last executing test programs: 24.5411603s ago: executing program 3 (id=363): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000000c0)=0x100040, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) syz_open_dev$sg(&(0x7f0000001600), 0x3, 0x10f00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x2200c001) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_get$uid(0x3, 0xee01) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 23.534944636s ago: executing program 3 (id=366): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x1}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xa}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xffffffff}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xe}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x9}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x97}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x10}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x0, 0xd28, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:scsi_generic_device_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x24000014) r3 = syz_open_dev$audion(&(0x7f0000000340), 0x20e, 0x2800) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3a15}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400000}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x244}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8}}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffe0}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xdd6c}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xd38}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r2, 0x100, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xd0) ftruncate(r3, 0x7) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000700)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040020) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000800)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000840)={0x48, 0x1, r6, 0x0, 0x3, 0x1}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r8, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a40), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) sendmsg$tipc(r3, &(0x7f0000000f00)={&(0x7f0000000b40)=@id={0x1e, 0x3, 0x0, {0x3, 0x4}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="3efeb29d3d3186546844ca355462905316d7ec54d6040ae981ce60a8c36bbd1586442ad174a9802537ee60bbf64a", 0x2e}, {&(0x7f0000000bc0)="d7d9aa4fa6a87ed72b6a5f2479325b07e59b2744280dddbadff23dcf0a70f90eeccf2cc9bdae4000d8a02661bf0af40e00e3a02a1e0bf65c9f17fb406da2d61292bf8263818185b866d0934c246b17358337d73e64a3f121b51bc54133afa14effbb8cfdeea2f8fef371da75db12ad5d5e029a3cb8d9385c22847a12c590903d417794d8ad7df412c7808cba197546c730c3581d8a0d019d6935b579de404affb188284b71129185cc78ac64be3ae20110570e07c4be7bafad68d4d15ad1c8acaf1b671d9770995285798e", 0xcb}, {&(0x7f0000000cc0)="afe66ffa22c816092d3a672a0cded3242f427320aac873ce9b8733d69c74d0b58083cabeae0a7980c9", 0x29}, {&(0x7f0000000d00)="023767540f78c50481252e7341d360499a0eecc2f57dd28df01d9cc416f59bdd4494fcc6ae4a4490741bbbba55ce3b86bba828a2cf6ef5ed114be0a541bb6798bd02a18fad2116a81a9f8b20d7189e3ce93ad1bd39d9b5de028b483bf0e1b13cff7fc63cd5d656a7da3a71642042bf5f324886eec7549340c6249272e4ad7122eea496a2d017dff6bde36ea03d00359bec3a07fdb4d86bcf32", 0x99}], 0x4, &(0x7f0000000e00)="fe2959834939bf798b4d1f4520a4f55cf4ec69016a3a28ca0e122c98991459195ba8555132c67373465305124a80d72228c6b1a708cf35399e1550de3c400dddac1cb507b6de7593c5a8f3b63363033055960e76ba9054334d55c5e60ec44523227887901f41399fa09304f1d44dcb5d25347b14cf0ad66361654c1922bdcee0a97d0c1b9922017cb0dcc658381f039e76e78f9e800c2a04acfde1cea5a20f229a9871da1e387cb9a75a49c31655c927101c0f5b28c0b616f24be81cc41fb158c679593333bef48911b2602da933c6121b4b116179b12244bb727d", 0xdb, 0x240040d0}, 0x0) r10 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x7, 0x3, 0x47}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x8c, 0x81}}]}}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x310, 0x3, 0x6, 0x8}, 0x32, &(0x7f0000000fc0)={0x5, 0xf, 0x32, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x3, 0x0, 0x6b8, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x9, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0xd, 0x8, 0xf}, @wireless={0xb, 0x10, 0x1, 0x8, 0x61, 0x3, 0xff, 0x6164, 0xb8}]}, 0x3, [{0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x81d}}, {0x2f, &(0x7f0000001040)=@string={0x2f, 0x3, "5ce77dce3c6ce48a274ba49c5ecf0ee5d9d57243fa3122e1300a0a90c3bdf920bac930ba2761cf158cafc806d1"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x2c01}}]}) syz_usb_control_io$printer(r10, &(0x7f0000001280)={0x14, &(0x7f0000001100)={0x20, 0xf, 0x96, {0x96, 0x5, "8cb6c27dc5e966116f1726b13ab17245ec57b2c2cd6a8eb40aeb8d8db6f140bb36111ca4da7098645b08aabd6f033d1b2ac253d9569891df6132f27171a2d31416affec6d789c23eb3b56f86975f0edd015326e4735a938956dda107f344c338bded519ae03294270fefcb18170a01c52aad8b2172644d21f7da9ccd0cc0a43d9711b188440c6a6a1a8b3bb6e038b5cb600fddd4"}}, &(0x7f00000011c0)={0x0, 0x3, 0x88, @string={0x88, 0x3, "4b60b44f23abe9b1345bdb534ef8af96d93d5d558cf7f54c3529a1a02769265243ac420264a8f8df47ee8f284699c891a0a61d2de40ed2a180b2b11f9654ca141395906cde0861b368d6ed80e7872fe9e3bf15673cd299bcf357a87b95d0cd7efddb993ed60205a358a8fbd4a372af4178e64c4cb0693fafc0d09ef48fb3053cf7533309487d"}}}, &(0x7f00000015c0)={0x34, &(0x7f00000012c0)={0x0, 0x16, 0xe5, "c1fb9f817fa3aa7d175686438de8c2e0dd1331e78b4bee78161a2292f1a27456120c2e1f9d6aaada1abc5f404f0bd6c55087fa33c950ad4a1f225234950c716a82fed2cc862c8e231df4af6191c08222397d2d0d398e705e0a5e104cb0651be90a136098ab09b5edf5bcd911155bff794d36a9eab00be397d41d945290a1e17f430ccdca3074b02c0b2f45c6bce1109ee10e9b0b5e6c2bdd13fcc60ca31cb1f6feb05d399d3c864efcb1928062385d443a876afe77f9613aa0123789d6ff3ba91f463314fcd9a6339a46619c4d95e086920356d4046a0b6d5f41ba6a47faed24f52554d142"}, &(0x7f00000013c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001400)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001440)={0x20, 0x0, 0xd9, {0xd7, "e1e3b1cefe9a44c8f9f174edd378371e72e9b2b34367bb4da63f6fff2adc38fb4a0ef9b5f6a1cfc5abf157142611e2da352b9428a1fdf0b4a7d812afa010bad55fe770c481cece5876bc1176c3cce78b7c127bb5add75c1f2299285bc3b908dda2d16894b5580b6a3c7ef125779958d08c67c6f79b3d717fa2d68d8cde287648aacf8d76b8fb8cc784e197d95c14aa3ed7f056f167a6eb3031a9d5c307458bb7810f915f9f5755b688fa28a9e2d3c6b8e98e9d42601dbde740eabdb6a2eef44a4fc5ca5b661cac0b9def3e7cef53cb0e55cdfa6aea4e9c"}}, &(0x7f0000001540)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000001580)={0x20, 0x0, 0x1, 0x9}}) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x24, 0xc, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008004) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001740), r4) sendmsg$NLBL_MGMT_C_LISTDEF(r11, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x2c, r12, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000001a80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x50, 0x2, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xa, 0x33, 0x4}}}}}]}}]}}, &(0x7f0000001d00)={0xa, &(0x7f0000001ac0)={0xa, 0x6, 0x300, 0x6, 0xfc, 0x7, 0x8, 0x72}, 0x1b, &(0x7f0000001b00)={0x5, 0xf, 0x1b, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x6, 0xf, 0xfffa}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x8b, 0x6c, 0x80}]}, 0x4, [{0x5e, &(0x7f0000001b40)=@string={0x5e, 0x3, "fdb38141e51dd0eac7ededf134c64a388f716d55dac40d9842f02f270b64d27f9e3ad0586168d8216ae32b71d1be6f77c9b8d6886ccd59de001cc1c42866cb03fdd6c122a5fce30eac135e10d1aadd93889511f361693247e40955aa"}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x419}}, {0x6f, &(0x7f0000001c00)=@string={0x6f, 0x3, "bf7509eeb81a29d82047eff20e7c64c155003ec09b3293bd32ae2da2915a4359358c5ab86e0a35c64d0e7a6a71e559cdd475abf8546df9b5e5032e8cb1ef3e80fee9924c33ae2d24a01e03f23b4f536a680ee6e1347ea966832e68761e9b43f8a7b337b9fa98000513f4a90470"}}, {0x49, &(0x7f0000001c80)=@string={0x49, 0x3, "7ec14bdf159c9854c811584cad9a7223116832301e93ea72e0ee0b73d06d65e6e15aad89830d4ecfef7ffe7d4026221f01b5dde08717a71d539c04665c9140872f74ed25754a06"}}]}) 23.097641693s ago: executing program 0 (id=371): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000040), 0xb6e, 0x94100) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000000c0)) r2 = dup(0xffffffffffffffff) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d52c0], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0xfffffffc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) 21.956705404s ago: executing program 0 (id=374): r0 = getpid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x24, 0x4, @tid=r0}, &(0x7f00000001c0)=0x0) r2 = syz_open_dev$I2C(&(0x7f0000000240), 0x80000000000000, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0xfff5, 0x0}], 0x1}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r4 = syz_io_uring_setup(0x4431, &(0x7f0000000080)={0x0, 0x3416, 0x10, 0xfffffffe, 0x29b, 0x0, r3}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r4, 0x2def, 0x9566, 0x0, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x40, 0x8, 0x3, 0x4, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x68, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010100, @remote, {[@generic={0x89, 0x4, "72fe"}]}}}}}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c00000010000104000000001000080000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400140064766d7270310000000000000000000008000500", @ANYRES32=r8, @ANYBLOB="2c00198014000500f101345d77ddf75dc9b07a86f3808625140005a978cde21bbf110c00000000000000040014000500100002000000"], 0x7c}}, 0x4000000) socket$tipc(0x1e, 0x4, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x2}}, 0xfffffffffffffe0e) 21.692010512s ago: executing program 0 (id=376): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) getresuid(&(0x7f0000000180), &(0x7f0000000f80), &(0x7f0000000fc0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xab8a1a43d2f00956}, 0x4044011) 21.385569835s ago: executing program 0 (id=379): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a0069ae26bd7000000000001c0000"], 0x24}}, 0x0) 21.332779597s ago: executing program 0 (id=380): add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000080)="001801020200", 0x6, 0xfffffffffffffffb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getegid() r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x0, @private=0xa010101}, {0x2, 0x4e24, @broadcast}, 0x22, 0x0, 0x0, 0x0, 0xb, 0x0, 0x5, 0x4, 0x6}) 21.218381106s ago: executing program 0 (id=381): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) syz_open_dev$MSR(&(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000000380)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151", 0x44}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000002c0)="ee3714aa7756572d12ad3cd80207f0", 0xf}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000480)={0x4, {{0xa, 0x1000, 0x5, @local}}, {{0xa, 0xfffc, 0x0, @local, 0x2}}}, 0x108) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 20.117213387s ago: executing program 4 (id=382): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000040)={0x3, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}}, 0x90) 20.096133694s ago: executing program 3 (id=383): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000180)={0x84, &(0x7f00000000c0)={0xf0, 0x11, 0x1f, "e1387d78504c9aafc20bf89dc3f87e658aa0e5a1b8059c619a92f2e9f9aed9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}}, @NFT_MSG_NEWSET={0x18, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_USERDATA={0x4}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x24008010) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a40)={0x18, 0x12, 0x1, 0x70bd2d, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}, @nested={0x4, 0x35}]}, 0x18}], 0x1}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x141601, 0x0) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000007d0000007d000000030000000f0000000000000c04000000060000000500000f0100000001000000e4baef76feffffff03000000080000000004000003000000fffff07f4f0600000500000008000000030000000394a2d947ef19851a0000000d080000000000000c050000000d000000000000070000000008000000000000010000000019004a05000000005f00"], &(0x7f0000000180)=""/104, 0x9b, 0x68, 0x0, 0x2, 0x10000, @value=r7}, 0x28) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) socket$nl_generic(0x10, 0x3, 0x10) 19.452771716s ago: executing program 4 (id=387): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="ceeac06d39d4", @remote, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local, {[@generic={0x0, 0x6, "f50c8c72"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="fe"]) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000000)) 17.95778812s ago: executing program 4 (id=390): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r1, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r5 = socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1080001000002020000000000080005007a010401a80016002000034004020000035c0461c9d67f4f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c851dc0c1cd706ff2f41398d8e7429039e7ff837d3150d78569e4243b96f7e5080199891344de62a210156a7b0a", 0xd8}], 0x1}, 0x20054000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'bond0\x00', &(0x7f00000004c0)=@ethtool_ringparam={0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}) 15.818449546s ago: executing program 2 (id=392): r0 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$addseals(r0, 0x409, 0x3f) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x4c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r2, 0x108, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x6c}}, 0x48080) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)=@fragment={0xb6, 0x0, 0x92, 0x0, 0x0, 0x1b, 0x65}, 0x8) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setpgid(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') 14.462162433s ago: executing program 2 (id=394): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900", @ANYBLOB], 0x294}}, 0x20000800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg(r9, &(0x7f00000000c0)={0x0, 0xfffffffffffffdea, &(0x7f00000000c0), 0x15}, 0x40851) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) 14.395143491s ago: executing program 3 (id=395): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x1}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xa}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xffffffff}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xe}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x9}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x97}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x10}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x0, 0xd28, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:scsi_generic_device_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x24000014) r3 = syz_open_dev$audion(&(0x7f0000000340), 0x20e, 0x2800) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3a15}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400000}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x244}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8}}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffe0}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xdd6c}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xd38}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r2, 0x100, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xd0) ftruncate(r3, 0x7) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000700)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040020) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000800)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000840)={0x48, 0x1, r6, 0x0, 0x3, 0x1}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r8, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a40), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) sendmsg$tipc(r3, &(0x7f0000000f00)={&(0x7f0000000b40)=@id={0x1e, 0x3, 0x0, {0x3, 0x4}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="3efeb29d3d3186546844ca355462905316d7ec54d6040ae981ce60a8c36bbd1586442ad174a9802537ee60bbf64a", 0x2e}, {&(0x7f0000000bc0)="d7d9aa4fa6a87ed72b6a5f2479325b07e59b2744280dddbadff23dcf0a70f90eeccf2cc9bdae4000d8a02661bf0af40e00e3a02a1e0bf65c9f17fb406da2d61292bf8263818185b866d0934c246b17358337d73e64a3f121b51bc54133afa14effbb8cfdeea2f8fef371da75db12ad5d5e029a3cb8d9385c22847a12c590903d417794d8ad7df412c7808cba197546c730c3581d8a0d019d6935b579de404affb188284b71129185cc78ac64be3ae20110570e07c4be7bafad68d4d15ad1c8acaf1b671d9770995285798e", 0xcb}, {&(0x7f0000000cc0)="afe66ffa22c816092d3a672a0cded3242f427320aac873ce9b8733d69c74d0b58083cabeae0a7980c9", 0x29}, {&(0x7f0000000d00)="023767540f78c50481252e7341d360499a0eecc2f57dd28df01d9cc416f59bdd4494fcc6ae4a4490741bbbba55ce3b86bba828a2cf6ef5ed114be0a541bb6798bd02a18fad2116a81a9f8b20d7189e3ce93ad1bd39d9b5de028b483bf0e1b13cff7fc63cd5d656a7da3a71642042bf5f324886eec7549340c6249272e4ad7122eea496a2d017dff6bde36ea03d00359bec3a07fdb4d86bcf32", 0x99}], 0x4, &(0x7f0000000e00)="fe2959834939bf798b4d1f4520a4f55cf4ec69016a3a28ca0e122c98991459195ba8555132c67373465305124a80d72228c6b1a708cf35399e1550de3c400dddac1cb507b6de7593c5a8f3b63363033055960e76ba9054334d55c5e60ec44523227887901f41399fa09304f1d44dcb5d25347b14cf0ad66361654c1922bdcee0a97d0c1b9922017cb0dcc658381f039e76e78f9e800c2a04acfde1cea5a20f229a9871da1e387cb9a75a49c31655c927101c0f5b28c0b616f24be81cc41fb158c679593333bef48911b2602da933c6121b4b116179b12244bb727d", 0xdb, 0x240040d0}, 0x0) r10 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x7, 0x3, 0x47}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x8c, 0x81}}]}}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x310, 0x3, 0x6, 0x8}, 0x32, &(0x7f0000000fc0)={0x5, 0xf, 0x32, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x3, 0x0, 0x6b8, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x9, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0xd, 0x8, 0xf}, @wireless={0xb, 0x10, 0x1, 0x8, 0x61, 0x3, 0xff, 0x6164, 0xb8}]}, 0x3, [{0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x81d}}, {0x2f, &(0x7f0000001040)=@string={0x2f, 0x3, "5ce77dce3c6ce48a274ba49c5ecf0ee5d9d57243fa3122e1300a0a90c3bdf920bac930ba2761cf158cafc806d1"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x2c01}}]}) syz_usb_control_io$printer(r10, &(0x7f0000001280)={0x14, &(0x7f0000001100)={0x20, 0xf, 0x96, {0x96, 0x5, "8cb6c27dc5e966116f1726b13ab17245ec57b2c2cd6a8eb40aeb8d8db6f140bb36111ca4da7098645b08aabd6f033d1b2ac253d9569891df6132f27171a2d31416affec6d789c23eb3b56f86975f0edd015326e4735a938956dda107f344c338bded519ae03294270fefcb18170a01c52aad8b2172644d21f7da9ccd0cc0a43d9711b188440c6a6a1a8b3bb6e038b5cb600fddd4"}}, &(0x7f00000011c0)={0x0, 0x3, 0x88, @string={0x88, 0x3, "4b60b44f23abe9b1345bdb534ef8af96d93d5d558cf7f54c3529a1a02769265243ac420264a8f8df47ee8f284699c891a0a61d2de40ed2a180b2b11f9654ca141395906cde0861b368d6ed80e7872fe9e3bf15673cd299bcf357a87b95d0cd7efddb993ed60205a358a8fbd4a372af4178e64c4cb0693fafc0d09ef48fb3053cf7533309487d"}}}, &(0x7f00000015c0)={0x34, &(0x7f00000012c0)={0x0, 0x16, 0xe5, "c1fb9f817fa3aa7d175686438de8c2e0dd1331e78b4bee78161a2292f1a27456120c2e1f9d6aaada1abc5f404f0bd6c55087fa33c950ad4a1f225234950c716a82fed2cc862c8e231df4af6191c08222397d2d0d398e705e0a5e104cb0651be90a136098ab09b5edf5bcd911155bff794d36a9eab00be397d41d945290a1e17f430ccdca3074b02c0b2f45c6bce1109ee10e9b0b5e6c2bdd13fcc60ca31cb1f6feb05d399d3c864efcb1928062385d443a876afe77f9613aa0123789d6ff3ba91f463314fcd9a6339a46619c4d95e086920356d4046a0b6d5f41ba6a47faed24f52554d142"}, &(0x7f00000013c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001400)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001440)={0x20, 0x0, 0xd9, {0xd7, "e1e3b1cefe9a44c8f9f174edd378371e72e9b2b34367bb4da63f6fff2adc38fb4a0ef9b5f6a1cfc5abf157142611e2da352b9428a1fdf0b4a7d812afa010bad55fe770c481cece5876bc1176c3cce78b7c127bb5add75c1f2299285bc3b908dda2d16894b5580b6a3c7ef125779958d08c67c6f79b3d717fa2d68d8cde287648aacf8d76b8fb8cc784e197d95c14aa3ed7f056f167a6eb3031a9d5c307458bb7810f915f9f5755b688fa28a9e2d3c6b8e98e9d42601dbde740eabdb6a2eef44a4fc5ca5b661cac0b9def3e7cef53cb0e55cdfa6aea4e9c"}}, &(0x7f0000001540)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000001580)={0x20, 0x0, 0x1, 0x9}}) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x24, 0xc, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001740), r4) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001a40)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001880)={0x168, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "0b173c7426d904d6f1eca218ff3cdf3db5b6f7989a95605af984c029"}}, @TIPC_NLA_NODE_ID={0x2e, 0x3, "d344ae95560f350b1fa85bd40a2a5fea3ba1e6d6bb6f9f7f9c160b3d4a110df9683c1b326cbd8f273315"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "b0fbd7c0e67e934eaa02a6c90338c052cb48f00a"}}, @TIPC_NLA_NODE_ID={0x85, 0x3, "e86fc677b5541f7fab5f4ff0671848e4c619a15e57ccda9abc4e03b721969ad22cd74feada56e882257673709d678600334083bb80d5de60eabe91e48331821739395ace532d1fde0ae2d6ec06a989ab74d324c863496b17a452c155afc0f5ebbb1b590d66d7bc4f9fbb5f92c9f7ef8d9eb06f89af3ae1de1a6b25942ad0ac3f2f"}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x6b858c18071438d2}, 0x24048014) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000001a80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x50, 0x2, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xa, 0x33, 0x4}}}}}]}}]}}, &(0x7f0000001d00)={0xa, &(0x7f0000001ac0)={0xa, 0x6, 0x300, 0x6, 0xfc, 0x7, 0x8, 0x72}, 0x1b, &(0x7f0000001b00)={0x5, 0xf, 0x1b, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x6, 0xf, 0xfffa}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x8b, 0x6c, 0x80}]}, 0x4, [{0x5e, &(0x7f0000001b40)=@string={0x5e, 0x3, "fdb38141e51dd0eac7ededf134c64a388f716d55dac40d9842f02f270b64d27f9e3ad0586168d8216ae32b71d1be6f77c9b8d6886ccd59de001cc1c42866cb03fdd6c122a5fce30eac135e10d1aadd93889511f361693247e40955aa"}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x419}}, {0x6f, &(0x7f0000001c00)=@string={0x6f, 0x3, "bf7509eeb81a29d82047eff20e7c64c155003ec09b3293bd32ae2da2915a4359358c5ab86e0a35c64d0e7a6a71e559cdd475abf8546df9b5e5032e8cb1ef3e80fee9924c33ae2d24a01e03f23b4f536a680ee6e1347ea966832e68761e9b43f8a7b337b9fa98000513f4a90470"}}, {0x49, &(0x7f0000001c80)=@string={0x49, 0x3, "7ec14bdf159c9854c811584cad9a7223116832301e93ea72e0ee0b73d06d65e6e15aad89830d4ecfef7ffe7d4026221f01b5dde08717a71d539c04665c9140872f74ed25754a06"}}]}) 14.262600417s ago: executing program 4 (id=396): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), 0x0}, 0x20) add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}}, 0x90) 13.94422845s ago: executing program 4 (id=397): syz_usb_connect(0x0, 0x3eb, &(0x7f0000000780)={{0x12, 0x1, 0x110, 0x4, 0x12, 0x58, 0x20, 0x1410, 0x2120, 0x139a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d9, 0x1, 0x1, 0x3, 0x80, 0x0, [{{0x9, 0x4, 0x8, 0x5, 0x9, 0x51, 0xcb, 0x2f, 0xf, [], [{{0x9, 0x5, 0xc, 0x10, 0x40, 0x7, 0xd1, 0x5}}, {{0x9, 0x5, 0x8, 0x2, 0x10, 0x3, 0x2}}, {{0x9, 0x5, 0xa, 0x18, 0x400, 0x33, 0x5, 0x22, [@generic={0x64, 0x2, "8d79a2006bb9e27724db40da9628e2cadf66e3358d2e51a5436f55325de388b587f94fa828bdec1077fb742e1d04ba6f7e7e33d28fdfa2533285149788e748be12e07ec36a3c6e33dd2b8f85702d0840d57a052ea64872d602821e66692c8c18130e"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x10, 0x57, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}, @generic={0xef, 0x11, "76eb56707d9d02e35ce145af7824aa6ef6e2c36d239b751a17a0b54bc6eb6d6aba4972ea4aded324b1fbc61b3d9bd85b93e1ef243c783986f7de78282a9a15e972ba33116d65ac21d572853c0ed807ca451501a803ce279db061dbb379c12376482a9898ca650a21efdf1ea3b31e64a8a1eb272555796c422b5329499413e3b2b843cf6c5e7e4fce9424f9863067362f0200860540c2d4e6656139c0e2e5b5d98786437b2837228327be6ef2adf196d922de6bf9d0cc13df8cc2a1043fa2582a0de2f1a30506d5e7f1aa23a805be0c7568d397590d6d289c39b729612200fe58e8c3cc0e9042f28bc4004b4933"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x0, 0x5, 0x8, [@generic={0xec, 0x4, "b6fe4b4309a5efdb97c464d558ed1337deccc4e7c260c9af666ba4fe58ab5baa28b42ba7536f6591cf1f6702c8d6e406578b3022aabfaa021be3db398b7113c1b1b95c6bb4d4f56f902c284c25a05d0027271ecd6ad8193d8fe8a8f621c033117d9e27daf8d73a0232280d38719eb4ccb50b3473c68cbdf7c70783a3a6439b53f8cc39258d0f11c1bb7dbd78bf0a9a2bd271b757b310b7512c1d6e02a286c5d62c7b4e306744ee10d9bde0ffcc1cfb2a799bd31b2ae115c287d20572e425efaaf501e9ff51dc7ece979bb217a9fa4d001180b91e083e67bae10506b9b11abc80765295f03c5ebe096e4b"}, @generic={0xe2, 0x10, "a2f2aafbe0c4b5a476446ec1c68312ed71d34700d118322a41da97ccff81a149ca4d0515a859281ac9a93f341ca801ed3d096b25420a8141559e6e58eef33e8dbd7bf70071c8e8c2d85a88e94dcf5dc708cd258e1b8c48ca5c00e4fa67f5851edcf8e1ceeb9525dcf313ba905aa6721271fca08e891503ab2643cf7c531401a1daa0147fce187b5a52a74e5a116f00c6789920e7622f7d04165bab7188b055a1d0084d2bbf729d6ef67f9c3653c4c36b3b1c61d5009770cfd18c674a27b1fd51d0c79ca96f42392351f4e37ed43ffae6fa526af8763abb0e026da81427f030fb"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0x2, 0xc, 0xd2, [@generic={0x37, 0x7, "738bd6e9abe3f889e1e5a9c892ec8ae75daa3551e32a9a1b6bfadffce43a8842934c41d8efb5c24eafd90d4091d9a9a5724e6532ee"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xf}]}}, {{0x9, 0x5, 0x80, 0x0, 0x0, 0x9, 0x84, 0xf1}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x8, 0x5, 0x2, [@generic={0x8, 0x4, "2c482e0f7910"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x0, 0x9, 0x0, [@generic={0x8, 0xb, "1d76c826b040"}]}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xff, 0x8, 0xb8, 0x20, 0x4}, 0xb5, &(0x7f0000000040)={0x5, 0xf, 0xb5, 0x2, [@generic={0xa9, 0x10, 0x2, "501f2546840a8258019725618913a543fdbd76382667a50139f6b2557c8ff831a32635029d66500becf0768e85cf61796362bf9fd6660fe09194183384096e15d0fb651db2dd0b7f0f2b01e21f991ae150192a140c3508ccf0c7f8e8de1aec5f8c90542c01ad51ab70b90f39338bea5d40b070728e7b2cccfb9723eecaea5341c28ea6fbce31a17d50126dcdc33437f2a4075a905017b5a3cc0d448542b80341693d084e9ffc"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x4, 0x956c}]}, 0x2, [{0x45, &(0x7f0000000100)=@string={0x45, 0x3, "00a082a5f2fcec20f5f7455e6c46d423d49a0e14b466a5327ceadfc4196f8164971d4611608a1c3085c2e935012633109b49c87a5d2e56bc3b984c49906d7836b6f5b0"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1c0a}}]}) 13.932514063s ago: executing program 1 (id=398): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000040), 0xb6e, 0x94100) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000000c0)) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d52c0], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0xfffffffc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) 13.458315835s ago: executing program 2 (id=399): socket$kcm(0x10, 0x7, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x110, &(0x7f0000000440)={0x0, 0xe300, 0x0, 0x0, 0x293}, &(0x7f0000000380)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x44, 0x842, 0x23456}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) 12.125204136s ago: executing program 1 (id=400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61124c00000000006113300000000000bf300000000000002500070007ffffffbd0201000000000095002000000000006916320000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_LINK_SET(r5, 0x0, 0x20004000) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[], 0x14}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.943230113s ago: executing program 32 (id=381): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) syz_open_dev$MSR(&(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000000380)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151", 0x44}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000002c0)="ee3714aa7756572d12ad3cd80207f0", 0xf}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000480)={0x4, {{0xa, 0x1000, 0x5, @local}}, {{0xa, 0xfffc, 0x0, @local, 0x2}}}, 0x108) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 4.727561846s ago: executing program 2 (id=402): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$kcm(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r1 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x1) r2 = dup(r1) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000010, r2, 0x0) execveat(r2, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, &(0x7f0000000080)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={r5, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}]}, &(0x7f0000000440)=0x10) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x19) 4.667027628s ago: executing program 4 (id=403): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @sdr={0x3147504d, 0x3}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x20004040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7ffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000400)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000500)={0x5, 0x2}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x84, 0x2, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffffff9a}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x56b5a16a9bfec128}, 0x20008040) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xffffffffffffffff}, 0xf, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x200}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3f}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffd, 0x1, 0xa, 0x100}}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) close(r7) 4.666464796s ago: executing program 3 (id=404): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000000c0)=0x100040, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) syz_open_dev$sg(&(0x7f0000001600), 0x3, 0x10f00) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x2200c001) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3.846036433s ago: executing program 1 (id=405): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = creat(&(0x7f0000000540)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 1) 3.07508977s ago: executing program 1 (id=406): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open$dir(&(0x7f0000000300)='./file0/file0\x00', 0x2001, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf25090002"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1e9b81, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8048840}, 0x80) 1.914924689s ago: executing program 1 (id=407): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), 0x0}, 0x20) add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}}, 0x90) 1.735860777s ago: executing program 1 (id=408): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x189040, 0x10a) fcntl$setlease(r1, 0x400, 0x0) syz_io_uring_setup(0x12e1, &(0x7f0000000280)={0x0, 0x6e51, 0x5, 0x2, 0x5e, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000380)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) unshare(0x40000000) r3 = creat(&(0x7f0000000540)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x3, 0x11, [0xfffffffffffffffe, 0x7e5877c3, 0x10000, 0x5ff6, 0x5e, 0x4], 0x0, &(0x7f0000000000), &(0x7f0000000040)=""/17}, &(0x7f0000000100)=0x78) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0x625c, &(0x7f0000000100)={0x0, 0x200089bb, 0x1, 0x5, 0x1c3}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) copy_file_range(r8, 0x0, r8, 0x0, 0x1000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x11, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x2010, r3, 0x0) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX]) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000140)) 1.646252373s ago: executing program 2 (id=409): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000000c0)=0x100040, 0x4) bind$inet(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x2200c001) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.336018324s ago: executing program 3 (id=410): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000040), 0xb6e, 0x94100) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000000c0)) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d52c0], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0xfffffffc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) 0s ago: executing program 2 (id=411): socket(0x1f, 0xa, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000100)={{0xe3b1, 0xfffffffa}, {0x9, 0x1003ff}, 0xffffffff, 0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r4, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) getdents(0xffffffffffffffff, &(0x7f0000000ec0)=""/4096, 0x1000) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x2c, 0xa00, 0x2c, 0x7, 0x2c}, 0x94) clock_gettime(0x3, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000000)={0x7, 0x9, 0x1, 0xf, 0x7, 0x400, 0x8001, 0x9}, &(0x7f0000000040)={0xffff, 0x5, 0x5, 0x9948, 0x7, 0x1177, 0xfff, 0xd43d}, &(0x7f0000000100)={0x3, 0x46d4a5f9, 0x0, 0x101, 0x5, 0xe0000, 0x0, 0x2}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x1]}, 0x8}) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000200)) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, &(0x7f0000000040)=0x7, 0x7, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') syz_open_dev$sndctrl(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a0000020000009110b0000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff0}, 0x94) syz_usb_connect(0x3, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000ee8f9b4086805b0bcae20000000109021b00010000000009040300010e010000090600000000000000"], 0x0) kernel console output (not intermixed with test programs): lave_1: entered promiscuous mode [ 91.372938][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 91.372957][ T5820] Cannot create hsr debugfs directory [ 91.377006][ T5127] Bluetooth: hci0: command tx timeout [ 91.456006][ T5127] Bluetooth: hci1: command tx timeout [ 91.456038][ T5127] Bluetooth: hci2: command tx timeout [ 91.535823][ T61] Bluetooth: hci3: command tx timeout [ 91.615857][ T61] Bluetooth: hci4: command tx timeout [ 91.701128][ T5825] hsr_slave_0: entered promiscuous mode [ 91.702505][ T5825] hsr_slave_1: entered promiscuous mode [ 91.703505][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 91.703529][ T5825] Cannot create hsr debugfs directory [ 93.031296][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.073917][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.110966][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.161502][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.252726][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.300114][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.332430][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.382387][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.455732][ T61] Bluetooth: hci0: command tx timeout [ 93.501301][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.535080][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.536211][ T61] Bluetooth: hci2: command tx timeout [ 93.536240][ T61] Bluetooth: hci1: command tx timeout [ 93.572727][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.616214][ T5127] Bluetooth: hci3: command tx timeout [ 93.632574][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.695730][ T5127] Bluetooth: hci4: command tx timeout [ 93.763120][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.792663][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.817475][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.864915][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.994105][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.003208][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.051438][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.083315][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.104659][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.184133][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.210650][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.234210][ T4979] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.234763][ T4979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.281462][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.281568][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.320627][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.363940][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.373197][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.373532][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.417949][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.418141][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.480472][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.519193][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.519582][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.525093][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.565123][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.569746][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.667490][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.672783][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.724670][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.724800][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.773242][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.774791][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.821832][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.876684][ T981] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.877716][ T981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.913889][ T4979] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.914046][ T4979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.018733][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.234072][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.352582][ T5807] veth0_vlan: entered promiscuous mode [ 95.395265][ T5807] veth1_vlan: entered promiscuous mode [ 95.411347][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.501610][ T5816] veth0_vlan: entered promiscuous mode [ 95.543311][ T5816] veth1_vlan: entered promiscuous mode [ 95.564672][ T5807] veth0_macvtap: entered promiscuous mode [ 95.603675][ T5807] veth1_macvtap: entered promiscuous mode [ 95.643018][ T5812] veth0_vlan: entered promiscuous mode [ 95.654766][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.694261][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.714803][ T5812] veth1_vlan: entered promiscuous mode [ 95.738302][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.741316][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.762216][ T5816] veth0_macvtap: entered promiscuous mode [ 95.785297][ T4979] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.803820][ T5816] veth1_macvtap: entered promiscuous mode [ 95.807888][ T4979] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.814540][ T4979] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.821148][ T4979] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.988700][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.072347][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.073244][ T5812] veth0_macvtap: entered promiscuous mode [ 96.121447][ T5812] veth1_macvtap: entered promiscuous mode [ 96.155328][ T4979] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.181706][ T4979] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.188024][ T5825] veth0_vlan: entered promiscuous mode [ 96.191116][ T4979] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.206197][ T4979] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.219588][ T4979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.219612][ T4979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.291764][ T5825] veth1_vlan: entered promiscuous mode [ 96.376738][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.390271][ T981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.390291][ T981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.468961][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.494199][ T5820] veth0_vlan: entered promiscuous mode [ 96.562111][ T3535] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.565208][ T3535] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.572989][ T4979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.573010][ T4979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.586536][ T3535] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.598470][ T3535] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.604225][ T5820] veth1_vlan: entered promiscuous mode [ 96.750132][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.750153][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.751006][ T5825] veth0_macvtap: entered promiscuous mode [ 96.854009][ T5825] veth1_macvtap: entered promiscuous mode [ 96.976474][ T5820] veth0_macvtap: entered promiscuous mode [ 96.994654][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.011487][ T5820] veth1_macvtap: entered promiscuous mode [ 97.029006][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.029025][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.063186][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.171735][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.171976][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.173053][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.211138][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.243402][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.278595][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.278614][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.282640][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.087081][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.089169][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.090755][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.135458][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.565660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.569170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.575675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.585621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.595625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.605636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.614694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.615623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.616475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.616599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.396778][ T5940] process 'syz.2.3' launched '/dev/fd/7' with NULL argv: empty string added [ 101.847245][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.847267][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.147313][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.147345][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.218349][ T5949] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.391564][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.391586][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.511136][ T5953] netlink: 580 bytes leftover after parsing attributes in process `syz.1.9'. [ 103.547257][ T5953] syz.1.9 (5953) used greatest stack depth: 18088 bytes left [ 103.702813][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.702833][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.876986][ T5957] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.107550][ T5981] input: syz0 as /devices/virtual/input/input5 [ 109.176000][ T982] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 109.352939][ T982] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 109.352968][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.455847][ T44] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 109.484625][ T982] usb 5-1: config 0 descriptor?? [ 110.345724][ T44] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 110.345753][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.362333][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 110.388051][ T44] usb 2-1: config 0 descriptor?? [ 111.586924][ T6011] input: syz0 as /devices/virtual/input/input6 [ 111.928196][ T6014] syz.4.16 uses obsolete (PF_INET,SOCK_PACKET) [ 112.417983][ T982] pegasus 5-1:0.0: can't reset MAC [ 112.418529][ T982] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 113.732648][ T44] pegasus 2-1:0.0: can't reset MAC [ 113.733751][ T44] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 114.219539][ T6035] netlink: 580 bytes leftover after parsing attributes in process `syz.3.24'. [ 115.186373][ T6041] input: syz0 as /devices/virtual/input/input7 [ 118.122726][ T5889] usb 5-1: USB disconnect, device number 2 [ 118.344477][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.32'. [ 118.426040][ T5801] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 118.493820][ T31] usb 2-1: USB disconnect, device number 2 [ 119.183121][ T5801] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 119.183150][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.268758][ T5801] usb 3-1: config 0 descriptor?? [ 121.605793][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.755850][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 121.761267][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 121.761294][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 121.776100][ T31] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 121.776129][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.776148][ T31] usb 5-1: Product: syz [ 121.776162][ T31] usb 5-1: Manufacturer: syz [ 121.776552][ T31] usb 5-1: SerialNumber: syz [ 121.963032][ T31] usb 5-1: config 0 descriptor?? [ 122.955791][ T5801] pegasus 3-1:0.0: can't reset MAC [ 122.956131][ T5801] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 123.765117][ T6111] input: syz0 as /devices/virtual/input/input9 [ 124.494571][ T5974] usb 5-1: USB disconnect, device number 3 [ 124.706910][ T5801] usb 3-1: USB disconnect, device number 2 [ 125.435483][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.935500][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.961371][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.315945][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.539411][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.852349][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.182891][ T5918] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 133.728062][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.729528][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.509375][ T5918] usb 3-1: device descriptor read/64, error -71 [ 135.625871][ T5918] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.355681][ T5801] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 137.025766][ T5801] usb 1-1: Using ep0 maxpacket: 32 [ 137.034633][ T5801] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 137.034660][ T5801] usb 1-1: config 0 has no interface number 0 [ 137.034708][ T5801] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.034733][ T5801] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.034770][ T5801] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 137.034792][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.874859][ T5801] usb 1-1: config 0 descriptor?? [ 137.917819][ T6198] can0: slcan on ttynull. [ 138.351218][ T6206] FAULT_INJECTION: forcing a failure. [ 138.351218][ T6206] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 138.351264][ T6206] CPU: 0 UID: 0 PID: 6206 Comm: syz.2.64 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 138.351287][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.351305][ T6206] Call Trace: [ 138.351315][ T6206] [ 138.351327][ T6206] dump_stack_lvl+0x189/0x250 [ 138.351369][ T6206] ? __pfx____ratelimit+0x10/0x10 [ 138.351393][ T6206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.351419][ T6206] ? __pfx__printk+0x10/0x10 [ 138.351441][ T6206] ? __might_fault+0xb0/0x130 [ 138.351478][ T6206] should_fail_ex+0x46c/0x600 [ 138.351506][ T6206] _copy_from_user+0x2d/0xb0 [ 138.351525][ T6206] ___sys_sendmsg+0x158/0x2a0 [ 138.351552][ T6206] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.351613][ T6206] ? __fget_files+0x2a/0x420 [ 138.351637][ T6206] ? __fget_files+0x3a6/0x420 [ 138.351672][ T6206] __x64_sys_sendmsg+0x1a1/0x260 [ 138.351699][ T6206] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.351732][ T6206] ? __pfx_ksys_write+0x10/0x10 [ 138.351753][ T6206] ? rcu_is_watching+0x15/0xb0 [ 138.351778][ T6206] ? do_syscall_64+0xbe/0x3b0 [ 138.351804][ T6206] do_syscall_64+0xfa/0x3b0 [ 138.351825][ T6206] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.351846][ T6206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.351863][ T6206] ? clear_bhb_loop+0x60/0xb0 [ 138.351886][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.351905][ T6206] RIP: 0033:0x7fb2eafbeec9 [ 138.351926][ T6206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.351942][ T6206] RSP: 002b:00007fb2e921e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.351970][ T6206] RAX: ffffffffffffffda RBX: 00007fb2eb215fa0 RCX: 00007fb2eafbeec9 [ 138.351988][ T6206] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 138.352000][ T6206] RBP: 00007fb2e921e090 R08: 0000000000000000 R09: 0000000000000000 [ 138.352012][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.352023][ T6206] R13: 00007fb2eb216038 R14: 00007fb2eb215fa0 R15: 00007ffe9f831a18 [ 138.352053][ T6206] [ 138.986368][ T5801] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 138.986578][ T5801] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 139.546246][ T5801] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 139.554443][ T6196] can0 (unregistered): slcan off ttynull. [ 139.554855][ T5801] ft260 0003:0403:6030.0001: uart interface is not supported [ 139.632493][ T5801] usb 1-1: USB disconnect, device number 2 [ 140.606997][ T6225] syz.1.67 (6225) used greatest stack depth: 17928 bytes left [ 146.927719][ T5994] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 148.195705][ T5994] usb 1-1: Using ep0 maxpacket: 32 [ 148.200459][ T5994] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.200484][ T5994] usb 1-1: config 0 has no interface number 0 [ 148.200525][ T5994] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.200549][ T5994] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.200584][ T5994] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 148.200604][ T5994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.347803][ T5994] usb 1-1: config 0 descriptor?? [ 149.985476][ T6289] input: syz0 as /devices/virtual/input/input14 [ 150.855468][ T5994] usb 1-1: can't set config #0, error -71 [ 150.875244][ T5994] usb 1-1: USB disconnect, device number 3 [ 151.187957][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 151.187997][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 154.066981][ T5994] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 154.233581][ T5994] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 154.233610][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.256074][ T5994] usb 5-1: config 0 descriptor?? [ 154.315678][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 154.455720][ T31] usb 1-1: device descriptor read/64, error -71 [ 154.595999][ T5801] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 154.705783][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 154.749883][ T5801] usb 4-1: Using ep0 maxpacket: 32 [ 154.752169][ T5801] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.752193][ T5801] usb 4-1: config 0 has no interface number 0 [ 154.752242][ T5801] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.752274][ T5801] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.752307][ T5801] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 154.752328][ T5801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.818169][ T5801] usb 4-1: config 0 descriptor?? [ 154.895716][ T31] usb 1-1: device descriptor read/64, error -71 [ 155.008897][ T31] usb usb1-port1: attempt power cycle [ 155.268485][ T5801] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 155.268523][ T5801] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 155.365674][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 155.386727][ T31] usb 1-1: device descriptor read/8, error -71 [ 155.472280][ T5801] ft260 0003:0403:6030.0002: chip code: 6424 8183 [ 155.635714][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 155.656922][ T31] usb 1-1: device descriptor read/8, error -71 [ 155.673279][ T5801] ft260 0003:0403:6030.0002: uart interface is not supported [ 155.693337][ T6349] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 155.766681][ T31] usb usb1-port1: unable to enumerate USB device [ 155.944953][ T5994] pegasus 5-1:0.0: can't reset MAC [ 155.945264][ T5994] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 155.965271][ T5994] usb 5-1: USB disconnect, device number 4 [ 156.009644][ T982] usb 4-1: USB disconnect, device number 2 [ 160.133833][ T6380] fuse: Unknown parameter 'rVYX5000000' [ 163.310414][ T6411] netlink: 'syz.0.113': attribute type 5 has an invalid length. [ 163.377052][ T31] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 163.621157][ T5801] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 163.638681][ T31] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 163.638710][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.643697][ T31] usb 2-1: config 0 descriptor?? [ 163.675713][ T5896] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 164.116562][ T5801] usb 3-1: Using ep0 maxpacket: 32 [ 164.371902][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 164.389926][ T5801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.389952][ T5801] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 164.390046][ T5801] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 164.390068][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.504399][ T5896] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 164.504481][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.504500][ T5896] usb 5-1: Product: syz [ 164.504514][ T5896] usb 5-1: Manufacturer: syz [ 164.504528][ T5896] usb 5-1: SerialNumber: syz [ 164.504640][ T5801] usb 3-1: config 0 descriptor?? [ 164.541787][ T5994] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 164.660432][ T5896] usb 5-1: config 0 descriptor?? [ 164.680481][ T5896] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 164.926463][ T5994] usb 4-1: Using ep0 maxpacket: 32 [ 164.933617][ T5994] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.933642][ T5994] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 164.933676][ T5994] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 164.933697][ T5994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.940899][ T5994] usb 4-1: config 0 descriptor?? [ 164.980636][ T6423] input: syz0 as /devices/virtual/input/input18 [ 165.040345][ T5896] usb 5-1: USB disconnect, device number 5 [ 166.198527][ T6436] capability: warning: `syz.0.123' uses deprecated v2 capabilities in a way that may be insecure [ 166.638214][ T31] pegasus 2-1:0.0: can't reset MAC [ 166.756647][ T31] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 166.878328][ T31] usb 4-1: USB disconnect, device number 3 [ 166.884093][ T5801] usb 3-1: USB disconnect, device number 5 [ 168.663515][ T6451] FAULT_INJECTION: forcing a failure. [ 168.663515][ T6451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.663547][ T6451] CPU: 1 UID: 0 PID: 6451 Comm: syz.3.126 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 168.663568][ T6451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 168.663579][ T6451] Call Trace: [ 168.663586][ T6451] [ 168.663595][ T6451] dump_stack_lvl+0x189/0x250 [ 168.663625][ T6451] ? __pfx____ratelimit+0x10/0x10 [ 168.663647][ T6451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.663673][ T6451] ? __pfx__printk+0x10/0x10 [ 168.663693][ T6451] ? __might_fault+0xb0/0x130 [ 168.663727][ T6451] should_fail_ex+0x46c/0x600 [ 168.663754][ T6451] _copy_from_user+0x2d/0xb0 [ 168.663772][ T6451] ucma_write+0x161/0x2f0 [ 168.663801][ T6451] ? __pfx_ucma_write+0x10/0x10 [ 168.663822][ T6451] ? rw_verify_area+0x25b/0x4e0 [ 168.663843][ T6451] ? __lock_acquire+0xab9/0xd20 [ 168.663866][ T6451] ? __pfx_ucma_write+0x10/0x10 [ 168.663885][ T6451] vfs_write+0x284/0xb40 [ 168.663916][ T6451] ? __pfx_vfs_write+0x10/0x10 [ 168.663939][ T6451] ? __fget_files+0x2a/0x420 [ 168.663969][ T6451] ? __fget_files+0x2a/0x420 [ 168.663992][ T6451] ? __fget_files+0x3a6/0x420 [ 168.664014][ T6451] ? __fget_files+0x2a/0x420 [ 168.664046][ T6451] ksys_write+0x14b/0x260 [ 168.664068][ T6451] ? __pfx_ksys_write+0x10/0x10 [ 168.664087][ T6451] ? rcu_is_watching+0x15/0xb0 [ 168.664110][ T6451] ? do_syscall_64+0xbe/0x3b0 [ 168.664135][ T6451] do_syscall_64+0xfa/0x3b0 [ 168.664155][ T6451] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.664177][ T6451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.664194][ T6451] ? clear_bhb_loop+0x60/0xb0 [ 168.664216][ T6451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.664233][ T6451] RIP: 0033:0x7faae851eec9 [ 168.664250][ T6451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.664266][ T6451] RSP: 002b:00007faae677e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.664285][ T6451] RAX: ffffffffffffffda RBX: 00007faae8775fa0 RCX: 00007faae851eec9 [ 168.664299][ T6451] RDX: 00000000000000a0 RSI: 0000200000000d40 RDI: 0000000000000003 [ 168.664310][ T6451] RBP: 00007faae677e090 R08: 0000000000000000 R09: 0000000000000000 [ 168.664322][ T6451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.664333][ T6451] R13: 00007faae8776038 R14: 00007faae8775fa0 R15: 00007ffe39c6f218 [ 168.664364][ T6451] [ 169.101100][ T5994] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 169.326227][ T5994] usb 5-1: Using ep0 maxpacket: 16 [ 169.499255][ T5994] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 169.499286][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.499305][ T5994] usb 5-1: Product: syz [ 169.499318][ T5994] usb 5-1: Manufacturer: syz [ 169.499332][ T5994] usb 5-1: SerialNumber: syz [ 169.518131][ T5994] usb 5-1: config 0 descriptor?? [ 169.534716][ T5994] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 170.372540][ T5801] usb 2-1: USB disconnect, device number 3 [ 170.629741][ T5994] usb 5-1: USB disconnect, device number 6 [ 171.107329][ T6477] input: syz0 as /devices/virtual/input/input21 [ 172.225670][ T5801] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 172.466545][ T5801] usb 4-1: Using ep0 maxpacket: 8 [ 172.468889][ T5801] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 172.468916][ T5801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.512955][ T5801] usb 4-1: config 0 descriptor?? [ 173.472524][ T5801] uvcvideo 4-1:0.0: Found UVC 0.00 device (2833:0201) [ 173.472624][ T5801] uvcvideo 4-1:0.0: No valid video chain found. [ 173.587006][ T1666] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 173.844020][ T1666] usb 1-1: Using ep0 maxpacket: 32 [ 174.201436][ T1666] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.201461][ T1666] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 174.201495][ T1666] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 174.201515][ T1666] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.434355][ T6497] netlink: 580 bytes leftover after parsing attributes in process `syz.2.138'. [ 174.698200][ T1666] usb 1-1: config 0 descriptor?? [ 175.054505][ T1666] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 175.962416][ T5801] usb 4-1: USB disconnect, device number 4 [ 175.978423][ T1666] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 175.978450][ T1666] usb 2-1: config 179 has no interface number 0 [ 175.978517][ T1666] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 175.978544][ T1666] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 175.978565][ T1666] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 175.978589][ T1666] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 175.978615][ T1666] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 175.978656][ T1666] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 175.978677][ T1666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.021296][ T6498] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 176.062733][ T1666] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 176.068463][ T1666] xpad 2-1:179.65: probe with driver xpad failed with error -90 [ 177.133380][ T5918] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 178.102290][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 178.525691][ T5918] usb 3-1: unable to get BOS descriptor or descriptor too short [ 178.530216][ T5918] usb 3-1: config 12 interface 0 altsetting 7 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 178.530253][ T5918] usb 3-1: config 12 interface 0 altsetting 7 endpoint 0x88 has an invalid bInterval 82, changing to 10 [ 178.530278][ T5918] usb 3-1: config 12 interface 0 has no altsetting 0 [ 178.532952][ T5918] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 178.532978][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.532996][ T5918] usb 3-1: Product: syz [ 178.533009][ T5918] usb 3-1: Manufacturer: syz [ 178.533022][ T5918] usb 3-1: SerialNumber: syz [ 178.555872][ T5875] usb 1-1: USB disconnect, device number 8 [ 178.880989][ T6525] input: syz0 as /devices/virtual/input/input24 [ 179.012082][ T5918] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 179.012187][ T5918] usb 3-1: selecting invalid altsetting 0 [ 179.039426][ T5875] usb 2-1: USB disconnect, device number 4 [ 179.133742][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.146'. [ 179.475902][ T5918] usb 3-1: USB disconnect, device number 6 [ 179.536069][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 179.660597][ T5801] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 180.502500][ T31] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 32 [ 180.502531][ T31] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 180.502555][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 180.508406][ T5801] usb 5-1: Using ep0 maxpacket: 32 [ 180.555331][ T5801] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.555357][ T5801] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 180.555394][ T5801] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 180.555416][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.703622][ T31] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 180.703650][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.703668][ T31] usb 4-1: Product: Ⰱ [ 180.703682][ T31] usb 4-1: Manufacturer: 칽氼諤䬧鲤콞헙䍲ㇺਰ逊뷃⃹즺먰愧ᗏ꾌ۈ [ 180.703698][ T31] usb 4-1: SerialNumber: syz [ 180.755339][ T6532] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.755474][ T6532] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.776815][ T5801] usb 5-1: config 0 descriptor?? [ 181.106517][ T5801] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 181.259583][ T5801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.260016][ T5801] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 181.260040][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.311272][ T5801] usb 1-1: config 0 descriptor?? [ 181.558267][ T6532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.558870][ T6532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.496051][ T31] usb 4-1: USB disconnect, device number 5 [ 182.529310][ T44] usb 5-1: USB disconnect, device number 7 [ 182.624553][ T5801] saitek 0003:06A3:0621.0003: unknown main item tag 0x7 [ 182.624595][ T5801] saitek 0003:06A3:0621.0003: item fetching failed at offset 6/7 [ 182.625228][ T5801] saitek 0003:06A3:0621.0003: parse failed [ 182.625310][ T5801] saitek 0003:06A3:0621.0003: probe with driver saitek failed with error -22 [ 182.804305][ T1236] usb 1-1: USB disconnect, device number 9 [ 182.895910][ T5875] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 184.195708][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 184.199670][ T5875] usb 2-1: config 1 has an invalid interface number: 8 but max is 0 [ 184.199694][ T5875] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 184.199712][ T5875] usb 2-1: config 1 has an invalid interface number: 182 but max is 0 [ 184.199730][ T5875] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 184.199749][ T5875] usb 2-1: config 1 has no interface number 0 [ 184.199764][ T5875] usb 2-1: config 1 has no interface number 1 [ 184.199822][ T5875] usb 2-1: config 1 interface 8 altsetting 5 bulk endpoint 0x8 has invalid maxpacket 16 [ 184.199844][ T5875] usb 2-1: config 1 interface 8 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 184.199868][ T5875] usb 2-1: config 1 interface 8 altsetting 5 endpoint 0x6 has an invalid bInterval 87, changing to 7 [ 184.199892][ T5875] usb 2-1: config 1 interface 8 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 184.199912][ T5875] usb 2-1: config 1 interface 8 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 8 [ 184.199936][ T5875] usb 2-1: too many endpoints for config 1 interface 182 altsetting 254: 75, using maximum allowed: 30 [ 184.199978][ T5875] usb 2-1: config 1 interface 182 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 184.199999][ T5875] usb 2-1: config 1 interface 182 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 184.200019][ T5875] usb 2-1: config 1 interface 182 altsetting 254 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 184.200043][ T5875] usb 2-1: config 1 interface 182 altsetting 254 has 3 endpoint descriptors, different from the interface descriptor's value: 75 [ 184.200067][ T5875] usb 2-1: config 1 interface 8 has no altsetting 0 [ 184.200083][ T5875] usb 2-1: config 1 interface 182 has no altsetting 0 [ 184.205813][ T5875] usb 2-1: New USB device found, idVendor=1410, idProduct=2120, bcdDevice=13.9a [ 184.205839][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.205857][ T5875] usb 2-1: Product: syz [ 184.205871][ T5875] usb 2-1: Manufacturer: ᰊ [ 184.205884][ T5875] usb 2-1: SerialNumber: syz [ 184.212421][ T6566] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 184.384215][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 184.438865][ T5875] option 2-1:1.8: GSM modem (1-port) converter detected [ 184.503237][ T5875] option 2-1:1.182: GSM modem (1-port) converter detected [ 184.531500][ T5875] usb 2-1: USB disconnect, device number 5 [ 184.585674][ T5801] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 184.590918][ T5875] option 2-1:1.8: device disconnected [ 184.605086][ T5875] option 2-1:1.182: device disconnected [ 184.945622][ T5801] usb 3-1: Using ep0 maxpacket: 8 [ 184.987356][ T6585] input: syz0 as /devices/virtual/input/input26 [ 185.685737][ T44] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 185.871474][ T44] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 185.871810][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.983359][ T44] usb 2-1: config 0 descriptor?? [ 187.224014][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.226533][ T5994] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 187.358399][ T5801] usb 3-1: device descriptor read/all, error -71 [ 187.407109][ T5994] usb 5-1: Using ep0 maxpacket: 32 [ 187.409441][ T5994] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.409464][ T5994] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.409481][ T5994] usb 5-1: config 0 has no interface number 0 [ 187.409524][ T5994] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.409563][ T5994] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 187.409584][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.480098][ T5994] usb 5-1: config 0 descriptor?? [ 187.523886][ T5994] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 187.591464][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 187.805910][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 187.885738][ T6537] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 187.900618][ T44] pegasus 2-1:0.0: can't reset MAC [ 187.901049][ T44] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 187.920587][ T44] usb 2-1: USB disconnect, device number 6 [ 187.955677][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 187.962423][ T31] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.962449][ T31] usb 4-1: config 0 has no interface number 0 [ 187.962495][ T31] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.962519][ T31] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.962553][ T31] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 187.962574][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.972021][ T31] usb 4-1: config 0 descriptor?? [ 188.035766][ T6537] usb 1-1: Using ep0 maxpacket: 32 [ 188.043500][ T6537] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 188.043526][ T6537] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.043592][ T6537] usb 1-1: Product: syz [ 188.043605][ T6537] usb 1-1: Manufacturer: syz [ 188.043618][ T6537] usb 1-1: SerialNumber: syz [ 188.067298][ T6614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.070941][ T6614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.081827][ T6537] usb 1-1: config 0 descriptor?? [ 188.082537][ T6537] usb 1-1: can't set config #0, error -71 [ 188.090812][ T6537] usb 1-1: USB disconnect, device number 10 [ 188.393459][ T31] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 188.393498][ T31] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 188.450700][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.515234][ T6629] input: syz0 as /devices/virtual/input/input28 [ 188.587165][ T31] ft260 0003:0403:6030.0004: chip code: 6424 8183 [ 188.776216][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.795733][ T31] ft260 0003:0403:6030.0004: uart interface is not supported [ 188.873143][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.116318][ T5974] usb 4-1: USB disconnect, device number 6 [ 189.122349][ T31] usb 5-1: USB disconnect, device number 8 [ 189.337178][ T6640] FAULT_INJECTION: forcing a failure. [ 189.337178][ T6640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.337215][ T6640] CPU: 1 UID: 0 PID: 6640 Comm: syz.4.179 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 189.337254][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 189.337265][ T6640] Call Trace: [ 189.337272][ T6640] [ 189.337280][ T6640] dump_stack_lvl+0x189/0x250 [ 189.337310][ T6640] ? __pfx____ratelimit+0x10/0x10 [ 189.337332][ T6640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.337357][ T6640] ? __pfx__printk+0x10/0x10 [ 189.337379][ T6640] ? __might_fault+0xb0/0x130 [ 189.337415][ T6640] should_fail_ex+0x46c/0x600 [ 189.337442][ T6640] _copy_from_user+0x2d/0xb0 [ 189.337460][ T6640] ucma_write+0x161/0x2f0 [ 189.337482][ T6640] ? __pfx_ucma_write+0x10/0x10 [ 189.337504][ T6640] ? rw_verify_area+0x25b/0x4e0 [ 189.337525][ T6640] ? __lock_acquire+0xab9/0xd20 [ 189.337548][ T6640] ? __pfx_ucma_write+0x10/0x10 [ 189.337568][ T6640] vfs_write+0x284/0xb40 [ 189.337599][ T6640] ? __pfx_vfs_write+0x10/0x10 [ 189.337622][ T6640] ? __fget_files+0x2a/0x420 [ 189.337650][ T6640] ? __fget_files+0x2a/0x420 [ 189.337673][ T6640] ? __fget_files+0x3a6/0x420 [ 189.337701][ T6640] ? __fget_files+0x2a/0x420 [ 189.337733][ T6640] ksys_write+0x14b/0x260 [ 189.337757][ T6640] ? __pfx_ksys_write+0x10/0x10 [ 189.337783][ T6640] ? rcu_is_watching+0x15/0xb0 [ 189.337808][ T6640] ? do_syscall_64+0xbe/0x3b0 [ 189.337834][ T6640] do_syscall_64+0xfa/0x3b0 [ 189.337854][ T6640] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.337873][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.337890][ T6640] ? clear_bhb_loop+0x60/0xb0 [ 189.337910][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.337927][ T6640] RIP: 0033:0x7f5773dbeec9 [ 189.337942][ T6640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.337955][ T6640] RSP: 002b:00007f5772026038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 189.337974][ T6640] RAX: ffffffffffffffda RBX: 00007f5774015fa0 RCX: 00007f5773dbeec9 [ 189.337987][ T6640] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000003 [ 189.337999][ T6640] RBP: 00007f5772026090 R08: 0000000000000000 R09: 0000000000000000 [ 189.338011][ T6640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.338021][ T6640] R13: 00007f5774016038 R14: 00007f5774015fa0 R15: 00007fff830eef58 [ 189.338051][ T6640] [ 189.593498][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 189.594972][ T6645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.183'. [ 189.785683][ T5801] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 189.835860][ T6537] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 189.864839][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 189.945786][ T5801] usb 3-1: Using ep0 maxpacket: 32 [ 189.948366][ T5801] usb 3-1: config 1 has an invalid interface number: 8 but max is 0 [ 189.948390][ T5801] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 189.948407][ T5801] usb 3-1: config 1 has an invalid interface number: 182 but max is 0 [ 189.948425][ T5801] usb 3-1: config 1 has an invalid interface number: 44 but max is 0 [ 189.948444][ T5801] usb 3-1: config 1 has an invalid interface association descriptor of length 2, skipping [ 189.948461][ T5801] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 1 [ 189.948480][ T5801] usb 3-1: config 1 has no interface number 0 [ 189.948494][ T5801] usb 3-1: config 1 has no interface number 1 [ 189.948509][ T5801] usb 3-1: config 1 has no interface number 2 [ 189.948581][ T5801] usb 3-1: config 1 interface 8 altsetting 5 bulk endpoint 0x8 has invalid maxpacket 16 [ 189.948603][ T5801] usb 3-1: config 1 interface 8 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 189.948628][ T5801] usb 3-1: config 1 interface 8 altsetting 5 endpoint 0x6 has an invalid bInterval 87, changing to 7 [ 189.948651][ T5801] usb 3-1: config 1 interface 8 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 189.948671][ T5801] usb 3-1: config 1 interface 8 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 9 [ 189.948695][ T5801] usb 3-1: too many endpoints for config 1 interface 182 altsetting 254: 75, using maximum allowed: 30 [ 189.948731][ T5801] usb 3-1: config 1 interface 182 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 189.948752][ T5801] usb 3-1: config 1 interface 182 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 189.948771][ T5801] usb 3-1: config 1 interface 182 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 189.948789][ T5801] usb 3-1: config 1 interface 182 altsetting 254 has 3 endpoint descriptors, different from the interface descriptor's value: 75 [ 189.948816][ T5801] usb 3-1: too many endpoints for config 1 interface 44 altsetting 72: 46, using maximum allowed: 30 [ 189.949243][ T5801] usb 3-1: config 1 interface 44 altsetting 72 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 189.949270][ T5801] usb 3-1: config 1 interface 44 altsetting 72 has 1 endpoint descriptor, different from the interface descriptor's value: 46 [ 189.949296][ T5801] usb 3-1: config 1 interface 8 has no altsetting 0 [ 189.949312][ T5801] usb 3-1: config 1 interface 182 has no altsetting 0 [ 189.949328][ T5801] usb 3-1: config 1 interface 44 has no altsetting 0 [ 189.952489][ T5801] usb 3-1: New USB device found, idVendor=1410, idProduct=2120, bcdDevice=13.9a [ 189.952514][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.952587][ T5801] usb 3-1: Product: syz [ 189.952601][ T5801] usb 3-1: Manufacturer: ᰊ [ 189.952614][ T5801] usb 3-1: SerialNumber: syz [ 189.970621][ T6641] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 189.985778][ T6537] usb 1-1: Using ep0 maxpacket: 32 [ 189.988738][ T6537] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 189.988762][ T6537] usb 1-1: config 1 has no interface number 1 [ 189.988868][ T6537] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 189.994833][ T6537] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.994909][ T6537] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.994930][ T6537] usb 1-1: Product: syz [ 189.994943][ T6537] usb 1-1: Manufacturer: syz [ 189.994963][ T6537] usb 1-1: SerialNumber: syz [ 190.015709][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 190.018901][ T31] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.018992][ T31] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.019015][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 190.019047][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 190.019069][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.042678][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.147113][ T6659] Driver unsupported XDP return value 0 on prog (id 77) dev N/A, expect packet loss! [ 190.197747][ T31] usb 2-1: config 0 descriptor?? [ 190.269365][ T5801] option 3-1:1.8: GSM modem (1-port) converter detected [ 190.508699][ T5801] option 3-1:1.182: GSM modem (1-port) converter detected [ 190.527174][ T5801] option 3-1:1.44: GSM modem (1-port) converter detected [ 190.562405][ T5801] usb 3-1: USB disconnect, device number 9 [ 190.611289][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.859625][ T5801] option 3-1:1.8: device disconnected [ 190.885171][ T5801] option 3-1:1.182: device disconnected [ 190.910727][ T5801] option 3-1:1.44: device disconnected [ 191.767820][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.972391][ T31] usb 2-1: USB disconnect, device number 7 [ 192.174090][ T6537] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 192.174114][ T6537] usb 1-1: 2:1 : invalid channels 0 [ 192.224669][ T6537] usb 1-1: USB disconnect, device number 11 [ 192.613714][ T6682] input: syz0 as /devices/virtual/input/input31 [ 193.211191][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'. [ 193.214262][ T6686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.196'. [ 193.615664][ T5994] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 194.834664][ T5974] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 194.845637][ T5994] usb 4-1: Using ep0 maxpacket: 16 [ 194.851943][ T5994] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 194.851971][ T5994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.852022][ T5994] usb 4-1: Product: syz [ 194.852036][ T5994] usb 4-1: Manufacturer: syz [ 194.852050][ T5994] usb 4-1: SerialNumber: syz [ 194.883165][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.883236][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.989592][ T5994] usb 4-1: config 0 descriptor?? [ 195.012288][ T5994] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 195.015660][ T5974] usb 1-1: Using ep0 maxpacket: 32 [ 195.017256][ T5974] usb 1-1: config 1 has an invalid interface number: 8 but max is 0 [ 195.017271][ T5974] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 195.017280][ T5974] usb 1-1: config 1 has an invalid interface number: 182 but max is 0 [ 195.017290][ T5974] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 195.017300][ T5974] usb 1-1: config 1 has no interface number 0 [ 195.017308][ T5974] usb 1-1: config 1 has no interface number 1 [ 195.017341][ T5974] usb 1-1: config 1 interface 8 altsetting 5 bulk endpoint 0x8 has invalid maxpacket 16 [ 195.017353][ T5974] usb 1-1: config 1 interface 8 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 195.017366][ T5974] usb 1-1: config 1 interface 8 altsetting 5 endpoint 0x6 has an invalid bInterval 87, changing to 7 [ 195.017377][ T5974] usb 1-1: config 1 interface 8 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 195.017388][ T5974] usb 1-1: config 1 interface 8 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 9 [ 195.017400][ T5974] usb 1-1: too many endpoints for config 1 interface 182 altsetting 254: 75, using maximum allowed: 30 [ 195.017421][ T5974] usb 1-1: config 1 interface 182 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 195.017432][ T5974] usb 1-1: config 1 interface 182 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 195.017449][ T5974] usb 1-1: config 1 interface 182 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 195.017459][ T5974] usb 1-1: config 1 interface 182 altsetting 254 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 195.017472][ T5974] usb 1-1: config 1 interface 182 altsetting 254 has 4 endpoint descriptors, different from the interface descriptor's value: 75 [ 195.017485][ T5974] usb 1-1: config 1 interface 8 has no altsetting 0 [ 195.017493][ T5974] usb 1-1: config 1 interface 182 has no altsetting 0 [ 195.047406][ T5974] usb 1-1: New USB device found, idVendor=1410, idProduct=2120, bcdDevice=13.9a [ 195.047424][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.047441][ T5974] usb 1-1: Product: syz [ 195.047449][ T5974] usb 1-1: Manufacturer: ᰊ [ 195.047457][ T5974] usb 1-1: SerialNumber: syz [ 195.312271][ T6700] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 195.421752][ T5994] usb 4-1: USB disconnect, device number 7 [ 195.523823][ T5974] option 1-1:1.8: GSM modem (1-port) converter detected [ 195.549863][ T6714] FAULT_INJECTION: forcing a failure. [ 195.549863][ T6714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.549895][ T6714] CPU: 1 UID: 0 PID: 6714 Comm: syz.1.204 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 195.549916][ T6714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 195.549927][ T6714] Call Trace: [ 195.549934][ T6714] [ 195.549943][ T6714] dump_stack_lvl+0x189/0x250 [ 195.549974][ T6714] ? __pfx____ratelimit+0x10/0x10 [ 195.549997][ T6714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.550026][ T6714] ? __pfx__printk+0x10/0x10 [ 195.550063][ T6714] should_fail_ex+0x46c/0x600 [ 195.550092][ T6714] _copy_to_user+0x31/0xb0 [ 195.550112][ T6714] simple_read_from_buffer+0xe1/0x170 [ 195.550141][ T6714] proc_fail_nth_read+0x1b6/0x220 [ 195.550166][ T6714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.550196][ T6714] ? rw_verify_area+0x2ac/0x4e0 [ 195.550218][ T6714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.550240][ T6714] vfs_read+0x206/0xa30 [ 195.550271][ T6714] ? __pfx_vfs_read+0x10/0x10 [ 195.550289][ T6714] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 195.550325][ T6714] ? mutex_lock_nested+0x154/0x1d0 [ 195.550350][ T6714] ? fdget_pos+0x253/0x320 [ 195.550383][ T6714] ksys_read+0x14b/0x260 [ 195.550407][ T6714] ? __pfx_ksys_read+0x10/0x10 [ 195.550434][ T6714] ? do_syscall_64+0xbe/0x3b0 [ 195.550460][ T6714] do_syscall_64+0xfa/0x3b0 [ 195.550480][ T6714] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.550501][ T6714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.550520][ T6714] ? clear_bhb_loop+0x60/0xb0 [ 195.550542][ T6714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.550560][ T6714] RIP: 0033:0x7f9e984cd8dc [ 195.550576][ T6714] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 195.550592][ T6714] RSP: 002b:00007f9e96736030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.550611][ T6714] RAX: ffffffffffffffda RBX: 00007f9e98725fa0 RCX: 00007f9e984cd8dc [ 195.550625][ T6714] RDX: 000000000000000f RSI: 00007f9e967360a0 RDI: 0000000000000006 [ 195.550637][ T6714] RBP: 00007f9e96736090 R08: 0000000000000000 R09: 0000000000000000 [ 195.550648][ T6714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.550659][ T6714] R13: 00007f9e98726038 R14: 00007f9e98725fa0 R15: 00007ffd946ba8c8 [ 195.550690][ T6714] [ 195.555097][ T5974] option 1-1:1.182: GSM modem (1-port) converter detected [ 195.812497][ T5974] usb 1-1: USB disconnect, device number 12 [ 195.825215][ T5974] option 1-1:1.8: device disconnected [ 195.834246][ T5974] option 1-1:1.182: device disconnected [ 196.435690][ T5994] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 198.589856][ T5994] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 198.589888][ T5994] usb 3-1: config 0 interface 0 has no altsetting 0 [ 198.602024][ T5994] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 198.602051][ T5994] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 198.602068][ T5994] usb 3-1: Product: syz [ 198.602081][ T5994] usb 3-1: Manufacturer: syz [ 198.602094][ T5994] usb 3-1: SerialNumber: syz [ 198.654837][ T5994] usb 3-1: config 0 descriptor?? [ 198.891928][ T5994] usb 3-1: selecting invalid altsetting 0 [ 199.160506][ T5994] usb 3-1: USB disconnect, device number 10 [ 199.187556][ T6744] netlink: 580 bytes leftover after parsing attributes in process `syz.1.213'. [ 200.239166][ T5801] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 200.347359][ T6756] netlink: 'syz.4.218': attribute type 5 has an invalid length. [ 200.396462][ T5801] usb 1-1: Using ep0 maxpacket: 8 [ 200.406044][ T5801] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 200.406070][ T5801] usb 1-1: config 179 has no interface number 0 [ 200.406117][ T5801] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 200.406141][ T5801] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 200.406166][ T5801] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 200.406189][ T5801] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 200.406213][ T5801] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 200.406253][ T5801] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 200.406273][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.418496][ T6743] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 201.565765][ T5994] usb 1-1: USB disconnect, device number 13 [ 201.565798][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 201.565937][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 201.680637][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 201.943440][ T5801] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input36 [ 202.031090][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 202.043206][ T31] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 202.043233][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.043250][ T31] usb 4-1: Product: syz [ 202.043263][ T31] usb 4-1: Manufacturer: syz [ 202.043276][ T31] usb 4-1: SerialNumber: syz [ 202.472324][ T31] usb 4-1: config 0 descriptor?? [ 202.736663][ T31] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 202.896153][ T31] usb 4-1: USB disconnect, device number 8 [ 203.258225][ T6793] netlink: 580 bytes leftover after parsing attributes in process `syz.0.226'. [ 203.495796][ T5974] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 203.665767][ T5974] usb 2-1: Using ep0 maxpacket: 32 [ 203.668334][ T5974] usb 2-1: config 1 has an invalid interface number: 8 but max is 0 [ 203.668356][ T5974] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 203.668372][ T5974] usb 2-1: config 1 has an invalid interface number: 182 but max is 0 [ 203.668390][ T5974] usb 2-1: config 1 has an invalid interface number: 44 but max is 0 [ 203.668408][ T5974] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 1 [ 203.668426][ T5974] usb 2-1: config 1 has no interface number 0 [ 203.668439][ T5974] usb 2-1: config 1 has no interface number 1 [ 203.668453][ T5974] usb 2-1: config 1 has no interface number 2 [ 203.668526][ T5974] usb 2-1: config 1 interface 8 altsetting 5 bulk endpoint 0x8 has invalid maxpacket 16 [ 203.668548][ T5974] usb 2-1: config 1 interface 8 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 203.668571][ T5974] usb 2-1: config 1 interface 8 altsetting 5 endpoint 0x6 has an invalid bInterval 87, changing to 7 [ 203.668594][ T5974] usb 2-1: config 1 interface 8 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 203.668614][ T5974] usb 2-1: config 1 interface 8 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 9 [ 203.668645][ T5974] usb 2-1: too many endpoints for config 1 interface 182 altsetting 254: 75, using maximum allowed: 30 [ 203.668681][ T5974] usb 2-1: config 1 interface 182 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 203.668701][ T5974] usb 2-1: config 1 interface 182 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 203.668721][ T5974] usb 2-1: config 1 interface 182 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 203.668740][ T5974] usb 2-1: config 1 interface 182 altsetting 254 has 3 endpoint descriptors, different from the interface descriptor's value: 75 [ 203.668764][ T5974] usb 2-1: too many endpoints for config 1 interface 44 altsetting 72: 46, using maximum allowed: 30 [ 203.668835][ T5974] usb 2-1: config 1 interface 44 altsetting 72 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 203.668859][ T5974] usb 2-1: config 1 interface 44 altsetting 72 has 1 endpoint descriptor, different from the interface descriptor's value: 46 [ 203.668883][ T5974] usb 2-1: config 1 interface 8 has no altsetting 0 [ 203.668899][ T5974] usb 2-1: config 1 interface 182 has no altsetting 0 [ 203.668913][ T5974] usb 2-1: config 1 interface 44 has no altsetting 0 [ 203.947464][ T5974] usb 2-1: New USB device found, idVendor=1410, idProduct=2120, bcdDevice=13.9a [ 203.947492][ T5974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.947510][ T5974] usb 2-1: Product: syz [ 203.947523][ T5974] usb 2-1: Manufacturer: ᰊ [ 203.947535][ T5974] usb 2-1: SerialNumber: syz [ 204.003167][ T6792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 204.764844][ T5974] option 2-1:1.8: GSM modem (1-port) converter detected [ 204.788001][ T5974] option 2-1:1.182: GSM modem (1-port) converter detected [ 204.800728][ T5974] option 2-1:1.44: GSM modem (1-port) converter detected [ 204.956103][ T5974] usb 2-1: USB disconnect, device number 8 [ 204.962877][ T5974] option 2-1:1.8: device disconnected [ 204.965399][ T5974] option 2-1:1.182: device disconnected [ 204.969504][ T5974] option 2-1:1.44: device disconnected [ 205.154429][ T6808] netlink: 'syz.2.231': attribute type 5 has an invalid length. [ 207.565761][ T982] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 207.905608][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.905654][ T982] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 207.905677][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.911161][ T982] usb 3-1: config 0 descriptor?? [ 207.935814][ T5994] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 207.954231][ T6831] netlink: 580 bytes leftover after parsing attributes in process `syz.4.240'. [ 208.026617][ T6835] Zero length message leads to an empty skb [ 208.088985][ T5994] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 32 [ 208.089004][ T5994] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.089017][ T5994] usb 1-1: config 1 interface 0 has no altsetting 0 [ 208.093926][ T5994] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 208.093945][ T5994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.093998][ T5994] usb 1-1: Product: Ⰱ [ 208.094006][ T5994] usb 1-1: Manufacturer: 칽氼諤䬧鲤콞헙䍲ㇺਰ逊뷃⃹즺먰愧ᗏ꾌ۈ [ 208.094015][ T5994] usb 1-1: SerialNumber: syz [ 208.156541][ T6824] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 208.156753][ T6824] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 208.215846][ T6837] netlink: 'syz.1.243': attribute type 5 has an invalid length. [ 209.148192][ T982] usbhid 3-1:0.0: can't add hid device: -71 [ 209.150560][ T982] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 209.192174][ T982] usb 3-1: USB disconnect, device number 11 [ 209.235086][ T6824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.235500][ T6824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.296749][ T5994] usb 1-1: USB disconnect, device number 14 [ 209.308575][ T6850] FAULT_INJECTION: forcing a failure. [ 209.308575][ T6850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.308605][ T6850] CPU: 0 UID: 0 PID: 6850 Comm: syz.4.245 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 209.308626][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 209.308637][ T6850] Call Trace: [ 209.308644][ T6850] [ 209.308652][ T6850] dump_stack_lvl+0x189/0x250 [ 209.308682][ T6850] ? __pfx____ratelimit+0x10/0x10 [ 209.308704][ T6850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.308729][ T6850] ? __pfx__printk+0x10/0x10 [ 209.308764][ T6850] should_fail_ex+0x46c/0x600 [ 209.308792][ T6850] _copy_to_user+0x31/0xb0 [ 209.308811][ T6850] simple_read_from_buffer+0xe1/0x170 [ 209.308848][ T6850] proc_fail_nth_read+0x1b6/0x220 [ 209.308871][ T6850] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.308895][ T6850] ? rw_verify_area+0x2ac/0x4e0 [ 209.308915][ T6850] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.308936][ T6850] vfs_read+0x206/0xa30 [ 209.308976][ T6850] ? __pfx_vfs_read+0x10/0x10 [ 209.308994][ T6850] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 209.309030][ T6850] ? mutex_lock_nested+0x154/0x1d0 [ 209.309053][ T6850] ? fdget_pos+0x253/0x320 [ 209.309087][ T6850] ksys_read+0x14b/0x260 [ 209.309110][ T6850] ? __pfx_ksys_read+0x10/0x10 [ 209.309129][ T6850] ? rcu_is_watching+0x15/0xb0 [ 209.309153][ T6850] ? do_syscall_64+0xbe/0x3b0 [ 209.309179][ T6850] do_syscall_64+0xfa/0x3b0 [ 209.309199][ T6850] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.309219][ T6850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.309236][ T6850] ? clear_bhb_loop+0x60/0xb0 [ 209.309258][ T6850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.309276][ T6850] RIP: 0033:0x7f5773dbd8dc [ 209.309292][ T6850] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 209.309307][ T6850] RSP: 002b:00007f5772026030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.309326][ T6850] RAX: ffffffffffffffda RBX: 00007f5774015fa0 RCX: 00007f5773dbd8dc [ 209.309340][ T6850] RDX: 000000000000000f RSI: 00007f57720260a0 RDI: 0000000000000005 [ 209.309351][ T6850] RBP: 00007f5772026090 R08: 0000000000000000 R09: 0000000000000000 [ 209.309363][ T6850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.309373][ T6850] R13: 00007f5774016038 R14: 00007f5774015fa0 R15: 00007fff830eef58 [ 209.309403][ T6850] [ 209.835678][ T1236] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 210.015932][ T1236] usb 4-1: Using ep0 maxpacket: 32 [ 210.017874][ T1236] usb 4-1: config 1 has an invalid interface number: 8 but max is 0 [ 210.017890][ T1236] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 210.017899][ T1236] usb 4-1: config 1 has an invalid interface number: 182 but max is 0 [ 210.017909][ T1236] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 210.017919][ T1236] usb 4-1: config 1 has no interface number 0 [ 210.018000][ T1236] usb 4-1: config 1 has no interface number 1 [ 210.018043][ T1236] usb 4-1: config 1 interface 8 altsetting 5 bulk endpoint 0x8 has invalid maxpacket 16 [ 210.018055][ T1236] usb 4-1: config 1 interface 8 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 210.018069][ T1236] usb 4-1: config 1 interface 8 altsetting 5 endpoint 0x6 has an invalid bInterval 87, changing to 7 [ 210.018081][ T1236] usb 4-1: config 1 interface 8 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 210.018092][ T1236] usb 4-1: config 1 interface 8 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 8 [ 210.018104][ T1236] usb 4-1: too many endpoints for config 1 interface 182 altsetting 254: 75, using maximum allowed: 30 [ 210.018125][ T1236] usb 4-1: config 1 interface 182 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 210.018135][ T1236] usb 4-1: config 1 interface 182 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 210.018146][ T1236] usb 4-1: config 1 interface 182 altsetting 254 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 210.018158][ T1236] usb 4-1: config 1 interface 182 altsetting 254 has 3 endpoint descriptors, different from the interface descriptor's value: 75 [ 210.018170][ T1236] usb 4-1: config 1 interface 8 has no altsetting 0 [ 210.018179][ T1236] usb 4-1: config 1 interface 182 has no altsetting 0 [ 210.020673][ T1236] usb 4-1: New USB device found, idVendor=1410, idProduct=2120, bcdDevice=13.9a [ 210.020689][ T1236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.020699][ T1236] usb 4-1: Product: syz [ 210.020706][ T1236] usb 4-1: Manufacturer: ᰊ [ 210.020719][ T1236] usb 4-1: SerialNumber: syz [ 210.025005][ T6856] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.313129][ T1236] option 4-1:1.8: GSM modem (1-port) converter detected [ 210.365990][ T1236] option 4-1:1.182: GSM modem (1-port) converter detected [ 210.392835][ T1236] usb 4-1: USB disconnect, device number 9 [ 210.420559][ T1236] option 4-1:1.8: device disconnected [ 210.424625][ T1236] option 4-1:1.182: device disconnected [ 211.864343][ T6858] Bluetooth: hci2: command 0x0406 tx timeout [ 211.864372][ T6858] Bluetooth: hci0: command 0x0406 tx timeout [ 211.864388][ T6858] Bluetooth: hci3: command 0x0406 tx timeout [ 211.864402][ T6858] Bluetooth: hci1: command 0x0406 tx timeout [ 211.864416][ T6858] Bluetooth: hci4: command 0x0406 tx timeout [ 212.452262][ T6874] netlink: 580 bytes leftover after parsing attributes in process `syz.3.255'. [ 213.069968][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.224230][ T6878] netlink: 'syz.2.257': attribute type 5 has an invalid length. [ 213.398744][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.073383][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.149228][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.302533][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.883495][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.265087][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.233624][ T6537] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 216.781210][ T6537] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 216.781261][ T6537] usb 4-1: config 0 has no interface number 0 [ 216.781332][ T6537] usb 4-1: config 0 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.781546][ T6537] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e2.ca [ 216.781591][ T6537] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.025309][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.051620][ T6537] usb 4-1: config 0 descriptor?? [ 217.070521][ T6537] uvcvideo 4-1:0.3: Found UVC 0.00 device (8086:0b5b) [ 217.070552][ T6537] uvcvideo 4-1:0.3: No valid video chain found. [ 217.927670][ T982] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 218.097482][ T982] usb 3-1: device descriptor read/all, error -71 [ 218.389228][ T6912] netlink: 580 bytes leftover after parsing attributes in process `syz.2.268'. [ 218.486034][ T1236] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 218.517935][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 218.520093][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 219.093771][ T1236] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 219.093798][ T1236] usb 5-1: config 179 has no interface number 0 [ 219.093846][ T1236] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 219.093870][ T1236] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 219.093892][ T1236] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 219.093916][ T1236] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 219.093940][ T1236] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 219.093979][ T1236] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 219.094000][ T1236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.104589][ T6909] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 219.206021][ T1236] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 219.206323][ T1236] xpad 5-1:179.65: probe with driver xpad failed with error -90 [ 219.257928][ T6537] usb 4-1: USB disconnect, device number 10 [ 219.706125][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.796404][ T6537] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 219.828453][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.876577][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.155877][ T6537] usb 4-1: Using ep0 maxpacket: 32 [ 220.678285][ T6537] usb 4-1: config 1 has an invalid interface number: 8 but max is 0 [ 220.678336][ T6537] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 220.678379][ T6537] usb 4-1: config 1 has an invalid interface number: 182 but max is 0 [ 220.678423][ T6537] usb 4-1: config 1 has an invalid interface association descriptor of length 2, skipping [ 220.678465][ T6537] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 220.678631][ T6537] usb 4-1: config 1 has no interface number 0 [ 220.678671][ T6537] usb 4-1: config 1 has no interface number 1 [ 220.681063][ T6537] usb 4-1: config 1 interface 8 altsetting 5 bulk endpoint 0x8 has invalid maxpacket 16 [ 220.681150][ T6537] usb 4-1: config 1 interface 8 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 220.681225][ T6537] usb 4-1: config 1 interface 8 altsetting 5 endpoint 0x6 has an invalid bInterval 87, changing to 7 [ 220.681274][ T6537] usb 4-1: config 1 interface 8 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 220.681319][ T6537] usb 4-1: config 1 interface 8 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 8 [ 220.681369][ T6537] usb 4-1: too many endpoints for config 1 interface 182 altsetting 254: 75, using maximum allowed: 30 [ 220.681716][ T6537] usb 4-1: config 1 interface 182 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 220.681763][ T6537] usb 4-1: config 1 interface 182 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 220.681831][ T6537] usb 4-1: config 1 interface 182 altsetting 254 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 220.681890][ T6537] usb 4-1: config 1 interface 182 altsetting 254 has 3 endpoint descriptors, different from the interface descriptor's value: 75 [ 220.681940][ T6537] usb 4-1: config 1 interface 8 has no altsetting 0 [ 220.681981][ T6537] usb 4-1: config 1 interface 182 has no altsetting 0 [ 221.019170][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.040924][ T6537] usb 4-1: New USB device found, idVendor=1410, idProduct=2120, bcdDevice=13.9a [ 221.040953][ T6537] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.040971][ T6537] usb 4-1: Product: syz [ 221.040985][ T6537] usb 4-1: Manufacturer: ᰊ [ 221.040999][ T6537] usb 4-1: SerialNumber: syz [ 221.112957][ T6927] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 221.338965][ T6537] option 4-1:1.8: GSM modem (1-port) converter detected [ 221.677154][ T6537] option 4-1:1.182: GSM modem (1-port) converter detected [ 221.718924][ T6537] usb 4-1: USB disconnect, device number 11 [ 221.753919][ T6537] option 4-1:1.8: device disconnected [ 221.772925][ T6537] option 4-1:1.182: device disconnected [ 224.343782][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.380651][ T1236] usb 5-1: USB disconnect, device number 9 [ 225.741427][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.284'. [ 227.795615][ T5801] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 229.881603][ T5801] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 229.881631][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.138028][ T5801] usb 3-1: config 0 descriptor?? [ 231.221025][ T5801] pegasus 3-1:0.0: probe with driver pegasus failed with error -32 [ 231.489282][ T6418] usb 3-1: USB disconnect, device number 14 [ 233.685632][ T5889] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 233.900326][ T5889] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 32 [ 233.900358][ T5889] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.900415][ T5889] usb 3-1: config 1 interface 0 has no altsetting 0 [ 233.973698][ T5889] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 233.973760][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.973828][ T5889] usb 3-1: Product: Ⰱ [ 233.973899][ T5889] usb 3-1: Manufacturer: 칽氼諤䬧鲤콞헙䍲ㇺਰ逊뷃⃹즺먰愧ᗏ꾌ۈ [ 233.973957][ T5889] usb 3-1: SerialNumber: syz [ 234.252660][ T7009] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 234.275436][ T7009] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 234.898744][ T7009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.899374][ T7009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.062226][ T7031] FAULT_INJECTION: forcing a failure. [ 235.062226][ T7031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.062362][ T7031] CPU: 1 UID: 0 PID: 7031 Comm: syz.4.297 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 235.062385][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 235.062396][ T7031] Call Trace: [ 235.062405][ T7031] [ 235.062414][ T7031] dump_stack_lvl+0x189/0x250 [ 235.062444][ T7031] ? __pfx____ratelimit+0x10/0x10 [ 235.062467][ T7031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.062492][ T7031] ? __pfx__printk+0x10/0x10 [ 235.062514][ T7031] ? __might_fault+0xb0/0x130 [ 235.062551][ T7031] should_fail_ex+0x46c/0x600 [ 235.062579][ T7031] _copy_from_user+0x2d/0xb0 [ 235.062604][ T7031] __sys_bpf+0x1e3/0x860 [ 235.062633][ T7031] ? __pfx___sys_bpf+0x10/0x10 [ 235.062690][ T7031] __x64_sys_bpf+0x7c/0x90 [ 235.062714][ T7031] do_syscall_64+0xfa/0x3b0 [ 235.062738][ T7031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.062756][ T7031] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 235.062774][ T7031] ? clear_bhb_loop+0x60/0xb0 [ 235.062797][ T7031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.062815][ T7031] RIP: 0033:0x7f5773dbeec9 [ 235.062832][ T7031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.062847][ T7031] RSP: 002b:00007f5771fe4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.062868][ T7031] RAX: ffffffffffffffda RBX: 00007f5774016180 RCX: 00007f5773dbeec9 [ 235.062882][ T7031] RDX: 0000000000000090 RSI: 0000200000002c40 RDI: 0000000000000005 [ 235.062894][ T7031] RBP: 00007f5771fe4090 R08: 0000000000000000 R09: 0000000000000000 [ 235.062906][ T7031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.062917][ T7031] R13: 00007f5774016218 R14: 00007f5774016180 R15: 00007fff830eef58 [ 235.062948][ T7031] [ 235.543985][ T5889] usb 3-1: USB disconnect, device number 15 [ 235.789018][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 235.843864][ T7027] netlink: 'syz.0.298': attribute type 5 has an invalid length. [ 238.695624][ T5875] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 238.942792][ T6418] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 239.669822][ T44] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 239.777745][ T6418] usb 3-1: Using ep0 maxpacket: 32 [ 240.036784][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 240.314180][ T7066] FAULT_INJECTION: forcing a failure. [ 240.314180][ T7066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.314214][ T7066] CPU: 1 UID: 0 PID: 7066 Comm: syz.3.310 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 240.314236][ T7066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 240.314247][ T7066] Call Trace: [ 240.314255][ T7066] [ 240.314266][ T7066] dump_stack_lvl+0x189/0x250 [ 240.314297][ T7066] ? __pfx____ratelimit+0x10/0x10 [ 240.314320][ T7066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.314345][ T7066] ? __pfx__printk+0x10/0x10 [ 240.314366][ T7066] ? __might_fault+0xb0/0x130 [ 240.314402][ T7066] should_fail_ex+0x46c/0x600 [ 240.314430][ T7066] _copy_from_iter+0x1de/0x1790 [ 240.314458][ T7066] ? __pfx_css_rstat_updated+0x10/0x10 [ 240.314488][ T7066] ? __pfx__copy_from_iter+0x10/0x10 [ 240.314512][ T7066] ? __switch_to+0xdae/0x1670 [ 240.314546][ T7066] tun_get_user+0x219/0x3ec0 [ 240.314578][ T7066] ? __lock_acquire+0xab9/0xd20 [ 240.314614][ T7066] ? __might_fault+0xb0/0x130 [ 240.314643][ T7066] ? __pfx_tun_get_user+0x10/0x10 [ 240.314667][ T7066] ? _parse_integer_limit+0x1ae/0x1f0 [ 240.314699][ T7066] ? __lock_acquire+0xab9/0xd20 [ 240.314729][ T7066] ? ref_tracker_alloc+0x2fe/0x450 [ 240.314774][ T7066] ? __lock_acquire+0xab9/0xd20 [ 240.314801][ T7066] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 240.314828][ T7066] ? tun_get+0x1c/0x2f0 [ 240.314858][ T7066] ? tun_get+0x1c/0x2f0 [ 240.314881][ T7066] ? tun_get+0x1c/0x2f0 [ 240.314909][ T7066] tun_chr_write_iter+0x119/0x200 [ 240.314937][ T7066] vfs_write+0x5d5/0xb40 [ 240.314965][ T7066] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 240.314990][ T7066] ? __pfx_vfs_write+0x10/0x10 [ 240.315022][ T7066] ? __fget_files+0x2a/0x420 [ 240.315056][ T7066] ksys_write+0x14b/0x260 [ 240.315080][ T7066] ? __pfx_ksys_write+0x10/0x10 [ 240.315100][ T7066] ? rcu_is_watching+0x15/0xb0 [ 240.315125][ T7066] ? do_syscall_64+0xbe/0x3b0 [ 240.315151][ T7066] do_syscall_64+0xfa/0x3b0 [ 240.315172][ T7066] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.315193][ T7066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.315212][ T7066] ? clear_bhb_loop+0x60/0xb0 [ 240.315235][ T7066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.315253][ T7066] RIP: 0033:0x7faae851eec9 [ 240.315269][ T7066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.315285][ T7066] RSP: 002b:00007faae677e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 240.315305][ T7066] RAX: ffffffffffffffda RBX: 00007faae8775fa0 RCX: 00007faae851eec9 [ 240.315319][ T7066] RDX: 000000000000002a RSI: 00002000000003c0 RDI: 0000000000000003 [ 240.315331][ T7066] RBP: 00007faae677e090 R08: 0000000000000000 R09: 0000000000000000 [ 240.315343][ T7066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.315354][ T7066] R13: 00007faae8776038 R14: 00007faae8775fa0 R15: 00007ffe39c6f218 [ 240.315384][ T7066] [ 240.573406][ T44] usb 2-1: config 1 has an invalid interface number: 8 but max is 0 [ 240.573431][ T44] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 240.573448][ T44] usb 2-1: config 1 has an invalid interface number: 182 but max is 0 [ 240.573466][ T44] usb 2-1: config 1 has an invalid interface number: 44 but max is 0 [ 240.573484][ T44] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 1 [ 240.573616][ T44] usb 2-1: config 1 has no interface number 0 [ 240.573632][ T44] usb 2-1: config 1 has no interface number 1 [ 240.573646][ T44] usb 2-1: config 1 has no interface number 2 [ 240.573821][ T44] usb 2-1: config 1 interface 8 altsetting 5 bulk endpoint 0x8 has invalid maxpacket 16 [ 240.573843][ T44] usb 2-1: config 1 interface 8 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 240.573867][ T44] usb 2-1: config 1 interface 8 altsetting 5 endpoint 0x6 has an invalid bInterval 87, changing to 7 [ 240.573942][ T44] usb 2-1: config 1 interface 8 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 240.573962][ T44] usb 2-1: config 1 interface 8 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 9 [ 240.573994][ T44] usb 2-1: too many endpoints for config 1 interface 182 altsetting 254: 75, using maximum allowed: 30 [ 240.574032][ T44] usb 2-1: config 1 interface 182 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 240.574104][ T44] usb 2-1: config 1 interface 182 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 240.574123][ T44] usb 2-1: config 1 interface 182 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 240.574142][ T44] usb 2-1: config 1 interface 182 altsetting 254 has 3 endpoint descriptors, different from the interface descriptor's value: 75 [ 240.574167][ T44] usb 2-1: too many endpoints for config 1 interface 44 altsetting 72: 46, using maximum allowed: 30 [ 240.574204][ T44] usb 2-1: config 1 interface 44 altsetting 72 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 240.574278][ T44] usb 2-1: config 1 interface 44 altsetting 72 has 1 endpoint descriptor, different from the interface descriptor's value: 46 [ 240.574301][ T44] usb 2-1: config 1 interface 8 has no altsetting 0 [ 240.574317][ T44] usb 2-1: config 1 interface 182 has no altsetting 0 [ 240.574333][ T44] usb 2-1: config 1 interface 44 has no altsetting 0 [ 240.605534][ T5875] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 240.605560][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.619453][ T5875] usb 1-1: config 0 descriptor?? [ 240.636028][ T6418] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 240.636053][ T6418] usb 3-1: config 0 has no interface number 0 [ 240.636127][ T6418] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.636166][ T6418] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 240.636186][ T6418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.887310][ T6418] usb 3-1: config 0 descriptor?? [ 240.947218][ T44] usb 2-1: New USB device found, idVendor=1410, idProduct=2120, bcdDevice=13.9a [ 240.947245][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.947264][ T44] usb 2-1: Product: syz [ 240.947277][ T44] usb 2-1: Manufacturer: ᰊ [ 240.947290][ T44] usb 2-1: SerialNumber: syz [ 240.955473][ T7059] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 240.994273][ T6418] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 241.193625][ T44] option 2-1:1.8: GSM modem (1-port) converter detected [ 241.217587][ T44] option 2-1:1.182: GSM modem (1-port) converter detected [ 241.223606][ T44] option 2-1:1.44: GSM modem (1-port) converter detected [ 241.245210][ T44] usb 2-1: USB disconnect, device number 9 [ 241.259312][ T44] option 2-1:1.8: device disconnected [ 241.261782][ T44] option 2-1:1.182: device disconnected [ 241.265476][ T44] option 2-1:1.44: device disconnected [ 241.482124][ T7078] FAULT_INJECTION: forcing a failure. [ 241.482124][ T7078] name failslab, interval 1, probability 0, space 0, times 1 [ 241.482157][ T7078] CPU: 0 UID: 0 PID: 7078 Comm: syz.4.314 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 241.482178][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 241.482189][ T7078] Call Trace: [ 241.482197][ T7078] [ 241.482205][ T7078] dump_stack_lvl+0x189/0x250 [ 241.482238][ T7078] ? __pfx____ratelimit+0x10/0x10 [ 241.482261][ T7078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.482286][ T7078] ? __pfx__printk+0x10/0x10 [ 241.482314][ T7078] ? __pfx___might_resched+0x10/0x10 [ 241.482341][ T7078] should_fail_ex+0x46c/0x600 [ 241.482370][ T7078] should_failslab+0xa8/0x100 [ 241.482397][ T7078] __kmalloc_noprof+0xcc/0x7d0 [ 241.482420][ T7078] ? kfree+0x51/0x950 [ 241.482438][ T7078] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 241.482465][ T7078] tomoyo_realpath_from_path+0xe3/0x5d0 [ 241.482488][ T7078] ? tomoyo_domain+0xda/0x130 [ 241.482513][ T7078] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 241.482538][ T7078] tomoyo_path_number_perm+0x1e8/0x5a0 [ 241.482565][ T7078] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 241.482592][ T7078] ? finish_task_switch+0x32f/0x950 [ 241.482620][ T7078] ? __lock_acquire+0xab9/0xd20 [ 241.482666][ T7078] ? __fget_files+0x2a/0x420 [ 241.482694][ T7078] ? __fget_files+0x2a/0x420 [ 241.482717][ T7078] ? __fget_files+0x3a6/0x420 [ 241.482740][ T7078] ? __fget_files+0x2a/0x420 [ 241.482768][ T7078] security_file_ioctl+0xcb/0x2d0 [ 241.482798][ T7078] __se_sys_ioctl+0x47/0x170 [ 241.482822][ T7078] do_syscall_64+0xfa/0x3b0 [ 241.482845][ T7078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.482864][ T7078] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 241.482882][ T7078] ? clear_bhb_loop+0x60/0xb0 [ 241.482911][ T7078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.482929][ T7078] RIP: 0033:0x7f5773dbeec9 [ 241.482945][ T7078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.482961][ T7078] RSP: 002b:00007f5772005038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.482981][ T7078] RAX: ffffffffffffffda RBX: 00007f5774016090 RCX: 00007f5773dbeec9 [ 241.482995][ T7078] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000003 [ 241.483007][ T7078] RBP: 00007f5772005090 R08: 0000000000000000 R09: 0000000000000000 [ 241.483018][ T7078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.483030][ T7078] R13: 00007f5774016128 R14: 00007f5774016090 R15: 00007fff830eef58 [ 241.483061][ T7078] [ 241.486242][ T7078] ERROR: Out of memory at tomoyo_realpath_from_path. [ 241.557336][ T5875] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 241.569332][ T5875] usb 1-1: USB disconnect, device number 15 [ 241.595620][ T6418] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 241.758840][ T6418] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 32 [ 241.758871][ T6418] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.758905][ T6418] usb 4-1: config 1 interface 0 has no altsetting 0 [ 241.808090][ T6418] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 241.808118][ T6418] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.808137][ T6418] usb 4-1: Product: Ⰱ [ 241.808151][ T6418] usb 4-1: Manufacturer: 칽氼諤䬧鲤콞헙䍲ㇺਰ逊뷃⃹즺먰愧ᗏ꾌ۈ [ 241.808165][ T6418] usb 4-1: SerialNumber: syz [ 241.816359][ T7073] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 241.816538][ T7073] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 242.176293][ T44] usb 3-1: USB disconnect, device number 16 [ 242.251107][ T6418] usb 4-1: USB disconnect, device number 12 [ 242.279079][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'. [ 242.298479][ T7084] netlink: 36 bytes leftover after parsing attributes in process `syz.0.316'. [ 244.619592][ T1236] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 244.775838][ T1236] usb 3-1: Using ep0 maxpacket: 32 [ 244.778326][ T1236] usb 3-1: config 1 has an invalid interface number: 8 but max is 0 [ 244.778350][ T1236] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 244.778366][ T1236] usb 3-1: config 1 has an invalid interface number: 182 but max is 0 [ 244.778385][ T1236] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 244.778397][ T1236] usb 3-1: config 1 has no interface number 0 [ 244.778405][ T1236] usb 3-1: config 1 has no interface number 1 [ 244.778439][ T1236] usb 3-1: config 1 interface 8 altsetting 5 bulk endpoint 0x8 has invalid maxpacket 16 [ 244.778451][ T1236] usb 3-1: config 1 interface 8 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 244.778465][ T1236] usb 3-1: config 1 interface 8 altsetting 5 endpoint 0x6 has an invalid bInterval 87, changing to 7 [ 244.778488][ T1236] usb 3-1: config 1 interface 8 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 244.778507][ T1236] usb 3-1: config 1 interface 8 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 244.778528][ T1236] usb 3-1: too many endpoints for config 1 interface 182 altsetting 254: 75, using maximum allowed: 30 [ 244.778564][ T1236] usb 3-1: config 1 interface 182 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 244.778585][ T1236] usb 3-1: config 1 interface 182 altsetting 254 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 244.778617][ T1236] usb 3-1: config 1 interface 182 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 75 [ 244.778643][ T1236] usb 3-1: config 1 interface 8 has no altsetting 0 [ 244.778656][ T1236] usb 3-1: config 1 interface 182 has no altsetting 0 [ 244.780836][ T1236] usb 3-1: New USB device found, idVendor=1410, idProduct=2120, bcdDevice=13.9a [ 244.780858][ T1236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.780868][ T1236] usb 3-1: Product: syz [ 244.780875][ T1236] usb 3-1: Manufacturer: ᰊ [ 244.780882][ T1236] usb 3-1: SerialNumber: syz [ 244.784535][ T7102] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 244.975863][ T6537] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 245.005735][ T5889] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 245.016434][ T1236] option 3-1:1.8: GSM modem (1-port) converter detected [ 245.040659][ T1236] option 3-1:1.182: GSM modem (1-port) converter detected [ 245.061401][ T1236] usb 3-1: USB disconnect, device number 17 [ 245.078697][ T1236] option 3-1:1.8: device disconnected [ 245.082296][ T1236] option 3-1:1.182: device disconnected [ 245.274750][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 245.282760][ T5889] usb 1-1: config 1 has an invalid interface number: 8 but max is 0 [ 245.282785][ T5889] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 245.282802][ T5889] usb 1-1: config 1 has an invalid interface number: 182 but max is 0 [ 245.282821][ T5889] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 245.282841][ T5889] usb 1-1: config 1 has no interface number 0 [ 245.282855][ T5889] usb 1-1: config 1 has no interface number 1 [ 245.282914][ T5889] usb 1-1: config 1 interface 8 altsetting 5 bulk endpoint 0x8 has invalid maxpacket 16 [ 245.282936][ T5889] usb 1-1: config 1 interface 8 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 245.282960][ T5889] usb 1-1: config 1 interface 8 altsetting 5 endpoint 0x6 has an invalid bInterval 87, changing to 7 [ 245.282983][ T5889] usb 1-1: config 1 interface 8 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 245.283003][ T5889] usb 1-1: config 1 interface 8 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 245.283027][ T5889] usb 1-1: too many endpoints for config 1 interface 182 altsetting 254: 75, using maximum allowed: 30 [ 245.283102][ T5889] usb 1-1: config 1 interface 182 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 245.283124][ T5889] usb 1-1: config 1 interface 182 altsetting 254 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 245.283148][ T5889] usb 1-1: config 1 interface 182 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 75 [ 245.283173][ T5889] usb 1-1: config 1 interface 8 has no altsetting 0 [ 245.283189][ T5889] usb 1-1: config 1 interface 182 has no altsetting 0 [ 245.284335][ T6537] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 245.284360][ T6537] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.293782][ T5889] usb 1-1: New USB device found, idVendor=1410, idProduct=2120, bcdDevice=13.9a [ 245.293808][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.293826][ T5889] usb 1-1: Product: syz [ 245.293839][ T5889] usb 1-1: Manufacturer: ᰊ [ 245.293852][ T5889] usb 1-1: SerialNumber: syz [ 246.192660][ T7110] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 246.209867][ T6537] usb 2-1: config 0 descriptor?? [ 246.597585][ T5889] option 1-1:1.8: GSM modem (1-port) converter detected [ 247.527588][ T5889] option 1-1:1.182: GSM modem (1-port) converter detected [ 247.558844][ T5889] usb 1-1: USB disconnect, device number 16 [ 247.572519][ T5889] option 1-1:1.8: device disconnected [ 247.584138][ T5889] option 1-1:1.182: device disconnected [ 247.764115][ T6537] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 247.774422][ T6537] usb 2-1: USB disconnect, device number 10 [ 247.833368][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 247.834326][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 248.131517][ T44] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 250.412357][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 250.417442][ T44] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.417467][ T44] usb 5-1: config 0 has no interface number 0 [ 250.417515][ T44] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.417555][ T44] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 250.417577][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.477555][ T44] usb 5-1: config 0 descriptor?? [ 250.496484][ T44] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 250.595303][ T6418] usb 5-1: USB disconnect, device number 10 [ 251.565649][ T6418] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 251.724713][ T5994] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 251.734525][ T6418] usb 5-1: Using ep0 maxpacket: 32 [ 251.742584][ T6418] usb 5-1: config 1 has an invalid interface number: 8 but max is 0 [ 251.742608][ T6418] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 251.742624][ T6418] usb 5-1: config 1 has an invalid interface number: 182 but max is 0 [ 251.742642][ T6418] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 251.742661][ T6418] usb 5-1: config 1 has no interface number 0 [ 251.742676][ T6418] usb 5-1: config 1 has no interface number 1 [ 251.742738][ T6418] usb 5-1: config 1 interface 8 altsetting 5 bulk endpoint 0x8 has invalid maxpacket 16 [ 251.742759][ T6418] usb 5-1: config 1 interface 8 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 251.742781][ T6418] usb 5-1: config 1 interface 8 altsetting 5 endpoint 0x6 has an invalid bInterval 87, changing to 7 [ 251.742803][ T6418] usb 5-1: config 1 interface 8 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 251.742820][ T6418] usb 5-1: config 1 interface 8 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 251.742841][ T6418] usb 5-1: too many endpoints for config 1 interface 182 altsetting 254: 75, using maximum allowed: 30 [ 251.742874][ T6418] usb 5-1: config 1 interface 182 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 251.742895][ T6418] usb 5-1: config 1 interface 182 altsetting 254 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 251.742917][ T6418] usb 5-1: config 1 interface 182 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 75 [ 251.742941][ T6418] usb 5-1: config 1 interface 8 has no altsetting 0 [ 251.742957][ T6418] usb 5-1: config 1 interface 182 has no altsetting 0 [ 251.812245][ T6418] usb 5-1: New USB device found, idVendor=1410, idProduct=2120, bcdDevice=13.9a [ 251.812273][ T6418] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.812291][ T6418] usb 5-1: Product: syz [ 251.812302][ T6418] usb 5-1: Manufacturer: ᰊ [ 251.812315][ T6418] usb 5-1: SerialNumber: syz [ 251.895619][ T5994] usb 3-1: Using ep0 maxpacket: 32 [ 251.926809][ T5994] usb 3-1: config 1 has an invalid interface number: 8 but max is 0 [ 251.926833][ T5994] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 251.926850][ T5994] usb 3-1: config 1 has an invalid interface number: 182 but max is 0 [ 251.926868][ T5994] usb 3-1: config 1 has an invalid interface association descriptor of length 2, skipping [ 251.926885][ T5994] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 251.926903][ T5994] usb 3-1: config 1 has no interface number 0 [ 251.926925][ T5994] usb 3-1: config 1 has no interface number 1 [ 251.927315][ T5994] usb 3-1: config 1 interface 8 altsetting 5 bulk endpoint 0x8 has invalid maxpacket 16 [ 251.927338][ T5994] usb 3-1: config 1 interface 8 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 251.927361][ T5994] usb 3-1: config 1 interface 8 altsetting 5 endpoint 0x6 has an invalid bInterval 87, changing to 7 [ 251.927385][ T5994] usb 3-1: config 1 interface 8 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 251.927404][ T5994] usb 3-1: config 1 interface 8 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 251.927427][ T5994] usb 3-1: too many endpoints for config 1 interface 182 altsetting 254: 75, using maximum allowed: 30 [ 251.927501][ T5994] usb 3-1: config 1 interface 182 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 251.927522][ T5994] usb 3-1: config 1 interface 182 altsetting 254 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 251.927545][ T5994] usb 3-1: config 1 interface 182 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 75 [ 251.927570][ T5994] usb 3-1: config 1 interface 8 has no altsetting 0 [ 251.927585][ T5994] usb 3-1: config 1 interface 182 has no altsetting 0 [ 252.166300][ T5994] usb 3-1: New USB device found, idVendor=1410, idProduct=2120, bcdDevice=13.9a [ 252.166331][ T5994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.166350][ T5994] usb 3-1: Product: syz [ 252.166364][ T5994] usb 3-1: Manufacturer: ᰊ [ 252.166377][ T5994] usb 3-1: SerialNumber: syz [ 252.239358][ T7157] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 252.252260][ T7150] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 252.347311][ T7163] FAULT_INJECTION: forcing a failure. [ 252.347311][ T7163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.347646][ T7163] CPU: 1 UID: 0 PID: 7163 Comm: syz.0.342 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 252.347673][ T7163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.347692][ T7163] Call Trace: [ 252.347699][ T7163] [ 252.347706][ T7163] dump_stack_lvl+0x189/0x250 [ 252.347732][ T7163] ? __pfx____ratelimit+0x10/0x10 [ 252.347750][ T7163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.347771][ T7163] ? __pfx__printk+0x10/0x10 [ 252.347789][ T7163] ? __might_fault+0xb0/0x130 [ 252.347818][ T7163] should_fail_ex+0x46c/0x600 [ 252.347841][ T7163] _copy_from_user+0x2d/0xb0 [ 252.347856][ T7163] do_sock_getsockopt+0x17d/0x450 [ 252.347884][ T7163] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 252.347902][ T7163] ? do_syscall_64+0xa0/0x3b0 [ 252.347920][ T7163] ? __fget_files+0x3a6/0x420 [ 252.347939][ T7163] ? __fget_files+0x2a/0x420 [ 252.347965][ T7163] __x64_sys_getsockopt+0x1ab/0x250 [ 252.347983][ T7163] ? do_syscall_64+0xa0/0x3b0 [ 252.348002][ T7163] ? do_syscall_64+0xa0/0x3b0 [ 252.348023][ T7163] do_syscall_64+0xfa/0x3b0 [ 252.348039][ T7163] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.348056][ T7163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.348072][ T7163] ? clear_bhb_loop+0x60/0xb0 [ 252.348090][ T7163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.348104][ T7163] RIP: 0033:0x7f831c4feec9 [ 252.348118][ T7163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.348131][ T7163] RSP: 002b:00007f831a75e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 252.348147][ T7163] RAX: ffffffffffffffda RBX: 00007f831c755fa0 RCX: 00007f831c4feec9 [ 252.348159][ T7163] RDX: 0000000000000003 RSI: 000000000000006b RDI: 0000000000000003 [ 252.348168][ T7163] RBP: 00007f831a75e090 R08: 00002000000003c0 R09: 0000000000000000 [ 252.348178][ T7163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.348187][ T7163] R13: 00007f831c756038 R14: 00007f831c755fa0 R15: 00007ffe187bd298 [ 252.348214][ T7163] [ 252.510967][ T5994] option 3-1:1.8: GSM modem (1-port) converter detected [ 252.557489][ T5994] option 3-1:1.182: GSM modem (1-port) converter detected [ 252.594618][ T6418] option 5-1:1.8: GSM modem (1-port) converter detected [ 252.621016][ T5994] usb 3-1: USB disconnect, device number 18 [ 252.639206][ T5994] option 3-1:1.8: device disconnected [ 252.644073][ T5994] option 3-1:1.182: device disconnected [ 252.659242][ T6418] option 5-1:1.182: GSM modem (1-port) converter detected [ 252.665356][ T6418] usb 5-1: USB disconnect, device number 11 [ 252.685256][ T6418] option 5-1:1.8: device disconnected [ 252.694432][ T6418] option 5-1:1.182: device disconnected [ 252.825633][ T44] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 252.905637][ T5974] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 252.950647][ T7169] netlink: 'syz.1.345': attribute type 10 has an invalid length. [ 252.963931][ T7169] batman_adv: batadv0: Adding interface: team0 [ 252.963947][ T7169] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.963973][ T7169] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 252.982363][ T44] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 252.982397][ T44] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 252.982422][ T44] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 252.982459][ T44] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 252.982480][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.991098][ T7165] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 252.999380][ T44] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 253.109669][ T5974] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 253.109703][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.117513][ T5974] usb 4-1: config 0 descriptor?? [ 253.430717][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 253.433026][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 253.928421][ T7187] netlink: 'syz.1.350': attribute type 5 has an invalid length. [ 254.841129][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 254.841616][ T5974] pegasus 4-1:0.0: probe with driver pegasus failed with error -32 [ 255.115806][ T5994] usb 4-1: USB disconnect, device number 13 [ 255.280343][ T5974] usb 1-1: USB disconnect, device number 17 [ 256.643985][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.644057][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.759460][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 257.760388][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 257.895631][ T6537] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 257.984745][ T7228] netlink: 'syz.0.362': attribute type 5 has an invalid length. [ 258.275579][ T6537] usb 3-1: Using ep0 maxpacket: 32 [ 258.278929][ T6537] usb 3-1: config 1 has an invalid interface number: 8 but max is 0 [ 258.278954][ T6537] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 258.278972][ T6537] usb 3-1: config 1 has an invalid interface number: 182 but max is 0 [ 258.278990][ T6537] usb 3-1: config 1 has an invalid interface association descriptor of length 2, skipping [ 258.279016][ T6537] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 258.279035][ T6537] usb 3-1: config 1 has no interface number 0 [ 258.279050][ T6537] usb 3-1: config 1 has no interface number 1 [ 258.279111][ T6537] usb 3-1: config 1 interface 8 altsetting 5 bulk endpoint 0x8 has invalid maxpacket 16 [ 258.279134][ T6537] usb 3-1: config 1 interface 8 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 258.279158][ T6537] usb 3-1: config 1 interface 8 altsetting 5 endpoint 0x6 has an invalid bInterval 87, changing to 7 [ 258.279182][ T6537] usb 3-1: config 1 interface 8 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 258.279203][ T6537] usb 3-1: config 1 interface 8 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 258.279227][ T6537] usb 3-1: too many endpoints for config 1 interface 182 altsetting 254: 75, using maximum allowed: 30 [ 258.279263][ T6537] usb 3-1: config 1 interface 182 altsetting 254 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 258.279286][ T6537] usb 3-1: config 1 interface 182 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 75 [ 258.279311][ T6537] usb 3-1: config 1 interface 8 has no altsetting 0 [ 258.279327][ T6537] usb 3-1: config 1 interface 182 has no altsetting 0 [ 258.285197][ T6537] usb 3-1: New USB device found, idVendor=1410, idProduct=2120, bcdDevice=13.9a [ 258.285224][ T6537] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.285242][ T6537] usb 3-1: Product: syz [ 258.285255][ T6537] usb 3-1: Manufacturer: ᰊ [ 258.285264][ T6537] usb 3-1: SerialNumber: syz [ 258.346509][ T7220] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 258.580631][ T6537] option 3-1:1.8: GSM modem (1-port) converter detected [ 258.592619][ T5994] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 258.608310][ T6537] option 3-1:1.182: GSM modem (1-port) converter detected [ 258.634939][ T6537] usb 3-1: USB disconnect, device number 19 [ 258.651513][ T6537] option 3-1:1.8: device disconnected [ 258.662724][ T6537] option 3-1:1.182: device disconnected [ 258.780549][ T5994] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 258.780577][ T5994] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 258.780594][ T5994] usb 2-1: config 8 has no interface number 0 [ 258.780642][ T5994] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 258.785139][ T5994] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 258.785167][ T5994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.785184][ T5994] usb 2-1: Product: syz [ 258.785198][ T5994] usb 2-1: Manufacturer: syz [ 258.785211][ T5994] usb 2-1: SerialNumber: syz [ 259.128314][ T5994] usb 2-1: USB disconnect, device number 11 [ 259.257228][ T6537] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 259.335650][ T6418] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 259.422600][ T7252] FAULT_INJECTION: forcing a failure. [ 259.422600][ T7252] name failslab, interval 1, probability 0, space 0, times 0 [ 259.422632][ T7252] CPU: 0 UID: 0 PID: 7252 Comm: syz.2.370 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 259.422654][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.422668][ T7252] Call Trace: [ 259.422676][ T7252] [ 259.422684][ T7252] dump_stack_lvl+0x189/0x250 [ 259.422714][ T7252] ? __pfx____ratelimit+0x10/0x10 [ 259.422737][ T7252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.422763][ T7252] ? __pfx__printk+0x10/0x10 [ 259.422791][ T7252] ? __pfx___might_resched+0x10/0x10 [ 259.422818][ T7252] should_fail_ex+0x46c/0x600 [ 259.422846][ T7252] should_failslab+0xa8/0x100 [ 259.422875][ T7252] __kmalloc_noprof+0xcc/0x7d0 [ 259.422898][ T7252] ? kfree+0x51/0x950 [ 259.422916][ T7252] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 259.422943][ T7252] tomoyo_realpath_from_path+0xe3/0x5d0 [ 259.422965][ T7252] ? tomoyo_domain+0xda/0x130 [ 259.422991][ T7252] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 259.423018][ T7252] tomoyo_path_number_perm+0x1e8/0x5a0 [ 259.423046][ T7252] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 259.423076][ T7252] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 259.423099][ T7252] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.423127][ T7252] ? __lock_acquire+0xab9/0xd20 [ 259.423180][ T7252] ? __fget_files+0x2a/0x420 [ 259.423209][ T7252] ? __fget_files+0x2a/0x420 [ 259.423232][ T7252] ? __fget_files+0x3a6/0x420 [ 259.423255][ T7252] ? __fget_files+0x2a/0x420 [ 259.423284][ T7252] security_file_ioctl+0xcb/0x2d0 [ 259.423313][ T7252] __se_sys_ioctl+0x47/0x170 [ 259.423337][ T7252] do_syscall_64+0xfa/0x3b0 [ 259.423358][ T7252] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.423379][ T7252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.423398][ T7252] ? clear_bhb_loop+0x60/0xb0 [ 259.423420][ T7252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.423439][ T7252] RIP: 0033:0x7fb2eafbeec9 [ 259.423455][ T7252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.423473][ T7252] RSP: 002b:00007fb2e921e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.423493][ T7252] RAX: ffffffffffffffda RBX: 00007fb2eb215fa0 RCX: 00007fb2eafbeec9 [ 259.423508][ T7252] RDX: 0080000000000725 RSI: 000000004008700c RDI: 0000000000000003 [ 259.423522][ T7252] RBP: 00007fb2e921e090 R08: 0000000000000000 R09: 0000000000000000 [ 259.423534][ T7252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.423545][ T7252] R13: 00007fb2eb216038 R14: 00007fb2eb215fa0 R15: 00007ffe9f831a18 [ 259.423576][ T7252] [ 259.423665][ T7252] ERROR: Out of memory at tomoyo_realpath_from_path. [ 259.642533][ T6537] usb 5-1: Using ep0 maxpacket: 32 [ 259.655619][ T6537] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 259.655645][ T6537] usb 5-1: config 0 has no interface number 0 [ 259.668233][ T6537] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 259.668261][ T6537] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.668279][ T6537] usb 5-1: Product: syz [ 259.668293][ T6537] usb 5-1: Manufacturer: syz [ 259.668306][ T6537] usb 5-1: SerialNumber: syz [ 259.673675][ T6537] usb 5-1: config 0 descriptor?? [ 260.324426][ T6537] radio-si470x 5-1:0.35: this is not a si470x device. [ 260.350477][ T6537] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 260.375913][ T6418] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 32 [ 260.375946][ T6418] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.376341][ T6418] usb 4-1: config 1 interface 0 has no altsetting 0 [ 260.384937][ T6418] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 260.384965][ T6418] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.384983][ T6418] usb 4-1: Product: Ⰱ [ 260.384994][ T6418] usb 4-1: Manufacturer: 칽氼諤䬧鲤콞헙䍲ㇺਰ逊뷃⃹즺먰愧ᗏ꾌ۈ [ 260.385223][ T6418] usb 4-1: SerialNumber: syz [ 260.406921][ T7244] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 260.407282][ T7244] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 260.628093][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.373'. [ 260.629167][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.373'. [ 260.687407][ T6537] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 260.715289][ T7262] netlink: 'syz.0.374': attribute type 5 has an invalid length. [ 260.803834][ T5974] hid-generic 0000:0000:0000.0006: unknown main item tag 0x1 [ 260.803873][ T5974] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 260.803898][ T5974] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 260.803925][ T5974] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 260.803950][ T5974] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 260.803976][ T5974] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 260.804390][ T5974] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 260.804419][ T5974] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 260.804446][ T5974] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 260.804472][ T5974] hid-generic 0000:0000:0000.0006: unknown main item tag 0x2 [ 260.844898][ T7244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.850545][ T7244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.914662][ T5974] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 260.962127][ T6418] usb 4-1: USB disconnect, device number 14 [ 261.033281][ T7271] netlink: 580 bytes leftover after parsing attributes in process `syz.1.377'. [ 261.046344][ T5994] usb 5-1: USB disconnect, device number 12 [ 261.048825][ T5994] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 261.174328][ T7275] dns_resolver: Unsupported content type (24) [ 263.045744][ T6418] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 264.110094][ T6418] usb 4-1: Using ep0 maxpacket: 8 [ 264.123602][ T7291] netlink: 'syz.1.386': attribute type 5 has an invalid length. [ 264.164303][ T6418] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 264.164332][ T6418] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 264.225051][ T6418] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 264.225135][ T6418] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.225192][ T6418] usb 4-1: Product: syz [ 264.225205][ T6418] usb 4-1: Manufacturer: syz [ 264.225218][ T6418] usb 4-1: SerialNumber: syz [ 264.272027][ T6418] usb 4-1: config 0 descriptor?? [ 264.440039][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 264.449525][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 266.592143][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 266.764234][ T7312] bridge0: port 3(gretap0) entered blocking state [ 266.764383][ T7312] bridge0: port 3(gretap0) entered disabled state [ 266.785953][ T7312] gretap0: entered allmulticast mode [ 267.136420][ T7312] gretap0: entered promiscuous mode [ 267.160940][ T7312] bridge0: port 3(gretap0) entered blocking state [ 267.164711][ T7312] bridge0: port 3(gretap0) entered forwarding state [ 267.185086][ T7314] netlink: 180 bytes leftover after parsing attributes in process `syz.4.390'. [ 268.021588][ T6418] usb 4-1: USB disconnect, device number 15 [ 268.197254][ T7320] netlink: 580 bytes leftover after parsing attributes in process `syz.2.394'. [ 268.575653][ T6418] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 268.746747][ T6418] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 32 [ 268.746778][ T6418] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.746803][ T6418] usb 4-1: config 1 interface 0 has no altsetting 0 [ 268.753273][ T6418] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 268.753301][ T6418] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.753320][ T6418] usb 4-1: Product: Ⰱ [ 268.753333][ T6418] usb 4-1: Manufacturer: 칽氼諤䬧鲤콞헙䍲ㇺਰ逊뷃⃹즺먰愧ᗏ꾌ۈ [ 268.753351][ T6418] usb 4-1: SerialNumber: syz [ 268.831097][ T7319] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 268.831219][ T7319] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 268.926227][ T5994] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 269.014360][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.115616][ T5994] usb 5-1: Using ep0 maxpacket: 32 [ 269.118174][ T5994] usb 5-1: config 1 has an invalid interface number: 8 but max is 0 [ 269.118199][ T5994] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 269.118218][ T5994] usb 5-1: config 1 has an invalid interface number: 182 but max is 0 [ 269.118239][ T5994] usb 5-1: config 1 has an invalid interface descriptor of length 8, skipping [ 269.118257][ T5994] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 269.118276][ T5994] usb 5-1: config 1 has no interface number 0 [ 269.118292][ T5994] usb 5-1: config 1 has no interface number 1 [ 269.118356][ T5994] usb 5-1: config 1 interface 8 altsetting 5 bulk endpoint 0x8 has invalid maxpacket 16 [ 269.118379][ T5994] usb 5-1: config 1 interface 8 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 269.118404][ T5994] usb 5-1: config 1 interface 8 altsetting 5 endpoint 0x6 has an invalid bInterval 87, changing to 7 [ 269.118430][ T5994] usb 5-1: config 1 interface 8 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 269.118450][ T5994] usb 5-1: config 1 interface 8 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 9 [ 269.118474][ T5994] usb 5-1: too many endpoints for config 1 interface 182 altsetting 254: 75, using maximum allowed: 30 [ 269.118514][ T5994] usb 5-1: config 1 interface 182 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 269.118535][ T5994] usb 5-1: config 1 interface 182 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 269.118554][ T5994] usb 5-1: config 1 interface 182 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 269.118573][ T5994] usb 5-1: config 1 interface 182 altsetting 254 has 3 endpoint descriptors, different from the interface descriptor's value: 75 [ 269.118597][ T5994] usb 5-1: config 1 interface 8 has no altsetting 0 [ 269.118613][ T5994] usb 5-1: config 1 interface 182 has no altsetting 0 [ 269.149342][ T5994] usb 5-1: New USB device found, idVendor=1410, idProduct=2120, bcdDevice=13.9a [ 269.149370][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.149390][ T5994] usb 5-1: Product: syz [ 269.149404][ T5994] usb 5-1: Manufacturer: ᰊ [ 269.149417][ T5994] usb 5-1: SerialNumber: syz [ 269.422163][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.481637][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.670934][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.906990][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.281892][ T7326] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 270.363385][ T7319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.364023][ T7319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.347669][ T5994] option 5-1:1.8: GSM modem (1-port) converter detected [ 277.494600][ T5994] option 5-1:1.182: GSM modem (1-port) converter detected [ 277.806908][ T5994] usb 5-1: USB disconnect, device number 13 [ 277.834049][ T5994] option 5-1:1.8: device disconnected [ 277.878587][ T5994] option 5-1:1.182: device disconnected [ 278.486026][ T6418] usb 4-1: USB disconnect, device number 16 [ 280.670382][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.685068][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.688186][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.701937][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.703440][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.996653][ T7374] overlay: ./file0 is not a directory [ 283.586103][ T5810] Bluetooth: hci4: command tx timeout [ 283.626329][ T5918] ================================================================== [ 283.626345][ T5918] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 283.626376][ T5918] Read of size 8 at addr ffffc9000d912008 by task kworker/1:5/5918 [ 283.626392][ T5918] [ 283.626403][ T5918] CPU: 1 UID: 0 PID: 5918 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 283.626424][ T5918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 283.626437][ T5918] Workqueue: usb_hub_wq hub_event [ 283.626460][ T5918] Call Trace: [ 283.626468][ T5918] [ 283.626477][ T5918] dump_stack_lvl+0x189/0x250 [ 283.626505][ T5918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.626529][ T5918] ? __pfx__printk+0x10/0x10 [ 283.626550][ T5918] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 283.626575][ T5918] ? __virt_addr_valid+0xdc/0x5c0 [ 283.626601][ T5918] ? __virt_addr_valid+0xdc/0x5c0 [ 283.626620][ T5918] print_report+0xca/0x240 [ 283.626642][ T5918] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 283.626661][ T5918] kasan_report+0x118/0x150 [ 283.626688][ T5918] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 283.626714][ T5918] __list_del_entry_valid_or_report+0xb5/0x190 [ 283.626737][ T5918] kcov_remote_start+0x2b0/0x6f0 [ 283.626764][ T5918] hub_event+0x158/0x4a20 [ 283.626786][ T5918] ? do_raw_spin_lock+0x121/0x290 [ 283.626819][ T5918] ? do_raw_spin_lock+0x121/0x290 [ 283.626841][ T5918] ? look_up_lock_class+0x74/0x170 [ 283.626864][ T5918] ? register_lock_class+0x51/0x320 [ 283.626893][ T5918] ? __lock_acquire+0xab9/0xd20 [ 283.626921][ T5918] ? __pfx_hub_event+0x10/0x10 [ 283.626942][ T5918] ? process_scheduled_works+0x9ef/0x17b0 [ 283.626970][ T5918] ? _raw_spin_unlock_irq+0x23/0x50 [ 283.626991][ T5918] ? process_scheduled_works+0x9ef/0x17b0 [ 283.627014][ T5918] ? process_scheduled_works+0x9ef/0x17b0 [ 283.627039][ T5918] process_scheduled_works+0xae1/0x17b0 [ 283.627076][ T5918] ? __pfx_process_scheduled_works+0x10/0x10 [ 283.627108][ T5918] worker_thread+0x8a0/0xda0 [ 283.627133][ T5918] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 283.627160][ T5918] ? __kthread_parkme+0x7b/0x200 [ 283.627189][ T5918] kthread+0x711/0x8a0 [ 283.627209][ T5918] ? __pfx_worker_thread+0x10/0x10 [ 283.627233][ T5918] ? __pfx_kthread+0x10/0x10 [ 283.627250][ T5918] ? rt_spin_unlock+0x150/0x200 [ 283.627269][ T5918] ? rt_spin_unlock+0x161/0x200 [ 283.627286][ T5918] ? __pfx_kthread+0x10/0x10 [ 283.627304][ T5918] ret_from_fork+0x436/0x7d0 [ 283.627329][ T5918] ? __pfx_ret_from_fork+0x10/0x10 [ 283.627355][ T5918] ? __switch_to_asm+0x39/0x70 [ 283.627373][ T5918] ? __switch_to_asm+0x33/0x70 [ 283.627391][ T5918] ? __pfx_kthread+0x10/0x10 [ 283.627410][ T5918] ret_from_fork_asm+0x1a/0x30 [ 283.627435][ T5918] [ 283.627442][ T5918] [ 283.627447][ T5918] The buggy address belongs to a vmalloc virtual mapping [ 283.627464][ T5918] Memory state around the buggy address: [ 283.627475][ T5918] ffffc9000d911f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 283.627488][ T5918] ffffc9000d911f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 283.627502][ T5918] >ffffc9000d912000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 283.627512][ T5918] ^ [ 283.627522][ T5918] ffffc9000d912080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 283.627535][ T5918] ffffc9000d912100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 283.627545][ T5918] ================================================================== [ 283.627564][ T5918] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 283.627578][ T5918] CPU: 1 UID: 0 PID: 5918 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 283.627607][ T5918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 283.627619][ T5918] Workqueue: usb_hub_wq hub_event [ 283.627640][ T5918] Call Trace: [ 283.627647][ T5918] [ 283.627654][ T5918] dump_stack_lvl+0x99/0x250 [ 283.627681][ T5918] ? __asan_memcpy+0x40/0x70 [ 283.627702][ T5918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.627728][ T5918] ? __pfx__printk+0x10/0x10 [ 283.627754][ T5918] vpanic+0x237/0x6d0 [ 283.627771][ T5918] ? __pfx_vpanic+0x10/0x10 [ 283.627793][ T5918] panic+0xb9/0xc0 [ 283.627809][ T5918] ? __pfx_panic+0x10/0x10 [ 283.627825][ T5918] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 283.627850][ T5918] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 283.627875][ T5918] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 283.627896][ T5918] check_panic_on_warn+0x89/0xb0 [ 283.627916][ T5918] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 283.627937][ T5918] end_report+0x78/0x160 [ 283.627960][ T5918] kasan_report+0x129/0x150 [ 283.627986][ T5918] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 283.628012][ T5918] __list_del_entry_valid_or_report+0xb5/0x190 [ 283.628033][ T5918] kcov_remote_start+0x2b0/0x6f0 [ 283.628059][ T5918] hub_event+0x158/0x4a20 [ 283.628081][ T5918] ? do_raw_spin_lock+0x121/0x290 [ 283.628114][ T5918] ? do_raw_spin_lock+0x121/0x290 [ 283.628136][ T5918] ? look_up_lock_class+0x74/0x170 [ 283.628158][ T5918] ? register_lock_class+0x51/0x320 [ 283.628187][ T5918] ? __lock_acquire+0xab9/0xd20 [ 283.628215][ T5918] ? __pfx_hub_event+0x10/0x10 [ 283.628235][ T5918] ? process_scheduled_works+0x9ef/0x17b0 [ 283.628262][ T5918] ? _raw_spin_unlock_irq+0x23/0x50 [ 283.628284][ T5918] ? process_scheduled_works+0x9ef/0x17b0 [ 283.628307][ T5918] ? process_scheduled_works+0x9ef/0x17b0 [ 283.628333][ T5918] process_scheduled_works+0xae1/0x17b0 [ 283.628369][ T5918] ? __pfx_process_scheduled_works+0x10/0x10 [ 283.628401][ T5918] worker_thread+0x8a0/0xda0 [ 283.628426][ T5918] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 283.628452][ T5918] ? __kthread_parkme+0x7b/0x200 [ 283.628481][ T5918] kthread+0x711/0x8a0 [ 283.628500][ T5918] ? __pfx_worker_thread+0x10/0x10 [ 283.628524][ T5918] ? __pfx_kthread+0x10/0x10 [ 283.628542][ T5918] ? rt_spin_unlock+0x150/0x200 [ 283.628561][ T5918] ? rt_spin_unlock+0x161/0x200 [ 283.628578][ T5918] ? __pfx_kthread+0x10/0x10 [ 283.628601][ T5918] ret_from_fork+0x436/0x7d0 [ 283.628626][ T5918] ? __pfx_ret_from_fork+0x10/0x10 [ 283.628651][ T5918] ? __switch_to_asm+0x39/0x70 [ 283.628669][ T5918] ? __switch_to_asm+0x33/0x70 [ 283.628687][ T5918] ? __pfx_kthread+0x10/0x10 [ 283.628706][ T5918] ret_from_fork_asm+0x1a/0x30 [ 283.628732][ T5918] [ 283.629030][ T5918] Kernel Offset: disabled