last executing test programs: 3m4.805285035s ago: executing program 2 (id=3004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udplite6\x00') lseek(r6, 0x2000, 0x0) write$binfmt_elf64(r5, &(0x7f0000000480)=ANY=[], 0x178) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x400) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r4}, 0x8) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1c00e5ff03000080410000000000000001000000aa806044f6b1d46c15ef82484ec7b98b5a3ad416f742979db30c8af5d7ecee89125b", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000500"/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000005000000008000005c00000000000000", @ANYRES32, @ANYBLOB="0000d0452e"], 0x50) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 3m4.660094792s ago: executing program 2 (id=3005): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x81, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 3m4.616512961s ago: executing program 2 (id=3006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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"/1504, 0x5e0}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000001640)="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", 0x218}, {&(0x7f0000000cc0)="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", 0x13e}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f", 0x27}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 3m4.425653224s ago: executing program 2 (id=3007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udplite6\x00') lseek(r6, 0x2000, 0x0) write$binfmt_elf64(r5, &(0x7f0000000480)=ANY=[], 0x178) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x400) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r4}, 0x8) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1c00e5ff03000080410000000000000001000000aa806044f6b1d46c15ef82484ec7b98b5a3ad416f742979db30c8af5d7ecee89125b", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000500"/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000005000000008000005c00000000000000", @ANYRES32, @ANYBLOB="0000d0452e"], 0x50) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 3m4.209911738s ago: executing program 2 (id=3009): openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) unshare(0x20400) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 3m3.58363166s ago: executing program 2 (id=3011): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x48880) 2m46.982008993s ago: executing program 32 (id=3011): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x48880) 46.051397645s ago: executing program 3 (id=3360): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000340)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x7}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x4b}, {&(0x7f0000000640)="69710c3e7b90", 0x6}], 0x2, 0x0, 0x0, 0xc0090}, 0x4000000) 44.629072535s ago: executing program 3 (id=3366): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) bind$inet6(r1, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @rand_addr, 0xfffffffc}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x300}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8001, 0x0, 0x0, 0xbec}, {}, {}, {}, {0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x1000}, {}, {0x0, 0x0, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x0, 0x4000000}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2dbc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc623, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000a00)={0x2c, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001780)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000300)="f3a17d269b44530bbe1e61afd905360cf657692c429c5150fcebe2c17d22e34c30dcb0362b930843ca0393ddd520e98d2a51c705f2c5a0b0c282d095313ab77c9685f49d7c105e617d26deefb728a21b8bffb5235313dc6f2206c821d9529ddce2e5253bd5ddf0a735a59935176a94f421889ae7abec800d696346da58fd29789f8caae3edf9843eba3aa36b0757d161e727d99e4f20ce697c24959453f0c7bb5f80d01380e5c401a47ad644e18ddd1ac9a6fa84c8af05b8a620c7add011738f22c286cc51c8b0c7a49e86", 0xcb}, {&(0x7f0000000100)="b507c321f400db7fa4022c", 0xb}, {&(0x7f0000000140)="eb", 0x1}, {&(0x7f0000000240)="2a77e5be0de19cbf39f7589c0994acfbf6a8ccc9d2737ee531a01e0ed7d6e90c542bc40c4a77e6cabffea611fcb43d94dfa5e33cdb3d11395dd4dd0f329a0e8124329608e28318048a410761c0e77faad2eda6b8b2c8e9f6912cc99cf247ba06dfc3b1e3ef9472cfe097b747da01d0672b4dcc5cb8", 0x75}, {0x0}], 0x5, &(0x7f00000013c0)=[@rthdr_2292={{0xa8, 0x29, 0x39, {0x3a, 0x12, 0x2, 0x6, 0x0, [@dev={0xfe, 0x80, '\x00', 0xc}, @local, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @loopback]}}}, @hopopts={{0x20, 0x29, 0x36, {0x2f, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8}]}}}], 0xc8}}, {{&(0x7f00000004c0)={0xa, 0x4e20, 0x7, @remote, 0xb}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000500)="d1323af9753900df329dbcfb05cca96a06f7bb0fa008987deb0c6503a8c5ae1680d31d2663083ef5642527d619b4fb17fd01ee1235e449c931407bc1354cfb44", 0x40}, {&(0x7f00000014c0)="8cf337cb366ee56a1a65a70541a7afc5164e0bb418fe", 0x16}, {&(0x7f0000001500)="4d0044de9aaef402c5c310b2040df7b85e217f1f2e029f14c4ccc408a97367a10bb5d04744f9685883e0573a17e6937beed25b32a0d460215b2f46da", 0x3c}, {&(0x7f0000001540)="e36aaa7e3f2d22fca184355b8c290af9fdf175e2aa9c97d9b306449d520c7aa755d52177a90a4d2359a040154b851d6b18fe07fc8c0be951e91b0542a8710bb308b54df11441d5190971fafe9e3a6351671381bb0f77dc9db954f793af13031628d9bd4aeddc52251c29e66aae5e8c7a438f9914f3d566852ac0319881af451ea2c0", 0x82}, {&(0x7f0000001600)="404ad948ecbbd13e776fd41509606bcede2da42f99f22a007b3176f087e158999e0b8dfa", 0x24}, {&(0x7f0000001640)="6abe311cfa663878043516d423b36962431c2cf24cb624e0fd9a43b859c249015de4c79a42ba3332e5fda986cbecd1173b7610576f9e29e17ec53fff545259ac69ebe54ea5b24412a424532c0266040589d120c91794f35d9c39019448a10602348010b24acd613cab09ca14435b8a141e3e0cfa8d6fc0567a61e371da846e70eb1e69325066fe04c1385c9af7ba83eecf9c64b9ed7745c5106f0b6234ff19ad0bffc26d1abcf2e7", 0xa8}], 0x6}}], 0x2, 0x20000000) read$FUSE(0xffffffffffffffff, &(0x7f0000002cc0)={0x2020}, 0x2020) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x6, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0x4, 0xd, 0x54, 0x9}, {0x9, 0xd2, 0x1, 0x7ff}, {0xd, 0x6, 0x5, 0x10}, {0x3, 0x1, 0x37, 0x9}, {0x2, 0x3, 0x8f, 0x10000000}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 41.225584412s ago: executing program 3 (id=3371): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="7801000019000100000009000000df25fe8000000000000000000000000000aaac1414bb0000000000000000000000000000ffff000000000a0020000000", @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffeffffff0000000000000003000000000c0015005b07350006"], 0x178}}, 0x4004) (fail_nth: 3) 41.00654832s ago: executing program 3 (id=3372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0x7f, 0x4) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000600)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x5, 0x5, 0x2, 0x3}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write$UHID_INPUT(r6, &(0x7f0000000f40)={0x8, {"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", 0x1000}}, 0x1006) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x540) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) geteuid() r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x17, 0xc3, 0xfe, 0x20, 0x12d1, 0x3a79, 0x65e4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x20, 0x4, 0x50, 0x0, [{{0x9, 0x4, 0xf5, 0x7, 0x0, 0xff, 0x6, 0x17, 0x2}}]}}]}}, 0x0) syz_usb_control_io$uac1(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r10, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r10, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="00090022005006c45abc053f4a1141ba898c04fdc0829c66b8fdbc74b7527ac1e71b693c7e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r9, r8], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, r8, r5, 0x0, 0x0, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x440, 0x330, 0x0, 0x298, 0x0, 0x298, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x32, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@empty, @local, 0x0, 0xff, 'veth0_to_batadv\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "ec4a", 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x2, 0x7, 0x6, 0x2], 0x5, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x14}, @multicast1, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x57}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r11}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24000000) sendmsg$NFT_BATCH(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000680), 0xc, 0x2443) 38.821674388s ago: executing program 3 (id=3379): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000840)=""/4085, 0xff5}, {0x0}, {&(0x7f0000000780)=""/158, 0x9e}, {&(0x7f0000000140)=""/153, 0x99}, {&(0x7f0000001880)=""/134, 0x86}, {&(0x7f0000001940)=""/215, 0xd7}, {&(0x7f0000001b40)=""/12, 0xc}], 0x7}, 0x20) 6.942819617s ago: executing program 4 (id=3462): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=0x0], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x14) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20008000) r0 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) add_key(&(0x7f0000000300)='blacklist\x00', 0x0, &(0x7f0000000140)="1081", 0x2, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0004040000000000fc00000000000000100000b0423b8e55623122"], 0x28) r3 = socket$alg(0x26, 0x5, 0x0) sendmmsg(r3, &(0x7f0000000b80), 0x0, 0x4004041) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="c8000000000000001701000002000000b2000000408a1902dcbd1e20418e8396517a752b2af23b2e6c5d828ae4c439d54935f9df1dec8ee570cf7e166a21f49702ccb328527267b0901ac0c69e5f34cebc24d3e0ed9c6bed159433051a705720f270a44e50e6b1f5b22c53a47904384cbcaaa96a0d16c664999f1bdd6306257abb804ba9fd151490d8e60848c7baa07985ceb6e832ae1811cac0cae0aeef9a6d75a26f370b93a4f08393eb19238623ae8850d606c79e808f80e381e46a67f3403390168dc3c7f838"], 0xc8}], 0x1, 0x40800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f00)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000380)="01", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)="b1"}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e23, 0x1, @local, 0x8}, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)="73dfbfb978305d68b1a3ea41e1434b8f41c901b2b87d87c29d2ad7597d8085f3a2f330d469c2b0ae17c6e025a36bad11307fd08936edc971da21d07894c7dfd18bbaf23e1b0489f5824ca02684fa3439f7953019e4f82f4125d87492cdf3c88aa27ff2b96040303b0b1ea502be77288d18c54741aa46d8d919782c5cbef401c1736c2ea4539170e143e021db229bbcf878be985c48d7d1aff79db1590bd2059b918249f56ced3453d52b69584016505d28b6e764e443ea1f7bebd524bbcd67626c2bbc2e1b9ee4ab76b1fdbb"}, {&(0x7f0000000640)="f93a011e00d29fb14c3abe55c83d23e9"}, {&(0x7f0000000840)="2e9f7a667d4db0f03b25354cf1bdcfd7746584f3160a98d4c86471006563052316c8d3370fc687e954d5e3a063cb794636123fb8dc6bb6bbdc4362a39fdccb8ccb57609ea93ec48869c072a580e8ff81a536a694df2eb28360239e5b8f9dd6c6b166af77308d2624bbf3d0f195105991953c3493885760547d052f7c9910089c9f78fc52bcab62cd61af1242a7e55344222aa94169e3e9862d9bb44542e341695236b8abe0cdbaa246f9814bd78f3c4835977cb58e33ad68ab9dad51d740e1788a39003b704a82afbb899dc3b6d194f2795fe3241534c76e14e33a8dab8e0a4c0362f906a389fcc7c75a7a76705795ad3b85"}, {&(0x7f0000000e00)="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"}], 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="00000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYBLOB="00000000003d79af5c0bc3a8e03b095600000000000000290000003e000000000800000000000000000000000000002900000043000000010100000000000000000000000000002900000034"]}}], 0x2, 0x20008894) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.696579911s ago: executing program 1 (id=3464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000feffffff0000000000000000850000002a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000040300000000000000000003000000000300000002020000000000000000000000000001ce90ea1692296905000000082b3302000000010000000000001105080000"], 0x0, 0x53}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x40000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 4.839847116s ago: executing program 4 (id=3465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000feffffff0000000000000000850000002a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000040300000000000000000003000000000300000002020000000000000000000000000001ce90ea1692296905000000082b3302000000010000000000001105080000"], 0x0, 0x53}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x40000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 4.218470333s ago: executing program 0 (id=3467): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000004700)=""/4137, 0x1029}, {&(0x7f0000000780)=""/158, 0x9e}, {&(0x7f0000000140)=""/153, 0x99}, {&(0x7f0000001880)=""/134, 0x86}, {&(0x7f0000001b40)=""/12, 0xc}], 0x6}, 0x20) 4.186146666s ago: executing program 1 (id=3468): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, '\x00', @raw_data=[0x4, 0x0, 0x8, 0x400, 0xe, 0x10001, 0x52, 0x1, 0x10001, 0x2, 0xffff, 0x10000, 0xffffffff, 0x466, 0x6, 0x1, 0x8, 0x1ff, 0x2, 0x8, 0x8, 0x200, 0x1, 0xc, 0xdc45, 0x8, 0x967a, 0x101, 0x35, 0x41, 0x0, 0x4800]}) 4.116968366s ago: executing program 1 (id=3469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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"/1504, 0x5e0}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000001640)="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", 0x10c}, {&(0x7f0000000cc0)="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", 0x13e}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bb", 0x29}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 4.014444865s ago: executing program 4 (id=3471): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) syz_clone(0x8c8000, &(0x7f0000000940)="04b11b1db9283aaa6c35066336e11c260b8b7f965bb3fcd966383e57e4d42ed6b0d0fe549f835e219433d825c5d52e30d07b0ae310e8b3ea147e67943a743a301a0a30d396c27d227babdc6c5ffa2c31faadfd0601f399ddb83e25274f677dbc3d748162d58feaae20355b5be1df4e9481009b27a15ac8be7e514a30aa37b5c33e0e19103a65cb533a0d13d37a4bda9e46a8f58296f8b5c43ed76d0d295becfb064b5f03da81834267e9d152a0f00ccf58025c4a2bbe3f7bd630ae846c09d20706c6c109a63deb5a4489", 0xca, &(0x7f0000000300), &(0x7f0000000400), &(0x7f00000012c0)="b95789c4b1f2ce3bdc22c21234fc909a906749570af79ed5cea213b0f1ecd71f2057bb2b57940404e32fab832b9f088523e055d2cfcb8a7faddb3c5405c79ab17f76fff3aa7f5fa8a1494fe4e53d5722f3724082b4c70d66039f40ac7c02a405b169ee22536b3c0e7cbb6dbb9fc597d7a37b3ad54f999ee6838056f15ebb48c8515879824471c4bae70c9643eae111822901f7174d7b0bee4f6575c0a4489f8e7508ea37bed47f71aa38aa953044c30d80ab7ae123e47f799ae8a54af666fa9b873db3754caa9a2af9ce02e61606353a4ac0a44dda47b9e7894f93e6b63433065d35bbc4f9c726461a36ec513ddea6a464db7ea4f26b45bf83a69c3b93f03c167a7d19c81b2afca99a5ecd0dba6d935436fe52f61042c26639a1eb84ae97e803bec7e0e7ba43aaf5227227069c8d1747dda7e1aec395508441bf1bdb5b728f909c5eccd4d8673f5ebf910508d853482b0e2b37fbc592b1802e7427fe2dfc5805e6986e999fda10e950b6d2d08d2fb79949d7a870a7ba42bed3b6ba608b8a81369840ee1e248a5f7921826cd042734012cc0374963b6dab6e261c13fa79cbfe378db5808e720178e45587a3cda57976763f46073ed64232a105de10cf5a0673f4ddfcb65df10b97698e194f39856ba12ab6916d860b0f27bca6a5ab6e4610326635f7beab4fcee197a0c774ba351eb2f044d2b61e9989b1d5674f9247321d2c3b266476a5464c33043dd4f1cce5cba6ff548997290281f64fe4a871a1880647329adef3d58c09f887a4100ef9ad0984e40a0927e4c23bc7ec5c0b447aa78d99e7a0e0032cda82d4cc5b716ea04765449796621fd57a16539aa24956d1a43f72028297efe8ee93ce8da3f1865bfbbd96e86d30f078903eb0df8c6466c3bc654fd8f00503ff04acbf26ed7e3ae5ff930fa517ed12bee9ae090c555dd77198dd24bf88ccf61e169b154cb87601f838d1eef1aacd3735557f677b84963420cf497e27df2d685aa91350af5c7299b095f2dd166f18d105f790f21beae40aaef5cd33f3832f14b2f8d0ca0fc93ce8955057925c682d0e0b265abd30fc16881903d5ac27f82e0975f219fa5c0d11e5c38bf62aade6a0459989c5c6ceece31fe833e0672d3c08fee4d39dabef1ee68e87a7bd4191f33f2bce1d46f181d637f6c52ee10fe119c5cd20abe882e123485d81594d31fec21e85f69720425773f7ac0191837bbf14b02a3bff77bfedf86f57113e3893a901d58d002bb0fa072e8e7535f2e3c155b04e18aabc3a33d252b46a0351d4ac2c7fd1b3c794543100e6095996588e23ab03e3c1eb25290dc99d5a66b0c4e10832eac0c7bbb1c71b44c0df742ef590d7d48a1867d70f6669b8315666c15086e2c7ff879d1014ebd2236517d2253a162875575e36f5905609149e56b54d2136e000f6f7c5501fa33ff02bdc3762614e8f2011e9bb810c9e3f12b89fe32e92794beb6d006ce0b725ba003a1ee140c9feea07a99dfe37a5212f54e73c1ca453d50a1dbfaa8f0af3fb5a5295c955d498da237689b1ea7a9cfedd91494bf22ce3e0d153b3d0e467a95dbee931b58f909e8589586239c4cb43ca24802c64c492cc3783d049acd92dbcf5c7a3956a10df17866b2e87f4aa1a0923379e183d87223e77c7cc5ed732dae6832790de962f1290ebbb4d0d83fe8e4969218c7254aaa1fb9d25ba0d23b93b0278c3af13f42c0aef37e38bcadaa9b54f7f54be35473a6fec8c7944057a91f715bf46f61c981a23269f5fd3cd0287a2bdd412c0a29ffdd2b849bb40636a1c20a499635f7275c84d2b46f569ccec16dceb34f0f7672dd56f34504039ed491e11007419c4a9edc0b37710a12b18d65a15f408d41773d4ce7632a7155a207ba3f5c8983c1a39f2ea127287c88d4cd35c87dabd0a248e7e5ea52c2a368ba397bd11d55a2fdaa8d264f5018f08ca81bd45d680a4bacbfb16791b86c83270f8a7d24d91099910634b4cf8723365bfd84790adcb68e5e58a24f1b89c58175e6eb3c2c761fba40ed50f02b5044e59e1922cf7dec368644ad83b18885fc2e97d6b937995ae8bc194831f553b25775c3a6a385eb8b3c166bc1f6a056b4383e0e56057dad5664987834caa7c2d53aee129921d244d32499199aa869b6bf8d3ccdea581c91cf7eed4f8cafc365561dcf5bf232455424ab26301b9d8268d2f3379e02994a8c7a30679b1d7db5ccaff0b25ca5255202d776a2c4b1a10af103a5ad8a0b3b6e66f01c72b392e46f9098d5b1c6cb85671334cd1acdb71ee3f0b485287bf8512237b2b19ae3601c6e0c0f4bc4a48745e18c9b0156de8798b00f66f4c7b76cbee9efdfb3aa4f4eadd56421a70d0dc0df7df786fc15d804c80f0a0cd7d512469675284a826ba7aaedff88a92c0cfa00f582e5fc63e8dee59c83be596d5a10db17693a13c8152950068cbb70ee91a4bb7305ebd60d20cedf848b12273a848a5e644651bae7a65fb262f4a1df1aeb268d90b72e4f89ee79fc0d4cdbba51a7a3f01c5f70ad059d96f2fda992b57b321da61a30f1385187a464c749e31f2879602e2dc6057bb0d6177f6e5e216c413bf43bbd34af847f8c5aef9114b485679502a44e34d36ecbe6048e33533d5b0992ea5a33a58a3431487ced92b18b253489b80d6d57716ccb0311e50393c6a513ebb54ac9bee0eb01b111563d635151034f63891926f193dcad916d53a3f78061178944c25049205cf5117c9b95389e930cbf057b0eca710acdb967237936227960b9df7c6ef2c41b34a49f80d8525b4c84b7238cd6a04b9f51935c0bdbe3d759ea023caf74c1346f64d4dac79845180415913f38a7df0c6f9e36f3945402456d86820ed77f13084945ff01f18e8e676080d201b9cd2d3df9dacbdaec38ad109fefc0c6bf9a4ba7334a4b2aa4862f8ed40318d6ddb39bd9f46acfd65a2afc3a94fc1013a4195131921c981e1fb512699a5f8209b95a8b042ce7b1259753f9ef737a3e34769307f7f7d570bcf7ea12ba97c77d3266d574f92180c51ca0f81798e4808bfa42c17c1c830b1eaf677c76c9ecb1fe5e95462911529cce8f1c0a0352136fe488db2c0e7836a15f426844b79d2dfb22b4a339505593109805dc2c3e1e5069d8347c8e33879bd874c85b242dbb5af5590af1b421a46f0e94b0fd9cd79e2ff10c0d151961a1a26dd92c0c0b42d8af1146b1268f4474eeaeb372b03bc9ec2501d660ad302edb1247a30f02ae50da2a7fcd2883ffb9a573e0f0dcf18a27aa745a91d794afb99126d8b0686eaa920a7ab0bad82ff9ae03cc5caa41b76ff70e2078ce8bdcb989990ab34a44517c4236cf1f5a845a05d448d7f1df0b02b1842d54c0dd12b0d7aa14f2a6d3ce62630e4b97177a4a93f7401d959ed87e568aaf8dfca56d9773580dd680c5f59c669417400254bea9c0484d2ce29a7a7d0d98d8c7f5d0edab9334da98adbd8c5fa3d09f7ae7160432cdae8aca5e4b2f92a5a5afb1300845565a3d7d91ae1ffe3ac7675162980867459bedeb0e9aadcd886c21d941a7004012b9e2af23558064d2245efdeaed837a253416bd4e5f33cb3cd0038bb3e0285619116fbfa17a002b4f07e8ca6ce8d417516f67a13998cbbed67838c0ca3ad44f498776c3d4da188081a553e5742f3b8e1eae34fb58e2ba24cc444271ebe47cfd5a4cf13e0d78913771e9fc880b13b1b80723bbb5f93731a6eea863c1afbd512e31f37d1e1d9ed6f3c0899128e4be26d296efee15a3efce71cff71f83ae3b67ee29d4dfae7367e0b97cf476198391058c3b5b0f31f231409c4fb762debc3c227862c32189ef498ab89a321002731777da97061e48f7805ed313b39dc002e5255a8ac5d5a682afdef8177cb8504788ad4abc2bdf369f22733caf32def045f31402ba07080a6e09b95d34f4d2ebb5f3956ed568e303f1c0240f80dc37a1014ac21c5541328ee3efae8633718790b9af02dd094261c542b21206077b36072ac6b11893df92ff4d120d9419faa5f41bcf93df40fda92b32d37ed97e2e8cf205653b3893381fe69dc6cbe630c7872b110d3b3e13e981661cbc2c03e7ada3d8bd1cfa2255375286d840da40b98cf93dec2f8a79a231bd2281fe8fa3f55ab13b9d4f4ffe6746a97f4c7ca026e07a8919fe5ee6300e2382e36ac0022260ecfb843a0c5f9158f4e4983ca58b94fdcc09999dcb96a6d268977a61e11895cb5bc64d5733f49a9b7ea0234b9e642d4576c1e9672a5f6fee7205e34c11784d4e922c365cece644be0439a5b755180f93335a2f029aa1cdc2f25434fd0884265acdcd9ad196e130f21a337ba1af4c83a3516ba298275ef4da03dc0ced2f1f312bd92148c0c1f4693") r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0xfffffff7, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c00028008000400888c0000"], 0x3c}}, 0x20048040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000a40)={0x6c, 0x0, 0x400, 0x70bd2e, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4040808) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRESDEC=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x1}, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1e0, 0x10}}, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @random="c2066a9d031a"}, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x100}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x6f}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x1}}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r7, &(0x7f0000000180)='1\x00', 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000600)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)="800041020eaaa200", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x200c0d0) 3.931022592s ago: executing program 1 (id=3473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udplite6\x00') lseek(r6, 0x2000, 0x0) write$binfmt_elf64(r5, &(0x7f0000000480)=ANY=[], 0x178) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x400) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r4}, 0x8) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1c00e5ff03000080410000000000000001000000aa806044f6b1d46c15ef82484ec7b98b5a3ad416f742979db30c8af5d7ecee89125b", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000500"/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000005000000008000005c00000000000000", @ANYRES32, @ANYBLOB], 0x50) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 3.919667855s ago: executing program 0 (id=3474): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000300"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xffffffffffffffa7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x50) 3.779707637s ago: executing program 0 (id=3475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = gettid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDGETKEYCODE(r1, 0x4b4c, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r0, 0x0, &(0x7f0000000080)={0x40, 0x0, 0x61}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000100)={0x28, 0x1, 0x0, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) read(r4, &(0x7f0000000540)=""/4096, 0x1000) io_setup(0x9, &(0x7f0000000340)=0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000d0003006c6973743a73657400000000050001000700000005000500020000000900020073797a300000000005000400000000000c000780080006"], 0x54}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={'dvmrp1\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@allocspi={0x18c, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x1}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@lastused={0xc, 0xf, 0x10000}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in=@remote}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="0240334007000000186a00000903"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r5, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r12, 0x0}]) r13 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000002620"], 0x0) syz_usb_control_io$hid(r13, 0x0, 0x0) syz_usb_control_io$uac1(r13, 0x0, 0x0) 2.899310904s ago: executing program 1 (id=3476): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 2.833920961s ago: executing program 5 (id=3477): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_BUFINFO(0xffffffffffffffff, 0xc02c640e, &(0x7f0000000080)={0xf44e, 0x9, 0x7, 0x0, 0xfff, 0x8, 0xfffffff9}) 2.684053576s ago: executing program 5 (id=3478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003080)=ANY=[@ANYBLOB="280000000706010800000000000000000100000005000100060000000900020073797a31"], 0x28}}, 0x40000) read(r0, &(0x7f00000000c0)=""/81, 0x51) (fail_nth: 3) 2.674673276s ago: executing program 5 (id=3479): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) fcntl$setstatus(r0, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 2.611468646s ago: executing program 5 (id=3480): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d"], 0xe0}], 0x1}, 0x40040) 2.401666714s ago: executing program 5 (id=3481): r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) bind$inet6(r1, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @rand_addr, 0xfffffffc}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x300}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8001, 0x0, 0x0, 0xbec}, {}, {}, {}, {0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x1000}, {}, {0x0, 0x0, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x0, 0x4000000}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2dbc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc623, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000a00)={0x2c, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001780)=[{{&(0x7f00000004c0)={0xa, 0x4e20, 0x7, @remote, 0xb}, 0x1c, &(0x7f0000001700)=[{0x0}, {&(0x7f00000014c0)="8cf337cb366ee56a1a65a70541a7afc5164e0bb418fe", 0x16}, {&(0x7f0000001500)="4d0044de9aaef402c5c310b2040df7b85e217f1f2e029f14c4ccc408a97367a10bb5d04744f9685883e0573a17", 0x2d}, {0x0}, {&(0x7f0000001600)="404ad948ecbbd13e776fd41509606bcede2da42f99f22a007b3176", 0x1b}, {&(0x7f0000001640)="6abe311cfa663878043516d423b36962431c2cf24cb624e0fd9a43b859c249015de4c79a42ba3332e5fda986cbecd1173b7610576f9e29e17ec53fff545259ac69ebe54ea5b24412a424532c0266040589d120c91794f35d9c39019448a10602348010b24acd613cab09ca14435b8a141e3e0cfa8d6fc0567a61e371da846e70eb1e69325066fe04c1385c9af7ba83eecf9c64b9ed7745c5106f0b6234ff19ad0bffc26d1abcf2e7", 0xa8}], 0x6}}], 0x1, 0x20000000) read$FUSE(0xffffffffffffffff, &(0x7f0000002cc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r6, 0x8, &(0x7f0000001940)=0xee3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x6, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0x4, 0xd, 0x54, 0x9}, {0x9, 0xd2, 0x1, 0x7ff}, {0xd, 0x6, 0x5, 0x10}, {0x3, 0x1, 0x37, 0x9}, {0x2, 0x3, 0x8f, 0x10000000}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 716.668263ms ago: executing program 4 (id=3482): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$netlink(r0, &(0x7f0000003e80)={0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x20044081}, 0x4000050) 479.997768ms ago: executing program 4 (id=3483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x38, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 366.843963ms ago: executing program 4 (id=3484): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7090000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001300)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 360.890957ms ago: executing program 0 (id=3485): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=0x0], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x14) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20008000) r1 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x17, &(0x7f00000013c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x7, 0xfb, &(0x7f0000000980)=""/251, 0x41000, 0x5c, '\x00', 0x0, 0x19, r2, 0x8, &(0x7f0000000a80)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0x0, 0x5, 0x7}, 0x10, 0xaf4e, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r0, r2, r0, 0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff, r2, r0], 0x0, 0x10, 0x5}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0004040000000000fc00000000000000100000b0423b8e55623122"], 0x28) r4 = socket$alg(0x26, 0x5, 0x0) sendmmsg(r4, &(0x7f0000000b80), 0x0, 0x4004041) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="c8000000000000001701000002000000b2000000408a1902dcbd1e20418e8396517a752b2af23b2e6c5d828ae4c439d54935f9df1dec8ee570cf7e166a21f49702ccb328527267b0901ac0c69e5f34cebc24d3e0ed9c6bed159433051a705720f270a44e50e6b1f5b22c53a47904384cbcaaa96a0d16c664999f1bdd6306257abb804ba9fd151490d8e60848c7baa07985ceb6e832ae1811cac0cae0aeef9a6d75a26f370b93a4f08393eb19238623ae8850d606c79e808f80e381e46a67f3403390168dc3c7f838"], 0xc8}], 0x1, 0x40800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000f00)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000380)="01", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)="b1"}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e23, 0x1, @local, 0x8}, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)="73dfbfb978305d68b1a3ea41e1434b8f41c901b2b87d87c29d2ad7597d8085f3a2f330d469c2b0ae17c6e025a36bad11307fd08936edc971da21d07894c7dfd18bbaf23e1b0489f5824ca02684fa3439f7953019e4f82f4125d87492cdf3c88aa27ff2b96040303b0b1ea502be77288d18c54741aa46d8d919782c5cbef401c1736c2ea4539170e143e021db229bbcf878be985c48d7d1aff79db1590bd2059b918249f56ced3453d52b69584016505d28b6e764e443ea1f7bebd524bbcd67626c2bbc2e1b9ee4ab76b1fdbb"}, {&(0x7f0000000640)="f93a011e00d29fb14c3abe55c83d23e9"}, {&(0x7f0000000840)="2e9f7a667d4db0f03b25354cf1bdcfd7746584f3160a98d4c86471006563052316c8d3370fc687e954d5e3a063cb794636123fb8dc6bb6bbdc4362a39fdccb8ccb57609ea93ec48869c072a580e8ff81a536a694df2eb28360239e5b8f9dd6c6b166af77308d2624bbf3d0f195105991953c3493885760547d052f7c9910089c9f78fc52bcab62cd61af1242a7e55344222aa94169e3e9862d9bb44542e341695236b8abe0cdbaa246f9814bd78f3c4835977cb58e33ad68ab9dad51d740e1788a39003b704a82afbb899dc3b6d194f2795fe3241534c76e14e33a8dab8e0a4c0362f906a389fcc7c75a7a76705795ad3b85"}, {&(0x7f0000000e00)="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"}], 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="00000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYBLOB="00000000003d79af5c0bc3a8e03b095600000000000000290000003e000000000800000000000000000000000000002900000043000000010100000000000000000000000000002900000034"]}}], 0x2, 0x20008894) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 300.036801ms ago: executing program 1 (id=3486): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000340)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x7}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0090}, 0x4000000) 197.055704ms ago: executing program 3 (id=3380): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x1e8, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x6, 0x4, 0x1, [0xa82, 0xe94, 0x4, 0x0, 0x4, 0x9, 0x5, 0x1ff, 0x0, 0x2, 0x8, 0x4, 0x3, 0x7, 0x80, 0x40], 0x6}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0xd, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x1}, 0x28) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0xf}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x101e5}]}, 0x38}}, 0x0) shutdown(r0, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x10000, 0x1be, 0x85, 0xfffffbc5, 0x0, [{0x6, 0x4, 0x9, '\x00', 0x14}, {0x7, 0x8, 0x6f, '\x00', 0x3}, {0x0, 0x41, 0x5, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x9}, {0x5, 0x50, 0x4, '\x00', 0x49}, {0x82, 0x0, 0x2, '\x00', 0x7}, {0x9, 0xf4, 0x1, '\x00', 0xff}, {0xa, 0x47, 0xb, '\x00', 0x45}, {0x7, 0xd, 0xfe, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x5}, {0x38, 0x11, 0xfe}, {0x4, 0x6, 0x1}, {0x1, 0x86, 0x10, '\x00', 0x5}, {0x5, 0x4f, 0xff, '\x00', 0x9}, {0x4, 0x4, 0x1, '\x00', 0x9}, {0x0, 0x2, 0xf2, '\x00', 0x7f}, {0xa, 0x7, 0xd1, '\x00', 0x99}, {0xd, 0x1, 0x2, '\x00', 0xff}, {0xa, 0x9e, 0xc0, '\x00', 0x2}, {0x2, 0x3f, 0xb}, {0x6, 0x21, 0x23, '\x00', 0x1}, {0x5, 0x0, 0xff, '\x00', 0xf7}, {0x93, 0x1, 0x4, '\x00', 0xe2}, {0x3, 0x4, 0xa, '\x00', 0x54}]}}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0xd3, 0x0, 0x3, 0x4, 0xbb, 0x6d, 0xc0, 0x6d, 0x7, 0x61, 0xb, 0x95, 0xd}}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)=ANY=[], 0x98) 151.44659ms ago: executing program 0 (id=3487): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, 0x0, 0x20) 63.181121ms ago: executing program 5 (id=3488): r0 = socket(0x10, 0x803, 0x6) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ac0)='l', 0x1}], 0x1}}], 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_usb_connect(0x5, 0xe4, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f102000050801060c8b631b7507250102020700090501", @ANYRESOCT], 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e0b06c9"], 0xe) 0s ago: executing program 0 (id=3489): r0 = epoll_create1(0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)="a931", &(0x7f0000000100)=@tcp6=r1, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4140aecd, &(0x7f0000000100)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r8}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000400)={0xa}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0x1, 0x0, 0x8001, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x3ff, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map=r3, r8, 0x20, 0x30, 0x0, @void, @void, @void, @value=r11, r10}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f0000000340), 0x11000) vmsplice(r14, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) kernel console output (not intermixed with test programs): t 0x1 has invalid maxpacket 0 [ 975.163902][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 975.163945][ T5872] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 975.163968][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.169626][ T5872] usb 4-1: config 0 descriptor?? [ 975.348558][T14351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.359655][ T994] logitech 0003:046D:C623.0049: unexpected long global item [ 975.360433][ T994] logitech 0003:046D:C623.0049: parse failed [ 975.360530][ T994] logitech 0003:046D:C623.0049: probe with driver logitech failed with error -22 [ 975.367853][T14351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.426730][ T5872] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 975.644304][ T6981] usb 4-1: USB disconnect, device number 48 [ 975.691987][ T6981] usblp0: removed [ 975.723873][ T5885] usb 1-1: USB disconnect, device number 55 [ 975.781758][ T3278] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.158061][T14351] team0: Port device team_slave_0 added [ 976.617345][ T5811] Bluetooth: hci0: command tx timeout [ 977.522975][ T3278] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.567855][T14482] FAULT_INJECTION: forcing a failure. [ 977.567855][T14482] name failslab, interval 1, probability 0, space 0, times 0 [ 977.567888][T14482] CPU: 0 UID: 0 PID: 14482 Comm: syz.0.2930 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 977.567911][T14482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 977.567922][T14482] Call Trace: [ 977.567931][T14482] [ 977.567940][T14482] dump_stack_lvl+0x189/0x250 [ 977.567970][T14482] ? __pfx____ratelimit+0x10/0x10 [ 977.567996][T14482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 977.568022][T14482] ? __pfx__printk+0x10/0x10 [ 977.568049][T14482] ? __pfx___might_resched+0x10/0x10 [ 977.568070][T14482] ? fs_reclaim_acquire+0x7d/0x100 [ 977.568099][T14482] should_fail_ex+0x46c/0x600 [ 977.568127][T14482] ? __alloc_skb+0x112/0x2d0 [ 977.568147][T14482] should_failslab+0xa8/0x100 [ 977.568173][T14482] ? __alloc_skb+0x112/0x2d0 [ 977.568189][T14482] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 977.568222][T14482] __alloc_skb+0x112/0x2d0 [ 977.568246][T14482] alloc_skb_with_frags+0xca/0x890 [ 977.568273][T14482] ? try_to_take_rt_mutex+0x840/0xb00 [ 977.568303][T14482] sock_alloc_send_pskb+0x859/0x990 [ 977.568347][T14482] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 977.568375][T14482] ? dev_get_by_index+0x22/0x2e0 [ 977.568405][T14482] ? dev_get_by_index+0x22/0x2e0 [ 977.568436][T14482] packet_sendmsg+0x33a0/0x5080 [ 977.568493][T14482] ? smack_socket_sendmsg+0x1fa/0x520 [ 977.568518][T14482] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 977.568545][T14482] ? __pfx_packet_sendmsg+0x10/0x10 [ 977.568572][T14482] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 977.568599][T14482] ? __lock_acquire+0xab9/0xd20 [ 977.568625][T14482] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 977.568648][T14482] ? __pfx_packet_sendmsg+0x10/0x10 [ 977.568668][T14482] __sock_sendmsg+0x21c/0x270 [ 977.568695][T14482] ____sys_sendmsg+0x508/0x820 [ 977.568724][T14482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 977.568755][T14482] ? import_iovec+0x74/0xa0 [ 977.568780][T14482] ___sys_sendmsg+0x21f/0x2a0 [ 977.568804][T14482] ? __pfx____sys_sendmsg+0x10/0x10 [ 977.568864][T14482] ? __fget_files+0x2a/0x420 [ 977.568887][T14482] ? __fget_files+0x3a6/0x420 [ 977.568922][T14482] __x64_sys_sendmsg+0x1a1/0x260 [ 977.568946][T14482] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 977.568979][T14482] ? __pfx_ksys_write+0x10/0x10 [ 977.569006][T14482] ? do_syscall_64+0xbe/0xfa0 [ 977.569034][T14482] do_syscall_64+0xfa/0xfa0 [ 977.569057][T14482] ? lockdep_hardirqs_on+0x9c/0x150 [ 977.569080][T14482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.569099][T14482] ? clear_bhb_loop+0x60/0xb0 [ 977.569121][T14482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.569139][T14482] RIP: 0033:0x7fc40ba4f749 [ 977.569154][T14482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.569168][T14482] RSP: 002b:00007fc409cb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 977.569189][T14482] RAX: ffffffffffffffda RBX: 00007fc40bca5fa0 RCX: 00007fc40ba4f749 [ 977.569203][T14482] RDX: 0000000000008800 RSI: 0000200000000580 RDI: 0000000000000003 [ 977.569215][T14482] RBP: 00007fc409cb6090 R08: 0000000000000000 R09: 0000000000000000 [ 977.569227][T14482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.569239][T14482] R13: 00007fc40bca6038 R14: 00007fc40bca5fa0 R15: 00007ffe28c28f38 [ 977.569271][T14482] [ 977.634152][ T37] kauditd_printk_skb: 349 callbacks suppressed [ 977.634169][ T37] audit: type=1326 audit(2000000789.685:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14483 comm="syz.4.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccbeff749 code=0x7ffc0000 [ 977.634746][ T37] audit: type=1326 audit(2000000789.685:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14483 comm="syz.4.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccbeff749 code=0x7ffc0000 [ 977.635041][ T37] audit: type=1326 audit(2000000789.685:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14483 comm="syz.4.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccbeff749 code=0x7ffc0000 [ 977.635306][ T37] audit: type=1326 audit(2000000789.685:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14483 comm="syz.4.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2ccbeff749 code=0x7ffc0000 [ 977.636453][ T37] audit: type=1326 audit(2000000789.685:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14483 comm="syz.4.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccbeff749 code=0x7ffc0000 [ 977.637034][ T37] audit: type=1326 audit(2000000789.685:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14483 comm="syz.4.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccbeff749 code=0x7ffc0000 [ 977.637146][ T37] audit: type=1326 audit(2000000789.685:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14483 comm="syz.4.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ccbeff749 code=0x7ffc0000 [ 977.637868][ T37] audit: type=1326 audit(2000000789.685:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14483 comm="syz.4.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccbeff749 code=0x7ffc0000 [ 977.637910][ T37] audit: type=1326 audit(2000000789.685:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14483 comm="syz.4.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccbeff749 code=0x7ffc0000 [ 977.638490][ T37] audit: type=1326 audit(2000000789.685:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14483 comm="syz.4.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccbeff749 code=0x7ffc0000 [ 977.892157][T14351] team0: Port device team_slave_1 added [ 977.892632][T14468] bond0: entered allmulticast mode [ 977.892649][T14468] bond_slave_0: entered allmulticast mode [ 977.892675][T14468] bond_slave_1: entered allmulticast mode [ 978.571146][ T5872] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 978.736002][ T3278] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.746530][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.746563][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.746601][ T5872] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 978.746624][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.759235][ T5872] usb 1-1: config 0 descriptor?? [ 978.778141][T14505] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2939'. [ 979.204591][ T5872] cm6533_jd 0003:0D8C:0022.004A: reserved main item tag 0xd [ 979.204632][ T5872] cm6533_jd 0003:0D8C:0022.004A: item fetching failed at offset 4/5 [ 979.206701][ T5872] cm6533_jd 0003:0D8C:0022.004A: parse failed [ 979.206808][ T5872] cm6533_jd 0003:0D8C:0022.004A: probe with driver cm6533_jd failed with error -22 [ 979.401907][T14351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.401924][T14351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.401950][T14351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.413396][T14351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.413413][T14351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.413438][T14351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.450604][T14516] binder: 14513:14516 ioctl 40044591 0 returned -22 [ 979.460166][T14516] FAULT_INJECTION: forcing a failure. [ 979.460166][T14516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 979.460205][T14516] CPU: 0 UID: 0 PID: 14516 Comm: syz.3.2943 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 979.460227][T14516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 979.460239][T14516] Call Trace: [ 979.460247][T14516] [ 979.460255][T14516] dump_stack_lvl+0x189/0x250 [ 979.460284][T14516] ? __pfx____ratelimit+0x10/0x10 [ 979.460309][T14516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 979.460333][T14516] ? __pfx__printk+0x10/0x10 [ 979.460354][T14516] ? __might_fault+0xb0/0x130 [ 979.460389][T14516] should_fail_ex+0x46c/0x600 [ 979.460418][T14516] _copy_from_user+0x2d/0xb0 [ 979.460438][T14516] binder_ioctl_write_read+0x127/0x9fd0 [ 979.460459][T14516] ? rcu_is_watching+0x15/0xb0 [ 979.460477][T14516] ? trace_sched_exit_tp+0x36/0x110 [ 979.460502][T14516] ? __schedule+0x1709/0x4c20 [ 979.460537][T14516] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 979.460562][T14516] ? lockdep_hardirqs_on+0x9c/0x150 [ 979.460587][T14516] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 979.460610][T14516] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 979.460644][T14516] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 979.460668][T14516] ? do_raw_spin_lock+0x121/0x290 [ 979.460698][T14516] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 979.460721][T14516] ? lockdep_hardirqs_on+0x9c/0x150 [ 979.460746][T14516] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 979.460769][T14516] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 979.460798][T14516] ? rcu_read_unlock_special+0x35b/0x470 [ 979.460823][T14516] ? rt_mutex_slowunlock+0x493/0x8a0 [ 979.460843][T14516] ? rt_spin_lock+0x1c1/0x3e0 [ 979.460867][T14516] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 979.460903][T14516] ? binder_get_thread+0x178/0x6d0 [ 979.460926][T14516] binder_ioctl+0x3e3/0x19c0 [ 979.460949][T14516] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 979.460980][T14516] ? do_vfs_ioctl+0xbeb/0x1440 [ 979.460999][T14516] ? __pfx_binder_ioctl+0x10/0x10 [ 979.461018][T14516] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 979.461035][T14516] ? smack_log+0xef/0x3f0 [ 979.461058][T14516] ? __pfx_smack_log+0x10/0x10 [ 979.461079][T14516] ? lockdep_hardirqs_on+0x9c/0x150 [ 979.461101][T14516] ? smk_access+0x14c/0x4e0 [ 979.461128][T14516] ? smk_tskacc+0x2fc/0x370 [ 979.461155][T14516] ? smack_file_ioctl+0x2ac/0x340 [ 979.461181][T14516] ? __pfx_smack_file_ioctl+0x10/0x10 [ 979.461221][T14516] ? __fget_files+0x3a6/0x420 [ 979.461242][T14516] ? __fget_files+0x2a/0x420 [ 979.461269][T14516] ? bpf_lsm_file_ioctl+0x9/0x20 [ 979.461286][T14516] ? __pfx_binder_ioctl+0x10/0x10 [ 979.461305][T14516] __se_sys_ioctl+0xff/0x170 [ 979.461327][T14516] do_syscall_64+0xfa/0xfa0 [ 979.461352][T14516] ? lockdep_hardirqs_on+0x9c/0x150 [ 979.461375][T14516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.461393][T14516] ? clear_bhb_loop+0x60/0xb0 [ 979.461415][T14516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.461432][T14516] RIP: 0033:0x7f7c44e9f749 [ 979.461448][T14516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 979.461463][T14516] RSP: 002b:00007f7c430e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 979.461483][T14516] RAX: ffffffffffffffda RBX: 00007f7c450f6090 RCX: 00007f7c44e9f749 [ 979.461496][T14516] RDX: 0000200000000240 RSI: 00000000c0306201 RDI: 0000000000000004 [ 979.461508][T14516] RBP: 00007f7c430e5090 R08: 0000000000000000 R09: 0000000000000000 [ 979.461520][T14516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 979.461531][T14516] R13: 00007f7c450f6128 R14: 00007f7c450f6090 R15: 00007ffd5b999d78 [ 979.461562][T14516] [ 979.463080][T14516] binder: 14513:14516 ioctl c0306201 200000000240 returned -14 [ 979.481892][T14515] binder: 14513:14515 ioctl c0306201 200000000040 returned -14 [ 979.561318][T14075] usb 1-1: USB disconnect, device number 56 [ 980.313618][T14075] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 980.476705][T14075] usb 5-1: config 0 has an invalid interface number: 213 but max is 0 [ 980.476734][T14075] usb 5-1: config 0 has no interface number 0 [ 980.480542][T14075] usb 5-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7 [ 980.480572][T14075] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.480594][T14075] usb 5-1: Product: syz [ 980.480609][T14075] usb 5-1: Manufacturer: syz [ 980.480624][T14075] usb 5-1: SerialNumber: syz [ 980.541898][T14075] usb 5-1: config 0 descriptor?? [ 980.657723][T14351] hsr_slave_0: entered promiscuous mode [ 980.663698][T14351] hsr_slave_1: entered promiscuous mode [ 980.679882][T14351] debugfs: 'hsr0' already exists in 'hsr' [ 980.679912][T14351] Cannot create hsr debugfs directory [ 980.785048][T14075] usb 5-1: USB disconnect, device number 68 [ 981.350652][ T6981] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 981.512588][ T3278] bridge_slave_1: left allmulticast mode [ 981.512616][ T3278] bridge_slave_1: left promiscuous mode [ 981.512848][ T3278] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.520002][ T6981] usb 4-1: Using ep0 maxpacket: 32 [ 981.524514][ T6981] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 981.524539][ T6981] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.524559][ T6981] usb 4-1: config 0 has no interface number 0 [ 981.524602][ T6981] usb 4-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 981.530085][ T6981] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 981.530112][ T6981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.530131][ T6981] usb 4-1: Product: syz [ 981.530145][ T6981] usb 4-1: Manufacturer: syz [ 981.530160][ T6981] usb 4-1: SerialNumber: syz [ 981.541250][ T6981] usb 4-1: config 0 descriptor?? [ 984.778768][ T6981] usb 4-1: USB disconnect, device number 49 [ 984.907195][ T3278] bridge_slave_0: left allmulticast mode [ 984.907225][ T3278] bridge_slave_0: left promiscuous mode [ 984.907473][ T3278] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.749521][ T6981] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 986.920720][ T6981] usb 3-1: Using ep0 maxpacket: 32 [ 986.924305][ T6981] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 986.924336][ T6981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.969628][ T6981] usb 3-1: config 0 descriptor?? [ 987.537622][ T6981] gspca_main: sunplus-2.14.0 probing 041e:400b [ 987.577774][T14602] FAULT_INJECTION: forcing a failure. [ 987.577774][T14602] name failslab, interval 1, probability 0, space 0, times 0 [ 987.577811][T14602] CPU: 0 UID: 0 PID: 14602 Comm: syz.3.2972 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 987.577837][T14602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 987.577849][T14602] Call Trace: [ 987.577857][T14602] [ 987.577866][T14602] dump_stack_lvl+0x189/0x250 [ 987.577896][T14602] ? __pfx____ratelimit+0x10/0x10 [ 987.577922][T14602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 987.577947][T14602] ? __pfx__printk+0x10/0x10 [ 987.577976][T14602] ? __pfx___might_resched+0x10/0x10 [ 987.577996][T14602] ? fs_reclaim_acquire+0x7d/0x100 [ 987.578026][T14602] should_fail_ex+0x46c/0x600 [ 987.578055][T14602] ? __alloc_skb+0x112/0x2d0 [ 987.578073][T14602] should_failslab+0xa8/0x100 [ 987.578099][T14602] ? __alloc_skb+0x112/0x2d0 [ 987.578115][T14602] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 987.578143][T14602] ? smack_socket_sendmsg+0x1a7/0x520 [ 987.578171][T14602] __alloc_skb+0x112/0x2d0 [ 987.578195][T14602] netlink_sendmsg+0x5c6/0xb30 [ 987.578214][T14602] ? is_bpf_text_address+0x26/0x2b0 [ 987.578250][T14602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 987.578279][T14602] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 987.578302][T14602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 987.578324][T14602] __sock_sendmsg+0x21c/0x270 [ 987.578353][T14602] ____sys_sendmsg+0x508/0x820 [ 987.578382][T14602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 987.578414][T14602] ? import_iovec+0x74/0xa0 [ 987.578439][T14602] ___sys_sendmsg+0x21f/0x2a0 [ 987.578463][T14602] ? __pfx____sys_sendmsg+0x10/0x10 [ 987.578522][T14602] ? __fget_files+0x2a/0x420 [ 987.578553][T14602] ? __fget_files+0x3a6/0x420 [ 987.578588][T14602] __x64_sys_sendmsg+0x1a1/0x260 [ 987.578613][T14602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 987.578644][T14602] ? __pfx_ksys_write+0x10/0x10 [ 987.578671][T14602] ? do_syscall_64+0xbe/0xfa0 [ 987.578700][T14602] do_syscall_64+0xfa/0xfa0 [ 987.578723][T14602] ? lockdep_hardirqs_on+0x9c/0x150 [ 987.578747][T14602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.578765][T14602] ? clear_bhb_loop+0x60/0xb0 [ 987.578787][T14602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.578805][T14602] RIP: 0033:0x7f7c44e9f749 [ 987.578822][T14602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 987.578838][T14602] RSP: 002b:00007f7c43106038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 987.578858][T14602] RAX: ffffffffffffffda RBX: 00007f7c450f5fa0 RCX: 00007f7c44e9f749 [ 987.578871][T14602] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 987.578884][T14602] RBP: 00007f7c43106090 R08: 0000000000000000 R09: 0000000000000000 [ 987.578895][T14602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.578907][T14602] R13: 00007f7c450f6038 R14: 00007f7c450f5fa0 R15: 00007ffd5b999d78 [ 987.578939][T14602] [ 988.808065][ T6981] gspca_sunplus: reg_r err -110 [ 988.809367][ T6981] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 990.558870][ T5872] usb 3-1: USB disconnect, device number 56 [ 991.707410][T14633] FAULT_INJECTION: forcing a failure. [ 991.707410][T14633] name failslab, interval 1, probability 0, space 0, times 0 [ 991.707432][T14633] CPU: 1 UID: 0 PID: 14633 Comm: syz.0.2983 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 991.707444][T14633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 991.707451][T14633] Call Trace: [ 991.707456][T14633] [ 991.707461][T14633] dump_stack_lvl+0x189/0x250 [ 991.707479][T14633] ? __pfx____ratelimit+0x10/0x10 [ 991.707493][T14633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 991.707507][T14633] ? __pfx__printk+0x10/0x10 [ 991.707522][T14633] ? __pfx___might_resched+0x10/0x10 [ 991.707533][T14633] ? fs_reclaim_acquire+0x7d/0x100 [ 991.707550][T14633] should_fail_ex+0x46c/0x600 [ 991.707565][T14633] ? __alloc_skb+0x112/0x2d0 [ 991.707575][T14633] should_failslab+0xa8/0x100 [ 991.707590][T14633] ? __alloc_skb+0x112/0x2d0 [ 991.707599][T14633] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 991.707611][T14633] ? __lock_acquire+0xab9/0xd20 [ 991.707628][T14633] __alloc_skb+0x112/0x2d0 [ 991.707641][T14633] alloc_skb_with_frags+0xca/0x890 [ 991.707661][T14633] sock_alloc_send_pskb+0x859/0x990 [ 991.707685][T14633] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 991.707700][T14633] ? packet_cached_dev_get+0x1c/0x2b0 [ 991.707713][T14633] ? packet_cached_dev_get+0x1c/0x2b0 [ 991.707728][T14633] packet_sendmsg+0x33a0/0x5080 [ 991.707759][T14633] ? smack_socket_sendmsg+0x1a7/0x520 [ 991.707772][T14633] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 991.707787][T14633] ? __pfx_packet_sendmsg+0x10/0x10 [ 991.707801][T14633] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 991.707820][T14633] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 991.707833][T14633] ? __pfx_packet_sendmsg+0x10/0x10 [ 991.707844][T14633] __sock_sendmsg+0x21c/0x270 [ 991.707861][T14633] ____sys_sendmsg+0x508/0x820 [ 991.707876][T14633] ? __pfx_____sys_sendmsg+0x10/0x10 [ 991.707893][T14633] ? import_iovec+0x74/0xa0 [ 991.707907][T14633] ___sys_sendmsg+0x21f/0x2a0 [ 991.707920][T14633] ? __pfx____sys_sendmsg+0x10/0x10 [ 991.707961][T14633] ? __fget_files+0x2a/0x420 [ 991.707974][T14633] ? __fget_files+0x3a6/0x420 [ 991.707992][T14633] __x64_sys_sendmsg+0x1a1/0x260 [ 991.708006][T14633] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 991.708023][T14633] ? __pfx_ksys_write+0x10/0x10 [ 991.708038][T14633] ? do_syscall_64+0xbe/0xfa0 [ 991.708054][T14633] do_syscall_64+0xfa/0xfa0 [ 991.708066][T14633] ? lockdep_hardirqs_on+0x9c/0x150 [ 991.708079][T14633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.708089][T14633] ? clear_bhb_loop+0x60/0xb0 [ 991.708101][T14633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.708110][T14633] RIP: 0033:0x7fc40ba4f749 [ 991.708120][T14633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 991.708129][T14633] RSP: 002b:00007fc409cb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 991.708140][T14633] RAX: ffffffffffffffda RBX: 00007fc40bca5fa0 RCX: 00007fc40ba4f749 [ 991.708148][T14633] RDX: 0000000020040051 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 991.708155][T14633] RBP: 00007fc409cb6090 R08: 0000000000000000 R09: 0000000000000000 [ 991.708161][T14633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.708167][T14633] R13: 00007fc40bca6038 R14: 00007fc40bca5fa0 R15: 00007ffe28c28f38 [ 991.708187][T14633] [ 992.319788][ T3278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.407718][ T3278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 992.452323][ T3278] bond0 (unregistering): Released all slaves [ 992.823091][T14075] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 993.807623][T14075] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 993.807654][T14075] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.807675][T14075] usb 5-1: Product: syz [ 993.807690][T14075] usb 5-1: Manufacturer: syz [ 993.807705][T14075] usb 5-1: SerialNumber: syz [ 993.853179][T14075] usb 5-1: config 0 descriptor?? [ 995.179827][T14075] usb 5-1: Firmware version (0.0) predates our first public release. [ 995.179856][T14075] usb 5-1: Please update to version 0.2 or newer [ 995.214102][T14075] usb 5-1: Firmware: build [ 995.241958][ T37] kauditd_printk_skb: 357 callbacks suppressed [ 995.241976][ T37] audit: type=1326 audit(2000000806.157:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14663 comm="syz.3.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c44e9f749 code=0x7ffc0000 [ 995.251275][ T37] audit: type=1326 audit(2000000806.157:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14663 comm="syz.3.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c44e9f749 code=0x7ffc0000 [ 995.251329][ T37] audit: type=1326 audit(2000000806.167:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14663 comm="syz.3.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7c44e9f749 code=0x7ffc0000 [ 995.251371][ T37] audit: type=1326 audit(2000000806.167:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14663 comm="syz.3.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c44e9f749 code=0x7ffc0000 [ 995.251410][ T37] audit: type=1326 audit(2000000806.167:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14663 comm="syz.3.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c44e9f749 code=0x7ffc0000 [ 995.251449][ T37] audit: type=1326 audit(2000000806.167:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14663 comm="syz.3.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c44e9f749 code=0x7ffc0000 [ 995.251489][ T37] audit: type=1326 audit(2000000806.167:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14663 comm="syz.3.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c44e9f749 code=0x7ffc0000 [ 995.251539][ T37] audit: type=1326 audit(2000000806.167:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14663 comm="syz.3.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c44e9f749 code=0x7ffc0000 [ 995.251580][ T37] audit: type=1326 audit(2000000806.167:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14663 comm="syz.3.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c44e9f749 code=0x7ffc0000 [ 995.251622][ T37] audit: type=1326 audit(2000000806.167:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14663 comm="syz.3.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c44e9f749 code=0x7ffc0000 [ 995.669709][T14075] usb 5-1: USB disconnect, device number 69 [ 995.729521][ T6981] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 995.799386][T14677] fuse: Unknown parameter 'user_id00000000000000000000' [ 995.900572][ T6981] usb 4-1: Using ep0 maxpacket: 8 [ 995.902998][ T6981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.903028][ T6981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.903052][ T6981] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 995.903064][ T6981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.954719][ T6981] usb 4-1: config 0 descriptor?? [ 996.051713][ T5892] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 996.181670][ T6981] hid_parser_main: 1 callbacks suppressed [ 996.181694][ T6981] cherry 0003:046A:0027.004B: unknown main item tag 0x0 [ 996.181727][ T6981] cherry 0003:046A:0027.004B: unknown main item tag 0x0 [ 996.181755][ T6981] cherry 0003:046A:0027.004B: unknown main item tag 0x0 [ 996.181783][ T6981] cherry 0003:046A:0027.004B: unknown main item tag 0x0 [ 996.181810][ T6981] cherry 0003:046A:0027.004B: unknown main item tag 0x0 [ 996.181837][ T6981] cherry 0003:046A:0027.004B: unknown main item tag 0x0 [ 996.181863][ T6981] cherry 0003:046A:0027.004B: unknown main item tag 0x0 [ 996.181891][ T6981] cherry 0003:046A:0027.004B: unknown main item tag 0x0 [ 996.181918][ T6981] cherry 0003:046A:0027.004B: unknown main item tag 0x0 [ 996.181944][ T6981] cherry 0003:046A:0027.004B: unknown main item tag 0x0 [ 996.185414][ T6981] cherry 0003:046A:0027.004B: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.3-1/input0 [ 996.235452][ T5892] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 996.235481][ T5892] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 996.235536][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.235561][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.235597][ T5892] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 996.235620][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.246597][ T5892] usb 3-1: config 0 descriptor?? [ 996.756995][ T5892] usbhid 3-1:0.0: can't add hid device: -71 [ 996.757073][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 996.759466][ T5892] usb 3-1: USB disconnect, device number 57 [ 998.146253][ T6981] usb 4-1: USB disconnect, device number 50 [ 998.434931][T14075] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 998.455607][T14572] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 998.554342][ T3278] hsr_slave_0: left promiscuous mode [ 998.597530][ T3278] hsr_slave_1: left promiscuous mode [ 998.598122][ T3278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 998.598145][ T3278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 998.605402][T14075] usb 5-1: Using ep0 maxpacket: 16 [ 998.608745][T14075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.608785][T14075] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 998.608834][T14075] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 998.608859][T14075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.614864][T14075] usb 5-1: config 0 descriptor?? [ 998.681391][ T3278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 998.681418][ T3278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 998.708379][T14572] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 998.710898][T14572] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.710921][T14572] usb 1-1: config 0 has no interfaces? [ 998.711058][T14572] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 998.711080][T14572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.759371][T14572] usb 1-1: config 0 descriptor?? [ 999.154602][T14707] fuse: Unknown parameter 'user_id00000000000000000000' [ 999.321941][ T3278] veth1_macvtap: left promiscuous mode [ 999.326930][ T3278] veth0_macvtap: left promiscuous mode [ 999.327488][ T3278] veth1_vlan: left promiscuous mode [ 999.500038][T14710] kvm: kvm [14709]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x80 [ 999.567242][T14075] logitech 0003:046D:C623.004C: unexpected long global item [ 999.575332][T14075] logitech 0003:046D:C623.004C: parse failed [ 999.575456][T14075] logitech 0003:046D:C623.004C: probe with driver logitech failed with error -22 [ 1000.176293][ T5789] usb 5-1: USB disconnect, device number 70 [ 1002.191086][ T5892] usb 1-1: USB disconnect, device number 57 [ 1003.580509][T14075] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1004.112172][ T6981] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1004.504462][ T6981] usb 4-1: Using ep0 maxpacket: 32 [ 1004.513755][ T6981] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1004.513786][ T6981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.538919][ T6981] usb 4-1: config 0 descriptor?? [ 1004.544607][ T6981] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1004.763004][T14075] usb 5-1: Using ep0 maxpacket: 32 [ 1004.765714][T14075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.765747][T14075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.765787][T14075] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1004.765819][T14075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.770671][T14075] usb 5-1: config 0 descriptor?? [ 1004.776706][T14075] hub 5-1:0.0: USB hub found [ 1005.530730][T14075] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1005.538248][T14075] usbhid 5-1:0.0: can't add hid device: -71 [ 1005.538378][T14075] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1005.592630][T14075] usb 5-1: USB disconnect, device number 71 [ 1006.435612][ T6981] gspca_sunplus: reg_r err -110 [ 1006.436929][ T6981] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 1006.727963][T14075] usb 4-1: USB disconnect, device number 51 [ 1007.403754][ T5789] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1007.585479][ T5789] usb 1-1: Using ep0 maxpacket: 16 [ 1007.611126][ T5789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.611160][ T5789] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1007.611202][ T5789] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1007.611225][ T5789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.615812][ T5789] usb 1-1: config 0 descriptor?? [ 1007.668538][ T5811] Bluetooth: hci5: command 0x0406 tx timeout [ 1008.254379][T14784] FAULT_INJECTION: forcing a failure. [ 1008.254379][T14784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1008.254413][T14784] CPU: 0 UID: 0 PID: 14784 Comm: syz.3.3034 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1008.254435][T14784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1008.254447][T14784] Call Trace: [ 1008.254456][T14784] [ 1008.254465][T14784] dump_stack_lvl+0x189/0x250 [ 1008.254497][T14784] ? __pfx____ratelimit+0x10/0x10 [ 1008.254523][T14784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1008.254548][T14784] ? __pfx__printk+0x10/0x10 [ 1008.254569][T14784] ? __might_fault+0xb0/0x130 [ 1008.254605][T14784] should_fail_ex+0x46c/0x600 [ 1008.254637][T14784] _copy_from_iter+0x1de/0x1790 [ 1008.254672][T14784] ? __pfx__copy_from_iter+0x10/0x10 [ 1008.254689][T14784] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1008.254716][T14784] ? skb_put+0x11b/0x210 [ 1008.254740][T14784] hci_sock_sendmsg+0x422/0xef0 [ 1008.254773][T14784] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1008.254803][T14784] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1008.254827][T14784] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1008.254853][T14784] __sock_sendmsg+0x21c/0x270 [ 1008.254882][T14784] sock_write_iter+0x27f/0x370 [ 1008.254909][T14784] ? __pfx_sock_write_iter+0x10/0x10 [ 1008.254955][T14784] vfs_write+0x5d5/0xb40 [ 1008.254983][T14784] ? __pfx_sock_write_iter+0x10/0x10 [ 1008.255008][T14784] ? __pfx_vfs_write+0x10/0x10 [ 1008.255040][T14784] ? __fget_files+0x2a/0x420 [ 1008.255073][T14784] ksys_write+0x14b/0x260 [ 1008.255098][T14784] ? __pfx_ksys_write+0x10/0x10 [ 1008.255122][T14784] ? do_syscall_64+0xbe/0xfa0 [ 1008.255150][T14784] do_syscall_64+0xfa/0xfa0 [ 1008.255179][T14784] ? lockdep_hardirqs_on+0x9c/0x150 [ 1008.255203][T14784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.255221][T14784] ? clear_bhb_loop+0x60/0xb0 [ 1008.255243][T14784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.255261][T14784] RIP: 0033:0x7f7c44e9f749 [ 1008.255278][T14784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1008.255295][T14784] RSP: 002b:00007f7c43106038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1008.255315][T14784] RAX: ffffffffffffffda RBX: 00007f7c450f5fa0 RCX: 00007f7c44e9f749 [ 1008.255329][T14784] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000013 [ 1008.255341][T14784] RBP: 00007f7c43106090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.255354][T14784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.255365][T14784] R13: 00007f7c450f6038 R14: 00007f7c450f5fa0 R15: 00007ffd5b999d78 [ 1008.255398][T14784] [ 1008.913606][ C1] vkms_vblank_simulate: vblank timer overrun [ 1009.006606][ C1] vkms_vblank_simulate: vblank timer overrun [ 1009.008014][ T5789] usbhid 1-1:0.0: can't add hid device: -71 [ 1009.008140][ T5789] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1009.013477][ T5789] usb 1-1: USB disconnect, device number 58 [ 1009.122883][ C1] vkms_vblank_simulate: vblank timer overrun [ 1009.583156][ C1] vkms_vblank_simulate: vblank timer overrun [ 1010.035805][ C1] vkms_vblank_simulate: vblank timer overrun [ 1010.175031][ C1] vkms_vblank_simulate: vblank timer overrun [ 1010.800038][ C1] vkms_vblank_simulate: vblank timer overrun [ 1010.869535][ T3278] team0 (unregistering): Port device team_slave_1 removed [ 1010.908540][T14075] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1011.052163][ C1] vkms_vblank_simulate: vblank timer overrun [ 1011.111341][ C1] vkms_vblank_simulate: vblank timer overrun [ 1011.128704][T14075] usb 4-1: Using ep0 maxpacket: 16 [ 1011.143998][T14075] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.144019][T14075] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1011.144046][T14075] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1011.144059][T14075] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.149503][T14075] usb 4-1: config 0 descriptor?? [ 1011.222123][ T3278] team0 (unregistering): Port device team_slave_0 removed [ 1011.335496][ C1] vkms_vblank_simulate: vblank timer overrun [ 1011.471145][ C1] vkms_vblank_simulate: vblank timer overrun [ 1011.584922][ C1] vkms_vblank_simulate: vblank timer overrun [ 1011.896555][ C1] vkms_vblank_simulate: vblank timer overrun [ 1011.917699][T14075] logitech 0003:046D:C623.004D: unexpected long global item [ 1011.918527][T14075] logitech 0003:046D:C623.004D: parse failed [ 1011.918627][T14075] logitech 0003:046D:C623.004D: probe with driver logitech failed with error -22 [ 1013.090954][ C1] vkms_vblank_simulate: vblank timer overrun [ 1013.370252][ C1] vkms_vblank_simulate: vblank timer overrun [ 1013.454658][T14075] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1013.614891][T14075] usb 1-1: Using ep0 maxpacket: 8 [ 1013.648632][T14075] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.649412][T14075] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1013.649426][T14075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.011065][ C1] vkms_vblank_simulate: vblank timer overrun [ 1016.122621][ T5872] usb 4-1: USB disconnect, device number 52 [ 1017.323801][T14351] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1017.407126][ T5885] usb 1-1: USB disconnect, device number 59 [ 1017.466387][T14351] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1017.553752][T14351] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1017.609963][T14351] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1017.682529][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1017.733925][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1017.739259][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1017.741458][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1017.742373][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1019.206088][ T5885] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1020.157659][ T5811] Bluetooth: hci2: command tx timeout [ 1020.158754][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 1020.165138][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.165169][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1020.165221][ T5885] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1020.165244][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.224329][ T5885] usb 4-1: config 0 descriptor?? [ 1020.710748][ T5885] logitech 0003:046D:C623.004E: unexpected long global item [ 1020.711212][ T5885] logitech 0003:046D:C623.004E: parse failed [ 1020.711270][ T5885] logitech 0003:046D:C623.004E: probe with driver logitech failed with error -22 [ 1021.948647][ T5885] usb 4-1: USB disconnect, device number 53 [ 1023.016010][ T5811] Bluetooth: hci2: command tx timeout [ 1023.296886][ T994] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1023.459303][ T994] usb 4-1: Using ep0 maxpacket: 32 [ 1023.466365][ T994] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1023.466383][ T994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.469503][ T994] usb 4-1: config 0 descriptor?? [ 1023.496335][ T994] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1023.612244][ T3278] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.674067][T14898] o2cb: This node has not been configured. [ 1023.674082][T14898] o2cb: Cluster check failed. Fix errors before retrying. [ 1023.674109][T14898] (syz.4.3072,14898,0):user_dlm_register:674 ERROR: status = -22 [ 1023.674128][T14898] (syz.4.3072,14898,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1024.066504][ T37] kauditd_printk_skb: 46 callbacks suppressed [ 1024.066522][ T37] audit: type=1326 audit(2000000833.115:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14905 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccbeff749 code=0x7ffc0000 [ 1024.066642][ T37] audit: type=1326 audit(2000000833.115:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14905 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccbeff749 code=0x7ffc0000 [ 1024.068612][ T37] audit: type=1326 audit(2000000833.115:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14905 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccbeff749 code=0x7ffc0000 [ 1024.068967][ T37] audit: type=1326 audit(2000000833.115:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14905 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccbeff749 code=0x7ffc0000 [ 1024.069149][ T37] audit: type=1326 audit(2000000833.115:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14905 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ccbeff749 code=0x7ffc0000 [ 1024.069493][ T37] audit: type=1326 audit(2000000833.115:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14905 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccbeff749 code=0x7ffc0000 [ 1024.069630][ T37] audit: type=1326 audit(2000000833.115:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14905 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccbeff749 code=0x7ffc0000 [ 1024.069849][ T37] audit: type=1326 audit(2000000833.115:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14905 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccbeff749 code=0x7ffc0000 [ 1024.079806][ T37] audit: type=1326 audit(2000000833.125:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14905 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccbeff749 code=0x7ffc0000 [ 1024.079862][ T37] audit: type=1326 audit(2000000833.125:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14905 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2ccbeff749 code=0x7ffc0000 [ 1024.324341][ T3278] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.341932][ T994] gspca_sunplus: reg_r err -71 [ 1024.342029][ T994] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1024.344428][ T994] usb 4-1: USB disconnect, device number 54 [ 1024.853403][ T3278] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.741616][ T5811] Bluetooth: hci2: command tx timeout [ 1025.871137][T14351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.981190][T14351] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.031293][T14837] chnl_net:caif_netlink_parms(): no params data found [ 1026.233221][T14926] o2cb: This node has not been configured. [ 1026.233235][T14926] o2cb: Cluster check failed. Fix errors before retrying. [ 1026.233262][T14926] (syz.0.3082,14926,0):user_dlm_register:674 ERROR: status = -22 [ 1026.233286][T14926] (syz.0.3082,14926,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1027.151422][ T3278] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.197589][T14930] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3083'. [ 1027.216815][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.217037][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.515051][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1027.515119][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1028.375039][ T5811] Bluetooth: hci2: command tx timeout [ 1028.636032][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.636149][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.795616][ T5896] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1029.928863][ T5789] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1029.956790][ T5896] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1029.956820][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.956838][ T5896] usb 1-1: Product: syz [ 1029.956852][ T5896] usb 1-1: Manufacturer: syz [ 1029.956866][ T5896] usb 1-1: SerialNumber: syz [ 1029.981046][ T5896] usb 1-1: config 0 descriptor?? [ 1030.089279][ T5789] usb 5-1: Using ep0 maxpacket: 32 [ 1030.092786][ T5789] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1030.092817][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.101895][T14837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.102084][T14837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.102400][T14837] bridge_slave_0: entered allmulticast mode [ 1030.114953][ T5789] usb 5-1: config 0 descriptor?? [ 1030.121837][T14837] bridge_slave_0: entered promiscuous mode [ 1030.156711][ T5789] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1030.218068][T14837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.222689][T14837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.224851][T14837] bridge_slave_1: entered allmulticast mode [ 1030.248226][T14837] bridge_slave_1: entered promiscuous mode [ 1030.458708][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1030.478378][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1030.479810][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1030.481523][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1030.483479][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1030.610907][ T5896] usb 1-1: Firmware version (0.0) predates our first public release. [ 1030.610988][ T5896] usb 1-1: Please update to version 0.2 or newer [ 1030.646727][ T5896] usb 1-1: Firmware: build [ 1031.154519][ T5789] gspca_sunplus: reg_r err -110 [ 1031.155761][ T5789] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 1032.312340][ T994] usb 5-1: USB disconnect, device number 72 [ 1032.351318][T14837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.368712][ T3278] bridge_slave_1: left allmulticast mode [ 1032.368741][ T3278] bridge_slave_1: left promiscuous mode [ 1032.369403][ T3278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.403623][ T5896] usb 1-1: USB disconnect, device number 60 [ 1032.506204][ T3278] bridge_slave_0: left allmulticast mode [ 1032.506234][ T3278] bridge_slave_0: left promiscuous mode [ 1032.507076][ T3278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.767579][ T61] Bluetooth: hci4: command tx timeout [ 1033.484853][T14572] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1033.714192][T14572] usb 5-1: Using ep0 maxpacket: 16 [ 1033.716397][T14572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.716416][T14572] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1033.716441][T14572] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1033.716453][T14572] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.720065][T14572] usb 5-1: config 0 descriptor?? [ 1034.182069][T14572] logitech 0003:046D:C623.004F: unexpected long global item [ 1034.182903][T14572] logitech 0003:046D:C623.004F: parse failed [ 1034.183005][T14572] logitech 0003:046D:C623.004F: probe with driver logitech failed with error -22 [ 1034.955519][ T61] Bluetooth: hci4: command tx timeout [ 1035.360176][ T3278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.404557][ T3278] bond_slave_0: left allmulticast mode [ 1035.424439][ T3278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.445724][ T3278] bond_slave_1: left allmulticast mode [ 1035.447783][ T3278] bond0 (unregistering): Released all slaves [ 1035.493940][T14837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1035.494701][T14572] usb 5-1: USB disconnect, device number 73 [ 1037.286201][ T61] Bluetooth: hci4: command tx timeout [ 1037.422867][ T6009] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1038.096472][ T6009] usb 4-1: Using ep0 maxpacket: 32 [ 1038.098025][ T6009] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1038.098041][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.101238][ T6009] usb 4-1: config 0 descriptor?? [ 1038.104475][ T6009] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1038.347793][T14837] team0: Port device team_slave_0 added [ 1038.502291][T14837] team0: Port device team_slave_1 added [ 1039.037150][ T6009] gspca_sunplus: reg_r err -71 [ 1039.037244][ T6009] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1039.040509][ T6009] usb 4-1: USB disconnect, device number 55 [ 1039.475565][ T61] Bluetooth: hci4: command tx timeout [ 1039.511827][T14837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.511843][T14837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.511867][T14837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.572110][T14837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.572126][T14837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.572150][T14837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.744331][ T5896] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1041.960039][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 1042.059387][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.059426][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1042.059477][ T5896] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1042.059501][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.114696][ T5896] usb 1-1: config 0 descriptor?? [ 1043.481603][ T5896] logitech 0003:046D:C623.0050: unexpected long global item [ 1043.482419][ T5896] logitech 0003:046D:C623.0050: parse failed [ 1043.482521][ T5896] logitech 0003:046D:C623.0050: probe with driver logitech failed with error -22 [ 1043.564083][T14837] hsr_slave_0: entered promiscuous mode [ 1043.565507][T14837] hsr_slave_1: entered promiscuous mode [ 1043.566493][T14837] debugfs: 'hsr0' already exists in 'hsr' [ 1043.566517][T14837] Cannot create hsr debugfs directory [ 1043.592160][ T31] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1043.764283][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 1043.767259][ T31] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1043.767287][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.771450][ T31] usb 5-1: config 0 descriptor?? [ 1043.804871][ T31] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1043.880087][ T6009] usb 1-1: USB disconnect, device number 61 [ 1044.000369][ T3278] hsr_slave_0: left promiscuous mode [ 1044.019127][ T3278] hsr_slave_1: left promiscuous mode [ 1044.021065][ T3278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1044.021093][ T3278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.077171][ T3278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1044.077200][ T3278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1044.400535][ T3278] veth1_macvtap: left promiscuous mode [ 1044.401305][ T3278] veth0_macvtap: left promiscuous mode [ 1044.403254][ T3278] veth1_vlan: left promiscuous mode [ 1044.421721][ T3278] veth0_vlan: left promiscuous mode [ 1044.672372][ T31] gspca_sunplus: reg_r err -71 [ 1044.672494][ T31] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1044.680745][ T31] usb 5-1: USB disconnect, device number 74 [ 1045.200681][T15054] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1045.200807][T15054] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1045.225399][T15054] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1045.225577][T15054] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1046.899557][T15066] o2cb: This node has not been configured. [ 1046.899571][T15066] o2cb: Cluster check failed. Fix errors before retrying. [ 1046.899597][T15066] (syz.4.3123,15066,1):user_dlm_register:674 ERROR: status = -22 [ 1046.899621][T15066] (syz.4.3123,15066,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1047.920346][T15074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1047.978093][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3126'. [ 1047.992175][T15077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3126'. [ 1048.048826][T15076] FAULT_INJECTION: forcing a failure. [ 1048.048826][T15076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1048.048877][T15076] CPU: 0 UID: 0 PID: 15076 Comm: syz.0.3125 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1048.048903][T15076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1048.048914][T15076] Call Trace: [ 1048.048923][T15076] [ 1048.048931][T15076] dump_stack_lvl+0x189/0x250 [ 1048.048951][T15076] ? __pfx____ratelimit+0x10/0x10 [ 1048.048965][T15076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1048.048978][T15076] ? __pfx__printk+0x10/0x10 [ 1048.048997][T15076] should_fail_ex+0x46c/0x600 [ 1048.049014][T15076] _copy_to_user+0x31/0xb0 [ 1048.049026][T15076] snd_pcm_oss_read2+0x316/0x430 [ 1048.049037][T15076] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1048.049054][T15076] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 1048.049065][T15076] ? mutex_lock_interruptible_nested+0x154/0x1d0 [ 1048.049076][T15076] ? snd_pcm_oss_read+0x1ff/0x8d0 [ 1048.049092][T15076] snd_pcm_oss_read+0x636/0x8d0 [ 1048.049112][T15076] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1048.049129][T15076] vfs_read+0x206/0xa30 [ 1048.049147][T15076] ? __pfx_vfs_read+0x10/0x10 [ 1048.049159][T15076] ? __fget_files+0x2a/0x420 [ 1048.049174][T15076] ? __fget_files+0x2a/0x420 [ 1048.049186][T15076] ? __fget_files+0x3a6/0x420 [ 1048.049197][T15076] ? __fget_files+0x2a/0x420 [ 1048.049214][T15076] ksys_read+0x14b/0x260 [ 1048.049228][T15076] ? __pfx_ksys_read+0x10/0x10 [ 1048.049245][T15076] do_syscall_64+0xfa/0xfa0 [ 1048.049259][T15076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.049269][T15076] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1048.049279][T15076] ? clear_bhb_loop+0x60/0xb0 [ 1048.049290][T15076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.049300][T15076] RIP: 0033:0x7fc40ba4f749 [ 1048.049311][T15076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1048.049320][T15076] RSP: 002b:00007fc409c95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1048.049331][T15076] RAX: ffffffffffffffda RBX: 00007fc40bca6090 RCX: 00007fc40ba4f749 [ 1048.049339][T15076] RDX: 00000000200021d5 RSI: 00002000000011c0 RDI: 0000000000000004 [ 1048.049345][T15076] RBP: 00007fc409c95090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.049352][T15076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1048.049358][T15076] R13: 00007fc40bca6128 R14: 00007fc40bca6090 R15: 00007ffe28c28f38 [ 1048.049381][T15076] [ 1048.787133][ T6009] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1049.008370][ T6009] usb 1-1: Using ep0 maxpacket: 32 [ 1049.019893][ T6009] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1049.019920][ T6009] usb 1-1: config 0 has no interface number 0 [ 1049.019978][ T6009] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1049.051244][ T6009] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1049.051262][ T6009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.051272][ T6009] usb 1-1: Product: syz [ 1049.051280][ T6009] usb 1-1: Manufacturer: syz [ 1049.051287][ T6009] usb 1-1: SerialNumber: syz [ 1049.100181][ T6009] usb 1-1: config 0 descriptor?? [ 1049.101688][T15083] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1049.510155][T15089] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1049.984999][ T6009] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1049.985296][ T6009] asix 1-1:0.188: probe with driver asix failed with error -61 [ 1050.893696][ T3278] team0 (unregistering): Port device team_slave_1 removed [ 1051.150231][ T3278] team0 (unregistering): Port device team_slave_0 removed [ 1052.079746][ T31] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1052.284980][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.285013][ T31] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1052.285025][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.287982][ T31] usb 5-1: config 0 descriptor?? [ 1052.291492][ T31] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1053.958827][ T6009] usb 1-1: USB disconnect, device number 62 [ 1055.456092][T14572] usb 5-1: USB disconnect, device number 75 [ 1055.840691][T14956] chnl_net:caif_netlink_parms(): no params data found [ 1058.123707][T14956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.123919][T14956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.124144][T14956] bridge_slave_0: entered allmulticast mode [ 1058.129829][T14956] bridge_slave_0: entered promiscuous mode [ 1058.715698][T14956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.715905][T14956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.716170][T14956] bridge_slave_1: entered allmulticast mode [ 1058.722560][T14956] bridge_slave_1: entered promiscuous mode [ 1059.938579][T14837] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1060.004458][T14956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.006993][T14837] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1061.236863][T14956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.486427][T14837] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1065.979234][T14837] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1066.063078][ T31] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1066.222613][T14956] team0: Port device team_slave_0 added [ 1066.234022][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 1066.234863][ T31] usb 4-1: too many configurations: 87, using maximum allowed: 8 [ 1066.241951][ T31] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1066.241988][ T31] usb 4-1: can't read configurations, error -61 [ 1066.415899][ T31] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1066.598166][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 1066.601448][ T31] usb 4-1: too many configurations: 87, using maximum allowed: 8 [ 1066.629938][ T31] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1066.630132][ T31] usb 4-1: can't read configurations, error -61 [ 1066.634935][ T31] usb usb4-port1: attempt power cycle [ 1067.066402][T14956] team0: Port device team_slave_1 added [ 1067.110830][ T5885] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1067.121436][ T31] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1067.154207][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 1067.154864][ T31] usb 4-1: too many configurations: 87, using maximum allowed: 8 [ 1067.156491][ T31] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1067.156526][ T31] usb 4-1: can't read configurations, error -61 [ 1067.271169][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 1067.273871][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.273905][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.273945][ T5885] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1067.273968][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.280021][ T5885] usb 1-1: config 0 descriptor?? [ 1067.286128][ T5885] hub 1-1:0.0: USB hub found [ 1067.304594][ T31] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1067.346537][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 1067.347476][ T31] usb 4-1: too many configurations: 87, using maximum allowed: 8 [ 1067.349764][ T31] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1067.349800][ T31] usb 4-1: can't read configurations, error -61 [ 1067.350193][ T31] usb usb4-port1: unable to enumerate USB device [ 1067.399441][ T5896] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1067.511047][ T5885] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1067.554203][T14956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1067.554218][T14956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.554232][T14956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1067.557920][T14956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1067.557936][T14956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.557962][T14956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.567240][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 1067.662321][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.662355][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1067.662399][ T5896] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1067.662421][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.710959][ T5896] usb 5-1: config 0 descriptor?? [ 1067.995329][ T5885] usbhid 1-1:0.0: can't add hid device: -71 [ 1067.995454][ T5885] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1068.020418][ T5885] usb 1-1: USB disconnect, device number 63 [ 1068.099235][T15190] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3155'. [ 1068.156092][ T5896] logitech 0003:046D:C623.0051: unexpected long global item [ 1068.156625][ T5896] logitech 0003:046D:C623.0051: parse failed [ 1068.156681][ T5896] logitech 0003:046D:C623.0051: probe with driver logitech failed with error -22 [ 1068.240252][T14956] hsr_slave_0: entered promiscuous mode [ 1068.241147][T14956] hsr_slave_1: entered promiscuous mode [ 1068.241720][T14956] debugfs: 'hsr0' already exists in 'hsr' [ 1068.241742][T14956] Cannot create hsr debugfs directory [ 1068.546462][ T5872] usb 5-1: USB disconnect, device number 76 [ 1069.073657][T15201] o2cb: This node has not been configured. [ 1069.073673][T15201] o2cb: Cluster check failed. Fix errors before retrying. [ 1069.073699][T15201] (syz.4.3159,15201,1):user_dlm_register:674 ERROR: status = -22 [ 1069.073724][T15201] (syz.4.3159,15201,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1069.141443][T15202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3158'. [ 1070.206438][T14837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.238154][T14837] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.257360][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.257679][ T6100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.284064][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.284289][ T6100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.407017][ T5872] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1070.505975][ T13] bridge_slave_1: left allmulticast mode [ 1070.506003][ T13] bridge_slave_1: left promiscuous mode [ 1070.506769][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.571976][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.572018][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.572057][ T5872] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1070.572078][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.616547][ T5872] usb 4-1: config 0 descriptor?? [ 1070.629160][ T13] bridge_slave_0: left allmulticast mode [ 1070.629190][ T13] bridge_slave_0: left promiscuous mode [ 1070.629439][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.917831][ T994] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1071.092918][ T5872] cm6533_jd 0003:0D8C:0022.0052: reserved main item tag 0xd [ 1071.092943][ T5872] cm6533_jd 0003:0D8C:0022.0052: item fetching failed at offset 4/5 [ 1071.093367][ T5872] cm6533_jd 0003:0D8C:0022.0052: parse failed [ 1071.093421][ T5872] cm6533_jd 0003:0D8C:0022.0052: probe with driver cm6533_jd failed with error -22 [ 1071.100695][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.100727][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.100772][ T994] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1071.100794][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.105723][ T994] usb 5-1: config 0 descriptor?? [ 1071.320272][T14572] usb 4-1: USB disconnect, device number 60 [ 1071.556900][ T994] cm6533_jd 0003:0D8C:0022.0053: reserved main item tag 0xd [ 1071.556926][ T994] cm6533_jd 0003:0D8C:0022.0053: item fetching failed at offset 4/5 [ 1071.557344][ T994] cm6533_jd 0003:0D8C:0022.0053: parse failed [ 1071.557397][ T994] cm6533_jd 0003:0D8C:0022.0053: probe with driver cm6533_jd failed with error -22 [ 1071.834786][ T5885] usb 5-1: USB disconnect, device number 77 [ 1072.863580][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1073.996861][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.084134][ T13] bond0 (unregistering): Released all slaves [ 1074.141684][T15220] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1074.273856][T15241] o2cb: This node has not been configured. [ 1074.273873][T15241] o2cb: Cluster check failed. Fix errors before retrying. [ 1074.273899][T15241] (syz.4.3171,15241,0):user_dlm_register:674 ERROR: status = -22 [ 1074.273923][T15241] (syz.4.3171,15241,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1074.379346][T15239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3170'. [ 1075.021797][ T13] hsr_slave_0: left promiscuous mode [ 1076.035478][ T13] hsr_slave_1: left promiscuous mode [ 1076.036410][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.070676][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1077.496978][ T37] kauditd_printk_skb: 414 callbacks suppressed [ 1077.496995][ T37] audit: type=1326 audit(2000000883.103:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15266 comm="syz.3.3179" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c44e9f749 code=0x0 [ 1078.914086][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1080.220176][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1081.259416][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1081.262861][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1081.320629][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1081.321975][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1081.323587][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1083.521179][ T61] Bluetooth: hci0: command tx timeout [ 1085.053555][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3196'. [ 1085.744672][ T61] Bluetooth: hci0: command tx timeout [ 1085.893572][T14956] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1086.666166][T14956] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1086.737766][T15343] overlayfs: overlapping lowerdir path [ 1086.765787][T14956] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1086.833089][T14956] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1087.449462][T15291] chnl_net:caif_netlink_parms(): no params data found [ 1088.014996][ T61] Bluetooth: hci0: command tx timeout [ 1088.278066][ T994] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1088.438433][ T994] usb 1-1: Using ep0 maxpacket: 32 [ 1088.444068][ T994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.444102][ T994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.444142][ T994] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1088.444165][ T994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.457600][ T994] usb 1-1: config 0 descriptor?? [ 1088.461505][ T994] hub 1-1:0.0: USB hub found [ 1089.571847][ T994] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1089.751589][T15384] FAULT_INJECTION: forcing a failure. [ 1089.751589][T15384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1089.751621][T15384] CPU: 1 UID: 0 PID: 15384 Comm: syz.3.3212 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1089.751638][T15384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1089.751647][T15384] Call Trace: [ 1089.751655][T15384] [ 1089.751662][T15384] dump_stack_lvl+0x189/0x250 [ 1089.751694][T15384] ? __pfx____ratelimit+0x10/0x10 [ 1089.751717][T15384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1089.751741][T15384] ? __pfx__printk+0x10/0x10 [ 1089.751761][T15384] ? __might_fault+0xb0/0x130 [ 1089.751790][T15384] should_fail_ex+0x46c/0x600 [ 1089.751819][T15384] _copy_from_user+0x2d/0xb0 [ 1089.751840][T15384] ____sys_sendmsg+0x2fa/0x820 [ 1089.751865][T15384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1089.751897][T15384] ? import_iovec+0x74/0xa0 [ 1089.751914][T15384] ___sys_sendmsg+0x21f/0x2a0 [ 1089.751933][T15384] ? __pfx____sys_sendmsg+0x10/0x10 [ 1089.751982][T15384] ? __fget_files+0x2a/0x420 [ 1089.752004][T15384] ? __fget_files+0x3a6/0x420 [ 1089.752040][T15384] __sys_sendmmsg+0x22d/0x430 [ 1089.752064][T15384] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1089.752092][T15384] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1089.752126][T15384] ? ksys_write+0x230/0x260 [ 1089.752154][T15384] __x64_sys_sendmmsg+0xa0/0xc0 [ 1089.752178][T15384] do_syscall_64+0xfa/0xfa0 [ 1089.752200][T15384] ? lockdep_hardirqs_on+0x9c/0x150 [ 1089.752222][T15384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.752239][T15384] ? clear_bhb_loop+0x60/0xb0 [ 1089.752261][T15384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.752276][T15384] RIP: 0033:0x7f7c44e9f749 [ 1089.752291][T15384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1089.752303][T15384] RSP: 002b:00007f7c43106038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1089.752319][T15384] RAX: ffffffffffffffda RBX: 00007f7c450f5fa0 RCX: 00007f7c44e9f749 [ 1089.752329][T15384] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003 [ 1089.752337][T15384] RBP: 00007f7c43106090 R08: 0000000000000000 R09: 0000000000000000 [ 1089.752346][T15384] R10: 0000000000000810 R11: 0000000000000246 R12: 0000000000000001 [ 1089.752354][T15384] R13: 00007f7c450f6038 R14: 00007f7c450f5fa0 R15: 00007ffd5b999d78 [ 1089.752377][T15384] [ 1090.010164][ T994] usbhid 1-1:0.0: can't add hid device: -71 [ 1090.010292][ T994] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1090.032518][ T994] usb 1-1: USB disconnect, device number 64 [ 1090.191724][ T61] Bluetooth: hci0: command tx timeout [ 1090.243690][T15291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.243922][T15291] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.244182][T15291] bridge_slave_0: entered allmulticast mode [ 1090.249950][T15291] bridge_slave_0: entered promiscuous mode [ 1090.511326][T14956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.519692][T15291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.519820][T15291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.520076][T15291] bridge_slave_1: entered allmulticast mode [ 1090.525439][T15291] bridge_slave_1: entered promiscuous mode [ 1090.867203][T15404] FAULT_INJECTION: forcing a failure. [ 1090.867203][T15404] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.867260][T15404] CPU: 1 UID: 0 PID: 15404 Comm: syz.3.3219 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1090.867283][T15404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1090.867294][T15404] Call Trace: [ 1090.867303][T15404] [ 1090.867312][T15404] dump_stack_lvl+0x189/0x250 [ 1090.867343][T15404] ? __pfx____ratelimit+0x10/0x10 [ 1090.867368][T15404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1090.867394][T15404] ? __pfx__printk+0x10/0x10 [ 1090.867421][T15404] ? __pfx___might_resched+0x10/0x10 [ 1090.867441][T15404] ? fs_reclaim_acquire+0x7d/0x100 [ 1090.867471][T15404] should_fail_ex+0x46c/0x600 [ 1090.867500][T15404] ? __d_alloc+0x36/0x7b0 [ 1090.867516][T15404] should_failslab+0xa8/0x100 [ 1090.867543][T15404] ? __d_alloc+0x36/0x7b0 [ 1090.867558][T15404] kmem_cache_alloc_lru_noprof+0x74/0x6b0 [ 1090.867580][T15404] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 1090.867601][T15404] ? inode_init_always_gfp+0x9d5/0xd70 [ 1090.867628][T15404] __d_alloc+0x36/0x7b0 [ 1090.867652][T15404] path_from_stashed+0x384/0x5c0 [ 1090.867692][T15404] pidfs_alloc_file+0xfa/0x280 [ 1090.867718][T15404] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 1090.867769][T15404] pidfd_prepare+0x155/0x1c0 [ 1090.867796][T15404] __se_sys_pidfd_open+0xcf/0x250 [ 1090.867822][T15404] ? __pfx___se_sys_pidfd_open+0x10/0x10 [ 1090.867860][T15404] do_syscall_64+0xfa/0xfa0 [ 1090.867885][T15404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.867902][T15404] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1090.867920][T15404] ? clear_bhb_loop+0x60/0xb0 [ 1090.867943][T15404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.867960][T15404] RIP: 0033:0x7f7c44e9f749 [ 1090.867977][T15404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1090.867993][T15404] RSP: 002b:00007f7c430c4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 1090.868014][T15404] RAX: ffffffffffffffda RBX: 00007f7c450f6180 RCX: 00007f7c44e9f749 [ 1090.868028][T15404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000007a8 [ 1090.868039][T15404] RBP: 00007f7c430c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1090.868052][T15404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.868063][T15404] R13: 00007f7c450f6218 R14: 00007f7c450f6180 R15: 00007ffd5b999d78 [ 1090.868096][T15404] [ 1091.713768][T15408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3221'. [ 1092.204465][T15291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.229444][T15291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.142830][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1093.142893][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1093.289783][T14956] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.621319][T15436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'. [ 1093.778379][T15291] team0: Port device team_slave_0 added [ 1093.846063][T15291] team0: Port device team_slave_1 added [ 1093.848873][ T3278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.849080][ T3278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.247922][T15291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.247933][T15291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.247948][T15291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.257842][ T8400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.257994][ T8400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.259645][T15291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.259659][T15291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.259685][T15291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.349694][T15291] hsr_slave_0: entered promiscuous mode [ 1095.351069][T15291] hsr_slave_1: entered promiscuous mode [ 1095.351981][T15291] debugfs: 'hsr0' already exists in 'hsr' [ 1095.352004][T15291] Cannot create hsr debugfs directory [ 1095.633300][ T5885] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1095.663186][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1095.677876][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1095.681713][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1095.683136][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1095.683891][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1095.793595][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 1095.829905][ T5885] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1095.830843][ T5885] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.830857][ T5885] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1095.832796][ T5885] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1095.832812][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.832822][ T5885] usb 5-1: Product: syz [ 1095.832830][ T5885] usb 5-1: Manufacturer: syz [ 1095.832837][ T5885] usb 5-1: SerialNumber: syz [ 1097.208040][ T3596] bridge_slave_1: left allmulticast mode [ 1097.208069][ T3596] bridge_slave_1: left promiscuous mode [ 1097.208573][ T3596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.299315][ T3596] bridge_slave_0: left allmulticast mode [ 1097.299724][ T3596] bridge_slave_0: left promiscuous mode [ 1097.302565][ T3596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.917916][ T5811] Bluetooth: hci2: command tx timeout [ 1099.080497][ T5885] usb 5-1: 0:2 : does not exist [ 1099.198337][ T5885] usb 5-1: USB disconnect, device number 78 [ 1099.291733][T15485] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3247'. [ 1099.498349][T15490] binder: 15489:15490 ioctl c0306201 200000000080 returned -14 [ 1100.129441][ T5811] Bluetooth: hci2: command tx timeout [ 1102.540352][ T5811] Bluetooth: hci2: command tx timeout [ 1102.625277][ T5885] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1102.821083][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 1102.822808][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.822841][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1102.822856][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1102.822868][ T5885] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1102.822880][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1102.823893][ T5885] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1102.823909][ T5885] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1102.823920][ T5885] usb 1-1: Manufacturer: syz [ 1102.829364][ T5885] usb 1-1: config 0 descriptor?? [ 1103.095266][ T5885] rc_core: IR keymap rc-hauppauge not found [ 1103.095288][ T5885] Registered IR keymap rc-empty [ 1103.098595][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1103.121322][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1103.313970][ T5885] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1103.317296][ T5885] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14 [ 1103.357342][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1103.393553][T15512] FAULT_INJECTION: forcing a failure. [ 1103.393553][T15512] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.393585][T15512] CPU: 1 UID: 0 PID: 15512 Comm: syz.4.3257 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1103.393607][T15512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1103.393618][T15512] Call Trace: [ 1103.393626][T15512] [ 1103.393635][T15512] dump_stack_lvl+0x189/0x250 [ 1103.393668][T15512] ? __pfx____ratelimit+0x10/0x10 [ 1103.393691][T15512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1103.393705][T15512] ? __pfx__printk+0x10/0x10 [ 1103.393720][T15512] ? __pfx___might_resched+0x10/0x10 [ 1103.393738][T15512] should_fail_ex+0x46c/0x600 [ 1103.393768][T15512] should_failslab+0xa8/0x100 [ 1103.393796][T15512] __kmalloc_noprof+0xcc/0x7d0 [ 1103.393819][T15512] ? kfree+0x51/0x950 [ 1103.393837][T15512] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1103.393862][T15512] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1103.393875][T15512] ? tomoyo_domain+0xda/0x130 [ 1103.393890][T15512] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1103.393907][T15512] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1103.393936][T15512] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1103.393967][T15512] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1103.393994][T15512] ? lockdep_hardirqs_on+0x9c/0x150 [ 1103.394040][T15512] ? __fget_files+0x2a/0x420 [ 1103.394056][T15512] ? __fget_files+0x3a6/0x420 [ 1103.394067][T15512] ? __fget_files+0x2a/0x420 [ 1103.394090][T15512] security_file_ioctl+0xcb/0x2d0 [ 1103.394112][T15512] __se_sys_ioctl+0x47/0x170 [ 1103.394135][T15512] do_syscall_64+0xfa/0xfa0 [ 1103.394165][T15512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.394182][T15512] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1103.394200][T15512] ? clear_bhb_loop+0x60/0xb0 [ 1103.394212][T15512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.394222][T15512] RIP: 0033:0x7f2ccbeff749 [ 1103.394233][T15512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1103.394241][T15512] RSP: 002b:00007f2cca166038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1103.394259][T15512] RAX: ffffffffffffffda RBX: 00007f2ccc155fa0 RCX: 00007f2ccbeff749 [ 1103.394273][T15512] RDX: 0000200000000640 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 1103.394286][T15512] RBP: 00007f2cca166090 R08: 0000000000000000 R09: 0000000000000000 [ 1103.394298][T15512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1103.394309][T15512] R13: 00007f2ccc156038 R14: 00007f2ccc155fa0 R15: 00007ffedbb0e7f8 [ 1103.394344][T15512] [ 1103.650585][T15512] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1103.813745][ C0] vkms_vblank_simulate: vblank timer overrun [ 1103.875752][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1103.897330][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1103.918467][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1103.940025][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1103.961350][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1103.982745][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1104.013764][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1104.249945][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1104.271303][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1104.296677][ T5885] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1104.296704][ T5885] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1104.306757][ T5885] usb 1-1: USB disconnect, device number 65 [ 1104.416295][ C0] vkms_vblank_simulate: vblank timer overrun [ 1104.536421][ C0] vkms_vblank_simulate: vblank timer overrun [ 1104.812683][ C0] vkms_vblank_simulate: vblank timer overrun [ 1104.846659][ T5811] Bluetooth: hci2: command tx timeout [ 1104.846960][ C0] vkms_vblank_simulate: vblank timer overrun [ 1104.891572][ C0] vkms_vblank_simulate: vblank timer overrun [ 1105.070161][ C0] vkms_vblank_simulate: vblank timer overrun [ 1105.302820][ C0] vkms_vblank_simulate: vblank timer overrun [ 1105.406720][ C0] vkms_vblank_simulate: vblank timer overrun [ 1105.786370][ C0] vkms_vblank_simulate: vblank timer overrun [ 1105.905502][ C0] vkms_vblank_simulate: vblank timer overrun [ 1106.006430][ C0] vkms_vblank_simulate: vblank timer overrun [ 1106.123678][ C0] vkms_vblank_simulate: vblank timer overrun [ 1106.182827][ C0] vkms_vblank_simulate: vblank timer overrun [ 1106.312635][ C0] vkms_vblank_simulate: vblank timer overrun [ 1106.573609][ T3596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1106.656640][ T3596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1106.702844][ T3596] bond0 (unregistering): Released all slaves [ 1107.055930][ C0] vkms_vblank_simulate: vblank timer overrun [ 1107.225933][ C0] vkms_vblank_simulate: vblank timer overrun [ 1107.457190][ T3596] hsr_slave_0: left promiscuous mode [ 1107.480103][ T3596] hsr_slave_1: left promiscuous mode [ 1107.480739][ T3596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1107.535065][ T3596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1107.950905][ C0] vkms_vblank_simulate: vblank timer overrun [ 1108.684203][ C0] vkms_vblank_simulate: vblank timer overrun [ 1109.638814][ C0] vkms_vblank_simulate: vblank timer overrun [ 1109.923738][ C0] vkms_vblank_simulate: vblank timer overrun [ 1110.493954][ T3596] team0 (unregistering): Port device team_slave_1 removed [ 1110.692836][T15565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3277'. [ 1111.210126][ T3596] team0 (unregistering): Port device team_slave_0 removed [ 1114.885259][T15600] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3291'. [ 1115.442352][T15609] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3294'. [ 1115.542895][T15464] chnl_net:caif_netlink_parms(): no params data found [ 1117.276406][T15464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.276677][T15464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.276916][T15464] bridge_slave_0: entered allmulticast mode [ 1117.289031][T15464] bridge_slave_0: entered promiscuous mode [ 1117.392371][T15464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.392503][T15464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.392724][T15464] bridge_slave_1: entered allmulticast mode [ 1117.400940][T15464] bridge_slave_1: entered promiscuous mode [ 1117.639987][T15640] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3304'. [ 1119.689951][T15464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.713680][T15657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3310'. [ 1119.742590][T15464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.388858][T15464] team0: Port device team_slave_0 added [ 1120.390008][T15291] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1120.430097][T15464] team0: Port device team_slave_1 added [ 1120.430787][T15291] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1120.510293][ T994] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1120.526878][T15291] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1120.681357][ T994] usb 5-1: Using ep0 maxpacket: 32 [ 1120.691674][ T994] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1120.691704][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.699139][ T994] usb 5-1: config 0 descriptor?? [ 1120.707876][ T994] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1121.822233][ T994] gspca_sunplus: reg_w_riv err -110 [ 1121.822336][ T994] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 1121.982256][ T994] IPVS: starting estimator thread 0... [ 1122.035946][T15291] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1122.087082][T15686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3320'. [ 1122.092895][T15681] IPVS: using max 10 ests per chain, 24000 per kthread [ 1122.096652][T15464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.096668][T15464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.096695][T15464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.171328][T15689] o2cb: This node has not been configured. [ 1122.171337][T15689] o2cb: Cluster check failed. Fix errors before retrying. [ 1122.171352][T15689] (syz.3.3321,15689,0):user_dlm_register:674 ERROR: status = -22 [ 1122.171367][T15689] (syz.3.3321,15689,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1122.237945][T15464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.237963][T15464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.237988][T15464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.482908][T15464] hsr_slave_0: entered promiscuous mode [ 1123.484560][T15464] hsr_slave_1: entered promiscuous mode [ 1123.485686][T15464] debugfs: 'hsr0' already exists in 'hsr' [ 1123.485711][T15464] Cannot create hsr debugfs directory [ 1123.489034][T14075] usb 5-1: USB disconnect, device number 79 [ 1124.235659][ T5892] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1124.404743][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1124.404794][ T5892] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 1124.404817][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.463891][ T5892] usb 4-1: config 0 descriptor?? [ 1124.497940][ T5872] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1124.658289][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 1124.663542][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.663564][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1124.663820][ T5872] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1124.663836][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.668246][ T5872] usb 5-1: config 0 descriptor?? [ 1124.846342][ T3596] bridge_slave_1: left allmulticast mode [ 1124.846368][ T3596] bridge_slave_1: left promiscuous mode [ 1124.846655][ T3596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.940233][ T5892] apple 0003:05AC:027D.0054: item fetching failed at offset 0/1 [ 1124.941782][ T5892] apple 0003:05AC:027D.0054: parse failed [ 1124.942108][ T5892] apple 0003:05AC:027D.0054: probe with driver apple failed with error -22 [ 1125.029065][ T3596] bridge_slave_0: left allmulticast mode [ 1125.029093][ T3596] bridge_slave_0: left promiscuous mode [ 1125.029593][ T3596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.149795][T15718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.150375][T15718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.261877][ T5872] logitech 0003:046D:C623.0055: unexpected long global item [ 1125.262711][ T5872] logitech 0003:046D:C623.0055: parse failed [ 1125.262826][ T5872] logitech 0003:046D:C623.0055: probe with driver logitech failed with error -22 [ 1125.659394][ T5872] usb 5-1: USB disconnect, device number 80 [ 1126.901795][ T994] usb 4-1: USB disconnect, device number 61 [ 1128.475453][ T3596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.485572][ T5896] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1128.539519][ T3596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.585394][ T3596] bond0 (unregistering): Released all slaves [ 1128.645902][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 1128.648221][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.648255][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1128.648296][ T5896] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1128.648318][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.653437][ T5896] usb 5-1: config 0 descriptor?? [ 1129.009491][ T3596] hsr_slave_0: left promiscuous mode [ 1129.054838][ T3596] hsr_slave_1: left promiscuous mode [ 1129.055712][ T3596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.079598][ T3596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.096620][ T5896] logitech 0003:046D:C623.0056: unexpected long global item [ 1129.097230][ T5896] logitech 0003:046D:C623.0056: parse failed [ 1129.097289][ T5896] logitech 0003:046D:C623.0056: probe with driver logitech failed with error -22 [ 1129.500415][ T5892] usb 5-1: USB disconnect, device number 81 [ 1129.833027][ T3596] team0 (unregistering): Port device team_slave_1 removed [ 1130.005710][ T3596] team0 (unregistering): Port device team_slave_0 removed [ 1130.794664][ T5872] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1130.972757][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 1130.981581][ T5872] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.981608][ T5872] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1130.984852][ T5872] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1130.984880][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.984899][ T5872] usb 5-1: Product: syz [ 1130.984912][ T5872] usb 5-1: Manufacturer: syz [ 1130.984926][ T5872] usb 5-1: SerialNumber: syz [ 1131.240326][ T5872] usb 5-1: 0:2 : does not exist [ 1131.247229][ T5872] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1131.264013][ T5872] usb 5-1: USB disconnect, device number 82 [ 1131.421320][T14572] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1131.618159][T15768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.618719][T15768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.625520][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3347'. [ 1131.936082][T15770] Bluetooth: MGMT ver 1.23 [ 1133.034017][T14572] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1133.034976][T14572] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1133.035010][T14572] usb 4-1: can't read configurations, error -71 [ 1133.341886][T15291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.585390][T15291] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.608641][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.608768][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.658717][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.658957][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.976408][T15809] o2cb: This node has not been configured. [ 1136.976424][T15809] o2cb: Cluster check failed. Fix errors before retrying. [ 1136.976450][T15809] (syz.0.3359,15809,1):user_dlm_register:674 ERROR: status = -22 [ 1136.976474][T15809] (syz.0.3359,15809,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1136.984699][T15291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.684438][T15464] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1137.740819][T15464] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1137.807270][T15464] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1137.887253][T15464] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1139.121187][T15291] veth0_vlan: entered promiscuous mode [ 1139.136162][ T5872] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1139.184436][T15291] veth1_vlan: entered promiscuous mode [ 1139.275065][T15291] veth0_macvtap: entered promiscuous mode [ 1139.293698][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 1139.301384][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.301417][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1139.301461][ T5872] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1139.301483][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.320381][ T5872] usb 1-1: config 0 descriptor?? [ 1139.347244][ T31] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1139.376632][T15464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.378300][T15291] veth1_macvtap: entered promiscuous mode [ 1139.518202][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 1139.520611][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.520644][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1139.520687][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1139.520719][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.526697][ T31] usb 4-1: config 0 descriptor?? [ 1139.592357][T15464] 8021q: adding VLAN 0 to HW filter on device team0 [ 1139.711383][ T3278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.711723][ T3278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1139.747877][T15291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1139.843317][ T3278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.843795][ T3278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1139.885614][T15291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1139.894078][ T5872] logitech 0003:046D:C623.0057: unexpected long global item [ 1139.894851][ T5872] logitech 0003:046D:C623.0057: parse failed [ 1139.894949][ T5872] logitech 0003:046D:C623.0057: probe with driver logitech failed with error -22 [ 1139.943742][ T8400] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.943987][ T8400] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.944195][ T8400] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.944383][ T8400] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.994359][ T31] logitech 0003:046D:C623.0058: unexpected long global item [ 1139.995147][ T31] logitech 0003:046D:C623.0058: parse failed [ 1139.995246][ T31] logitech 0003:046D:C623.0058: probe with driver logitech failed with error -22 [ 1140.317996][ T31] usb 1-1: USB disconnect, device number 66 [ 1140.399020][ T994] usb 4-1: USB disconnect, device number 64 [ 1140.499076][ T8400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.499100][ T8400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.640379][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.640399][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.831472][T15464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1141.936618][T15464] veth0_vlan: entered promiscuous mode [ 1141.958386][T15464] veth1_vlan: entered promiscuous mode [ 1142.115751][T15464] veth0_macvtap: entered promiscuous mode [ 1142.167512][T15464] veth1_macvtap: entered promiscuous mode [ 1142.272236][T15464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1142.307553][T15464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1142.369817][ T69] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.370266][ T69] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.370545][ T69] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.370964][ T69] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.575714][ T5892] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1142.619860][ T994] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1142.741138][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 1142.756498][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.756519][ T5892] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1142.756544][ T5892] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1142.756557][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.822183][ T994] usb 4-1: Using ep0 maxpacket: 32 [ 1142.829017][ T994] usb 4-1: config 32 has an invalid interface number: 245 but max is 0 [ 1142.829046][ T994] usb 4-1: config 32 has no interface number 0 [ 1142.829076][ T994] usb 4-1: config 32 interface 245 has no altsetting 0 [ 1142.858186][ T5892] usb 6-1: config 0 descriptor?? [ 1142.871313][ T994] usb 4-1: New USB device found, idVendor=12d1, idProduct=3a79, bcdDevice=65.e4 [ 1142.871344][ T994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.871364][ T994] usb 4-1: Product: syz [ 1142.871416][ T994] usb 4-1: Manufacturer: syz [ 1142.871433][ T994] usb 4-1: SerialNumber: syz [ 1143.674554][ T994] option 4-1:32.245: GSM modem (1-port) converter detected [ 1143.708535][ T994] usb 4-1: USB disconnect, device number 65 [ 1143.728929][ T994] option 4-1:32.245: device disconnected [ 1143.951084][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.951106][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.309017][ T3278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.309084][ T3278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.371835][ T994] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1144.437757][T15890] o2cb: This node has not been configured. [ 1144.437773][T15890] o2cb: Cluster check failed. Fix errors before retrying. [ 1144.437801][T15890] (syz.4.3378,15890,1):user_dlm_register:674 ERROR: status = -22 [ 1144.437824][T15890] (syz.4.3378,15890,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1144.490982][ T5892] usbhid 6-1:0.0: can't add hid device: -71 [ 1144.491111][ T5892] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1144.533590][ T5892] usb 6-1: USB disconnect, device number 2 [ 1144.553477][ T994] usb 1-1: Using ep0 maxpacket: 32 [ 1144.556050][ T994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.556082][ T994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.556129][ T994] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1144.556153][ T994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.617331][ T994] usb 1-1: config 0 descriptor?? [ 1144.626567][ T994] hub 1-1:0.0: USB hub found [ 1144.850388][ T994] hub 1-1:0.0: 1 port detected [ 1145.592067][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1145.605371][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1145.611028][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1145.639114][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.644394][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1145.649531][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1145.908035][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.212125][ T994] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 1146.212154][ T994] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 1146.240693][ T994] usbhid 1-1:0.0: can't add hid device: -32 [ 1146.240825][ T994] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1146.278531][ T994] usb 1-1: USB disconnect, device number 67 [ 1146.695852][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.843318][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.918044][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.212319][ C1] vkms_vblank_simulate: vblank timer overrun [ 1147.465898][T15933] o2cb: This node has not been configured. [ 1147.465913][T15933] o2cb: Cluster check failed. Fix errors before retrying. [ 1147.465937][T15933] (syz.1.3392,15933,0):user_dlm_register:674 ERROR: status = -22 [ 1147.465962][T15933] (syz.1.3392,15933,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1147.592698][ C1] vkms_vblank_simulate: vblank timer overrun [ 1147.842800][ T5811] Bluetooth: hci4: command tx timeout [ 1147.852929][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.565268][ C1] vkms_vblank_simulate: vblank timer overrun [ 1148.857875][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.081255][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3396'. [ 1149.141173][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3396'. [ 1149.332224][T14572] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1149.733843][T14572] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.733905][T14572] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1149.733954][T14572] usb 6-1: config 1 has no interface number 1 [ 1149.734535][T14572] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1149.734590][T14572] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1150.156623][T14572] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1150.156655][T14572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.156676][T14572] usb 6-1: Product: syz [ 1150.156691][T14572] usb 6-1: Manufacturer: syz [ 1150.156706][T14572] usb 6-1: SerialNumber: syz [ 1150.281634][ T5811] Bluetooth: hci4: command tx timeout [ 1150.323863][T15947] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1150.804700][T14572] usb 6-1: USB disconnect, device number 3 [ 1150.990723][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.202808][T15905] chnl_net:caif_netlink_parms(): no params data found [ 1151.591969][T15977] o2cb: This node has not been configured. [ 1151.591984][T15977] o2cb: Cluster check failed. Fix errors before retrying. [ 1151.592011][T15977] (syz.1.3406,15977,0):user_dlm_register:674 ERROR: status = -22 [ 1151.592035][T15977] (syz.1.3406,15977,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1152.718629][ T5811] Bluetooth: hci4: command tx timeout [ 1154.463643][ T5892] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1154.502940][T15905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.503067][T15905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.503282][T15905] bridge_slave_0: entered allmulticast mode [ 1154.540218][T15905] bridge_slave_0: entered promiscuous mode [ 1154.548737][T15905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.548944][T15905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.564661][T15905] bridge_slave_1: entered allmulticast mode [ 1154.567516][T15905] bridge_slave_1: entered promiscuous mode [ 1154.645451][ T5892] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1154.645481][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.651257][ T5892] usb 5-1: config 0 descriptor?? [ 1154.670256][ T5892] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1154.862318][T15905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.909339][T15905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.934099][ T5811] Bluetooth: hci4: command tx timeout [ 1154.972918][T16010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.973574][T16010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1155.006534][T15998] netlink: 'syz.4.3411': attribute type 27 has an invalid length. [ 1155.006560][T15998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3411'. [ 1155.053333][ T13] bridge_slave_1: left allmulticast mode [ 1155.053363][ T13] bridge_slave_1: left promiscuous mode [ 1155.053758][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.138606][ T13] bridge_slave_0: left allmulticast mode [ 1155.138638][ T13] bridge_slave_0: left promiscuous mode [ 1155.138914][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.227207][ T5892] gspca_spca508: reg_read err -110 [ 1155.228017][ T5892] gspca_spca508: reg_read err -32 [ 1155.228610][ T5892] gspca_spca508: reg_read err -32 [ 1155.228941][ T5892] gspca_spca508: reg_read err -32 [ 1155.229251][ T5892] gspca_spca508: reg_read err -32 [ 1155.229718][ T5892] gspca_spca508: reg write: error -32 [ 1155.229808][ T5892] spca508 5-1:0.0: probe with driver spca508 failed with error -32 [ 1155.244085][ T5885] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1155.834005][ T5885] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1155.834038][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1155.834064][ T5885] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1155.839744][ T5885] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1155.839775][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.839796][ T5885] usb 1-1: Product: syz [ 1155.839810][ T5885] usb 1-1: Manufacturer: syz [ 1155.839825][ T5885] usb 1-1: SerialNumber: syz [ 1155.873633][ T5885] usb 1-1: config 0 descriptor?? [ 1155.874988][T16009] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1155.875181][T16009] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1155.880459][ T5885] usb 1-1: ucan: probing device on interface #0 [ 1158.441363][ T13] bond0 (unregistering): (slave 5@ÿ): Releasing backup interface [ 1158.505903][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.552122][ T13] bond0 (unregistering): Released all slaves [ 1158.569071][T15998] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1158.723286][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1158.723359][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1158.735245][T14075] usb 5-1: USB disconnect, device number 83 [ 1158.821776][ T5885] ucan 1-1:0.0 can0: registered device [ 1158.824402][T15905] team0: Port device team_slave_0 added [ 1158.827165][ T5885] ucan 1-1:0.0 can0: firmware string: unknown [ 1158.833895][ T5885] usb 1-1: USB disconnect, device number 68 [ 1159.178294][T14075] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1159.181349][T15905] team0: Port device team_slave_1 added [ 1160.241767][T14075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.241802][T14075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.241848][T14075] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1160.241871][T14075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.297025][T14075] usb 5-1: config 0 descriptor?? [ 1161.432053][T14075] cm6533_jd 0003:0D8C:0022.0059: item fetching failed at offset 3/5 [ 1161.432851][T14075] cm6533_jd 0003:0D8C:0022.0059: parse failed [ 1161.432952][T14075] cm6533_jd 0003:0D8C:0022.0059: probe with driver cm6533_jd failed with error -22 [ 1161.634069][T14075] usb 5-1: USB disconnect, device number 84 [ 1162.088660][T15905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.088677][T15905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.088700][T15905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.091198][T15905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.091211][T15905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.091234][T15905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1163.580149][T15905] hsr_slave_0: entered promiscuous mode [ 1163.581332][T15905] hsr_slave_1: entered promiscuous mode [ 1163.582072][T15905] debugfs: 'hsr0' already exists in 'hsr' [ 1163.582095][T15905] Cannot create hsr debugfs directory [ 1164.042883][ T13] hsr_slave_0: left promiscuous mode [ 1164.086390][ T13] hsr_slave_1: left promiscuous mode [ 1164.087100][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1164.087125][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1164.121252][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1164.121279][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1164.248261][ T13] veth1_macvtap: left promiscuous mode [ 1164.248372][ T13] veth0_macvtap: left promiscuous mode [ 1164.248651][ T13] veth1_vlan: left promiscuous mode [ 1164.248847][ T13] veth0_vlan: left promiscuous mode [ 1164.630796][T16084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3439'. [ 1168.383419][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1168.630162][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1173.738028][T16115] o2cb: This node has not been configured. [ 1173.738046][T16115] o2cb: Cluster check failed. Fix errors before retrying. [ 1173.738073][T16115] (syz.4.3449,16115,0):user_dlm_register:674 ERROR: status = -22 [ 1173.738100][T16115] (syz.4.3449,16115,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1176.270954][T16152] o2cb: This node has not been configured. [ 1176.270969][T16152] o2cb: Cluster check failed. Fix errors before retrying. [ 1176.270995][T16152] (syz.4.3462,16152,0):user_dlm_register:674 ERROR: status = -22 [ 1176.271019][T16152] (syz.4.3462,16152,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1180.282116][ T5885] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1180.416989][T15905] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1180.440375][T16203] FAULT_INJECTION: forcing a failure. [ 1180.440375][T16203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1180.440398][T16203] CPU: 0 UID: 0 PID: 16203 Comm: syz.5.3478 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1180.440419][T16203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1180.440425][T16203] Call Trace: [ 1180.440431][T16203] [ 1180.440436][T16203] dump_stack_lvl+0x189/0x250 [ 1180.440456][T16203] ? __pfx____ratelimit+0x10/0x10 [ 1180.440471][T16203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1180.440485][T16203] ? __pfx__printk+0x10/0x10 [ 1180.440497][T16203] ? __might_fault+0xb0/0x130 [ 1180.440516][T16203] should_fail_ex+0x46c/0x600 [ 1180.440533][T16203] _copy_from_user+0x2d/0xb0 [ 1180.440546][T16203] kstrtouint_from_user+0xc4/0x170 [ 1180.440562][T16203] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1180.440585][T16203] proc_fail_nth_write+0x88/0x200 [ 1180.440596][T16203] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1180.440610][T16203] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1180.440621][T16203] vfs_write+0x287/0xb40 [ 1180.440639][T16203] ? __pfx_vfs_write+0x10/0x10 [ 1180.440649][T16203] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1180.440669][T16203] ? mutex_lock_nested+0x154/0x1d0 [ 1180.440679][T16203] ? fdget_pos+0x253/0x320 [ 1180.440697][T16203] ksys_write+0x14b/0x260 [ 1180.440710][T16203] ? __pfx_ksys_write+0x10/0x10 [ 1180.440724][T16203] ? do_syscall_64+0xbe/0xfa0 [ 1180.440740][T16203] do_syscall_64+0xfa/0xfa0 [ 1180.440752][T16203] ? lockdep_hardirqs_on+0x9c/0x150 [ 1180.440765][T16203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.440775][T16203] ? clear_bhb_loop+0x60/0xb0 [ 1180.440787][T16203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.440797][T16203] RIP: 0033:0x7f5142a2e1ff [ 1180.440807][T16203] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1180.440817][T16203] RSP: 002b:00007f5140c8e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1180.440829][T16203] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5142a2e1ff [ 1180.440836][T16203] RDX: 0000000000000001 RSI: 00007f5140c8e0a0 RDI: 0000000000000004 [ 1180.440843][T16203] RBP: 00007f5140c8e090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.440849][T16203] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1180.440855][T16203] R13: 00007f5142c86038 R14: 00007f5142c85fa0 R15: 00007ffc0289f578 [ 1180.440872][T16203] [ 1180.452475][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 1180.495357][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.495389][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.495428][ T5885] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1180.495452][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.612964][T14572] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1180.743405][ T5885] usb 5-1: config 0 descriptor?? [ 1180.760980][ T5885] hub 5-1:0.0: USB hub found [ 1180.772079][T15905] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1180.775346][T14572] usb 1-1: config 0 has an invalid descriptor of length 38, skipping remainder of the config [ 1180.775372][T14572] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1180.775407][T14572] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1180.775430][T14572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.780493][T14572] usb 1-1: config 0 descriptor?? [ 1181.263576][T15905] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1181.298252][ T5885] hub 5-1:0.0: 1 port detected [ 1181.310535][T15905] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1181.494038][T15905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.516285][T15905] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.531652][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.532070][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.570886][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.571076][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.596427][T14572] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1181.756767][T14572] usb 6-1: Using ep0 maxpacket: 16 [ 1181.759067][T14572] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.759088][T14572] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1181.759131][T14572] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1181.759154][T14572] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.768326][T14572] usb 6-1: config 0 descriptor?? [ 1181.828542][ T5885] usb 5-1: USB disconnect, device number 85 [ 1181.993417][T15905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.092448][T15905] veth0_vlan: entered promiscuous mode [ 1182.109194][T15905] veth1_vlan: entered promiscuous mode [ 1182.166372][T15905] veth0_macvtap: entered promiscuous mode [ 1182.171599][T15905] veth1_macvtap: entered promiscuous mode [ 1182.202498][T15905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1182.225419][T15905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1182.246061][T14572] logitech 0003:046D:C623.005A: unexpected long global item [ 1182.246903][T14572] logitech 0003:046D:C623.005A: parse failed [ 1182.247009][T14572] logitech 0003:046D:C623.005A: probe with driver logitech failed with error -22 [ 1182.271229][ T3278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.275022][ T3278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.278588][ T3278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.278643][ T3278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.586424][ T3278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1182.586446][ T3278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1182.652498][ T5885] usb 6-1: USB disconnect, device number 4 [ 1182.685815][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1182.685838][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1182.743387][T14075] usb 1-1: USB disconnect, device number 69 [ 1182.853712][T16232] o2cb: This node has not been configured. [ 1182.853727][T16232] o2cb: Cluster check failed. Fix errors before retrying. [ 1182.853754][T16232] (syz.0.3485,16232,1):user_dlm_register:674 ERROR: status = -22 [ 1182.853779][T16232] (syz.0.3485,16232,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1183.179686][T16245] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3488'. [ 1183.223713][T16236] kvm: apic: phys broadcast and lowest prio [ 1183.461687][ T5807] ------------[ cut here ]------------ [ 1183.461709][ T5807] WARNING: CPU: 0 PID: 5807 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 1183.461755][ T5807] Modules linked in: [ 1183.461775][ T5807] CPU: 0 UID: 0 PID: 5807 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1183.461799][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1183.461813][ T5807] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 1183.461841][ T5807] Code: c7 c7 10 46 c5 8e 48 c7 c6 c6 2b da 8c 48 c7 c2 8c 01 d9 8c 4c 89 f9 e8 42 5d f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 e4 3e 04 09 0f 1f 40 00 90 90 [ 1183.461859][ T5807] RSP: 0018:ffffc900048b7ac0 EFLAGS: 00010206 [ 1183.461876][ T5807] RAX: 2728d5ebe87cde00 RBX: ffff888027b5cd00 RCX: 0000000000000000 [ 1183.461892][ T5807] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 1183.461907][ T5807] RBP: ffffc900048b7c28 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 1183.461924][ T5807] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 1ffff11005332b5d [ 1183.461940][ T5807] R13: 0000000000000009 R14: ffff888027b5cd08 R15: ffff888035d69e00 [ 1183.461955][ T5807] FS: 0000555575206500(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000 [ 1183.461974][ T5807] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1183.461989][ T5807] CR2: 000020000083e000 CR3: 000000003e4e4000 CR4: 00000000003526f0 [ 1183.462006][ T5807] Call Trace: [ 1183.462014][ T5807] [ 1183.462025][ T5807] do_exit+0x105/0x2300 [ 1183.462054][ T5807] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1183.462087][ T5807] ? __lock_acquire+0xab9/0xd20 [ 1183.462122][ T5807] ? __pfx_do_exit+0x10/0x10 [ 1183.462148][ T5807] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1183.462173][ T5807] ? rt_spin_lock+0x1c1/0x3e0 [ 1183.462202][ T5807] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1183.462235][ T5807] do_group_exit+0x21c/0x2d0 [ 1183.462256][ T5807] ? rt_spin_unlock+0x161/0x200 [ 1183.462283][ T5807] get_signal+0x125d/0x1310 [ 1183.462333][ T5807] arch_do_signal_or_restart+0xa0/0x790 [ 1183.462367][ T5807] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1183.462408][ T5807] ? exit_to_user_mode_loop+0x40/0x130 [ 1183.462441][ T5807] exit_to_user_mode_loop+0x72/0x130 [ 1183.462468][ T5807] do_syscall_64+0x2bd/0xfa0 [ 1183.462497][ T5807] ? lockdep_hardirqs_on+0x9c/0x150 [ 1183.462525][ T5807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.462547][ T5807] ? clear_bhb_loop+0x60/0xb0 [ 1183.462573][ T5807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.462605][ T5807] RIP: 0033:0x7f2ccbefe15c [ 1183.462624][ T5807] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1183.462642][ T5807] RSP: 002b:00007ffedbb0eb50 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1183.462680][ T5807] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f2ccbefe15c [ 1183.462695][ T5807] RDX: 0000000000000030 RSI: 00007ffedbb0ec10 RDI: 00000000000000f9 [ 1183.462710][ T5807] RBP: 00007ffedbb0ebbc R08: 0000000000000000 R09: 00007ffedbb0e8c7 [ 1183.462725][ T5807] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000002b9 [ 1183.462738][ T5807] R13: 00000000000927c0 R14: 0000000000116120 R15: 00007ffedbb0ec10 [ 1183.462775][ T5807] [ 1183.462789][ T5807] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1183.462805][ T5807] CPU: 0 UID: 0 PID: 5807 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1183.462828][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1183.462841][ T5807] Call Trace: [ 1183.462857][ T5807] [ 1183.462866][ T5807] dump_stack_lvl+0x99/0x250 [ 1183.462898][ T5807] ? __asan_memcpy+0x40/0x70 [ 1183.462923][ T5807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1183.462954][ T5807] ? __pfx__printk+0x10/0x10 [ 1183.462995][ T5807] vpanic+0x237/0x6d0 [ 1183.463016][ T5807] ? __pfx_vpanic+0x10/0x10 [ 1183.463048][ T5807] panic+0xb9/0xc0 [ 1183.463068][ T5807] ? __pfx_panic+0x10/0x10 [ 1183.463124][ T5807] __warn+0x31b/0x4b0 [ 1183.463143][ T5807] ? kcov_task_exit+0x13c/0x150 [ 1183.463173][ T5807] ? kcov_task_exit+0x13c/0x150 [ 1183.463200][ T5807] report_bug+0x2be/0x4f0 [ 1183.463229][ T5807] ? kcov_task_exit+0x13c/0x150 [ 1183.463256][ T5807] ? kcov_task_exit+0x13c/0x150 [ 1183.463283][ T5807] ? kcov_task_exit+0x13e/0x150 [ 1183.463310][ T5807] handle_bug+0x84/0x160 [ 1183.463332][ T5807] exc_invalid_op+0x1a/0x50 [ 1183.463359][ T5807] asm_exc_invalid_op+0x1a/0x20 [ 1183.463379][ T5807] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 1183.463406][ T5807] Code: c7 c7 10 46 c5 8e 48 c7 c6 c6 2b da 8c 48 c7 c2 8c 01 d9 8c 4c 89 f9 e8 42 5d f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 e4 3e 04 09 0f 1f 40 00 90 90 [ 1183.463424][ T5807] RSP: 0018:ffffc900048b7ac0 EFLAGS: 00010206 [ 1183.463442][ T5807] RAX: 2728d5ebe87cde00 RBX: ffff888027b5cd00 RCX: 0000000000000000 [ 1183.463457][ T5807] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 1183.463472][ T5807] RBP: ffffc900048b7c28 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 1183.463488][ T5807] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 1ffff11005332b5d [ 1183.463504][ T5807] R13: 0000000000000009 R14: ffff888027b5cd08 R15: ffff888035d69e00 [ 1183.463527][ T5807] ? rt_spin_lock+0x1c1/0x3e0 [ 1183.463562][ T5807] do_exit+0x105/0x2300 [ 1183.463592][ T5807] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1183.463625][ T5807] ? __lock_acquire+0xab9/0xd20 [ 1183.463659][ T5807] ? __pfx_do_exit+0x10/0x10 [ 1183.463687][ T5807] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1183.463711][ T5807] ? rt_spin_lock+0x1c1/0x3e0 [ 1183.463740][ T5807] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1183.463774][ T5807] do_group_exit+0x21c/0x2d0 [ 1183.463793][ T5807] ? rt_spin_unlock+0x161/0x200 [ 1183.463821][ T5807] get_signal+0x125d/0x1310 [ 1183.463871][ T5807] arch_do_signal_or_restart+0xa0/0x790 [ 1183.463898][ T5807] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1183.463940][ T5807] ? exit_to_user_mode_loop+0x40/0x130 [ 1183.463972][ T5807] exit_to_user_mode_loop+0x72/0x130 [ 1183.464000][ T5807] do_syscall_64+0x2bd/0xfa0 [ 1183.464028][ T5807] ? lockdep_hardirqs_on+0x9c/0x150 [ 1183.464058][ T5807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.464079][ T5807] ? clear_bhb_loop+0x60/0xb0 [ 1183.464104][ T5807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.464125][ T5807] RIP: 0033:0x7f2ccbefe15c [ 1183.464141][ T5807] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1183.464159][ T5807] RSP: 002b:00007ffedbb0eb50 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1183.464179][ T5807] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f2ccbefe15c [ 1183.464195][ T5807] RDX: 0000000000000030 RSI: 00007ffedbb0ec10 RDI: 00000000000000f9 [ 1183.464209][ T5807] RBP: 00007ffedbb0ebbc R08: 0000000000000000 R09: 00007ffedbb0e8c7 [ 1183.464224][ T5807] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000002b9 [ 1183.464238][ T5807] R13: 00000000000927c0 R14: 0000000000116120 R15: 00007ffedbb0ec10 [ 1183.464272][ T5807] [ 1183.464622][ T5807] Kernel Offset: disabled