065][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 721.849415][T12104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.849918][T12104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.894210][ T5842] az6027: usb out operation failed. (-71) [ 721.894621][ T5842] az6027: usb out operation failed. (-71) [ 721.894634][ T5842] stb0899_attach: Driver disabled by Kconfig [ 721.894643][ T5842] az6027: no front-end attached [ 721.894643][ T5842] [ 721.895021][ T5842] az6027: usb out operation failed. (-71) [ 721.895101][ T5842] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 722.002006][ T5842] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 722.020969][ T5842] dvb-usb: schedule remote query interval to 400 msecs. [ 722.020990][ T5842] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 722.048119][ T5842] usb 5-1: USB disconnect, device number 41 [ 722.222740][T12121] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 722.530370][T11161] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 722.702655][T12131] binder: 12129:12131 ioctl 400c6615 200000000280 returned -22 [ 722.706643][T11161] usb 1-1: unable to get BOS descriptor or descriptor too short [ 722.709097][T11161] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 722.709119][T11161] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 722.728276][T11161] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 722.728305][T11161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.728323][T11161] usb 1-1: Product: syz [ 722.728336][T11161] usb 1-1: Manufacturer: syz [ 722.728348][T11161] usb 1-1: SerialNumber: syz [ 722.896332][T11161] usb 1-1: selecting invalid altsetting 1 [ 722.987412][T11161] usb 1-1: unit 6 not found! [ 723.194642][T11161] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 723.322790][T12086] Bluetooth: hci0: command tx timeout [ 723.335682][ T5842] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 723.782226][T11161] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 723.855995][T12152] netlink: 'syz.3.2098': attribute type 2 has an invalid length. [ 723.907578][T11161] usb 1-1: USB disconnect, device number 53 [ 724.572213][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 725.120605][ T3427] bridge_slave_1: left allmulticast mode [ 725.120647][ T3427] bridge_slave_1: left promiscuous mode [ 725.120887][ T3427] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.314424][ T3427] bridge_slave_0: left allmulticast mode [ 725.314463][ T3427] bridge_slave_0: left promiscuous mode [ 725.314683][ T3427] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.383640][T12159] vivid-002: disconnect [ 725.400324][T12086] Bluetooth: hci0: command tx timeout [ 725.542085][T12156] vivid-002: reconnect [ 726.915357][ T3427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.982356][ T3427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.003795][ T3427] bond0 (unregistering): Released all slaves [ 727.151053][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1 [ 728.658231][ T5605] Bluetooth: hci4: command 0x0406 tx timeout [ 728.658281][T12086] Bluetooth: hci0: command tx timeout [ 728.864570][T12083] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.864678][T12083] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.864880][T12083] bridge_slave_0: entered allmulticast mode [ 728.894298][T12083] bridge_slave_0: entered promiscuous mode [ 728.947334][T12083] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.947549][T12083] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.947722][T12083] bridge_slave_1: entered allmulticast mode [ 728.971667][T12083] bridge_slave_1: entered promiscuous mode [ 729.000372][ T5737] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 729.200891][ T5737] usb 5-1: Using ep0 maxpacket: 8 [ 729.688285][ T5737] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 729.688310][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.688320][ T5737] usb 5-1: Product: syz [ 729.688327][ T5737] usb 5-1: Manufacturer: syz [ 729.688334][ T5737] usb 5-1: SerialNumber: syz [ 730.135340][ T5737] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 730.135450][ T5737] mxuport 5-1:254.0: probe with driver mxuport failed with error -5 [ 730.338877][T12188] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2106'. [ 730.527559][T12083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.646798][T11161] usb 5-1: USB disconnect, device number 42 [ 730.811268][T12083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.813943][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2 [ 731.368377][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2114'. [ 731.541045][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2114'. [ 731.544077][T12083] team0: Port device team_slave_0 added [ 731.680963][T12233] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2117'. [ 731.857765][T12083] team0: Port device team_slave_1 added [ 732.016247][T12083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.016259][T12083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.016273][T12083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.490945][T12248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.995999][T12086] Bluetooth: hci5: command 0x0406 tx timeout [ 734.315864][ T3427] hsr_slave_0: left promiscuous mode [ 734.423542][ T3427] hsr_slave_1: left promiscuous mode [ 734.426526][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.426553][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.497457][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.497486][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.597780][ T3427] veth1_macvtap: left promiscuous mode [ 734.597878][ T3427] veth0_macvtap: left promiscuous mode [ 734.598107][ T3427] veth1_vlan: left promiscuous mode [ 734.598265][ T3427] veth0_vlan: left promiscuous mode [ 734.657240][T12280] loop5: detected capacity change from 0 to 14 [ 734.751737][T12280] Dev loop5: unable to read RDB block 14 [ 734.751788][T12280] loop5: unable to read partition table [ 734.751993][T12280] loop5: partition table beyond EOD, truncated [ 734.752010][T12280] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 736.461832][ T43] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 736.662584][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.662615][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.662649][ T43] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 736.662670][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.667977][ T43] usb 5-1: config 0 descriptor?? [ 736.806877][T12299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2122'. [ 737.074486][ T43] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 737.076689][ T43] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 737.250491][T11161] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 737.391009][ T3427] team0 (unregistering): Port device team_slave_1 removed [ 737.422815][T11161] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 737.422899][T11161] usb 1-1: config 0 has no interface number 0 [ 737.423603][T11161] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 737.423630][T11161] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 737.423665][T11161] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 737.423676][T11161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.428430][T11161] usb 1-1: config 0 descriptor?? [ 737.450358][T12305] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 737.513841][T11161] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 737.549846][ T3427] team0 (unregistering): Port device team_slave_0 removed [ 737.717329][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 737.717488][T11161] usb 1-1: USB disconnect, device number 54 [ 737.984440][T12083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.984457][T12083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.984480][T12083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.365037][ T43] cp2112 0003:10C4:EA90.000A: error requesting version [ 738.453408][ T43] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -71 [ 738.456892][ T43] usb 5-1: USB disconnect, device number 43 [ 738.575534][T12083] hsr_slave_0: entered promiscuous mode [ 738.576720][T12083] hsr_slave_1: entered promiscuous mode [ 740.134134][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 740.364171][T12328] binder_alloc: 12327: binder_alloc_buf, no vma [ 740.647684][T12334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2130'. [ 742.487585][T12346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2132'. [ 742.868028][ T5265] 8021q: adding VLAN 0 to HW filter on device eth3 [ 743.721638][T12083] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 743.817992][T12083] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 743.822651][T12083] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 743.835951][ T5698] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 743.974447][T12373] binder: 12371:12373 ioctl c0306201 200000000040 returned -22 [ 743.988076][T12083] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 743.989690][T12083] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 744.006605][ T5698] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 744.006629][ T5698] usb 4-1: config 0 has no interface number 0 [ 744.006673][ T5698] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 744.006696][ T5698] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 744.006733][ T5698] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 744.006755][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.068335][ T5698] usb 4-1: config 0 descriptor?? [ 744.073387][T12365] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 744.107125][ T5698] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 744.140613][T12083] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 744.195516][T12083] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 744.290332][ T5842] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 744.299192][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 744.299243][ T5698] usb 4-1: USB disconnect, device number 55 [ 744.329374][T12083] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 744.450276][ T5842] usb 5-1: Using ep0 maxpacket: 16 [ 744.452740][ T5842] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.452761][ T5842] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 744.455147][ T5842] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 744.455172][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.455188][ T5842] usb 5-1: Product: syz [ 744.455200][ T5842] usb 5-1: Manufacturer: syz [ 744.455212][ T5842] usb 5-1: SerialNumber: syz [ 744.469115][ T5265] 8021q: adding VLAN 0 to HW filter on device eth4 [ 744.539932][ T5842] usb 5-1: 0:2 : does not exist [ 744.539998][ T5842] usb 5-1: unit 2 not found! [ 744.803065][T12083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.836012][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'. [ 744.836034][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'. [ 744.949316][T12083] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.976732][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.976808][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.808028][T12391] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 745.808090][T12391] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 746.127875][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.128019][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.254413][ T5738] usb 5-1: USB disconnect, device number 44 [ 746.684735][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.684800][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.829452][T12406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2141'. [ 746.829474][T12406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2141'. [ 748.307121][T12083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.980735][ T5842] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 751.172751][ T5842] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 751.172796][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 751.172821][ T5842] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 751.172859][ T5842] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 751.172879][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.214939][T11161] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 751.256549][ T5842] usb 1-1: config 0 descriptor?? [ 751.271515][T12433] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 751.273614][T12083] veth0_vlan: entered promiscuous mode [ 751.287557][T12083] veth1_vlan: entered promiscuous mode [ 751.955217][T11161] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 751.955256][T11161] usb 5-1: config 0 has no interface number 0 [ 751.955370][T11161] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 751.955396][T11161] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 751.955435][T11161] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 751.955507][T11161] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.085273][T11161] usb 5-1: config 0 descriptor?? [ 752.095852][T12443] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 752.227291][ T5842] dragonrise 0003:0079:0011.000B: unknown main item tag 0x3 [ 752.227315][ T5842] dragonrise 0003:0079:0011.000B: unexpected long global item [ 752.227964][ T5842] dragonrise 0003:0079:0011.000B: parse failed [ 752.228003][ T5842] dragonrise 0003:0079:0011.000B: probe with driver dragonrise failed with error -22 [ 752.284169][T11161] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 752.299509][T12083] veth0_macvtap: entered promiscuous mode [ 752.331155][T12083] veth1_macvtap: entered promiscuous mode [ 752.354958][T12443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.355298][T12443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.371673][T12443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.372207][T12443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.385124][ T5737] usb 1-1: USB disconnect, device number 55 [ 752.390509][ T9970] usb 5-1: USB disconnect, device number 45 [ 752.477996][T12083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.509165][T12083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.569796][ T175] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.579720][ T175] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.590083][ T175] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.594134][ T175] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.668760][ T43] ================================================================== [ 752.668771][ T43] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 752.668792][ T43] Read of size 8 at addr ffffc9000fe25008 by task kworker/1:1/43 [ 752.668801][ T43] [ 752.668810][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 752.668824][ T43] Tainted: [L]=SOFTLOCKUP [ 752.668827][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 752.668834][ T43] Workqueue: usb_hub_wq hub_event [ 752.668850][ T43] Call Trace: [ 752.668855][ T43] [ 752.668860][ T43] dump_stack_lvl+0xe8/0x150 [ 752.668872][ T43] print_address_description+0x55/0x1e0 [ 752.668883][ T43] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 752.668895][ T43] print_report+0x58/0x70 [ 752.668904][ T43] kasan_report+0x117/0x150 [ 752.668916][ T43] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 752.668930][ T43] __list_del_entry_valid_or_report+0xb5/0x190 [ 752.668949][ T43] kcov_remote_start+0x2af/0x710 [ 752.668963][ T43] hub_event+0x150/0x4f60 [ 752.668978][ T43] ? __lock_acquire+0x6b5/0x2cf0 [ 752.668990][ T43] ? look_up_lock_class+0x57/0x110 [ 752.669005][ T43] ? __lock_acquire+0x6b5/0x2cf0 [ 752.669020][ T43] ? lock_acquire+0x106/0x350 [ 752.669031][ T43] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 752.669042][ T43] ? __pfx_hub_event+0x10/0x10 [ 752.669054][ T43] ? process_scheduled_works+0xa70/0x1860 [ 752.669066][ T43] ? process_scheduled_works+0xa70/0x1860 [ 752.669075][ T43] ? process_scheduled_works+0xa70/0x1860 [ 752.669085][ T43] process_scheduled_works+0xb5d/0x1860 [ 752.669101][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 752.669112][ T43] ? assign_work+0x3d5/0x5e0 [ 752.669122][ T43] worker_thread+0xa53/0xfc0 [ 752.669137][ T43] kthread+0x388/0x470 [ 752.669149][ T43] ? __pfx_worker_thread+0x10/0x10 [ 752.669158][ T43] ? __pfx_kthread+0x10/0x10 [ 752.669170][ T43] ret_from_fork+0x514/0xb70 [ 752.669181][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 752.669190][ T43] ? __switch_to+0xc79/0x1410 [ 752.669204][ T43] ? __pfx_kthread+0x10/0x10 [ 752.669215][ T43] ret_from_fork_asm+0x1a/0x30 [ 752.669230][ T43] [ 752.669233][ T43] [ 752.669236][ T43] The buggy address belongs to a vmalloc virtual mapping [ 752.669246][ T43] Memory state around the buggy address: [ 752.669251][ T43] ffffc9000fe24f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 752.669258][ T43] ffffc9000fe24f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 752.669264][ T43] >ffffc9000fe25000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 752.669268][ T43] ^ [ 752.669273][ T43] ffffc9000fe25080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 752.669279][ T43] ffffc9000fe25100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 752.669284][ T43] ================================================================== [ 752.669297][ T43] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 752.669305][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 752.669318][ T43] Tainted: [L]=SOFTLOCKUP [ 752.669321][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 752.669327][ T43] Workqueue: usb_hub_wq hub_event [ 752.669340][ T43] Call Trace: [ 752.669344][ T43] [ 752.669348][ T43] vpanic+0x56c/0xa60 [ 752.669359][ T43] ? __pfx_vpanic+0x10/0x10 [ 752.669372][ T43] panic+0xc5/0xd0 [ 752.669382][ T43] ? __pfx_panic+0x10/0x10 [ 752.669393][ T43] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 752.669405][ T43] ? rcu_is_watching+0x15/0xb0 [ 752.669420][ T43] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 752.669432][ T43] check_panic_on_warn+0x89/0xb0 [ 752.669446][ T43] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 752.669458][ T43] end_report+0x73/0x170 [ 752.669469][ T43] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 752.669480][ T43] kasan_report+0x128/0x150 [ 752.669491][ T43] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 752.669504][ T43] __list_del_entry_valid_or_report+0xb5/0x190 [ 752.669517][ T43] kcov_remote_start+0x2af/0x710 [ 752.669527][ T43] hub_event+0x150/0x4f60 [ 752.669542][ T43] ? __lock_acquire+0x6b5/0x2cf0 [ 752.669553][ T43] ? look_up_lock_class+0x57/0x110 [ 752.669567][ T43] ? __lock_acquire+0x6b5/0x2cf0 [ 752.669581][ T43] ? lock_acquire+0x106/0x350 [ 752.669593][ T43] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 752.669603][ T43] ? __pfx_hub_event+0x10/0x10 [ 752.669615][ T43] ? process_scheduled_works+0xa70/0x1860 [ 752.669626][ T43] ? process_scheduled_works+0xa70/0x1860 [ 752.669635][ T43] ? process_scheduled_works+0xa70/0x1860 [ 752.669645][ T43] process_scheduled_works+0xb5d/0x1860 [ 752.669661][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 752.669671][ T43] ? assign_work+0x3d5/0x5e0 [ 752.669681][ T43] worker_thread+0xa53/0xfc0 [ 752.669696][ T43] kthread+0x388/0x470 [ 752.669707][ T43] ? __pfx_worker_thread+0x10/0x10 [ 752.669716][ T43] ? __pfx_kthread+0x10/0x10 [ 752.669727][ T43] ret_from_fork+0x514/0xb70 [ 752.669737][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 752.669747][ T43] ? __switch_to+0xc79/0x1410 [ 752.669760][ T43] ? __pfx_kthread+0x10/0x10 [ 752.669771][ T43] ret_from_fork_asm+0x1a/0x30 [ 752.669785][ T43] [ 752.670082][ T43] Kernel Offset: disabled