last executing test programs: 11m28.050796939s ago: executing program 1 (id=218): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x9, 0x1ff, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x7, 0x5}) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) setpgid(r0, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f00000000c0)=""/60, 0x3c) (async) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$packet_int(r5, 0x107, 0x12, &(0x7f0000000140)=0xadf5, 0x4) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000000180)={0x1, 0x2, 0x9}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r6, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x7fff, 0x1f}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004050}, 0x40) (async) io_setup(0x19a, &(0x7f0000000300)=0x0) io_submit(r7, 0x1, &(0x7f00000003c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x1000, r5, &(0x7f0000000340)="6286197cd957d4b69474dc6e68faa637b26ca02eb99c0cca66d8ae2e253eadb0bb56adac0e", 0x25, 0x7}]) (async) r8 = semget(0x2, 0x3, 0x80) semctl$GETZCNT(r8, 0x1, 0xf, &(0x7f0000000400)=""/75) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000480)={0x5, r5, 0x100000}) getdents(r9, &(0x7f00000004c0), 0x0) (async) ioctl$XFS_IOC_FSGETXATTRA(r3, 0x801c582d, &(0x7f0000000500)) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000540)=0x1ff, 0x100000001, 0x0) (async) r10 = eventfd2(0x6, 0x801) r11 = syz_open_procfs(r0, &(0x7f00000006c0)='net/mcfilter\x00') io_submit(r7, 0x6, &(0x7f0000001a00)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, &(0x7f0000000580)="282bfff2fda3a2e842f587", 0xb, 0x9, 0x0, 0x4, r10}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0x0, r3, &(0x7f0000000600)="89cf54467c7cd5cf4bd27701bd8b9478deed7c1c33825da78f2759d4b5f88436af58188c2838344868aad48c3b5de6f608e521807e6356c315a7114532eb3f17c8d4ef71b7e18a5aaaeec1cdfb3378d963d5dd83ea0cf734c07fb535026fcdc40d1a1ff12adb9f9ee78d913fe64fe03abba9aa0e9d848be05d349b0e", 0x7c, 0x10001, 0x0, 0x4, r9}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0xfff, r11, &(0x7f0000000700)="2145e4be0ad137a3e849bd156bc966de0837d95ebf1f8cf89ae1f6f84e98dd15533a671e2fcfc2e49e1cfe3f9a00712895985dd4a2b96dde0c8eab335e4e3e1f4784cf3dd01b4fd8191b5ca2a3aaaa309d5058", 0x53, 0x0, 0x0, 0x0, r5}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x2, 0xa, r3, &(0x7f00000007c0)="2a7e373c110010062dcf219c14a3b063510b3fa7fe14b0a5f2ebe7571184e95355c1018998eb2568fd024e4977481f63e165ae1c23e1f6903d37b9d9805dbcdec398412a4d046eee266812b46b4bb92e381e788df62866d3a669d723d9464258e4f459a4d60bc19efb5c5b178fc794ac79117bc52812edac11c291fae297a0c180a322e8a6e9f3cc614f12ed7cfca2eedebab63d56c4682d15cf6799a19310cb5d8780ad7a463000869099d196897721f8b255a371b8ba52ed927b6ce0e89b948940a9e163312c39609a67288ccd09fc776c52325c392dde1bc39257e5dbfdc7b6c8a60aadccd6a9229bf3fa29e5511d79d3ed2d981429d57ee5ed9aa6a5059eddae9c77377589390e660be8bce8c9b1f3a1172d1f629b8aec1a7bc24dd1ca371486284b4efb22d57524e47c4afc09046c8879530521bb7aaf797e2319c21a97659ff1429501cf73ad71ba1681108415b37891c561fc5c877b4ea147fcd4f58ebb737c5e84fe0e875425cc2de6eeee539e16df98bb9edfb110b23de5713ab6557a7545f39e8be8ca30fbce882fa31756f68313efadb40312bd8b2ab18c6489342dc40a9778116d133bb254f37afec7acda4e20b0552e9e9656819ca61e52fc0e6f11b075a1f591cca90947c140f3f8ba999bbda80d5240bbb31503c5d3fa9516ab7a33f6ea1f8d4e2300829c291d7fe61173dd11d314abdfe0fcfab31ab6ddebff70cb3bc6752a7c10e5041d6a6889a3badcee3778a99e1ed16b3aada12ac6d5409fd5757b5d82e30ebb574cdd9daae4537029ccf6f92bbf25cd6587d8e06ef1e119c0b2a1576edcacabd90b94353d8fe382911e9607634e7d64e0b97dc018af93eab5a3c571038a579ceab5ebad374699fa1b7b7335a300733b7ddeb2cf4243149f9f7884e107ddb35efcb42e919d97bb289269d5951c2502e9d44ee5eb81daee38ae60f31ba2297bd04095fc4693c153a65100bfdee5137d13d62d39bc57aba133f2f6bc16cc9af2b2982b6eb3ff7620ebd7d8888ea1a38e3a042958e1b4785dbc846491001ea10ac5037fc275e873d062b789ba534ca21d8b9923303ae9dc6e912058570314316f7ace903c91d7d59e54133df480c8180f8b51e40505fd12e464bd5169a4e2feb93893c77aaa263e4292d232afa93c9ea6a1133c27db6460acf97bd798cca24e5b19c88f6c29fde7c5cf4659c7ca2dedc29a467fb099d31a3d80f9c8941f4071b5894c9da146720c51aa18d40561fcefa4d25e3887b5e54bcdc2466a77960a182457b7c7dbbbd4afcc8df2a59a3f5bb6573282157749290236ac6b276ba509ca97bc00565f6a0034537ffd0f5d50a31e771c173d69f2d44e35d005d6ffce6639394940bd1c270ff5c280ccae959bc8dc4d30970a6524087aeb65df76647058d29e5dc333cd7038abfb70ac31199412dc2c35778fe34caa1638dbf9309b28668855727f1422f7e6c32b8e427586f69a6ab30b21ede339a047e74ecab532854d7122564c92d8fdc097aea20ccaa4a9609514bcfe67c110c0d2b87588bc513cf7609e293d3c5aa7c275d48a0b4eeb43ac824b55cce3464915fd58910a0ccff2473dd2c6b7b0e8393d8df62cb77171323e11ddef37edc7681cb2ab2620943288440aabfb1e3cd5329938bcf68e3c63a25530e68adf90a749adb6c88d4093fc081b0862303d164ab4d80d84c8cb012ecef4872e77767d17771a941f0822c38061dafaba62d203eaa0386e49504b790ba2ced975b628f28d5e6b249462f8508f9d797c3a49e4c69c03bcc4a27ecfb50c80965bbb73aca91f4e4a26e4a9d1a04dbcbd8eac6dca74d5760dfdbc89dcb90e803ce39b2c9fb9d079a387f71d85fe8c52918c1c4b378fa0e3afc033be275243d429dcac2680a5748d761d5332069dcac34b6a5b173cc0dcaa84913570fe43109edf15ec384d6d7643833107f4e26252ff751bfd19e608741d1fb4516bcffe8d970a56c924aabdb6e64c21f1b47e20165430f84971b7b298eea75e447d58cf3d6e26ebacbe3846183992463237cd270905f1b149ae1a4cb9a53173850fe6075e29f5dea3a8b0eeaf1ecf168d7d905f216e3fa9107b1418c489836b3f38dd28257d507fcd199a59b8cfec05308fbac20f16bbf3312d7d04ae610e37b28707938feb53d0aebc5e5c10c505f3710da53a5a154b2d18bbc90b141f829ea6e1b92ef0f1da35abc4aa3466aac542cdc25fdb8774ba752ddce9bbe1e06f6608c3cb1b9a552fdebcb4569cb4a95d9b2612358cc39ca6c8396f5a4d16ac39728eff642032dd9f789fd3a71f0c86c0bc6d2ea09a6b762735876b4c70655d07aec0496a6959ec6a29271e06ca41146506031b200284da092cac15b683bb767efac4fe7e22ca76e944b447d878c359c15fd3cc39aa0c35cfc515e9fb92eddaaf66d03d85b86bb5883c0715916096cfa28905901cb6f9a666c8a45a589928edacc64344ef029160801d994869dc80e03b2e9260cc10b16987fc7aec566f8b5208a8fcbecc1e656546a17d10bd244d5c17d6c5f21b039babf4b601ecd3a910e8d289bb3d0fd4084e9d7aa48e39e1832eb4a1a7c8a53a8fcbec94977ec794d59f180e93193b6b7e564e2f2b56cf761a4c0403c801135bb813d16a27a17bf2a0716dff1af5c8410d59f8623be619799b61d21d1c5fa0b2dcf06b4be56a477d961a847d4649e8af1aa75ac36127241de909e5fecc4547f7bcea7987755eaea6adf1d498c52a6e64d6aeb7b5532dbb2a103194d22dcb9c48e615e1455cf008b52347ebf6d0d2104948ec4abbfd625772d6710bb65bb2a0d8b7e1d18656ed1e067db583f3f4d48fa94e04fc30ec4f170f7f740f9e7ac1650556c258c98e50fa02cb273f7facea300a7fd75534bbb2336ea91e983be0cae5d62357169050975d77ca7ecf9de5acfa7a2d9189975eb1da82c7e0ff5f074c9d314348f7aef5b9a6fe6a069af4da84f1cab7e04ab9ae31d78064c1a5489e4edc4b8139497f5ca95a7dd72884b78bcf94a3460ce37f2686fd8bb7a564df0dc02f22575886101e05f22d991eff78ffd58e90a3b625170f8f9eae275c5d5140a6246f24d41d889f4be305fe5870edc19860e24cebc9363bcbfb63500a8dfbabfab631017d76f125ad7ad1d649a422d192ebce25858d80180310143ce3045825716c7bc07021d2264ad2bdd0dd20cb00c61cfac4220af8a45cb75f1be2bc860f15d614845730a946a3d2d385fe6fd39cf8e42f7b40060d1167c9bd5b8c87124ce6953c404e9d6a1db6452048588569796682518cac931ea5e2f7f3466c08d42d0162f32093592ef1b74a027074a742a4f64e2e91c36590f65f9527dea5352c54a695a2343fddc5a504a163d26d6aa2076b6c41b0c8dac79019cda8d9efff49a9a6d3304f3ac2e46bf92f0e74892f1f1c1d943871f4d22b9e58e6755c4dc0a641a4101e5c8f4bbd95d724734e406bf06b7b11a2c5720449df6ec1fe52035c38eed5f319f51d55f0d8b7be9bd4be0aa7f0733cc38af9dfb2d73f261633a967c1827144c7bf91d172eb6081a72ec0614ba10e2087231b3383fa4b67bcc7b5dcec1148bdd8e53ea97f5653036451f07b81b17d79adc23b0d84d701cde3051ad09d9e3841ca445c8662fd191dec05478358e55c30de288a099acd75291c92540fe11c1a3e3a325d32e90bc3e975a9ca60fda9bdabb1f71dc4467e09c6ca777f12210409fca5f1ea8df4e1f061614f1e25e11784b1147a8a739878d8734a826ba84a6ced418f98c7582b5eed919827a98de5f5a32000c1d9d12196467cf7ef74e9376bb94fd88068a2c8e44556517bf6419a2b336fc7ffa749f9ef6d578835f389093e47c793db0ff161f239eb9927d6bae80883793925d99d7c76d6437640389d18672096931c1109feb7c96dc034322266971102e87ee4a9e1028a0fa8048b12a1f1c57d445c41a4d2cedd51661537a29e84722a0ac4ae74e54b52b6536fdfeb267c67af7a2b382c333151d3a42da93ca22f8a076750d1dd9f660e2e59d0099fa9c952d7f14e4a5d2fe59f33f9fab22010a73814035c3c56d746c32304586550701280d1300928c70ae950dc4cc9e753ae1ae83877e6f7f79f5caaaebdeed73071c8acc1f16217f4914fbef9bba307d521b0ee3ece3c2ce5fd0d56e1d7042f7ebae7589741941b08c3d8e148ec6b96b68d2dbae8e09be6f998287a6c34f6b1239641c0d5a307dc6deefe90d12af59f959075ab88775bb6d6817bc0e1c5892620638edbb3c974e7be0876a6e5b7ff7057ba35fc580788ee3ca7569e3ec90df4d9640ba7305f77c9a23fb826fd5de96f7c7d1d036843b6608a83418fdba36972709173778b1f28199f4c9c09ed8a117986dc99b92b39740beb04735868064e946abf147351c6f92244c8ffe7b65c19315440b7ead9fb0d81cd577a4c5bfaafd69e32586510fa4105bbad2a492875f4d3e701ee8c2d936b17ac9e0cb734e1669984f1e75bb37dd46d5af5b87997b304712f16cdf88bea7c6bb2c10678da8c10b3e9f13bef29702b6e16f1c1f6cc8aa1642c277792098f5e586286cc9fabc06c7db8bb972960d9cb29dbdb8989dcbb521b933a1af2d5502d7a75e5c771da53969dea017db73b213fb3e2356e0c58086e160b1607afdc75a24508544ff29dd42be9a7c37484d4d9702ab721ecacf0bac04f8f05977a6e3007c1c391ac10ae33517279bbc4e4964453a7c27cbd2d29027a235a7815edb1b0f9c5961623df7f2ec2af92eefc304d474b7d09a3cde0189c3970fb01d1165ccfaba20346520f90bae82cd34606352e353cb1549c35ccb37032517423a4836fd4a8b6ea07ffe19d9754dff964699d0758cc984adef0e05c618ba33bb37beec3044fb20cc003e6d267bda31bf968a5e9d934d99a97613a72d53e31c390294ff286ac82455cb5e5fb24f0f2d43ea849c213b825624bd6a9ec75a7bf2cd2a4cfa147d1c2c837863846ca92838d5be7dbe33767220bc4a3c12d7e5b6bbf9bf0bb85774e25b1f08c4fe35c38ecd1f26f9ef07090aa09e13597df096be276d57d5c6570bf6ac3df9c59e1e66ce3e5d0c56d1d760c74afc1227e3aa4d3e702ee664d5cf2fa29293d3c9ff2b2299b87e854c8b62598b7ce0cbc08977f9e1a69c8ea5537d53688255f410caa269112d506a90176d4994de2bc6c506d792965a9f0496f79e596c735952c116f1ce2a2e3e89a2fa398ee48038710ed6bae11dbbb931d95d77b63b89dbe3758e6aaf5f6634f27cdb5bc26937a0ca7b943ec9912e4d3e341a1f75b023115e4bd3521acdd631bf63a49338b682f70a6dd5aeff7d8f4c3cbd5dd2e2a64c46f030b8b520e2cb1132e574d75b42bb780b01dec4b3bc29a5a5472c560a21ae4123d7e4d3e31445cfa8a1a2cb0e5641673e658da85c164144985792e4fc9f230d680e1584c86239d0dfedd3630999b454d6978143402ff1e00c29bbe4bf082597732fcd2d142bde980a5a16f9ca5dc5f974995a860c935b18e98303d586ba10b1dff5adcc26846dddd4cbe2fa7ffeda9110c31c66b7620176c8118317d955cdf8fcd1b83beeba3206dd5e0b3cd8d5843f3c25514ea3f3d1af8d54ce09c5d845e2666901b2e5ea4c9b8c36adc22f86d5b6b9e50f5201bf1f83466839d605f2adacd1b37742c186c59ea081277dda8b09e67e1972e67732100089f660ff2ea766f2e514375afcff13c5d60d22eaac77543b44f5f6c16f649df2d02f15b9c28c0ebbb678384a9ee57bb02003e4bfa3a3db1454cb0538c6ff4d5854a7da0d9322bc1cc58e27cca7796a3bc", 0x1000, 0x7, 0x0, 0x0, r9}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, &(0x7f0000001800)="256dfc46fd39607a2e3c0159da3c2a18bdc157cdebe72df2e04d9a27212d89a1ce03748241b5df6347a5df1b5b3ab22fef11c3cd466bed18324e5cf0ddda9f8e3ef1451d010d08c056a5ee9187bb32d2aef6b6958092b5083d85c6256fc18c7179532c901b2efd0fba48c76cb40efb4012aa1dcc9d7749768733f0f7a135dd5736ae41e6461e88b19d91c25da35982f80ea4de45ca7851b3110957099b3842fefd3aedfd801cbdf2878a8a855af2374d926264337a0c3609620d599907fab8ad822fa2cc9275ab6f1ebcd22a9f44a135a7fc", 0xd2, 0x3ff, 0x0, 0x3, r9}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x5, 0x1ff, r9, &(0x7f0000001940)="52ebaf77a1067440510e847b879eab7399fce3f468dbfe21d8cab343c2b2b34561e3ad9a5bd86bc0344a03220d2be96b42ed1a3971e3c88a571036bf7f221b326d5cb37898ea7ec04bbc50fedfd902148f6e37292ace788b564edf153a16d1723755bea0fee4dd1a5f49", 0x6a, 0x4, 0x0, 0x2}]) r12 = fsmount(r5, 0x0, 0x4) (async) setsockopt$TIPC_CONN_TIMEOUT(r11, 0x10f, 0x82, &(0x7f0000001a40)=0x1, 0x4) (async) ioctl$NS_GET_OWNER_UID(r9, 0xb704, &(0x7f0000001b00)=0x0) mount$bpf(0x0, &(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0), 0x8040, &(0x7f0000001b40)={[{@mode={'mode', 0x3d, 0x3}}, {@uid={'uid', 0x3d, r1}}, {@mode={'mode', 0x3d, 0x3}}, {@uid={'uid', 0x3d, r1}}, {@uid={'uid', 0x3d, r1}}], [{@flag='posixacl'}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@euid_lt={'euid<', r13}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) (async) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r12, 0xc0305302, &(0x7f0000001c80)={0x1a, 0xb9, 0x6, 0x6, 0x0, 0x1}) (async) r14 = syz_open_dev$sndmidi(&(0x7f0000001cc0), 0xfbe, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r14, 0xc038586b, &(0x7f0000001e00)={0xffffffffffffffff, &(0x7f0000001d00)='system_u', 0x881, &(0x7f0000001d40)={@_ha_fsid={[0xab, 0xf]}, {0x3, 0x5, 0x77, 0x1}}, 0xd6b3, &(0x7f0000001d80)={@_ha_fsid}, &(0x7f0000001dc0)=0x7}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001e80)=@o_path={&(0x7f0000001e40)='./file0/file0\x00', r5, 0x4000, r4}, 0x18) 11m27.757092787s ago: executing program 1 (id=219): syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x2000c884) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x8, 0x62, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private0, 0x40, 0x20, 0x5, 0x4}}) r5 = accept4(r4, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x8000) read$alg(r5, &(0x7f0000000280)=""/44, 0x2c) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x10004800}, 0x4000) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 11m26.526878204s ago: executing program 1 (id=224): syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x2, 0x400, 0x0, 0x37d}, 0x0, &(0x7f0000000080), 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x30aa, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x200c}) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r3) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x38, r4, 0x21, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x80}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x10004}, 0x8080) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) 11m22.941771739s ago: executing program 1 (id=228): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000400000000"], 0x50) unshare(0x60080) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0xa, 0x7, 0xc, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r4}, 0x38) listen(r0, 0x0) 11m20.487710858s ago: executing program 1 (id=233): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x7, &(0x7f00000001c0)=0x3, 0x4) syz_emit_ethernet(0x127, &(0x7f0000000200)={@broadcast, @local, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xe9, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, [{0x3, 0x2000000000000180, "d33e6d4706598090a8030037ffffefffffffff23732407010000ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x10, "77f9290b6e87290b6e87f278e94724e20c43c95f9b49e04a64d614d4cc9d0d46d954fda9a75d076993e3b87aa99b2454a86662e37b42678a74974ddd50b21e499efae61e3a816a367d019bc7f892d8975f1fc8a3e27139041cd21d2d12f30ee6f029d8d73f80f9b19d138598345b9c0feda226b333c55c668fb17b5b39603e"}]}}}}}}, 0x0) 11m20.213406154s ago: executing program 1 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000240)=0xbbb, 0x9) ptrace$getregs(0xe, 0xffffffffffffffff, 0x2, &(0x7f0000000280)=""/161) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) close(r3) ftruncate(0xffffffffffffffff, 0x2007ffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000780)={@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9, 0x7, 0xfe, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) io_uring_enter(0xffffffffffffffff, 0x6a8a, 0xffefffff, 0x21, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, 0x0) 11m4.990960977s ago: executing program 32 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000240)=0xbbb, 0x9) ptrace$getregs(0xe, 0xffffffffffffffff, 0x2, &(0x7f0000000280)=""/161) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) close(r3) ftruncate(0xffffffffffffffff, 0x2007ffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000780)={@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9, 0x7, 0xfe, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) io_uring_enter(0xffffffffffffffff, 0x6a8a, 0xffefffff, 0x21, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, 0x0) 12.529760251s ago: executing program 4 (id=2445): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty, 0x8}, 0x1c) (fail_nth: 7) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x18, 0x48b, 0x0, 0x0) 11.449458022s ago: executing program 4 (id=2446): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) setsockopt$rose(r0, 0x104, 0xba75b48c9456a04f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080)=0xf0d5, 0x4) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000480)) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0xfffffffe) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ac41, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r3, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x0, 0x8002) r4 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021207c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) dup(0xffffffffffffffff) 10.133124451s ago: executing program 5 (id=2454): r0 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = mq_open(&(0x7f0000000040)='\x00', 0x40, 0x4, &(0x7f0000000100)={0x800, 0x40, 0xffffffffffffffff, 0x6}) mq_notify(r3, &(0x7f0000001300)={0x0, 0x1e, 0x1, @thr={&(0x7f0000000280)="edfc0588f26ca345b96404427d1533b3521b1ea6caa4b3a958336497a995bb226c3f2ee3b0bdeb017b94f49ef22ea2fb642561a2fb94e0daa27f177d9da75810a1958d4e7e8cf054a70603ca9e22370ae414f8cfc3f8cd28c59733af3573155a4b505cf9b9ca88bc473f1d77d3f2", &(0x7f0000000300)="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"}}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x3, 0x7, 0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x0, 0x0, 0x80, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x638, 0x8, 0x0, 0x0, 0x0, 0xfff9, 0x2, 0x5, 0x0, 0x220, 0x4, 0x4000, 0x0, 0x2, 0x1, 0x1, 0x7f, 0x0, 0x0, 0x6, 0x5], 0x8}) 9.098876846s ago: executing program 5 (id=2457): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0xfe, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/timers\x00', 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x20, 0x22, 0xbf, {0xbf, 0xe, "aeedc99e38323d3723e450f372b346e129555f91a6e69cd1af9d9097d7b3decf8531e734d39c29ddfa44ecf06a74522b56e09fbccca38eeaa8b49641513df7497101be3a6dfc7241f3995b5dc7c33995b041015f3e2b48bd5ae6314faf0e50e1a918d0ba669a389f2f2d11ee52068ac0bbb3226e8f7e86fa5eb35c3cfca0d4af6c52ec6ce004df1337bd9ebe8e454d6cb6ec304413148c12e920e2420a9ddf629027f94d49ad290952e7ef3935df431555fdace03aebba45d1429e853b"}}, &(0x7f0000000280)={0x0, 0x3, 0x36, @string={0x36, 0x3, "d2af733d8275be707e71ca7f6ac8265d0190499d81e8048491bd9ee6c1a694a69941a159fe1087927333f426568fc5ea71d3466e"}}, &(0x7f0000000300)={0x0, 0xf, 0x48, {0x5, 0xf, 0x48, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1a25f37d7efe9da2, 0x2, 0x6, 0x2, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0x3, 0x1d9f}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x0, 0x4, 0x9}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x8, 0x8001}, @ssp_cap={0x20, 0x10, 0xa, 0x49, 0x5, 0x2, 0xf00f, 0x401, [0xff0000, 0xff0000, 0x3f30, 0xff0000, 0x30]}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x48, 0x80, 0x4, 0x11, "a166b802", "55e0ec06"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x2, 0x7, 0x4, 0x6, 0x3, 0x1}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000500)={0x40, 0x0, 0xbb, "2bca8365244f7395c77478d0f487e1a461901bc48d67699d1f59b939e51c48dfbcf7aa6f193338723e0bf1281f13da4186271a6a98a96d7209579b0632c77300a112af6201f436b7c7185f4105ff77163eaefeaccb0ed247c64656f8aa47ff8875cd449a80edfac1beb21d22e79d4570170d4ba2daf2e6b3954188ced2f2c633698d26c5334bfbbdf9c55266b96d3ed6b56e9eaf5655ddbee837f6913a8673bca1efd0cac1fd39d9e2a9782e4ebeeac4e36217c1df2a32c59175d7"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x41}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x4, 0x1}}, &(0x7f00000006c0)={0x20, 0x0, 0x8, {0xa0, 0x80, [0x0]}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0xb}, &(0x7f0000000780)={0x40, 0xb, 0x2, "d21e"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000800)={0x40, 0x13, 0x6}, &(0x7f0000000840)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000880)={0x40, 0x19, 0x2, 'g4'}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x4}}) lseek(r2, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="0800b699f75b626f00000200fc00ffffffdf009a27012f27", 0x18) write$tun(r2, &(0x7f0000000040)={@val={0x0, 0x809b}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @broadcast, @dev={0xfe, 0x80, '\x00', 0xe}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x38) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ifreq(r4, 0x891c, &(0x7f0000000080)={'wg2\x00', @ifru_names='veth0_virt_wifi\x00'}) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\t*'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0xfe, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/timers\x00', 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x20, 0x22, 0xbf, {0xbf, 0xe, "aeedc99e38323d3723e450f372b346e129555f91a6e69cd1af9d9097d7b3decf8531e734d39c29ddfa44ecf06a74522b56e09fbccca38eeaa8b49641513df7497101be3a6dfc7241f3995b5dc7c33995b041015f3e2b48bd5ae6314faf0e50e1a918d0ba669a389f2f2d11ee52068ac0bbb3226e8f7e86fa5eb35c3cfca0d4af6c52ec6ce004df1337bd9ebe8e454d6cb6ec304413148c12e920e2420a9ddf629027f94d49ad290952e7ef3935df431555fdace03aebba45d1429e853b"}}, &(0x7f0000000280)={0x0, 0x3, 0x36, @string={0x36, 0x3, "d2af733d8275be707e71ca7f6ac8265d0190499d81e8048491bd9ee6c1a694a69941a159fe1087927333f426568fc5ea71d3466e"}}, &(0x7f0000000300)={0x0, 0xf, 0x48, {0x5, 0xf, 0x48, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1a25f37d7efe9da2, 0x2, 0x6, 0x2, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0x3, 0x1d9f}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x0, 0x4, 0x9}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x8, 0x8001}, @ssp_cap={0x20, 0x10, 0xa, 0x49, 0x5, 0x2, 0xf00f, 0x401, [0xff0000, 0xff0000, 0x3f30, 0xff0000, 0x30]}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x48, 0x80, 0x4, 0x11, "a166b802", "55e0ec06"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x2, 0x7, 0x4, 0x6, 0x3, 0x1}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000500)={0x40, 0x0, 0xbb, "2bca8365244f7395c77478d0f487e1a461901bc48d67699d1f59b939e51c48dfbcf7aa6f193338723e0bf1281f13da4186271a6a98a96d7209579b0632c77300a112af6201f436b7c7185f4105ff77163eaefeaccb0ed247c64656f8aa47ff8875cd449a80edfac1beb21d22e79d4570170d4ba2daf2e6b3954188ced2f2c633698d26c5334bfbbdf9c55266b96d3ed6b56e9eaf5655ddbee837f6913a8673bca1efd0cac1fd39d9e2a9782e4ebeeac4e36217c1df2a32c59175d7"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x41}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x4, 0x1}}, &(0x7f00000006c0)={0x20, 0x0, 0x8, {0xa0, 0x80, [0x0]}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0xb}, &(0x7f0000000780)={0x40, 0xb, 0x2, "d21e"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000800)={0x40, 0x13, 0x6}, &(0x7f0000000840)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000880)={0x40, 0x19, 0x2, 'g4'}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x4}}) (async) lseek(r2, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="0800b699f75b626f00000200fc00ffffffdf009a27012f27", 0x18) (async) write$tun(r2, &(0x7f0000000040)={@val={0x0, 0x809b}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @broadcast, @dev={0xfe, 0x80, '\x00', 0xe}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x38) (async) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_ifreq(r4, 0x891c, &(0x7f0000000080)={'wg2\x00', @ifru_names='veth0_virt_wifi\x00'}) (async) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\t*'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 8.374148635s ago: executing program 2 (id=2459): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x24}, 0x1c) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 7.814953531s ago: executing program 4 (id=2460): unshare(0x22020600) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x240400, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@random={'osx.', '$])%\':\x00'}) 7.105836987s ago: executing program 2 (id=2463): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xe4, 0x53, 0xc4, 0x8, 0xccd, 0x10b2, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x10, 0xc0, 0x1, "", [{{0x9, 0x4, 0x82, 0xe4, 0x0, 0x3e, 0x67, 0xc0, 0xff}}]}}]}}, &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0}) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='lp', 0x2) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000000)={0x0, 0x0, 0x30, 0x8, 0x1, r1, 0x0, 0x0, 0xfffffffffffffbff}]) (async) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (async) ioperm(0x0, 0x1, 0x1) (async) ioperm(0x0, 0x40, 0x0) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) syz_usb_connect$cdc_ecm(0x4, 0x88, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0x0, 0xc0, 0x9, "", [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x6, {{0xa, 0x24, 0x6, 0x0, 0x0, "e5a43edc64"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x2, 0x2}, [@country_functional={0xc, 0x24, 0x7, 0x8, 0x7, [0x7, 0x3, 0x9]}, @ncm={0x6, 0x24, 0x1a, 0xfff8}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x2, 0x2d, 0x2, 0x1, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x40}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x72}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xef, 0xe, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0x9a, 0x3}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x7, 0x3, 0x42, 0xff, 0x1}, 0x34, &(0x7f00000003c0)={0x5, 0xf, 0x34, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x3, 0x81, 0x8, 0x63}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x2, 0xff0f, 0x2}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0xfff, 0xf0f, 0xfffe, [0xff0000, 0xff3f0f, 0xff00f0]}]}, 0x2, [{0x99, &(0x7f00000005c0)=@string={0x99, 0x3, "b8befac30ee41665b740b51a77cf5950c323f53dc19df9b64a2ec9b8a60b236022a1f9586438613f2049eff337be1bc104a01d0afaced8b55761cbf8f245fe9507c2ad3a3203f2f2c8105c6af459497403db880d3f896e8e016d0fe6efe11a1a352f584779496acf50df20c11346efad4aac0a56da3e34df04327eec821c6853612553f838375833cd47efb9e487a7ecd8e3ec4d885419"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x402}}]}) (async) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x5, 0x4) (async) shutdown(r0, 0x1) 7.104538679s ago: executing program 3 (id=2464): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0xa, 0x0, 0x0, 0x0, @tick=0x1ff, {0xb0}, {}, @addr={0x2, 0xf}}, {0x0, 0x0, 0x2, 0x0, @tick=0x200, {}, {0xa}, @note={0xa, 0x0, 0x5, 0x9, 0x4}}, {0x2, 0x10, 0x0, 0x0, @tick=0x4, {0x0, 0x8}, {}, @result={0x4, 0xcb}}, {0x0, 0x0, 0x1, 0x0, @time, {0x4, 0x7f}, {0x4, 0xf9}, @connect={{0xbe, 0xfc}, {0x0, 0x5}}}], 0x70) write$P9_RVERSION(r0, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0x10000, 0x6, '9P2000'}, 0x13) 7.035880693s ago: executing program 0 (id=2465): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20040003}, 0x20000001) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r3, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2}, 0x20008b88) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xa, 0x800000000004, @thr={&(0x7f0000000640)="7ccc9d70351ee610916be421c33d207e6e4a370bd4e1f11b1910ffd0bcae093d1567825dcc7b579cee813c6674da9e29cc1f035a4dc6a9cd8d9c3b17868b6a505a76633705d799d83f67e486a07658b384b8c1d91eb9f3721d24ac5648150e546f13b68ee3f96c0b9cbef09355bfd65cae70f7bda1299326663d68e1c512859179295f88dc102ca82e7a", &(0x7f0000000400)="fe3c1299ab632197aeddf38cdc004b5dd8335621850f153a1f5cac23a8accf0c83cf3b7b8ae421508a"}}, &(0x7f00000003c0)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000500)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='exfat\x00', 0x18, &(0x7f0000000340)='debug') ioctl$TCSETSW2(0xffffffffffffffff, 0x80047437, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4b0803, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000002080)={{r4}, r6, 0x1e, @inherit={0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000003000000000000a5000300000000000000060000000000000033000000000000000a000000000000000800000000000000090000000000000005000000000000005c97b53900000000000010000000000004000000000000"]}, @subvolid=0x3}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000580)="1d323ef536130300fddce93898ffc5c410ca6ac2725355f29af571dea1768b632bcdace003bc864623f21ebfff099f7e0b876f5305622969d02a8aea12333fc45c1e98b06738a2730767a4ac7f11efaed9722482616eedd5289848162feb9da78ca902e49c463503a6dadf97ac014ff466419ddf6c389b70266e5ca94faa50e135d87c9a846fe2c24c8bdf0bef07ee721ce96c0a3b20a2851196bf594f9f9b610d87039b975da04f10f551a8c35c0bc80ae57c933bb2044c4e93a3", 0xbb, 0x8, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) accept$packet(r0, 0x0, 0x0) 6.856622401s ago: executing program 2 (id=2466): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0xffff, 0x3, 0x2, {0x0, 0x0, 0x1300}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x8, 0x4, 0x6}, 0x48}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x4000004}) r2 = msgget$private(0x0, 0x3ac) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x6) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x6c99, 0x40041) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020000000400000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000100"/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0900000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="0020000000000000000000100000000000f04b5046edbcae6733f7aee5c20004", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0xc, &(0x7f0000000000)=0x2, 0x4) write$binfmt_elf64(r4, 0x0, 0x878) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff00092406050602010000092403000303000549"], 0x0) msgsnd(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0300001000000000"], 0x8, 0x0) msgrcv(r2, 0x0, 0x0, 0x3, 0x3000) msgsnd(r2, &(0x7f0000000100)=ANY=[], 0x8, 0x800) 6.7624785s ago: executing program 3 (id=2467): r0 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = mq_open(&(0x7f0000000040)='\x00', 0x40, 0x4, &(0x7f0000000100)={0x800, 0x40, 0xffffffffffffffff, 0x6}) mq_notify(r3, &(0x7f0000001300)={0x0, 0x1e, 0x1, @thr={&(0x7f0000000280)="edfc0588f26ca345b96404427d1533b3521b1ea6caa4b3a958336497a995bb226c3f2ee3b0bdeb017b94f49ef22ea2fb642561a2fb94e0daa27f177d9da75810a1958d4e7e8cf054a70603ca9e22370ae414f8cfc3f8cd28c59733af3573155a4b505cf9b9ca88bc473f1d77d3f2", &(0x7f0000000300)="62ee68020e14fe21ffc00404f047858294f4ecb604d6d5f90c1e7822991c80cd48c3df59691e979ffcc87b079b93718e93db196fa751047707460638af2cddadfb3e6aa6381035e046726e5560e332d2ccce0c83e6859a49e3cf8f8db327ed7c8ff22491886c1bff85ed63178a5a356a9f8daace164242be75b6b72f8d07776987d998f4b8017510675e612bd1d1db528149804371f275a655a4ca3824aaeb3aae893b991ef42ab2ce636e0c37e79883d1060f894259c45baec862bb4712784f0945014d6f8d9e0e3c595af1b817d355186fb3a2df3da8ffa9917c46bcc64d7ae54754299d9387e96aece7f26ee469ffd2536ef7b4d1616c4166218839843890947d7af22346a97d58ceb9cc995fa5a15279acdb19f78b3027a8c270bad40f922022e57518414c16c173502cf90a9bb6595c53f8f8408f0f7bfb719b13e0057aca4b30eebd89735c1050285e11454fc76f977dfb1ad0ec7abc8e67b7c0938643b55b1a093c62873bc276cde7a5bf29db8eb4b9bb6ac78fb1bfd20e56014cd6083af4db429d285ca347c80ec7d424fdc1ab887ad4344f7c382c05cc7b1016deb36b3f35c5fde921b9e718336b53f6b7ed7ed672ee89269400df5563c172f50a053b9311bf701eb0034c64b69c74bd773d5a8d8a269b74376a13b564188299587b7558b200517dc82d43a67209452bb44a7f6d3ac1cde24cebeead69fc252137841e791e12ab5d2a94d1d910b7445cf178be782d38de25c13e72f7c0e86e95c3cb02f47541bbf4990a48a54569c9cb75a4206ea071656de853198c11726404efafae29204bc5200626422a30e5b16e2c56d6c405fb767ad0b37988241b4e46c9b2b6d89a8b1019f1ec3ac09357fe46151a38a2121ee0115c94593a996603268c729e6d0e23da02678c7a3ad9aaea73db69e354638394a29f64e94e01bef4b2d2f8ff162fb2e56a2fc2ab9b5b2c5e42e8ab8278c21b4a9833058976a5e693417347dfa367fa5aa42519ee426ded1ba760a993e6612702b2dc26b9049444a3ec26ff17f282422810849fc875e136ea5debd9c4f69b23f3c7241ed10ede97b3316563d3ba0659b5f7941a4f5cbaa1e4bda5088a2e03606b70b9d95d339457c9bcacfabec0c59cc57d34fe97cde879ff42eadc3ab697547e64f3439cc4eb023016455aec74983d04ed57523f007e7f57cd04c2031c21d51d268c488d63b36a69e9ffc0d451b6294220f829813354bd7af4e71b2c62b4b3839b491994fd314d2c0dd8363c1d172a5f2c271d07aa6793719edce6cef26506636911e287ecd6ed8aefeda5b51442210c08feb0b512ac1304437a41907c124a82d1e4eb5112521cc0e5869d069c81fe7ed2d3f57b565e4aa6bc1c01fc995ed2c2e956e4ecfc996e39f2af9a9d6e29ff4f5e5524efc7cb6969a1add28791c7b792a448b1a595f0f14cc9115619fabb990d14810b360579328e6b1ee33945a8907f49f7746fb21d2c97eec3e19c9cee747e1c74063e14cf091540fa068748e76011fde747b3fce66b1258bd5f34ecb7e9d2479137e90fce302de560c4c72636652050d94500a9fda3a18f52223b212fcd3247bb5d229d1bf7c65a62bd390189954e045f6a20421bc3523ebfea0fa1a46fa81da691beda66fa18a1b1f9a5dd8e7d97477f41a9181ccb97614e8b0fef3d2b276a90540cb8d1885cb645c469ba0fb99bddbc7838d92dfa59cdf5301a2a08226374be1fabe46a5062d6ffbe3f19ba6110db672d3015bd6170322eba6f0abc39d42975d01fc6a783e1145b93ee01f2bea2efc23f72f186c01b3b99ace8b643ac21c167f34c00c24f33347493cfdb160631411a0b81dbec0c7301b2fe86a1400234a563e5b7dc9f39d4f79756c7fdc3f0265b432d0ad25973f53b4011f90a8b0f71969cafbc9432d0c9fe328256d010aab0f6656346c8a682629348337ece80eb5cb56a28a1ba4ae1614697dd503f819b3eec211891b7f5e4b37255207dfe9e4f128202f63709bc1b053d1afaa1a7f623d39b604256a9dd96105dfb9d6d3d1b926aee9abf41289874999b2351a831c45b51b4b31eb8bf223b715b77191520e451d993063eab8d97a7ef41e92193cede8bbead8d521cdd31965e3b0c3cdc57431a8e37f96fd798a82f004d18fdacd51120a3e60cfdbdf6b43273cfba10a73022fec6a09f77511f048a03957d2929fb00c57e05acb9069e1d8234b9d27b3050da95d905369562df2592c98f03ae98e57303ec8b8a4fe2504bd92b849135c5f1fd134e7c8033f5d63bc214a30dc8a2c0c11db3ba484244ad867f9adb554b7c12691dbf32029b68bffa35ed80768179275eff34542adadabfe6e1d0252733793fb300b7b2f25f2d61c00a25ae79dd69655fb04cf9cab6f31e75ce73c39c4fe65890c96a65d3495124da0b7b7121c3c4a4a33be343349a683fcc3903ecbe5e72d7fff6a30c11d5bbd3b6e896d419b01b9eb5325638fe2780c650eae5af2cf9c3373e86a8643f4c2d82d74a370f34b11a6ad4db620d79a287f4643f904ed827ecea00388b343a18b58e7e11e9b89324cbb7e9bedb8319d7517e195d58f9c59754321e64393c25589d71ef805834781294ebb1eb70403267ab1f4196c4f74a73b9541f482d615ca9168ad32dee87178036b7af9f0211bbf2247c9657feae4ff67ee56ce2df1bae954207fcbab40e6f242792199b5ed93d837655cc6e37a07ffd22ba2a93a5983ae1b779f8bad8687bef313d2fd95cfbe0fd3286d5b64565bf72e7f474d046e9a9874b26ef3ecda545f320f70340c0cfc91912f8a73c9ec4a5a091458f00f14e6bd554b2212d809bca0f9df4723de3c425a38cb0b76a5bebf497afbaedc8b5592f36313de1562700a9cda0ba5a122208a795f60a19e8a733ada2ef35fd3fcafdcdbbcb2068fedbb39f8159b04652ec3e52f3d8d8caf06c61d2a845af09c352e2c1c464e926099e411a586532bedc11c78f4135cf074dbb65715469d7053f2369af0aff534e41e3dcf5f748ca75c22e395e199fcabd46fca997bfb159b67640a2890d1128069aec7cd879f27fabebe88cd4b4346089307386899f740128f2a0956f9f639be796fd3a4f17e296bd161e2fe81d310253243e6a9d41e02f517d56dc2ed6d36e49e959532d6233a812288a8f2bee35d1a5891922f0c2058914c273c26a32d90c2d94bd15451fc8f044c4541b2846943b94f152a8ce434e50f42af0d62452044dbadc18d4c95dfc0e6b3ac1800f2254a60c5519c44f90263083c577f552f8bad1169559c9f772469271e182fe9735fa975a6cea9a12125858a7e95efe140dc68fc161c48611ee47fbe25ffc500a428bb5d30bb8ca3ade90a3b866415014bcc40d1a3f5df0178bbf3db3684d9c0c37fe6393df90bb04e1e1490300f6685214a81edba6ff90ce63769b1892f95979da8b2b855e93b2132cac10e3e5270de4722523e0e265ec981e8a26ec9833d3fc1abfa532ac8e47ad086b01deeb787ad8fea8053041ab56ead4f990ce548f11ce52526ac54798a94aac48a08af14338246ef5318b5997884617551e25739cb146e187a67a65353c1268d9f284ea5c8ffcdfc08df56c59ce9700817d2a5025d1d356d9d9040042d847b05270dfb2236a085b4843e5d9fb5eb76f872a714494410f64f1610db459ff6a89b7d592622feed4ece81bc5da07b4a9b006cb968bad84a1a1be7ef91c4cb81dc1a935c398b82b873b7f6d0bfa0b6298db98ebb5db6fe8e60ac7def5c2730a9206c0bd7c7d651b57d75867626f92303c5d92279bef3e495c2aec720e4807d23814137f5e6a74ba1edec3b13524a0ae0b795f6aedf5adb74e1a422d719c47d64001f690661001e2defc6e0ee71588833ff6d3e1c40c24d79478c9654c2deb43159c2eaf060ff6181ee07b5805b2c471233c2bf38b737d18ed58ce7f62ffdf2128ba197d11c6080b50aa7c6f3c789f8453f5fe9709a21945ad2ee213b234d7f710782fd3fb812c54a7a7c422c35d536f3a7a58659969414e593d2ceeccfffbeb21bdf99cede406ff73e8711ff6cbc99f1e3279fc9ae77d583469287c0d1882d6f8f801fbf58761d1d7a6ef795a11f116161acf146f8518c84edbe28bc225bf5bf3bf0b1cb02dd0c2e1a1dbdd734f8b6a7dd899319eff7cfd50516fb2d44c09a54295b63a11faed535722b9add3d2ce19c1800ff5df5aba7ffca99496bdedefda8c9c1d18d02e45c17313285c6dce8c5e61ff3fa9f8b4ac0d1add6001ed77d18c65203fd6e1bb7576eb3c96a50b4cbdb9a78b374641ff6970f2aa0c01b79865d89ecf4c0fd8b280628b137baf61c7eb7840b3e00615449a0526104faf1bcbc04d8cbff7dd82811df243553313555d8ac2cb0908fe278a93fba7f912896a5b079d1b821ae357dca265bc4e6fb8476487410376dc1f0f89954de0fb8fec842b07dc07f824fde6f7777a38f4f61ee966e61ad67a752c4b1b583528b07ff3799cea38c6698aafc693f02123961fc764be8476ca7ae97d60456ee026d203e992cd4ef6f334ae2c93ceee50e9396d348cdb01b35548604cc5be7e8ff415a0b3ca208becda6bb5d38d978641ba7c17a091c85088b52587d3f340172ccb3bf11d1ee1d91e6521bdbc275dcf03e57244c27180a70eeaf848dac52004d1a1d8aea5ed121ef6cdba0b96b0b6ba874eb65c412557477051fd393904866acf7dcd41ec4ca99e2c793643471616277801941e36c4a44eff435fa0bbe9a759b16b0dba7f4040a1a05ef9b80e0e1da2b1dc2252173c2fcd2ada4775a557d5f58fbd8bcdd1b82786b0fc1df3ede51795e6f75d6acc6523af5bd1068f2ea0003c24a81a08a952c15df792064d71ad787000dcecd34250cd0c24b21fce231808e1495e5084ebc65fa9a534c416d6626744e1c998f1f9b45b6d6d286d314814112623b912b67a4c0fb1faab574356d426905635e38efbc5bb36a206aa7f2558a65fd41d9c07dac551234347c1413800c402f8cda719656daa4c56f7fe535bbba35a20555424180f7a25e9a3a03259d4b3735bf45b868277bc2be076ddafeaf16b35b631e34c192f1532d30d6e150a684a47dde2a52aafbbd907ff2cb9e03cfbc324415562960cae9531b420833582775f1e44ed02b2c6cbfdfa482b963ffa0e778d955ce8240ab0a1076bf926574e58d73880a3393b2f99a49fc663dc2308327f1cbbf7460c869725713c1bc9e312afbef2807adc2e5d06dd8329009b0474fb407417faef763e9e576b28a6cc032600bb6d9e98ce08cc504ea1ad1b10e3265ff7b424dd58847525bc3875654d6b17408b8c5e17b0309fe03329887521838f712c5cb807b5d70898aff3fd0b915946b849c7836b3c646b9849c7eebe303ea27d6fa429cad090ab33bba03f8ba62ae72aa9f34459c388b1f4102e7b3204edf81853436870940e50a203a9064b2cb03d8277acf0324883dee1809de8f99542084a7f761319d3c3499094f86d21e975079acac609b49a24078c55a41bac695dfba27b31bf1d9ca7a0d8eaf3c802372cf0b1c8fedc4bb82a4a61f712586833605cd4c2a6b54ee42687d837d019fca7233a1e59f81e50157dd02ae525b59cbc85cdba086f5d8d345c6e9ea87de123b9a912929ef2503a4c06b26d6b8245701c725afbf64b2b2a669fc1f4d6ff9dca0efec93df4deab814724e999d5180a7bf57b0b177caf3479205983603e2abb8ec2923008e12c39a5daf827d5a4d3a61cdab5724e9a9226d3f0282bcb42eefcb3d506a009c1516dc1bcca4507a028c9adbcef3ef850ccac570f3dd4c0a60bd9d276"}}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x3, 0x7, 0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x0, 0x0, 0x80, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x638, 0x8, 0x0, 0x0, 0x0, 0xfff9, 0x2, 0x5, 0x0, 0x220, 0x4, 0x4000, 0x0, 0x2, 0x1, 0x1, 0x7f, 0x0, 0x0, 0x6, 0x5], 0x8}) 6.313663154s ago: executing program 5 (id=2468): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000006c0)={&(0x7f0000000180)=[{0x63, 0x4000, 0x0, 0x0}], 0x1}) 6.310818353s ago: executing program 3 (id=2469): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x3c, r4, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setreuid(0x0, 0x0) setresuid(0x0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, 0x0, 0x0) lchown(&(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000140)={[{@grpquota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.985727975s ago: executing program 0 (id=2470): r0 = socket(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x50}}], 0x1, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000001, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) mremap(&(0x7f0000358000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f000058d000/0x3000)=nil) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x200) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) 5.560887039s ago: executing program 0 (id=2471): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000480)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="40000600000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a3000000000a8000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000000000004c0008800c00024000000000000054d30c0001"], 0xf0}, 0x1, 0x0, 0x0, 0x44040}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x802}, 0x80) r6 = io_uring_setup(0x4222, &(0x7f00000004c0)={0x0, 0x3578, 0xc000, 0x8000, 0x3e8}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x8, 0x30001, 0x9, 0x2, 0xffffffffffffffff, 0x3}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x7, 0x8, 0x8}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0xe, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYRES64=r8], 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x94, 0x0, &(0x7f0000000280)=[@release={0x40046306, 0x1}, @release, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x6, 0x2, 0x2d}, @fda={0x66646185, 0x0, 0x2, 0x38}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/140, 0x8c, 0x2, 0x18}}, &(0x7f0000000240)={0x0, 0x20, 0x40}}}, @acquire={0x40046305, 0x1}, @increfs={0x40046304, 0x2}, @dead_binder_done, @increfs_done, @increfs={0x40046304, 0x3}], 0x8c, 0x0, &(0x7f0000000340)="b7e0a278263f72144f48a65482308a4aba3203b771f55632914390001f3509080d8acff989f1b6054878813f1c80c4ed395b6fa2c3a6e1e4a02c95b634a118dc1256089c5f9424e9db2af0ebcf514c742abda0677b9c53f9ce4cfd6d402c599849ee4e765afcb421ae62f8ea80c02604f875d7b1a6301a7734f4454c5684e48f0ec625d278e05513af2ec0e8"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x0, 0xd}, {0xe, 0xffff}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c, '\x00', 0x0, @sk_reuseport=0x27}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f00000049c0), 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000440)) 5.496625097s ago: executing program 3 (id=2472): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff0180c200000186dd6000000800283aff00000000000000000000000000000000ff0200000000000000000000000000018700907800000000fe8000000000000000000000000000aa0e020000b6361caa0655d7b38c8b0000000000000000000000019e8c44ff9e8e8dca9e811e417a1e466218128955313d009aa98a3f84012d"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x109301) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) gettid() ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x8001100) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) 5.181754235s ago: executing program 4 (id=2473): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x9, 0x3, {0x0}, {0xee00}, 0x4f5, 0x8}) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000080)={0x0, 0x0, 0x6, 0xbe0, 0x5, 0x7}) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f00000000c0)={0x2, 0x2, 0x5, 0x834bb19, 0xb, 0x100}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) tgkill(r1, r0, 0x2e) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000001c0)={r2, 0x2}) r3 = inotify_init() fcntl$setlease(r3, 0x400, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001580)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/245, 0xf5}, {&(0x7f00000013c0)=""/49, 0x31}], 0x3, &(0x7f0000001440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}, 0x100) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r9, 0x5, 0x4002) pipe2(&(0x7f00000015c0)={0xffffffffffffffff}, 0x80080) fallocate(r6, 0xe, 0x80000000, 0x97db) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r12, 0xc00864bf, &(0x7f0000001600)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r11, 0xc01864cd, &(0x7f00000016c0)={&(0x7f0000001640)=[r15], &(0x7f0000001680)=[0x6c, 0xa4, 0x4ba, 0x3ff, 0xfff, 0xfffffffffffffff9], 0x1}) ioctl$USBDEVFS_SETINTERFACE(r12, 0x80085504, &(0x7f0000001700)={0x665, 0x7}) r16 = syz_io_uring_setup(0x1596, &(0x7f0000001740)={0x0, 0x8d92, 0x400, 0x0, 0x2a7}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r16, 0x6, &(0x7f00000018c0)={0x4b, 0x0, &(0x7f0000001880)=[r5, r3]}, 0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(r14, 0x6430) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000001900)={0x3, 0x6, 0xffffffff, 0x0, 0x1}) ioctl$COMEDI_SETWSUBD(r8, 0x6411) openat$procfs(0xffffffffffffff9c, &(0x7f0000001980)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FIBMAP(r13, 0x1, &(0x7f00000019c0)=0xbf) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000001b80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a40)={0xf0, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x34, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x40}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x4e, 0x8}}, @CTA_PROTOINFO_TCP_STATE={0x5}, @CTA_PROTOINFO_TCP_STATE={0x5}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}]}}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x420}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1002}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x210}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x84}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_MARK_MASK={0x8}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xd6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000005}, 0x44000) write$P9_RREADLINK(r11, &(0x7f0000001bc0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r17 = syz_pidfd_open(r10, 0x0) pidfd_send_signal(r17, 0x7, &(0x7f0000001c00)={0x2c, 0x1, 0x599f}, 0x0) r18 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000001c80), 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x12, r18, 0xb616e000) 4.843616256s ago: executing program 2 (id=2474): syz_usb_connect$uac3(0x1, 0xc8, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x249c, 0x9008, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0xf, 0x80, 0x8, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0xf0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0xe067}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2c3, 0x5, 0x0, 0x2}, @as_header={0x17, 0x24, 0x1, 0x3, 0x7, 0xe, 0x2, 0x10, 0xf3, 0x7fff, 0x2}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xfd, 0x4, 0x9, 0xd, "", "52c91f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0x9, 0x9, {0xa, 0x25, 0x25, 0x4, 0x7, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x8, 0x40, 0xf2, 0x2}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xb}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x9, 0x2, 0x4a, 0x3, "a97e24a246"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x7f, 0x9, 0x6, {0xa, 0x25, 0x25, 0x1, 0x6d, 0xcdc}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0xf, 0x2, 0xf, 0x8, 0x2}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40b}}, {0xbe, &(0x7f0000000340)=@string={0xbe, 0x3, "a3330839ccd56408291f69674e48028e8ed018c1545327509ee5767c259f08e5866921614380b25c98f26a279697a34247438ba118458f77d3b293e4335f7e8a66970fdd9eed0f830bced9fee816032829017613df89acb0cf2ac969f2f8b17fa6448c55f8a24c951e105a7dcca1f14bc7f78414dd56f49bbdb62a07fd4e6a50aed86d36a456b4f7bd1f3b4a3060aa89e32b380fbbda69a5f35de271ff18e004db75f3cfefb749f74dbfb61ec23f271709dce10abf33ec2576dd8860"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x418}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x80400) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f00000019c0)={&(0x7f0000001340), 0x80000000, &(0x7f0000001e40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001980)}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x8, 0x53, 0x1, 0x49, 0x9, 0x9, 0xd}) r1 = syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x40, r4, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) syz_usb_control_io$lan78xx(r1, &(0x7f0000001b80)={0x14, &(0x7f0000001a40)={0x20, 0xe, 0xc6, {0xc6, 0x31, "7afe5b7f1a410d0c6ab99647203bf9ed659406bb8b46b7dcaa842c5687ea29266591925d57d5c1e2a43757838fa55d9338b1f9ca293d8103df385d0dcadca093e23b0d554301087d00071e4e9c32a333666fc06ed5c1ae4e07f345e7e0d53f3d5cb50c0843e5bd7b2dc27572440f690955d6dfd45b9b690a44e1d02987e62e1d203d4218c4c673e445dba051ea596c5acb7c856b5b089f259f6afd8cdc765376ab1560b0470b6f150243bc7cce003592eea659963a8f506a0b59dda4782b4077eac2163b"}}, &(0x7f0000001b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}}, &(0x7f0000001e00)={0x34, &(0x7f0000001bc0)={0x20, 0x14, 0xd1, "4066a5026b78827b4785c97126d3eb8eb6db626cb7b5988fd86c1fd7f7dbb212cdb344380f40955de74b5b6e7b67f4c523e36f3a3afbfe60b1ecc46085a7bbee8471bf2ba885292b0b27ddc7f0aae0e8f28848a647ec102e477134f69eefb7a466f6f289e96a48898768d7b6e4eb1109c12b622b201279e52f952510c5f042c753d8da25d1b70129841dd486690aa3bd32240cfc6b436f0432f34093cb967905244fad39b087b62d1c03682ed14c458db98d01006aae24336a575d0a08800aa1b0cb567c19ff31e635c1da02e11cc93797"}, &(0x7f0000001cc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001d00)={0x0, 0x8, 0x1, 0xd2}, &(0x7f0000001d40)={0xc0, 0xa1, 0x4, 0xb1e}, &(0x7f0000001d80)={0x40, 0xa0, 0x4}, &(0x7f0000001dc0)={0xc0, 0xa2, 0x2f, "f0a2eefae205be8f2155069b133ba2cee2d4b9d42f67ab0944452bb2daa5943b22644b373d9900a982f1b48235c278"}}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "5a060040", '\x00', "c400001a", ["aabe8459c62224475793e8a7", "7f9ce2d2c40c39c800", "fa0700f22b42a3023be516d1"]}) r5 = semget$private(0x0, 0x8, 0x421) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x34, r7, 0x1, 0x0, 0x0, {0xb}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) semop(r5, &(0x7f0000000400)=[{0x1, 0x3ff, 0x1800}, {0x0, 0x3}, {0x0, 0x0, 0x1800}, {0x3, 0x40, 0x1000}], 0x4) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "e1d4"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r9, &(0x7f0000000340)="9651", &(0x7f0000000a40)=""/4096}, 0x20) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/95) r10 = syz_usb_connect$uac2(0x0, 0xca, &(0x7f00000026c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x644, 0x800e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x3, 0x1, 0x4, 0x90, 0x25, {0x8, 0xb, 0x2, 0x0, 0x1, 0x1, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8001, 0x8, 0x3f, 0xc8}, [@multiply_unit={0x7, 0x24, 0xc, 0x6, 0x5, 0xd, 0xc3}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0x0, "df"}, @selector_unit={0x7, 0x24, 0xb, 0x1, 0x2, "ff6e"}, @sample_rate={0x11, 0x24, 0xd, 0x1, 0x2, 0x2, [0x3, 0x1, 0x1, 0x0, 0x0]}, @sample_rate={0x11, 0x24, 0xd, 0x3, 0x1, 0x2, [0x1, 0x1, 0x0, 0x0, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb, 0xb4, 0x2, 0x7, 0x40}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7f, 0x7, 0x9, {0x8, 0x25, 0x1, 0x3, 0x30, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x3, 0x9, 0x1, 0x0, 0xf2, 0x4, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x7, 0x8, 0x6, {0x8, 0x25, 0x1, 0x1, 0x14, 0x0, 0x8}}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x310, 0xb, 0x1, 0xff, 0xff, 0xfb}, 0x1d, &(0x7f0000002680)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0xc, 0x3, 0x2, 0x0, 0x8000, [0xffffff, 0x3f00, 0xff0030]}]}}) syz_usb_control_io$uac2(r10, &(0x7f0000000f40)={0x14, &(0x7f0000000ec0)={0x40, 0xf, 0x2e, {0x2e, 0xe, "0843a98ef6ee83d69acbe6e38f4c3afdbe14062a28b36772a10c3335d44bfbee114928b190051c40f88a3967"}}, &(0x7f0000000f00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}}, &(0x7f00000012c0)={0x44, &(0x7f0000000f80)={0x20, 0x14, 0xf2, "c4e9800cb8c2027641a4088247dbe486c08a0d38bf5e1504608fb764d2edf65e4ca6a27ad5a3eb1f6428f21a8ec164f245f627657195cccc1d7d87ee955f34092ef78144b18008aaf30f413278b573985a915a0e59baa0968e2c3290498f3b7755c96cae3b4a622928a1ad76645471113d08ef11397733e9ef55a13aac9d221a9688431e4bce650c915fcea5134d5191e7b8e42ad49e04eb21e7cc3f2883f3c204af088e0143d5b89bffc64a5bd91eb26965f7e0e96e17a89bcdfb83d60508265b8e2ef2b5e3ddbe8e362066d480763b15721eb3fa1358f178eaf25082bc1e9a859c4c3c3a3ccdc66846da3ce710a079ae46"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000001100)={0x20, 0x81, 0x3, "de0464"}, &(0x7f0000001140)={0x20, 0x82, 0x3, "65c59f"}, &(0x7f0000001180)={0x20, 0x83, 0x3, '\a%`'}, &(0x7f00000011c0)={0x20, 0x84, 0x1, "84"}, &(0x7f0000001200)={0x20, 0x85, 0x3, "5283ee"}}) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280)=0x38, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000005c0)={0x14, &(0x7f0000000500)={0x40, 0xd, 0x6a, {0x6a, 0x4, "970092e8c7e68dc46ed6d9a34c69ef58c40e219df8a0b5cc7e0c5404c8ac72409708929bbf88d466641f332b310e99c437466ccf7f67b8614e95d51005ee7fe9ab9c74a6b0ed910fe993d8adbfae83f5d95903a64c30aaa25724b6cb9592408251c3f8eac6025403"}}, &(0x7f0000001240)=ANY=[@ANYBLOB="00030400000004b010075456fc033e04"]}, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x40, 0x1, 0x6f, "9f1016db589ae8705b74cbb3b855f3f5159be17d1fb980b71da569935f1f97f582986c45aaf79710804a79595811c49aeec343fc6b6d5ea64f0b06d87fa7c4d3f11907f52f1cb24e7113104613b33ce6b9061ba22d22e0a8b9794f40b5695635b8489abc21cd53ed8e1be8fade2601"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x39}, &(0x7f0000000700)={0x20, 0x81, 0x1, '@'}, &(0x7f0000000740)={0x20, 0x82, 0x2, "8e58"}, &(0x7f0000000780)={0x20, 0x83, 0x3, "f0216c"}, &(0x7f00000007c0)={0x20, 0x84, 0x4, "41b02962"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "99ed11"}}) r11 = semget(0x1, 0x4, 0x20) semctl$GETNCNT(r11, 0x0, 0xe, &(0x7f0000000580)=""/23) 4.57638985s ago: executing program 5 (id=2475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a"], 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x201, 0xa00, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4084) 4.021565176s ago: executing program 4 (id=2476): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}}, 0x14}}, 0x4c0c8) tkill(r4, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f00000003c0)="7f50f1625c", 0xffe3}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) 3.123081515s ago: executing program 3 (id=2477): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x80, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, r2, &(0x7f0000000380)='./file0\x00') getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) openat$cgroup_type(r1, &(0x7f0000000340), 0x2, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x85, 0x0, 0x0, 0xb4}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0xa, 0x0, 0x0, 0x0, @tick=0x1ff, {0xb0}, {}, @addr={0x2, 0xf}}, {0x0, 0x0, 0x2, 0x0, @tick=0x200, {}, {0xa}, @note={0xa, 0x0, 0x5, 0x9, 0x4}}, {0x2, 0x10, 0x0, 0x0, @tick=0x4, {0x0, 0x8}, {}, @result={0x4, 0xcb}}, {0x0, 0x0, 0x1, 0x0, @time, {0x4, 0x7f}, {0x4, 0xf9}, @connect={{0xbe, 0xfc}, {0x0, 0x5}}}], 0x70) 2.267385993s ago: executing program 0 (id=2478): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (rerun: 32) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async, rerun: 64) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) (async, rerun: 64) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$KVM_CAP_HYPERV_VP_INDEX(r3, 0x4068aea3, &(0x7f0000000280)) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x20000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000040)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000340)="650f794ed7470f01c266baa000b8f1f32f5aef65440f01df2643db073e3eff11c423c96c34e3da6667672e45231592cc512766baf80cb8e8abca8cef66bafc0c66b857d366ef410f01df", 0x4a}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="7400000002080203000000"], 0x74}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.813425367s ago: executing program 0 (id=2479): r0 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = mq_open(&(0x7f0000000040)='\x00', 0x40, 0x4, &(0x7f0000000100)={0x800, 0x40, 0xffffffffffffffff, 0x6}) mq_notify(r3, &(0x7f0000001300)={0x0, 0x1e, 0x1, @thr={&(0x7f0000000280)="edfc0588f26ca345b96404427d1533b3521b1ea6caa4b3a958336497a995bb226c3f2ee3b0bdeb017b94f49ef22ea2fb642561a2fb94e0daa27f177d9da75810a1958d4e7e8cf054a70603ca9e22370ae414f8cfc3f8cd28c59733af3573155a4b505cf9b9ca88bc473f1d77d3f2", &(0x7f0000000300)="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"}}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x3, 0x7, 0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x0, 0x0, 0x80, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x638, 0x8, 0x0, 0x0, 0x0, 0xfff9, 0x2, 0x5, 0x0, 0x220, 0x4, 0x4000, 0x0, 0x2, 0x1, 0x1, 0x7f, 0x0, 0x0, 0x6, 0x5], 0x8}) 1.537004683s ago: executing program 4 (id=2480): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x401, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="20a1e387c9da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x20b, &(0x7f0000ffd000/0x1000)=nil, 0x2) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r0}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb91b, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x0, 0x18, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x4) r3 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r3, 0x0, 0x0, 0x80800) 1.441578151s ago: executing program 2 (id=2481): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20048884}, 0x44080) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000044) syz_open_dev$vim2m(0x0, 0x7, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001e0021022cbd700000000000070000001c"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40040c0) 1.363850542s ago: executing program 5 (id=2482): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x200000, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x80, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x5, 0x5, 0x0, {0x5, 0x1, 0x48b, 0x7, 0x400000000000027, 0x1000d, 0xfff7ffff, 0x6, 0x4101, 0x4000, 0xffff1854, r1, 0x0, 0x3, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.363005802s ago: executing program 0 (id=2483): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000183b9220b11342002b58010203010902360002000000000904"], 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f00000006c0)="9be1179e7c", 0x5}, {0x0}], 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0xa4, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0xa, 0x3}, @fda={0x66646185, 0x9, 0x1, 0x19}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}, @dead_binder_done, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r1}, @fd, @fd={0x66642a85, 0x0, r0}}, 0x0}}, @request_death], 0x79, 0x0, &(0x7f0000000380)="0665020c9643752b32ca7c3761b0d11c8516cb3d4bec40936666f8d33ec3eed27054edcb512339168f38a3b87fff620a33957b4cf3b07a624ab452d5244b97a96d0cc87ea0768840b691842c8c60f652055bc45065bd41812bf318f7b8377775471bf332d7da7d5892e7f74b1b168267737c1b78c446463fce"}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b67949b4dd9b5589c435e2c56f74ca2c0012800b00e2e16926fc1c2020aadf683970af9281010062726964676500001c0002800c001f0067b7000000"], 0x4c}}, 0x0) 1.046069532s ago: executing program 3 (id=2484): r0 = socket(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x50}}], 0x1, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000001, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) mremap(&(0x7f0000358000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f000058d000/0x3000)=nil) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x200) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) 237.496621ms ago: executing program 5 (id=2485): socket$netlink(0x10, 0x3, 0x2) socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2b4, &(0x7f0000000040)={0x0, 0xe8a1, 0xc000, 0x3, 0x18e}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 2 (id=2486): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce}, 0x38) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) accept4(r0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): syz.3.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f131f4fd609 code=0x7ffc0000 [ 773.678093][ T37] audit: type=1326 audit(1776031110.600:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.3.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f131f4b957b code=0x7ffc0000 [ 773.678560][ T37] audit: type=1326 audit(1776031110.600:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.3.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131f4fc819 code=0x7ffc0000 [ 773.678821][ T37] audit: type=1326 audit(1776031110.600:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.3.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131f4fc819 code=0x7ffc0000 [ 773.679084][ T37] audit: type=1326 audit(1776031110.600:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.3.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f131f4b8c6c code=0x7ffc0000 [ 773.682790][ T37] audit: type=1326 audit(1776031110.600:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.3.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f131f4b8cce code=0x7ffc0000 [ 773.684530][ T37] audit: type=1326 audit(1776031110.600:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.3.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f131f4fc4ab code=0x7ffc0000 [ 774.025891][T12383] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.048728][T12636] binder: 12634:12636 ioctl c0306201 2000000004c0 returned -22 [ 774.168274][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.169435][ T6533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.172988][ T808] uvcvideo 4-1:7.83: Found multiple Units with ID 1 [ 774.173916][ T808] uvcvideo 4-1:7.83: Found UVC 0.00 device syz (046d:08c5) [ 774.173947][ T808] uvcvideo 4-1:7.83: No valid video chain found. [ 774.230269][ T808] usb 4-1: USB disconnect, device number 49 [ 774.421311][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.421461][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.583141][T12383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 776.367457][T12383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 776.415514][ T5799] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 776.465397][ T5940] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 776.579850][ T5799] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 776.579882][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 776.579903][ T5799] usb 3-1: Product: syz [ 776.579918][ T5799] usb 3-1: SerialNumber: syz [ 776.615402][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 776.618951][ T5799] usb 3-1: config 0 descriptor?? [ 776.619443][ T5940] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 776.619468][ T5940] usb 4-1: config 0 has no interface number 0 [ 776.619513][ T5940] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 776.619537][ T5940] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 776.619565][ T5940] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 776.619593][ T5940] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 776.619621][ T5940] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 776.622965][ T5940] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 776.622993][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.623015][ T5940] usb 4-1: Product: syz [ 776.623031][ T5940] usb 4-1: Manufacturer: syz [ 776.623047][ T5940] usb 4-1: SerialNumber: syz [ 776.740522][ T5940] usb 4-1: config 0 descriptor?? [ 776.741736][T12701] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 776.809488][ T5940] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input24 [ 776.928329][ C0] bcm5974 4-1:0.119: trackpad urb failed: -1 [ 777.193999][ T808] usb 4-1: USB disconnect, device number 50 [ 777.467068][T12383] veth0_vlan: entered promiscuous mode [ 777.503357][T12383] veth1_vlan: entered promiscuous mode [ 777.656058][T12383] veth0_macvtap: entered promiscuous mode [ 777.661915][T12383] veth1_macvtap: entered promiscuous mode [ 777.711562][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2084'. [ 777.713717][T12383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.714736][T12732] wg1 speed is unknown, defaulting to 1000 [ 777.794393][T12383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.833555][T10739] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.833832][T10739] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.834036][T10739] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.834265][T10739] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.959330][ T2371] pvrusb2: request_firmware fatal error with code=-110 [ 777.959351][ T2371] pvrusb2: Failure uploading firmware1 [ 777.959361][ T2371] pvrusb2: Device initialization was not successful. [ 777.959371][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 777.959384][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 777.959603][ T5992] pvrusb2: Device being rendered inoperable [ 778.350901][ T6533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.350924][ T6533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.379729][ T5992] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 778.475500][ T6533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.475801][ T6533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.527413][ T5992] usb 1-1: Using ep0 maxpacket: 16 [ 778.531748][ T5992] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.531776][ T5992] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 778.561157][ T5992] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 778.561244][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.561266][ T5992] usb 1-1: Product: syz [ 778.561280][ T5992] usb 1-1: Manufacturer: syz [ 778.561294][ T5992] usb 1-1: SerialNumber: syz [ 778.788948][T12748] FAULT_INJECTION: forcing a failure. [ 778.788948][T12748] name failslab, interval 1, probability 0, space 0, times 0 [ 778.789003][T12748] CPU: 0 UID: 0 PID: 12748 Comm: syz.4.1994 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 778.789033][T12748] Tainted: [L]=SOFTLOCKUP [ 778.789041][T12748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 778.789064][T12748] Call Trace: [ 778.789073][T12748] [ 778.789084][T12748] dump_stack_lvl+0xe8/0x150 [ 778.789123][T12748] should_fail_ex+0x46b/0x600 [ 778.789160][T12748] should_failslab+0xa8/0x100 [ 778.789185][T12748] __kmalloc_noprof+0xdf/0x7b0 [ 778.789206][T12748] ? kfree+0x4d/0x6c0 [ 778.789237][T12748] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 778.789274][T12748] tomoyo_realpath_from_path+0xe3/0x5d0 [ 778.789311][T12748] ? tomoyo_path_number_perm+0x219/0x630 [ 778.789334][T12748] tomoyo_path_number_perm+0x246/0x630 [ 778.789361][T12748] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 778.789389][T12748] ? __lock_acquire+0x6b5/0x2cf0 [ 778.789448][T12748] ? __fget_files+0x2a/0x420 [ 778.789482][T12748] ? __fget_files+0x2a/0x420 [ 778.789510][T12748] ? __fget_files+0x3a6/0x420 [ 778.789539][T12748] ? __fget_files+0x2a/0x420 [ 778.789574][T12748] security_file_ioctl+0xc3/0x2a0 [ 778.789603][T12748] __se_sys_ioctl+0x47/0x170 [ 778.789629][T12748] do_syscall_64+0x14d/0xf80 [ 778.789654][T12748] ? trace_irq_disable+0x3b/0x150 [ 778.789681][T12748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.789705][T12748] ? clear_bhb_loop+0x40/0x90 [ 778.789734][T12748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.789757][T12748] RIP: 0033:0x7f1823cbc819 [ 778.789778][T12748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.789798][T12748] RSP: 002b:00007f1821f16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 778.789822][T12748] RAX: ffffffffffffffda RBX: 00007f1823f35fa0 RCX: 00007f1823cbc819 [ 778.789837][T12748] RDX: 0000000000000000 RSI: 00000000c008aec1 RDI: 0000000000000005 [ 778.789852][T12748] RBP: 00007f1821f16090 R08: 0000000000000000 R09: 0000000000000000 [ 778.789865][T12748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.789878][T12748] R13: 00007f1823f36038 R14: 00007f1823f35fa0 R15: 00007ffd4d4f9658 [ 778.789918][T12748] [ 778.790022][T12748] ERROR: Out of memory at tomoyo_realpath_from_path. [ 779.063497][ T5992] usb 1-1: 0:2 : does not exist [ 779.094908][ T5992] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 779.254010][T12755] FAULT_INJECTION: forcing a failure. [ 779.254010][T12755] name failslab, interval 1, probability 0, space 0, times 0 [ 779.254050][T12755] CPU: 1 UID: 0 PID: 12755 Comm: syz.4.2091 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 779.254082][T12755] Tainted: [L]=SOFTLOCKUP [ 779.254090][T12755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 779.254103][T12755] Call Trace: [ 779.254113][T12755] [ 779.254122][T12755] dump_stack_lvl+0xe8/0x150 [ 779.254161][T12755] should_fail_ex+0x46b/0x600 [ 779.254199][T12755] should_failslab+0xa8/0x100 [ 779.254227][T12755] __kmalloc_noprof+0xdf/0x7b0 [ 779.254248][T12755] ? kfree+0x4d/0x6c0 [ 779.254277][T12755] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 779.254314][T12755] tomoyo_realpath_from_path+0xe3/0x5d0 [ 779.254354][T12755] ? tomoyo_path_number_perm+0x219/0x630 [ 779.254380][T12755] tomoyo_path_number_perm+0x246/0x630 [ 779.254408][T12755] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 779.254436][T12755] ? __lock_acquire+0x6b5/0x2cf0 [ 779.254495][T12755] ? __fget_files+0x2a/0x420 [ 779.254527][T12755] ? __fget_files+0x2a/0x420 [ 779.254555][T12755] ? __fget_files+0x3a6/0x420 [ 779.254584][T12755] ? __fget_files+0x2a/0x420 [ 779.254619][T12755] security_file_ioctl+0xc3/0x2a0 [ 779.254648][T12755] __se_sys_ioctl+0x47/0x170 [ 779.254674][T12755] do_syscall_64+0x14d/0xf80 [ 779.254700][T12755] ? trace_irq_disable+0x3b/0x150 [ 779.254728][T12755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.254752][T12755] ? clear_bhb_loop+0x40/0x90 [ 779.254789][T12755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.254812][T12755] RIP: 0033:0x7f1823cbc819 [ 779.254833][T12755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.254854][T12755] RSP: 002b:00007f1821f16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.254876][T12755] RAX: ffffffffffffffda RBX: 00007f1823f35fa0 RCX: 00007f1823cbc819 [ 779.254892][T12755] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000005 [ 779.254906][T12755] RBP: 00007f1821f16090 R08: 0000000000000000 R09: 0000000000000000 [ 779.254920][T12755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.254933][T12755] R13: 00007f1823f36038 R14: 00007f1823f35fa0 R15: 00007ffd4d4f9658 [ 779.254969][T12755] [ 779.254978][T12755] ERROR: Out of memory at tomoyo_realpath_from_path. [ 779.500973][ T5799] usb 3-1: USB disconnect, device number 53 [ 779.547412][ T5992] usb 1-1: USB disconnect, device number 32 [ 779.641580][ T6143] udevd[6143]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 780.350852][ T5114] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 780.433005][T12738] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 780.625026][ T5114] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 780.629903][ T5992] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 780.815406][ T5992] usb 3-1: Using ep0 maxpacket: 32 [ 780.817916][ T5992] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 780.817945][ T5992] usb 3-1: config 0 has no interface number 0 [ 780.817993][ T5992] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 780.818018][ T5992] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 780.818047][ T5992] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 780.818077][ T5992] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 780.818107][ T5992] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 780.821300][ T5992] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 780.821331][ T5992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.821353][ T5992] usb 3-1: Product: syz [ 780.821370][ T5992] usb 3-1: Manufacturer: syz [ 780.821387][ T5992] usb 3-1: SerialNumber: syz [ 781.121390][T12779] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2098'. [ 781.121417][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2098'. [ 781.136666][T12738] usb 4-1: Using ep0 maxpacket: 16 [ 781.141108][T12738] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.141198][T12738] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.141264][T12738] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 781.141343][T12738] usb 4-1: config 0 interface 0 has no altsetting 0 [ 781.141432][T12738] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 781.141505][T12738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.213986][T12738] usb 4-1: config 0 descriptor?? [ 781.377696][ T5992] usb 3-1: config 0 descriptor?? [ 781.378988][T12759] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 781.392041][ T5992] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input25 [ 781.614783][T12785] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 781.680796][T12738] hid (null): invalid report_size 28520 [ 781.697733][T12785] bond1 (unregistering): Released all slaves [ 781.720709][T12738] hid (null): unknown global tag 0xc [ 781.720749][T12738] hid (null): report_id 816866316 is invalid [ 781.720797][T12738] hid (null): report_id 0 is invalid [ 781.875810][T12738] usb 3-1: USB disconnect, device number 54 [ 782.203264][T12805] loop9: detected capacity change from 0 to 524287936 [ 782.559439][ T37] kauditd_printk_skb: 70 callbacks suppressed [ 782.559474][ T37] audit: type=1326 audit(1776031119.510:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12810 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c7a9c819 code=0x7ffc0000 [ 782.561175][ T37] audit: type=1326 audit(1776031119.510:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12810 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c7a9c819 code=0x7ffc0000 [ 782.561228][ T37] audit: type=1326 audit(1776031119.510:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12810 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c7a9c819 code=0x7ffc0000 [ 782.561536][ T37] audit: type=1326 audit(1776031119.510:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12810 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f33c7a9c819 code=0x7ffc0000 [ 782.562067][ T37] audit: type=1326 audit(1776031119.510:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12810 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c7a9c819 code=0x7ffc0000 [ 782.562116][ T37] audit: type=1326 audit(1776031119.510:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12810 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c7a9c819 code=0x7ffc0000 [ 782.563758][ T37] audit: type=1326 audit(1776031119.510:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12810 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c7a9c819 code=0x7ffc0000 [ 782.563814][ T37] audit: type=1326 audit(1776031119.510:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12810 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c7a9c819 code=0x7ffc0000 [ 782.564158][ T37] audit: type=1326 audit(1776031119.510:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12810 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33c7a9c819 code=0x7ffc0000 [ 782.568570][ T37] audit: type=1326 audit(1776031119.510:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12810 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c7a9c819 code=0x7ffc0000 [ 782.765359][ T5994] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 782.930956][ T5994] usb 5-1: Using ep0 maxpacket: 8 [ 782.935047][ T5994] usb 5-1: unable to get BOS descriptor or descriptor too short [ 782.949926][ T5994] usb 5-1: config 7 has an invalid interface number: 83 but max is 0 [ 782.949956][ T5994] usb 5-1: config 7 has no interface number 0 [ 782.949990][ T5994] usb 5-1: config 7 interface 83 has no altsetting 0 [ 782.953160][ T5994] usb 5-1: New USB device found, idVendor=046d, idProduct=08c5, bcdDevice=cb.ab [ 782.953189][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.953212][ T5994] usb 5-1: Product: syz [ 782.953227][ T5994] usb 5-1: Manufacturer: syz [ 782.953244][ T5994] usb 5-1: SerialNumber: syz [ 783.153889][T12738] usb 4-1: USB disconnect, device number 51 [ 783.568696][ T5114] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 784.383595][T12814] binder: 12813:12814 ioctl c0306201 2000000004c0 returned -22 [ 785.095875][ T5994] uvcvideo 5-1:7.83: Found multiple Units with ID 1 [ 785.096762][ T5994] uvcvideo 5-1:7.83: Found UVC 0.00 device syz (046d:08c5) [ 785.096798][ T5994] uvcvideo 5-1:7.83: No valid video chain found. [ 785.110353][ T5994] usb 5-1: USB disconnect, device number 40 [ 785.162994][T12836] tmpfs: Bad value for 'mpol' [ 785.524445][T12851] netlink: 'syz.3.2119': attribute type 8 has an invalid length. [ 785.645436][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 785.797711][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 785.797744][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 785.797766][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 785.797818][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 785.800175][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 785.800207][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 785.800230][ T10] usb 1-1: Product: syz [ 785.800246][ T10] usb 1-1: Manufacturer: syz [ 786.202734][T12846] batman_adv: batadv0: Adding interface: dummy0 [ 786.202754][T12846] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.202791][T12846] batman_adv: batadv0: Interface activated: dummy0 [ 786.504785][ T10] usb 1-1: USB disconnect, device number 33 [ 786.535388][ T5994] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 786.647198][T12869] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2127'. [ 786.723919][ T5994] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 786.723956][ T5994] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 786.723978][ T5994] usb 3-1: Product: syz [ 786.723995][ T5994] usb 3-1: SerialNumber: syz [ 786.742681][ T5994] usb 3-1: config 0 descriptor?? [ 786.791749][ T5114] Bluetooth: hci5: unexpected event for opcode 0x007f [ 787.564464][T12884] loop2: detected capacity change from 0 to 7 [ 787.590218][T12884] Dev loop2: unable to read RDB block 7 [ 787.590835][T12884] loop2: AHDI p1 p2 p3 [ 787.590868][T12884] loop2: partition table partially beyond EOD, truncated [ 787.596429][T12884] loop2: p1 start 1818582900 is beyond EOD, truncated [ 787.597811][T12884] loop2: p3 start 335544320 is beyond EOD, truncated [ 787.691570][T12884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2132'. [ 787.695667][ T5994] usb 3-1: USB disconnect, device number 55 [ 788.135424][ T5992] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 788.305380][ T5992] usb 4-1: Using ep0 maxpacket: 32 [ 788.307416][ T5992] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.307442][ T5992] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 788.309927][ T5992] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 788.309954][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.309976][ T5992] usb 4-1: Product: syz [ 788.309991][ T5992] usb 4-1: Manufacturer: syz [ 788.310007][ T5992] usb 4-1: SerialNumber: syz [ 788.375723][ T5992] usb 4-1: config 0 descriptor?? [ 788.433893][ T5992] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 788.581844][T12886] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2130'. [ 788.583389][ T6533] usb 4-1: Failed to submit usb control message: -71 [ 788.583425][ T6533] usb 4-1: unable to send the bmi data to the device: -71 [ 788.583446][ T6533] usb 4-1: unable to get target info from device [ 788.583462][ T6533] usb 4-1: could not get target info (-71) [ 788.583482][ T6533] usb 4-1: could not probe fw (-71) [ 788.583900][T12738] usb 4-1: USB disconnect, device number 52 [ 788.757997][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 788.795462][ T5992] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 788.905626][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 788.907668][ T10] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 788.907694][ T10] usb 3-1: config 0 has no interface number 0 [ 788.907749][ T10] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 788.907766][ T10] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 788.907785][ T10] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 788.907804][ T10] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 788.907824][ T10] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 788.910704][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 788.910724][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.910739][ T10] usb 3-1: Product: syz [ 788.910750][ T10] usb 3-1: Manufacturer: syz [ 788.910760][ T10] usb 3-1: SerialNumber: syz [ 788.946389][ T5992] usb 5-1: Using ep0 maxpacket: 8 [ 789.016138][ T10] usb 3-1: config 0 descriptor?? [ 789.020799][T12905] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 789.030639][ T5992] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 789.030724][ T5992] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 789.030799][ T5992] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 789.030874][ T5992] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 789.030999][ T5992] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 789.031065][ T5992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.120340][ T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input26 [ 789.352011][ T5992] usb 5-1: GET_CAPABILITIES returned 0 [ 789.352782][ T5992] usbtmc 5-1:16.0: can't read capabilities [ 789.456043][ T10] usb 3-1: USB disconnect, device number 56 [ 789.573964][ T5992] usb 5-1: USB disconnect, device number 41 [ 789.827927][T12926] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2146'. [ 791.083085][T12934] binfmt_misc: register: failed to install interpreter file ./file0 [ 791.785399][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 791.899419][T12947] 9p: Bad value for 'rfdno' [ 791.925765][ T5994] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 791.943063][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 792.061054][ T10] usb 1-1: config 0 has an invalid interface number: 33 but max is 1 [ 792.061085][ T10] usb 1-1: config 0 has no interface number 1 [ 792.061146][ T10] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 792.061191][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 792.074698][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 792.074721][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.074736][ T10] usb 1-1: Product: syz [ 792.074747][ T10] usb 1-1: Manufacturer: syz [ 792.074758][ T10] usb 1-1: SerialNumber: syz [ 792.144437][ T10] usb 1-1: config 0 descriptor?? [ 792.155004][ T5994] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 792.155034][ T5994] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 792.155055][ T5994] usb 3-1: Product: syz [ 792.155070][ T5994] usb 3-1: SerialNumber: syz [ 792.193337][ T10] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 792.247677][ T5994] usb 3-1: config 0 descriptor?? [ 792.419161][ T2371] pvrusb2: Invalid read control endpoint [ 792.422929][ T2371] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 792.422956][ T2371] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 792.476397][ T10] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 792.484139][ T10] usb 1-1: USB disconnect, device number 34 [ 792.626762][ T5994] usb 3-1: USB disconnect, device number 57 [ 793.071578][T12962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 793.614702][T12972] FAULT_INJECTION: forcing a failure. [ 793.614702][T12972] name failslab, interval 1, probability 0, space 0, times 0 [ 793.614745][T12972] CPU: 1 UID: 0 PID: 12972 Comm: syz.4.2159 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 793.614776][T12972] Tainted: [L]=SOFTLOCKUP [ 793.614786][T12972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 793.614801][T12972] Call Trace: [ 793.614810][T12972] [ 793.614821][T12972] dump_stack_lvl+0xe8/0x150 [ 793.614863][T12972] should_fail_ex+0x46b/0x600 [ 793.614902][T12972] should_failslab+0xa8/0x100 [ 793.614930][T12972] kmem_cache_alloc_noprof+0x87/0x680 [ 793.614966][T12972] ? skb_clone+0x212/0x3a0 [ 793.614999][T12972] skb_clone+0x212/0x3a0 [ 793.615032][T12972] __netlink_deliver_tap+0x404/0x850 [ 793.615084][T12972] ? netlink_deliver_tap+0x2e/0x1b0 [ 793.615122][T12972] netlink_deliver_tap+0x19c/0x1b0 [ 793.615160][T12972] netlink_unicast+0x805/0x9f0 [ 793.615201][T12972] ? __pfx_netlink_unicast+0x10/0x10 [ 793.615240][T12972] ? netlink_sendmsg+0x650/0xb40 [ 793.615272][T12972] ? skb_put+0x11b/0x210 [ 793.615300][T12972] netlink_sendmsg+0x813/0xb40 [ 793.615344][T12972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 793.615379][T12972] ? unwind_get_return_address+0x4d/0x90 [ 793.615408][T12972] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 793.615446][T12972] ____sys_sendmsg+0x94c/0x9c0 [ 793.615477][T12972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 793.615513][T12972] ? import_iovec+0x73/0xa0 [ 793.615541][T12972] ___sys_sendmsg+0x2a5/0x360 [ 793.615575][T12972] ? __pfx____sys_sendmsg+0x10/0x10 [ 793.615646][T12972] ? __fget_files+0x2a/0x420 [ 793.615676][T12972] ? __fget_files+0x3a6/0x420 [ 793.615716][T12972] __x64_sys_sendmsg+0x1c3/0x2a0 [ 793.615745][T12972] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 793.615781][T12972] ? __pfx_ksys_write+0x10/0x10 [ 793.615830][T12972] do_syscall_64+0x14d/0xf80 [ 793.615858][T12972] ? trace_irq_disable+0x3b/0x150 [ 793.615885][T12972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.615909][T12972] ? clear_bhb_loop+0x40/0x90 [ 793.615936][T12972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.615961][T12972] RIP: 0033:0x7f1823cbc819 [ 793.615982][T12972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.616001][T12972] RSP: 002b:00007f1821f16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 793.616026][T12972] RAX: ffffffffffffffda RBX: 00007f1823f35fa0 RCX: 00007f1823cbc819 [ 793.616043][T12972] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000005 [ 793.616058][T12972] RBP: 00007f1821f16090 R08: 0000000000000000 R09: 0000000000000000 [ 793.616071][T12972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.616085][T12972] R13: 00007f1823f36038 R14: 00007f1823f35fa0 R15: 00007ffd4d4f9658 [ 793.616121][T12972] [ 793.650912][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2160'. [ 793.650964][T12970] wg1 speed is unknown, defaulting to 1000 [ 794.416797][T12974] hsr0: entered promiscuous mode [ 794.416840][T12974] hsr0: entered allmulticast mode [ 794.416855][T12974] hsr_slave_0: entered allmulticast mode [ 794.416875][T12974] hsr_slave_1: entered allmulticast mode [ 794.613788][T12996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2167'. [ 794.625470][T12998] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2166'. [ 794.678102][T12998] ipvlan2: entered allmulticast mode [ 794.678129][T12998] syz_tun: entered allmulticast mode [ 795.275384][T12738] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 795.805697][T13010] IPv6: Can't replace route, no match found [ 796.357850][T12738] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 796.357884][T12738] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 796.357906][T12738] usb 4-1: Product: syz [ 796.357921][T12738] usb 4-1: SerialNumber: syz [ 796.658916][T12738] usb 4-1: config 0 descriptor?? [ 797.834109][T13010] tipc: Enabling of bearer rejected, failed to enable media [ 797.943264][T12738] usb 4-1: USB disconnect, device number 53 [ 797.972911][T13007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 799.266173][T13023] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2172'. [ 799.317873][T13027] binfmt_misc: register: failed to install interpreter file ./file0 [ 799.319476][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2173'. [ 799.319518][T13022] wg1 speed is unknown, defaulting to 1000 [ 800.702208][ T5992] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 801.115391][ T5992] usb 4-1: Using ep0 maxpacket: 8 [ 801.156603][ T5992] usb 4-1: device descriptor read/all, error -71 [ 801.349643][T13054] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 801.349679][T13054] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 801.349715][T13054] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 802.034332][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2187'. [ 802.034365][T13064] wg1 speed is unknown, defaulting to 1000 [ 802.326782][ T37] kauditd_printk_skb: 198 callbacks suppressed [ 802.326801][ T37] audit: type=1326 audit(1776031139.280:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13074 comm="syz.5.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c7a9c819 code=0x7ffc0000 [ 802.326854][ T37] audit: type=1326 audit(1776031139.280:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13074 comm="syz.5.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c7a9c819 code=0x7ffc0000 [ 802.327720][ T37] audit: type=1326 audit(1776031139.280:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13074 comm="syz.5.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c7a9c819 code=0x7ffc0000 [ 802.327770][ T37] audit: type=1326 audit(1776031139.280:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13074 comm="syz.5.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f33c7a9c819 code=0x7ffc0000 [ 802.328030][ T37] audit: type=1326 audit(1776031139.280:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13074 comm="syz.5.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c7a9c819 code=0x7ffc0000 [ 802.328547][ T37] audit: type=1326 audit(1776031139.280:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13074 comm="syz.5.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c7a9c819 code=0x7ffc0000 [ 802.328597][ T37] audit: type=1326 audit(1776031139.280:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13074 comm="syz.5.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c7a9c819 code=0x7ffc0000 [ 802.328889][ T37] audit: type=1326 audit(1776031139.280:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13074 comm="syz.5.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33c7a9c819 code=0x7ffc0000 [ 802.329529][ T37] audit: type=1326 audit(1776031139.280:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13074 comm="syz.5.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c7a9c819 code=0x7ffc0000 [ 802.329578][ T37] audit: type=1326 audit(1776031139.280:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13074 comm="syz.5.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c7a9c819 code=0x7ffc0000 [ 802.345442][ T5992] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 802.345485][T12738] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 802.515324][ T5992] usb 4-1: Using ep0 maxpacket: 8 [ 802.519603][ T5992] usb 4-1: unable to get BOS descriptor or descriptor too short [ 802.522002][ T5992] usb 4-1: config 7 has an invalid interface number: 83 but max is 0 [ 802.522028][ T5992] usb 4-1: config 7 has no interface number 0 [ 802.522062][ T5992] usb 4-1: config 7 interface 83 has no altsetting 0 [ 802.585378][ T5992] usb 4-1: New USB device found, idVendor=046d, idProduct=08c5, bcdDevice=cb.ab [ 802.585409][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.585429][ T5992] usb 4-1: Product: syz [ 802.585445][ T5992] usb 4-1: Manufacturer: syz [ 802.585460][ T5992] usb 4-1: SerialNumber: syz [ 802.624886][T12738] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 802.624976][T12738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.625037][T12738] usb 5-1: Product: syz [ 802.625080][T12738] usb 5-1: Manufacturer: syz [ 802.625123][T12738] usb 5-1: SerialNumber: syz [ 802.688731][T12738] usb 5-1: config 0 descriptor?? [ 802.928727][T12738] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 803.071031][T13067] binder: 13066:13067 ioctl c0306201 2000000004c0 returned -22 [ 803.246059][ T5992] uvcvideo 4-1:7.83: Found multiple Units with ID 1 [ 803.247549][ T5992] uvcvideo 4-1:7.83: Found UVC 0.00 device syz (046d:08c5) [ 803.247581][ T5992] uvcvideo 4-1:7.83: No valid video chain found. [ 803.279270][ T5992] usb 4-1: USB disconnect, device number 56 [ 803.416682][T13082] batadv_slave_1: entered promiscuous mode [ 803.478096][T13082] batadv_slave_1: left promiscuous mode [ 805.287928][T12738] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 805.461835][ T5992] usb 5-1: USB disconnect, device number 42 [ 805.811872][T13102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 805.925550][ T5992] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 806.082198][ T5992] usb 5-1: Using ep0 maxpacket: 32 [ 806.085065][ T5992] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 806.085089][ T5992] usb 5-1: config 0 has no interface number 0 [ 806.085125][ T5992] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 806.085145][ T5992] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 806.085168][ T5992] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 806.085193][ T5992] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 806.085217][ T5992] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 806.139877][ T5992] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 806.139910][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.139932][ T5992] usb 5-1: Product: syz [ 806.139948][ T5992] usb 5-1: Manufacturer: syz [ 806.139964][ T5992] usb 5-1: SerialNumber: syz [ 806.173645][ T5992] usb 5-1: config 0 descriptor?? [ 806.175413][T13095] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 806.234526][ T5992] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input27 [ 806.511257][ C0] bcm5974 5-1:0.119: trackpad urb failed: -1 [ 806.589375][ T5940] usb 5-1: USB disconnect, device number 43 [ 806.589472][ C0] bcm5974 5-1:0.119: trackpad urb failed: -19 [ 807.174931][T12738] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 807.489345][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'. [ 807.489379][T13122] wg1 speed is unknown, defaulting to 1000 [ 807.601876][T13126] dvmrp1: entered allmulticast mode [ 807.615900][T12738] usb 4-1: Using ep0 maxpacket: 8 [ 807.618973][T12738] usb 4-1: unable to get BOS descriptor or descriptor too short [ 807.620508][T12738] usb 4-1: config 7 has an invalid interface number: 83 but max is 0 [ 807.620536][T12738] usb 4-1: config 7 has no interface number 0 [ 807.620575][T12738] usb 4-1: config 7 interface 83 has no altsetting 0 [ 807.623408][T12738] usb 4-1: New USB device found, idVendor=046d, idProduct=08c5, bcdDevice=cb.ab [ 807.623447][T12738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.623471][T12738] usb 4-1: Product: syz [ 807.623488][T12738] usb 4-1: Manufacturer: syz [ 807.623504][T12738] usb 4-1: SerialNumber: syz [ 808.235228][T13140] tmpfs: Unknown parameter 'rootcontext' [ 808.241692][ T5992] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 808.681968][ T5992] usb 5-1: Using ep0 maxpacket: 8 [ 808.682677][ T37] kauditd_printk_skb: 171 callbacks suppressed [ 808.682694][ T37] audit: type=1326 audit(1776031145.630:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13116 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131f4fc819 code=0x7ffc0000 [ 808.682742][ T37] audit: type=1326 audit(1776031145.630:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13116 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131f4fc819 code=0x7ffc0000 [ 808.683481][ T37] audit: type=1326 audit(1776031145.630:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13116 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131f4fc819 code=0x7ffc0000 [ 808.684136][ T37] audit: type=1326 audit(1776031145.630:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13116 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131f4fc819 code=0x7ffc0000 [ 808.684453][ T37] audit: type=1326 audit(1776031145.630:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13116 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131f4fc819 code=0x7ffc0000 [ 808.684783][ T37] audit: type=1326 audit(1776031145.630:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13116 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f131f4fc819 code=0x7ffc0000 [ 808.685124][ T37] audit: type=1326 audit(1776031145.630:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13116 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131f4fc819 code=0x7ffc0000 [ 808.742657][ T37] audit: type=1326 audit(1776031145.630:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13116 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131f4fc819 code=0x7ffc0000 [ 808.742969][ T37] audit: type=1326 audit(1776031145.690:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13116 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131f4fc819 code=0x7ffc0000 [ 808.743630][ T37] audit: type=1326 audit(1776031145.690:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13116 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f131f4fc819 code=0x7ffc0000 [ 808.777385][ T5992] usb 5-1: unable to get BOS descriptor or descriptor too short [ 808.837243][ T5992] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 213, changing to 7 [ 808.943911][ T5992] usb 5-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 808.943944][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.943966][ T5992] usb 5-1: Product: 틶嫶岶ᘰ쿫頷臅맱ᚂ蓄ᒉ쩡嶀卺梨䰘Җ賏쭍Ң蛪驛袜珅湙๊橧찹ℑ硍詵帀㉕뽿㒃ⷸ㭬ꍫ僊σ纥ᒭ镌嬚犄჉ñ刦憎뚀⹨ﲼ뽲䥰򯈾縐㑹陵螏Ꞡ悄꾥哎ᬝ뜏쀹៺♂쾼侀왨罚寞暽垒ᢿ㤲᧌䧡爤巒ᾅ䠥촄ڤ쉆朅钍ဿ㴮댲柀兾㍓♤㢀ド⨜陫탘桎峍妏痘캄胒뺽 [ 808.944003][ T5992] usb 5-1: Manufacturer: з [ 808.944019][ T5992] usb 5-1: SerialNumber: І [ 809.053294][T13141] binder: 13116:13141 ioctl c0306201 2000000004c0 returned -22 [ 809.127778][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.272225][ T5992] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 809.273519][ T5992] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 809.348567][T13144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2216'. [ 809.377269][ T5992] usb 5-1: USB disconnect, device number 44 [ 809.449705][T12738] uvcvideo 4-1:7.83: Found multiple Units with ID 1 [ 809.451066][T12738] uvcvideo 4-1:7.83: Found UVC 0.00 device syz (046d:08c5) [ 809.451099][T12738] uvcvideo 4-1:7.83: No valid video chain found. [ 809.477349][T12738] usb 4-1: USB disconnect, device number 57 [ 809.548367][ T6932] udevd[6932]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 809.695353][ T5799] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 809.848132][ T5799] usb 3-1: Using ep0 maxpacket: 16 [ 809.852850][ T5799] usb 3-1: unable to get BOS descriptor or descriptor too short [ 809.856238][ T5799] usb 3-1: config 6 has an invalid interface number: 150 but max is 0 [ 809.856267][ T5799] usb 3-1: config 6 has no interface number 0 [ 809.856309][ T5799] usb 3-1: config 6 interface 150 has no altsetting 0 [ 809.893942][ T5799] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=7d.6f [ 809.893972][ T5799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.893994][ T5799] usb 3-1: Product: syz [ 809.894009][ T5799] usb 3-1: Manufacturer: syz [ 809.894025][ T5799] usb 3-1: SerialNumber: syz [ 810.172046][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2219'. [ 810.187180][T13160] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2220'. [ 810.699853][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2222'. [ 810.700427][T13165] wg1 speed is unknown, defaulting to 1000 [ 811.138991][ T5799] usb 3-1: USB disconnect, device number 58 [ 811.823740][T13178] tipc: Failed to obtain node identity [ 811.823763][T13178] tipc: Enabling of bearer rejected, failed to enable media [ 812.903766][T13196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 813.026929][T13202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2237'. [ 813.340937][ T5992] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 813.375967][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2238'. [ 813.377186][T13205] wg1 speed is unknown, defaulting to 1000 [ 813.705499][ T5992] usb 5-1: Using ep0 maxpacket: 32 [ 813.707516][ T5992] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.707543][ T5992] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 813.709979][ T5992] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 813.710006][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.710021][ T5992] usb 5-1: Product: syz [ 813.710033][ T5992] usb 5-1: Manufacturer: syz [ 813.710044][ T5992] usb 5-1: SerialNumber: syz [ 813.792641][ T5992] usb 5-1: config 0 descriptor?? [ 813.843232][ T5992] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 813.865023][T13212] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 814.021817][T13198] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2235'. [ 814.037631][T12738] usb 5-1: USB disconnect, device number 45 [ 814.039119][ T2238] usb 5-1: Failed to submit usb control message: -71 [ 814.039155][ T2238] usb 5-1: unable to send the bmi data to the device: -71 [ 814.039186][ T2238] usb 5-1: unable to get target info from device [ 814.039204][ T2238] usb 5-1: could not get target info (-71) [ 814.039223][ T2238] usb 5-1: could not probe fw (-71) [ 816.199254][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2252'. [ 816.200604][T13249] wg1 speed is unknown, defaulting to 1000 [ 816.779097][T13262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2259'. [ 816.827098][T13272] openvswitch: netlink: Duplicate or invalid key (type 0). [ 816.827135][T13272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 816.899700][T13276] batadv_slave_1: entered promiscuous mode [ 816.915029][ T5992] kernel read not supported for file 1340/task/1341/cmdline (pid: 5992 comm: kworker/1:7) [ 816.960429][T13275] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2259'. [ 816.960692][T13275] nbd: nbd64 already in use [ 816.985454][ T5940] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 817.005662][T13274] batadv_slave_1: left promiscuous mode [ 817.120434][ T5940] usb 5-1: device descriptor read/64, error -71 [ 817.323117][T13284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2267'. [ 817.355423][ T5940] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 817.390065][T13286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 817.463377][ T6207] udevd[6207]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 817.485451][ T5940] usb 5-1: device descriptor read/64, error -71 [ 817.538835][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2268'. [ 817.538888][T13289] wg1 speed is unknown, defaulting to 1000 [ 817.595758][ T5940] usb usb5-port1: attempt power cycle [ 817.935430][ T5940] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 817.956857][ T5940] usb 5-1: device descriptor read/8, error -71 [ 818.195442][ T5940] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 818.217152][ T5940] usb 5-1: device descriptor read/8, error -71 [ 818.325900][ T5940] usb usb5-port1: unable to enumerate USB device [ 818.516404][T13310] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2273'. [ 819.547901][T13316] netlink: 'syz.3.2276': attribute type 1 has an invalid length. [ 819.547925][T13316] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2276'. [ 819.547954][T13316] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2276'. [ 819.547970][T13316] netlink: 'syz.3.2276': attribute type 1 has an invalid length. [ 819.547987][T13316] netlink: 634 bytes leftover after parsing attributes in process `syz.3.2276'. [ 819.728838][T13318] batadv_slave_1: entered promiscuous mode [ 819.732481][T13318] 9p: Bad value for 'rfdno' [ 819.735150][T13317] batadv_slave_1: left promiscuous mode [ 820.648575][T13326] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2282'. [ 820.685508][T13330] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2281'. [ 820.798857][T12738] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 821.200776][T13332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2283'. [ 821.200810][T13332] wg1 speed is unknown, defaulting to 1000 [ 821.335384][T12738] usb 5-1: Using ep0 maxpacket: 16 [ 821.338780][T12738] usb 5-1: unable to get BOS descriptor or descriptor too short [ 821.338865][T12738] usb 5-1: too many configurations: 113, using maximum allowed: 8 [ 821.341698][T12738] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 821.341734][T12738] usb 5-1: can't read configurations, error -61 [ 821.465434][T12738] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 821.625444][T12738] usb 5-1: Using ep0 maxpacket: 16 [ 821.648807][T12738] usb 5-1: unable to get BOS descriptor or descriptor too short [ 821.648898][T12738] usb 5-1: too many configurations: 113, using maximum allowed: 8 [ 821.683581][T12738] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 821.683621][T12738] usb 5-1: can't read configurations, error -61 [ 821.684177][T12738] usb usb5-port1: attempt power cycle [ 821.745351][ T5992] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 821.905449][ T5992] usb 4-1: Using ep0 maxpacket: 16 [ 821.941879][ T5992] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 821.941901][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.941915][ T5992] usb 4-1: Product: syz [ 821.941926][ T5992] usb 4-1: Manufacturer: syz [ 821.941937][ T5992] usb 4-1: SerialNumber: syz [ 821.995332][ T5992] r8152-cfgselector 4-1: Unknown version 0x0000 [ 821.995358][ T5992] r8152-cfgselector 4-1: config 0 descriptor?? [ 822.154931][T12738] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 822.202252][T12738] usb 5-1: Using ep0 maxpacket: 16 [ 822.216989][T12738] usb 5-1: unable to get BOS descriptor or descriptor too short [ 822.217216][T12738] usb 5-1: too many configurations: 113, using maximum allowed: 8 [ 822.234516][T12738] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 822.234554][T12738] usb 5-1: can't read configurations, error -61 [ 822.372663][T12738] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 822.386563][T12738] usb 5-1: Using ep0 maxpacket: 16 [ 822.389585][T12738] usb 5-1: unable to get BOS descriptor or descriptor too short [ 822.389669][T12738] usb 5-1: too many configurations: 113, using maximum allowed: 8 [ 822.391907][T12738] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 822.391942][T12738] usb 5-1: can't read configurations, error -61 [ 822.415796][T12738] usb usb5-port1: unable to enumerate USB device [ 822.525157][T13348] batadv_slave_1: entered promiscuous mode [ 822.542194][T12738] kernel read not supported for file 1358/task/1359/cmdline (pid: 12738 comm: kworker/0:0) [ 822.566346][T13345] FAULT_INJECTION: forcing a failure. [ 822.566346][T13345] name failslab, interval 1, probability 0, space 0, times 0 [ 822.566375][T13345] CPU: 0 UID: 0 PID: 13345 Comm: syz.2.2288 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 822.566398][T13345] Tainted: [L]=SOFTLOCKUP [ 822.566404][T13345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 822.566415][T13345] Call Trace: [ 822.566421][T13345] [ 822.566428][T13345] dump_stack_lvl+0xe8/0x150 [ 822.566457][T13345] should_fail_ex+0x46b/0x600 [ 822.566484][T13345] should_failslab+0xa8/0x100 [ 822.566510][T13345] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 822.566537][T13345] ? __alloc_skb+0x1d0/0x7d0 [ 822.566553][T13345] ? lockdep_hardirqs_on+0x7a/0x110 [ 822.566576][T13345] __alloc_skb+0x1d0/0x7d0 [ 822.566591][T13345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.566612][T13345] tipc_nl_compat_doit+0x18a/0x650 [ 822.566643][T13345] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 822.566665][T13345] ? rcu_is_watching+0x15/0xb0 [ 822.566685][T13345] ? rcu_is_watching+0x15/0xb0 [ 822.566703][T13345] ? cap_capable+0x123/0x490 [ 822.566720][T13345] ? safesetid_security_capable+0xa9/0x1a0 [ 822.566740][T13345] ? bpf_lsm_capable+0x9/0x20 [ 822.566759][T13345] ? security_capable+0x7e/0x2c0 [ 822.566785][T13345] tipc_nl_compat_recv+0x8d3/0xcf0 [ 822.566807][T13345] ? lockdep_hardirqs_on+0x7a/0x110 [ 822.566827][T13345] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 822.566854][T13345] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 822.566872][T13345] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 822.566895][T13345] ? __lock_acquire+0x6b5/0x2cf0 [ 822.566915][T13345] ? __local_bh_enable+0x1e1/0x2f0 [ 822.566946][T13345] genl_family_rcv_msg_doit+0x22a/0x330 [ 822.566972][T13345] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 822.567001][T13345] ? lockdep_hardirqs_on+0x7a/0x110 [ 822.567019][T13345] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 822.567044][T13345] genl_rcv_msg+0x61c/0x7a0 [ 822.567068][T13345] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.567087][T13345] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 822.567113][T13345] ? __pfx_ref_tracker_free+0x10/0x10 [ 822.567143][T13345] netlink_rcv_skb+0x232/0x4b0 [ 822.567169][T13345] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.567189][T13345] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 822.567225][T13345] ? netlink_deliver_tap+0x2e/0x1b0 [ 822.567249][T13345] ? netlink_deliver_tap+0x2e/0x1b0 [ 822.567277][T13345] genl_rcv+0x28/0x40 [ 822.567294][T13345] netlink_unicast+0x831/0x9f0 [ 822.567336][T13345] ? __pfx_netlink_unicast+0x10/0x10 [ 822.567359][T13345] ? netlink_sendmsg+0x650/0xb40 [ 822.567382][T13345] ? skb_put+0x11b/0x210 [ 822.567401][T13345] netlink_sendmsg+0x813/0xb40 [ 822.567431][T13345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.567458][T13345] ? unwind_get_return_address+0x4d/0x90 [ 822.567477][T13345] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 822.567509][T13345] ____sys_sendmsg+0x94c/0x9c0 [ 822.567532][T13345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 822.567557][T13345] ? import_iovec+0x73/0xa0 [ 822.567575][T13345] ___sys_sendmsg+0x2a5/0x360 [ 822.567598][T13345] ? __pfx____sys_sendmsg+0x10/0x10 [ 822.567643][T13345] ? __fget_files+0x2a/0x420 [ 822.567663][T13345] ? __fget_files+0x3a6/0x420 [ 822.567691][T13345] __x64_sys_sendmsg+0x1c3/0x2a0 [ 822.567712][T13345] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 822.567738][T13345] ? __pfx_ksys_write+0x10/0x10 [ 822.567771][T13345] do_syscall_64+0x14d/0xf80 [ 822.567788][T13345] ? trace_irq_disable+0x3b/0x150 [ 822.567807][T13345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.567823][T13345] ? clear_bhb_loop+0x40/0x90 [ 822.567842][T13345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.567858][T13345] RIP: 0033:0x7fb84ecec819 [ 822.567873][T13345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.567886][T13345] RSP: 002b:00007fb84cf3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.567902][T13345] RAX: ffffffffffffffda RBX: 00007fb84ef65fa0 RCX: 00007fb84ecec819 [ 822.567914][T13345] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 000000000000000a [ 822.567924][T13345] RBP: 00007fb84cf3e090 R08: 0000000000000000 R09: 0000000000000000 [ 822.567934][T13345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.567943][T13345] R13: 00007fb84ef66038 R14: 00007fb84ef65fa0 R15: 00007ffd27a19898 [ 822.567968][T13345] [ 822.782899][T13347] batadv_slave_1: left promiscuous mode [ 823.159688][ T5877] r8152-cfgselector 4-1: USB disconnect, device number 58 [ 823.181989][T13352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 823.505581][T13360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2295'. [ 823.541555][T13367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2297'. [ 823.630307][T13369] siw: device registration error -23 [ 823.765397][ T5994] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 823.925358][ T5994] usb 3-1: Using ep0 maxpacket: 16 [ 823.928136][ T5994] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 823.928157][ T5994] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 823.930344][ T5994] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 823.930377][ T5994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.930400][ T5994] usb 3-1: Product: syz [ 823.930410][ T5994] usb 3-1: Manufacturer: syz [ 823.930421][ T5994] usb 3-1: SerialNumber: syz [ 823.992208][ T5992] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 824.165330][ T5992] usb 4-1: Using ep0 maxpacket: 32 [ 824.167564][ T5992] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 824.167595][ T5992] usb 4-1: config 0 has no interface number 0 [ 824.167666][ T5992] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 824.167683][ T5992] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 824.167702][ T5992] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 824.167870][ T5992] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 824.167892][ T5992] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 824.170696][ T5992] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 824.170724][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.170786][ T5992] usb 4-1: Product: syz [ 824.170797][ T5992] usb 4-1: Manufacturer: syz [ 824.170808][ T5992] usb 4-1: SerialNumber: syz [ 824.226846][ T5992] usb 4-1: config 0 descriptor?? [ 824.302713][ T5994] usb 3-1: 0:2 : does not exist [ 824.302801][ T5994] usb 3-1: unit 6 not found! [ 824.310848][T13373] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 824.329696][ T5992] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input28 [ 824.419566][ T5994] usb 3-1: USB disconnect, device number 59 [ 824.490909][ T6207] udevd[6207]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 824.695180][ C0] bcm5974 4-1:0.119: trackpad urb failed: -1 [ 824.705991][ T5877] usb 4-1: USB disconnect, device number 59 [ 824.954523][T13383] FAULT_INJECTION: forcing a failure. [ 824.954523][T13383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 824.954563][T13383] CPU: 0 UID: 0 PID: 13383 Comm: syz.2.2305 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 824.954594][T13383] Tainted: [L]=SOFTLOCKUP [ 824.954604][T13383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 824.954618][T13383] Call Trace: [ 824.954628][T13383] [ 824.954638][T13383] dump_stack_lvl+0xe8/0x150 [ 824.954679][T13383] should_fail_ex+0x46b/0x600 [ 824.954718][T13383] _copy_to_user+0x31/0xb0 [ 824.954743][T13383] vsock_connectible_getsockopt+0x316/0x3c0 [ 824.954775][T13383] ? __pfx_vsock_connectible_getsockopt+0x10/0x10 [ 824.954808][T13383] ? __pfx_vsock_connectible_getsockopt+0x10/0x10 [ 824.954837][T13383] do_sock_getsockopt+0x2d3/0x3f0 [ 824.954869][T13383] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 824.954897][T13383] ? __fget_files+0x3a6/0x420 [ 824.954928][T13383] ? __fget_files+0x2a/0x420 [ 824.954966][T13383] __x64_sys_getsockopt+0x1aa/0x250 [ 824.955004][T13383] do_syscall_64+0x14d/0xf80 [ 824.955030][T13383] ? trace_irq_disable+0x3b/0x150 [ 824.955059][T13383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.955084][T13383] ? clear_bhb_loop+0x40/0x90 [ 824.955113][T13383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.955136][T13383] RIP: 0033:0x7fb84ecec819 [ 824.955158][T13383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.955178][T13383] RSP: 002b:00007fb84cf3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 824.955202][T13383] RAX: ffffffffffffffda RBX: 00007fb84ef65fa0 RCX: 00007fb84ecec819 [ 824.955220][T13383] RDX: 0000000000000006 RSI: 0000000000000028 RDI: 0000000000000003 [ 824.955238][T13383] RBP: 00007fb84cf3e090 R08: 00002000000000c0 R09: 0000000000000000 [ 824.955254][T13383] R10: 0000200000002080 R11: 0000000000000246 R12: 0000000000000001 [ 824.955268][T13383] R13: 00007fb84ef66038 R14: 00007fb84ef65fa0 R15: 00007ffd27a19898 [ 824.955311][T13383] [ 825.442552][T13388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2302'. [ 825.442582][T13388] netlink: 'syz.4.2302': attribute type 1 has an invalid length. [ 825.543903][T13397] siw: device registration error -23 [ 825.580817][T13397] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2310'. [ 826.214122][T13411] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2315'. [ 826.219842][T13412] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2316'. [ 826.234151][T13412] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2316'. [ 826.355387][ T5994] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 826.521576][ T5994] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 826.521608][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 826.521635][ T5994] usb 5-1: Product: syz [ 826.521646][ T5994] usb 5-1: SerialNumber: syz [ 826.525784][ T5877] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 826.564345][ T5994] usb 5-1: config 0 descriptor?? [ 826.691646][T13416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 826.707883][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 826.711463][ T5877] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 826.711497][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 826.715201][ T5877] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 826.719414][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.719473][ T5877] usb 4-1: Product: syz [ 826.719489][ T5877] usb 4-1: Manufacturer: syz [ 826.719505][ T5877] usb 4-1: SerialNumber: syz [ 826.761869][ T5877] usb 4-1: config 0 descriptor?? [ 826.864063][ T5877] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 826.864101][ T5877] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 827.076966][T13421] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2320'. [ 827.081264][ T5994] usb 5-1: USB disconnect, device number 54 [ 827.127225][T13422] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2319'. [ 827.127491][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2319'. [ 827.200721][ T5877] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 827.202675][ T5877] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 827.204752][ T5877] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 827.204770][ T5877] em28xx 4-1:0.0: No AC97 audio processor [ 827.473749][ T37] kauditd_printk_skb: 96 callbacks suppressed [ 827.473769][ T37] audit: type=1326 audit(1776031420.422:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13434 comm="syz.2.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84ecec819 code=0x7ffc0000 [ 827.513660][ T37] audit: type=1326 audit(1776031420.422:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13434 comm="syz.2.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84ecec819 code=0x7ffc0000 [ 827.513720][ T37] audit: type=1326 audit(1776031420.462:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13434 comm="syz.2.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84ecec819 code=0x7ffc0000 [ 827.513998][ T37] audit: type=1326 audit(1776031420.462:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13434 comm="syz.2.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fb84ecec819 code=0x7ffc0000 [ 827.514286][ T37] audit: type=1326 audit(1776031420.462:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13434 comm="syz.2.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84ecec819 code=0x7ffc0000 [ 827.514561][ T37] audit: type=1326 audit(1776031420.462:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13434 comm="syz.2.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84ecec819 code=0x7ffc0000 [ 827.514851][ T37] audit: type=1326 audit(1776031420.462:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13434 comm="syz.2.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84ecec819 code=0x7ffc0000 [ 827.565409][ T37] audit: type=1326 audit(1776031420.492:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13434 comm="syz.2.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84ecec819 code=0x7ffc0000 [ 827.565469][ T37] audit: type=1326 audit(1776031420.492:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13434 comm="syz.2.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb84ecec819 code=0x7ffc0000 [ 827.565515][ T37] audit: type=1326 audit(1776031420.502:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13434 comm="syz.2.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84ecec819 code=0x7ffc0000 [ 828.047570][ T5884] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 828.207448][ T5884] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 828.207481][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.207502][ T5884] usb 5-1: Product: syz [ 828.207516][ T5884] usb 5-1: Manufacturer: syz [ 828.207530][ T5884] usb 5-1: SerialNumber: syz [ 828.213506][ T5884] usb 5-1: config 0 descriptor?? [ 828.303706][ T5992] usb 4-1: USB disconnect, device number 60 [ 828.313873][ T5992] em28xx 4-1:0.0: Disconnecting em28xx [ 828.427017][ T5992] em28xx 4-1:0.0: Freeing device [ 828.467737][ T5884] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 828.473693][T13449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2328'. [ 828.786404][T13457] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2331'. [ 829.035360][ T5799] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 829.053601][ T5877] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 829.187826][ T5799] usb 3-1: Using ep0 maxpacket: 16 [ 829.190823][ T5799] usb 3-1: unable to get BOS descriptor or descriptor too short [ 829.192398][ T5799] usb 3-1: config 6 has an invalid interface number: 150 but max is 0 [ 829.192425][ T5799] usb 3-1: config 6 has no interface number 0 [ 829.192458][ T5799] usb 3-1: config 6 interface 150 has no altsetting 0 [ 829.216823][ T5799] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=7d.6f [ 829.216864][ T5799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.216887][ T5799] usb 3-1: Product: syz [ 829.216944][ T5799] usb 3-1: Manufacturer: syz [ 829.216986][ T5799] usb 3-1: SerialNumber: syz [ 829.222513][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 829.267096][ T5877] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 829.267126][ T5877] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 829.271404][ T5877] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 829.271651][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.271677][ T5877] usb 4-1: Product: syz [ 829.271694][ T5877] usb 4-1: Manufacturer: syz [ 829.271710][ T5877] usb 4-1: SerialNumber: syz [ 829.502517][ T5799] usb 3-1: USB disconnect, device number 60 [ 829.548678][ T5877] usb 4-1: 0:2 : does not exist [ 829.549173][ T5877] usb 4-1: unit 6 not found! [ 829.661363][ T5877] usb 4-1: USB disconnect, device number 61 [ 829.819145][ T6932] udevd[6932]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 830.003646][ T5884] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 830.029862][ T5884] usb 5-1: USB disconnect, device number 55 [ 830.415395][ T5877] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 830.571014][ T5877] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 830.571048][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.571070][ T5877] usb 3-1: Product: syz [ 830.571086][ T5877] usb 3-1: Manufacturer: syz [ 830.571102][ T5877] usb 3-1: SerialNumber: syz [ 830.637058][ T5877] usb 3-1: config 0 descriptor?? [ 830.860360][ T5877] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 831.065947][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 831.105626][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 831.107234][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 831.138756][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 831.147490][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 831.544596][T13502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2347'. [ 831.624000][T13486] wg1 speed is unknown, defaulting to 1000 [ 832.718957][T13515] siw: device registration error -23 [ 832.755412][ T5884] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 832.799762][ T5877] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 832.815452][T13515] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2351'. [ 832.832964][ T5877] usb 3-1: USB disconnect, device number 61 [ 832.925408][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 832.928117][ T5884] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.928144][ T5884] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 832.932561][ T5884] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 832.932590][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.932612][ T5884] usb 4-1: Product: syz [ 832.932629][ T5884] usb 4-1: Manufacturer: syz [ 832.932653][ T5884] usb 4-1: SerialNumber: syz [ 833.211495][T13486] chnl_net:caif_netlink_parms(): no params data found [ 833.235624][ T5884] usb 4-1: 0:2 : does not exist [ 833.264430][ T5884] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 833.315445][ T5805] Bluetooth: hci3: command tx timeout [ 833.349647][ T5884] usb 4-1: USB disconnect, device number 62 [ 833.465805][ T6207] udevd[6207]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 833.602346][T13486] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.602613][T13486] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.602978][T13486] bridge_slave_0: entered allmulticast mode [ 833.605159][T13486] bridge_slave_0: entered promiscuous mode [ 833.621340][ T5799] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 833.659169][T13486] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.659355][T13486] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.659559][T13486] bridge_slave_1: entered allmulticast mode [ 833.661658][T13486] bridge_slave_1: entered promiscuous mode [ 833.732542][T13486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.743508][T13486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.790825][ T5799] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 833.790860][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.790883][ T5799] usb 5-1: Product: syz [ 833.790898][ T5799] usb 5-1: Manufacturer: syz [ 833.790914][ T5799] usb 5-1: SerialNumber: syz [ 833.828740][ T5799] usb 5-1: config 0 descriptor?? [ 833.853746][T13486] team0: Port device team_slave_0 added [ 833.871918][T13486] team0: Port device team_slave_1 added [ 834.047530][ T5799] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 834.132651][T13540] FAULT_INJECTION: forcing a failure. [ 834.132651][T13540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.132693][T13540] CPU: 0 UID: 0 PID: 13540 Comm: syz.0.2358 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 834.132726][T13540] Tainted: [L]=SOFTLOCKUP [ 834.132734][T13540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 834.132749][T13540] Call Trace: [ 834.132758][T13540] [ 834.132769][T13540] dump_stack_lvl+0xe8/0x150 [ 834.132808][T13540] should_fail_ex+0x46b/0x600 [ 834.132848][T13540] _copy_from_user+0x2d/0xb0 [ 834.132873][T13540] __sys_connect+0x156/0x450 [ 834.132900][T13540] ? __pfx___sys_connect+0x10/0x10 [ 834.132922][T13540] ? kvm_sched_clock_read+0x11/0x20 [ 834.132960][T13540] ? rcu_is_watching+0x15/0xb0 [ 834.132999][T13540] __x64_sys_connect+0x7a/0x90 [ 834.133025][T13540] do_syscall_64+0x14d/0xf80 [ 834.133052][T13540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.133076][T13540] ? clear_bhb_loop+0x40/0x90 [ 834.133105][T13540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.133129][T13540] RIP: 0033:0x7f8a1c74c819 [ 834.133150][T13540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.133171][T13540] RSP: 002b:00007f8a1a9a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 834.133195][T13540] RAX: ffffffffffffffda RBX: 00007f8a1c9c5fa0 RCX: 00007f8a1c74c819 [ 834.133211][T13540] RDX: 0000000000000008 RSI: 0000200000000040 RDI: 0000000000000004 [ 834.133224][T13540] RBP: 00007f8a1a9a6090 R08: 0000000000000000 R09: 0000000000000000 [ 834.133238][T13540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.133251][T13540] R13: 00007f8a1c9c6038 R14: 00007f8a1c9c5fa0 R15: 00007ffea26c9168 [ 834.133285][T13540] [ 834.379524][T13486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 834.379941][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.379974][T13486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 834.382353][T13486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.382368][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.382397][T13486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.652906][T13486] hsr_slave_0: entered promiscuous mode [ 834.654359][T13486] hsr_slave_1: entered promiscuous mode [ 834.685636][T13486] debugfs: 'hsr0' already exists in 'hsr' [ 834.685665][T13486] Cannot create hsr debugfs directory [ 834.724200][T13542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2359'. [ 835.307845][T13544] wg1 speed is unknown, defaulting to 1000 [ 835.395907][ T5805] Bluetooth: hci3: command tx timeout [ 836.150752][ T5799] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 836.165938][T13545] wg1 speed is unknown, defaulting to 1000 [ 836.167641][ T5799] usb 5-1: USB disconnect, device number 57 [ 836.408076][T13555] fuse: Bad value for 'fd' [ 836.747359][T13486] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.893111][T13561] FAULT_INJECTION: forcing a failure. [ 836.893111][T13561] name failslab, interval 1, probability 0, space 0, times 0 [ 836.893179][T13561] CPU: 1 UID: 0 PID: 13561 Comm: syz.0.2365 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 836.893211][T13561] Tainted: [L]=SOFTLOCKUP [ 836.893221][T13561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 836.893236][T13561] Call Trace: [ 836.893245][T13561] [ 836.893255][T13561] dump_stack_lvl+0xe8/0x150 [ 836.893296][T13561] should_fail_ex+0x46b/0x600 [ 836.893335][T13561] should_failslab+0xa8/0x100 [ 836.893362][T13561] __kmalloc_noprof+0xdf/0x7b0 [ 836.893385][T13561] ? kfree+0x4d/0x6c0 [ 836.893417][T13561] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 836.893455][T13561] tomoyo_realpath_from_path+0xe3/0x5d0 [ 836.893497][T13561] ? tomoyo_path_number_perm+0x219/0x630 [ 836.893523][T13561] tomoyo_path_number_perm+0x246/0x630 [ 836.893548][T13561] ? rcu_is_watching+0x15/0xb0 [ 836.893575][T13561] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 836.893604][T13561] ? __lock_acquire+0x6b5/0x2cf0 [ 836.893676][T13561] ? __fget_files+0x2a/0x420 [ 836.893709][T13561] ? __fget_files+0x2a/0x420 [ 836.893738][T13561] ? __fget_files+0x3a6/0x420 [ 836.893767][T13561] ? __fget_files+0x2a/0x420 [ 836.893820][T13561] security_file_ioctl+0xc3/0x2a0 [ 836.893850][T13561] __se_sys_ioctl+0x47/0x170 [ 836.893877][T13561] do_syscall_64+0x14d/0xf80 [ 836.893906][T13561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.893930][T13561] ? clear_bhb_loop+0x40/0x90 [ 836.893960][T13561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.893984][T13561] RIP: 0033:0x7f8a1c74c819 [ 836.894006][T13561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.894028][T13561] RSP: 002b:00007f8a1a964028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 836.894052][T13561] RAX: ffffffffffffffda RBX: 00007f8a1c9c6180 RCX: 00007f8a1c74c819 [ 836.894078][T13561] RDX: 00002000000003c0 RSI: 00000000400442c8 RDI: 0000000000000009 [ 836.894094][T13561] RBP: 00007f8a1a964090 R08: 0000000000000000 R09: 0000000000000000 [ 836.894109][T13561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.894123][T13561] R13: 00007f8a1c9c6218 R14: 00007f8a1c9c6180 R15: 00007ffea26c9168 [ 836.894159][T13561] [ 836.894195][T13561] ERROR: Out of memory at tomoyo_realpath_from_path. [ 837.475540][ T5805] Bluetooth: hci3: command tx timeout [ 838.022391][T13567] FAULT_INJECTION: forcing a failure. [ 838.022391][T13567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 838.022458][T13567] CPU: 1 UID: 0 PID: 13567 Comm: syz.4.2366 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 838.022491][T13567] Tainted: [L]=SOFTLOCKUP [ 838.022500][T13567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 838.022515][T13567] Call Trace: [ 838.022524][T13567] [ 838.022534][T13567] dump_stack_lvl+0xe8/0x150 [ 838.022575][T13567] should_fail_ex+0x46b/0x600 [ 838.022613][T13567] _copy_from_user+0x2d/0xb0 [ 838.022637][T13567] ___sys_sendmsg+0x1c6/0x360 [ 838.022672][T13567] ? __pfx____sys_sendmsg+0x10/0x10 [ 838.022705][T13567] ? __schedule+0x1569/0x5240 [ 838.022760][T13567] ? __fget_files+0x2a/0x420 [ 838.022790][T13567] ? __fget_files+0x3a6/0x420 [ 838.022843][T13567] __x64_sys_sendmsg+0x1c3/0x2a0 [ 838.022874][T13567] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 838.022925][T13567] do_syscall_64+0x14d/0xf80 [ 838.022950][T13567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.022974][T13567] ? clear_bhb_loop+0x40/0x90 [ 838.023020][T13567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.023059][T13567] RIP: 0033:0x7f1823cbc819 [ 838.023079][T13567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.023099][T13567] RSP: 002b:00007f1821ed4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 838.023123][T13567] RAX: ffffffffffffffda RBX: 00007f1823f36180 RCX: 00007f1823cbc819 [ 838.023141][T13567] RDX: 0000000000008804 RSI: 0000200000000000 RDI: 0000000000000004 [ 838.023155][T13567] RBP: 00007f1821ed4090 R08: 0000000000000000 R09: 0000000000000000 [ 838.023169][T13567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.023182][T13567] R13: 00007f1823f36218 R14: 00007f1823f36180 R15: 00007ffd4d4f9658 [ 838.023216][T13567] [ 838.997130][T13572] exfat: Deprecated parameter 'debug' [ 838.997836][T13572] exFAT-fs (nullb0): invalid boot record signature [ 838.997852][T13572] exFAT-fs (nullb0): failed to read boot sector [ 838.997863][T13572] exFAT-fs (nullb0): failed to recognize exfat type [ 839.155180][T13486] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.207575][T13577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2370'. [ 839.567419][ T5805] Bluetooth: hci3: command tx timeout [ 839.601902][T13486] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.954326][T13486] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.125389][ T5884] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 840.315349][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 840.321069][ T5884] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 840.327761][ T5884] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 840.327793][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.327815][ T5884] usb 5-1: Product: syz [ 840.327831][ T5884] usb 5-1: Manufacturer: syz [ 840.327847][ T5884] usb 5-1: SerialNumber: syz [ 840.382934][ T5884] usb 5-1: config 0 descriptor?? [ 840.407635][ T5884] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 840.407700][ T5884] usb 5-1: setting power ON [ 840.408415][ T5884] dvb-usb: bulk message failed: -22 (2/0) [ 840.469548][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 840.471723][ T5884] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 840.471820][ T5884] usb 5-1: media controller created [ 840.525602][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 840.576822][ T5884] usb 5-1: selecting invalid altsetting 6 [ 840.576848][ T5884] usb 5-1: digital interface selection failed (-22) [ 840.576865][ T5884] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 840.578423][ T5884] usb 5-1: setting power OFF [ 840.578605][ T5884] dvb-usb: bulk message failed: -22 (2/0) [ 840.578626][ T5884] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 840.578641][ T5884] (NULL device *): no alternate interface [ 840.766672][ T5884] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 840.818547][ T5884] usb 5-1: USB disconnect, device number 58 [ 840.823964][T13600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 840.923133][T13602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2374'. [ 841.406021][T13604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2374'. [ 841.407070][T13604] nbd: nbd64 already in use [ 841.450783][T13486] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 841.545117][T13486] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 841.604208][T13486] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 841.615412][T11963] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 841.657005][T13486] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 843.457339][ T6207] udevd[6207]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 844.096324][T11963] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 844.096430][T11963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.096522][T11963] usb 4-1: Product: syz [ 844.096610][T11963] usb 4-1: Manufacturer: syz [ 844.096695][T11963] usb 4-1: SerialNumber: syz [ 844.173035][T11963] usb 4-1: config 0 descriptor?? [ 844.475457][T11963] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 844.475533][T11963] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 844.484090][T11963] usb 4-1: USB disconnect, device number 63 [ 844.734850][T13640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 844.789887][T13643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2382'. [ 844.960076][T13486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.015185][T13486] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.048339][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.048560][ T5918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.079011][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.079145][ T5918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.162145][T13652] Device name cannot be null; rc = [-22] [ 846.545502][ T5877] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 846.617893][T13486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.695572][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 846.699750][ T5877] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 846.748167][ T5877] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 846.748202][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.748225][ T5877] usb 5-1: Product: syz [ 846.748250][ T5877] usb 5-1: Manufacturer: syz [ 846.748267][ T5877] usb 5-1: SerialNumber: syz [ 846.789028][ T5877] usb 5-1: config 0 descriptor?? [ 846.814433][ T5877] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 846.814494][ T5877] usb 5-1: setting power ON [ 846.814515][ T5877] dvb-usb: bulk message failed: -22 (2/0) [ 846.866344][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 846.871978][T13673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2388'. [ 846.873841][ T5877] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 846.873909][ T5877] usb 5-1: media controller created [ 846.984151][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 847.145802][T13676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2388'. [ 847.146789][T13676] nbd: nbd64 already in use [ 847.192139][ T5877] usb 5-1: selecting invalid altsetting 6 [ 847.192165][ T5877] usb 5-1: digital interface selection failed (-22) [ 847.192181][ T5877] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 847.220271][ T5877] usb 5-1: setting power OFF [ 847.220297][ T5877] dvb-usb: bulk message failed: -22 (2/0) [ 847.220317][ T5877] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 847.220332][ T5877] (NULL device *): no alternate interface [ 847.298078][ T5877] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 847.336092][ T5877] usb 5-1: USB disconnect, device number 59 [ 847.739498][T13486] veth0_vlan: entered promiscuous mode [ 847.761079][T13486] veth1_vlan: entered promiscuous mode [ 847.849740][ T5877] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 848.215373][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 848.441802][ T5877] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 848.441832][ T5877] usb 4-1: config 0 has no interface number 0 [ 848.441877][ T5877] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 848.441900][ T5877] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 848.441927][ T5877] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 848.441954][ T5877] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 848.441982][ T5877] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 848.533877][ T5877] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 848.533911][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.533932][ T5877] usb 4-1: Product: syz [ 848.533949][ T5877] usb 4-1: Manufacturer: syz [ 848.533964][ T5877] usb 4-1: SerialNumber: syz [ 848.587403][ T5877] usb 4-1: config 0 descriptor?? [ 848.588323][T13687] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 848.612601][T13486] veth0_macvtap: entered promiscuous mode [ 848.653607][ T5877] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input29 [ 848.666694][T13486] veth1_macvtap: entered promiscuous mode [ 848.794332][T13486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.823312][T13486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 848.840185][T13701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2393'. [ 848.872495][ T2238] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.912529][ T3535] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.924723][ T3535] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.947621][ T3535] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.075492][ T5992] usb 4-1: USB disconnect, device number 64 [ 849.109800][T13703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 850.945694][ T31] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 851.138717][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 851.138860][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 851.144716][ T31] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 851.144947][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 851.144970][ T31] usb 4-1: SerialNumber: syz [ 851.895010][ T31] usb 4-1: 0:2 : does not exist [ 852.098468][ T31] usb 4-1: USB disconnect, device number 65 [ 852.278472][T13707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 852.284806][ T6533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.284831][ T6533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.382497][ T6207] udevd[6207]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 852.762064][T13723] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2400'. [ 852.827118][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.827135][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.982121][T13731] FAULT_INJECTION: forcing a failure. [ 852.982121][T13731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.982149][T13731] CPU: 1 UID: 0 PID: 13731 Comm: syz.2.2402 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 852.982171][T13731] Tainted: [L]=SOFTLOCKUP [ 852.982177][T13731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 852.982187][T13731] Call Trace: [ 852.982193][T13731] [ 852.982200][T13731] dump_stack_lvl+0xe8/0x150 [ 852.982228][T13731] should_fail_ex+0x46b/0x600 [ 852.982254][T13731] _copy_from_user+0x2d/0xb0 [ 852.982270][T13731] ___sys_sendmsg+0x1c6/0x360 [ 852.982318][T13731] ? __pfx____sys_sendmsg+0x10/0x10 [ 852.982381][T13731] ? __fget_files+0x2a/0x420 [ 852.982408][T13731] ? __fget_files+0x3a6/0x420 [ 852.982436][T13731] __x64_sys_sendmsg+0x1c3/0x2a0 [ 852.982457][T13731] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 852.982483][T13731] ? __pfx_ksys_write+0x10/0x10 [ 852.982515][T13731] do_syscall_64+0x14d/0xf80 [ 852.982533][T13731] ? trace_irq_disable+0x3b/0x150 [ 852.982553][T13731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.982569][T13731] ? clear_bhb_loop+0x40/0x90 [ 852.982588][T13731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.982605][T13731] RIP: 0033:0x7fb84ecec819 [ 852.982619][T13731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.982633][T13731] RSP: 002b:00007fb84cf3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.982649][T13731] RAX: ffffffffffffffda RBX: 00007fb84ef65fa0 RCX: 00007fb84ecec819 [ 852.982661][T13731] RDX: 0000000040000880 RSI: 0000200000000080 RDI: 0000000000000003 [ 852.982671][T13731] RBP: 00007fb84cf3e090 R08: 0000000000000000 R09: 0000000000000000 [ 852.982681][T13731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.982691][T13731] R13: 00007fb84ef66038 R14: 00007fb84ef65fa0 R15: 00007ffd27a19898 [ 852.982715][T13731] [ 853.295830][T13725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2400'. [ 853.297684][T13725] nbd: nbd64 already in use [ 854.300260][T13735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 855.157728][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2342'. [ 855.160514][T13742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2404'. [ 855.164483][ T2371] pvrusb2: request_firmware fatal error with code=-110 [ 855.164531][ T2371] pvrusb2: Failure uploading firmware1 [ 855.164542][ T2371] pvrusb2: Device initialization was not successful. [ 855.164551][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 855.164609][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 855.164686][ T2371] pvrusb2: Failed to submit write-control URB status=-19 [ 855.297492][ T2371] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 855.297563][ T2371] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 855.670438][T13743] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 855.711026][ T10] pvrusb2: Device being rendered inoperable [ 856.988223][ T6207] udevd[6207]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 857.378835][T13753] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2408'. [ 857.378907][T13753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2408'. [ 857.846409][T13739] wg1 speed is unknown, defaulting to 1000 [ 858.331305][T13753] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 858.584331][ T5884] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 858.645443][ T5877] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 858.739836][ T5884] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 858.739868][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.739884][ T5884] usb 4-1: Product: syz [ 858.739895][ T5884] usb 4-1: Manufacturer: syz [ 858.739907][ T5884] usb 4-1: SerialNumber: syz [ 858.754483][ T5884] usb 4-1: config 0 descriptor?? [ 858.778289][ T5877] usb 6-1: device descriptor read/64, error -71 [ 859.025791][ T5877] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 859.237325][ T5877] usb 6-1: device descriptor read/64, error -71 [ 859.472011][ T5877] usb usb6-port1: attempt power cycle [ 859.745444][ T5884] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 859.793290][T13772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 860.327135][ T5877] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 860.349459][ T5877] usb 6-1: device descriptor read/8, error -71 [ 860.985038][ T5877] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 861.011937][ T5877] usb 6-1: device descriptor read/8, error -71 [ 861.118646][ T5877] usb usb6-port1: unable to enumerate USB device [ 862.050310][ T5884] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 862.327954][ T5884] usb 4-1: USB disconnect, device number 66 [ 863.709253][ T5884] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 863.989208][ T5884] usb 5-1: unable to get BOS descriptor or descriptor too short [ 863.991477][ T5884] usb 5-1: config 255 has an invalid interface number: 100 but max is 0 [ 863.991505][ T5884] usb 5-1: config 255 has no interface number 0 [ 863.991685][ T5884] usb 5-1: config 255 interface 100 altsetting 25 endpoint 0x9 has invalid maxpacket 16, setting to 8 [ 863.991717][ T5884] usb 5-1: config 255 interface 100 altsetting 25 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 863.991746][ T5884] usb 5-1: config 255 interface 100 has no altsetting 0 [ 864.058625][ T5884] usb 5-1: string descriptor 0 read error: -22 [ 864.058763][ T5884] usb 5-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=7b.81 [ 864.058788][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.105421][ T5939] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 864.321592][T13790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 864.385921][ T5939] usb 4-1: Using ep0 maxpacket: 8 [ 864.387979][ T5939] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 864.390611][ T5939] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 864.390642][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.390663][ T5939] usb 4-1: Product: syz [ 864.390678][ T5939] usb 4-1: Manufacturer: syz [ 864.390694][ T5939] usb 4-1: SerialNumber: syz [ 864.455688][T13793] binder: BINDER_SET_CONTEXT_MGR already set [ 864.455700][T13793] binder: 13779:13793 ioctl 4018620d 200000000200 returned -16 [ 864.481514][ T5939] usb 4-1: config 0 descriptor?? [ 864.510871][T13781] binder_alloc: 13779: binder_alloc_buf, no vma [ 864.513902][ T5939] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 864.513957][ T5939] usb 4-1: setting power ON [ 864.513978][ T5939] dvb-usb: bulk message failed: -22 (2/0) [ 864.568623][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 864.571267][ T5939] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 864.571321][ T5939] usb 4-1: media controller created [ 864.621349][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 864.678292][T13793] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 864.683595][ T5939] usb 4-1: selecting invalid altsetting 6 [ 864.683618][ T5939] usb 4-1: digital interface selection failed (-22) [ 864.683635][ T5939] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 864.717560][ T5939] usb 4-1: setting power OFF [ 864.717587][ T5939] dvb-usb: bulk message failed: -22 (2/0) [ 864.717607][ T5939] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 864.717621][ T5939] (NULL device *): no alternate interface [ 864.754706][T13793] bond1 (unregistering): Released all slaves [ 864.790233][ T5939] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 864.807953][ T5939] usb 4-1: USB disconnect, device number 67 [ 864.944783][ T808] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 865.076000][ T808] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 865.213993][ T5939] usb 5-1: USB disconnect, device number 60 [ 865.420392][T13813] Bluetooth: MGMT ver 1.23 [ 865.464756][T13813] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2421'. [ 866.266492][ T5884] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 866.345440][ T5992] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 866.420930][ T5884] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 866.420953][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.420968][ T5884] usb 4-1: Product: syz [ 866.420979][ T5884] usb 4-1: Manufacturer: syz [ 866.420990][ T5884] usb 4-1: SerialNumber: syz [ 866.456511][ T5884] usb 4-1: config 0 descriptor?? [ 866.505324][ T5992] usb 6-1: Using ep0 maxpacket: 32 [ 866.509936][ T5992] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 866.509963][ T5992] usb 6-1: config 0 has no interface number 0 [ 866.510006][ T5992] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 866.510024][ T5992] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 866.510068][ T5992] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 866.510312][ T5992] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 866.510345][ T5992] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 866.514024][ T5992] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 866.514054][ T5992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.514070][ T5992] usb 6-1: Product: syz [ 866.514100][ T5992] usb 6-1: Manufacturer: syz [ 866.514308][ T5992] usb 6-1: SerialNumber: syz [ 866.629953][ T5992] usb 6-1: config 0 descriptor?? [ 866.639030][T13827] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 866.792987][ T5884] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 866.794994][ T5992] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input30 [ 867.086382][ T808] usb 6-1: USB disconnect, device number 16 [ 867.246317][ T5992] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 867.395676][ T5992] usb 5-1: Using ep0 maxpacket: 32 [ 867.399974][ T5992] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.400000][ T5992] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 867.403147][ T5992] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 867.403177][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.403198][ T5992] usb 5-1: Product: syz [ 867.403213][ T5992] usb 5-1: Manufacturer: syz [ 867.403228][ T5992] usb 5-1: SerialNumber: syz [ 867.473999][ T5992] usb 5-1: config 0 descriptor?? [ 867.566066][ T5992] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 867.717279][T13829] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2428'. [ 867.723552][ T68] usb 5-1: Failed to submit usb control message: -71 [ 867.723592][ T68] usb 5-1: unable to send the bmi data to the device: -71 [ 867.723612][ T68] usb 5-1: unable to get target info from device [ 867.723630][ T68] usb 5-1: could not get target info (-71) [ 867.723651][ T68] usb 5-1: could not probe fw (-71) [ 867.724425][ T5939] usb 5-1: USB disconnect, device number 61 [ 868.246320][ T5884] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 868.249701][ T5884] usb 4-1: USB disconnect, device number 68 [ 868.275498][ T5940] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 868.278619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.278648][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.285724][T13841] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2432'. [ 868.437638][ T5940] usb 6-1: Using ep0 maxpacket: 8 [ 868.439899][ T5940] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 868.443221][ T5940] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 868.443249][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.443278][ T5940] usb 6-1: Product: syz [ 868.443295][ T5940] usb 6-1: Manufacturer: syz [ 868.443310][ T5940] usb 6-1: SerialNumber: syz [ 868.491366][ T5940] usb 6-1: config 0 descriptor?? [ 868.765592][ T5940] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 868.765648][ T5940] usb 6-1: setting power ON [ 868.765671][ T5940] dvb-usb: bulk message failed: -22 (2/0) [ 869.762283][ T5940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 869.863960][ T5940] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 869.864361][ T5940] usb 6-1: media controller created [ 870.008016][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 870.043640][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.043672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.073304][T13848] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2434'. [ 870.085823][ T5940] usb 6-1: selecting invalid altsetting 6 [ 870.085846][ T5940] usb 6-1: digital interface selection failed (-22) [ 870.085861][ T5940] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 870.086594][ T5940] usb 6-1: setting power OFF [ 870.086609][ T5940] dvb-usb: bulk message failed: -22 (2/0) [ 870.086623][ T5940] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 870.086632][ T5940] (NULL device *): no alternate interface [ 870.126397][ T5884] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 870.136969][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.204895][ T5940] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 870.222142][ T5940] usb 6-1: USB disconnect, device number 17 [ 870.287357][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.287403][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.287428][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 870.287472][ T5884] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 870.287496][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.366171][ T5884] usb 5-1: config 0 descriptor?? [ 872.001298][ T5884] usbhid 5-1:0.0: can't add hid device: -71 [ 872.001423][ T5884] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 872.045651][ T5884] usb 5-1: USB disconnect, device number 62 [ 872.099993][ T808] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 872.265915][ T808] usb 4-1: Using ep0 maxpacket: 8 [ 872.680502][ T808] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 872.680532][ T808] usb 4-1: config 0 has no interface number 1 [ 872.680591][ T808] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 872.680633][ T808] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 872.724245][ T808] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 872.724278][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.724301][ T808] usb 4-1: Product: syz [ 872.724317][ T808] usb 4-1: Manufacturer: syz [ 872.724334][ T808] usb 4-1: SerialNumber: syz [ 872.768286][T13885] FAULT_INJECTION: forcing a failure. [ 872.768286][T13885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.768325][T13885] CPU: 1 UID: 0 PID: 13885 Comm: syz.4.2445 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 872.768357][T13885] Tainted: [L]=SOFTLOCKUP [ 872.768366][T13885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 872.768381][T13885] Call Trace: [ 872.768390][T13885] [ 872.768400][T13885] dump_stack_lvl+0xe8/0x150 [ 872.768459][T13885] should_fail_ex+0x46b/0x600 [ 872.768499][T13885] _copy_to_user+0x31/0xb0 [ 872.768526][T13885] simple_read_from_buffer+0xe1/0x170 [ 872.768561][T13885] proc_fail_nth_read+0x1be/0x230 [ 872.768595][T13885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 872.768629][T13885] ? rw_verify_area+0x2ac/0x4e0 [ 872.768664][T13885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 872.768695][T13885] vfs_read+0x212/0xa80 [ 872.768741][T13885] ? __pfx_vfs_read+0x10/0x10 [ 872.768779][T13885] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 872.768809][T13885] ? lockdep_hardirqs_on+0x7a/0x110 [ 872.768835][T13885] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 872.768863][T13885] ? mutex_lock_nested+0x152/0x1d0 [ 872.768897][T13885] ? fdget_pos+0x252/0x320 [ 872.768938][T13885] ksys_read+0x156/0x270 [ 872.768976][T13885] ? __pfx_ksys_read+0x10/0x10 [ 872.769024][T13885] do_syscall_64+0x14d/0xf80 [ 872.769049][T13885] ? trace_irq_disable+0x3b/0x150 [ 872.769078][T13885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.769102][T13885] ? clear_bhb_loop+0x40/0x90 [ 872.769130][T13885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.769154][T13885] RIP: 0033:0x7f1823c7d04e [ 872.769176][T13885] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 872.769197][T13885] RSP: 002b:00007f1821f15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 872.769229][T13885] RAX: ffffffffffffffda RBX: 00007f1821f166c0 RCX: 00007f1823c7d04e [ 872.769247][T13885] RDX: 000000000000000f RSI: 00007f1821f160a0 RDI: 0000000000000004 [ 872.769262][T13885] RBP: 00007f1821f16090 R08: 0000000000000000 R09: 0000000000000000 [ 872.769277][T13885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.769290][T13885] R13: 00007f1823f36038 R14: 00007f1823f35fa0 R15: 00007ffd4d4f9658 [ 872.769328][T13885] [ 872.828841][ T808] usb 4-1: config 0 descriptor?? [ 873.030119][ T808] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 873.147557][ T808] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 873.212115][ T808] usb 4-1: USB disconnect, device number 69 [ 873.214537][ T808] pvrusb2: Device being rendered inoperable [ 873.242204][ T808] pvrusb2: Device being rendered inoperable [ 873.536824][T13891] syz.4.2446 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 873.746408][T13900] 9p: Bad value for 'rfdno' [ 873.795464][ T808] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 873.957635][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 873.962127][ T808] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 873.962156][ T808] usb 5-1: config 0 has no interface number 0 [ 873.962201][ T808] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 873.962228][ T808] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 873.962258][ T808] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 873.962284][ T808] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 873.962311][ T808] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 873.965362][ T5940] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 873.979600][ T808] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 873.979706][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.979764][ T808] usb 5-1: Product: syz [ 873.979780][ T808] usb 5-1: Manufacturer: syz [ 873.979804][ T808] usb 5-1: SerialNumber: syz [ 874.084934][ T808] usb 5-1: config 0 descriptor?? [ 874.135407][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 874.138297][ T5940] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 874.141829][ T5940] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 874.141876][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.141920][ T5940] usb 3-1: Product: syz [ 874.141968][ T5940] usb 3-1: Manufacturer: syz [ 874.142004][ T5940] usb 3-1: SerialNumber: syz [ 874.195792][ T5940] usb 3-1: config 0 descriptor?? [ 874.201626][ T5940] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 874.201680][ T5940] usb 3-1: setting power ON [ 874.201700][ T5940] dvb-usb: bulk message failed: -22 (2/0) [ 874.235941][ T5940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 874.236879][ T5940] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 874.236939][ T5940] usb 3-1: media controller created [ 874.278912][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 874.327619][ T5940] usb 3-1: selecting invalid altsetting 6 [ 874.327643][ T5940] usb 3-1: digital interface selection failed (-22) [ 874.327658][ T5940] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 874.328495][ T5940] usb 3-1: setting power OFF [ 874.328516][ T5940] dvb-usb: bulk message failed: -22 (2/0) [ 874.328533][ T5940] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 874.328548][ T5940] (NULL device *): no alternate interface [ 874.406963][T13901] dvb-usb: bulk message failed: -22 (3/0) [ 874.462465][ T5940] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 874.462516][ T808] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 874.510715][ T5940] usb 3-1: USB disconnect, device number 62 [ 875.304877][ T5940] usb 5-1: USB disconnect, device number 63 [ 875.567458][T13916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2455'. [ 876.098658][ T5940] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 877.138523][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 877.138561][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.138584][ T5940] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 877.138627][ T5940] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 877.138649][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.237537][ T5940] usb 6-1: config 0 descriptor?? [ 877.449953][T13928] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2461'. [ 877.661273][ T5940] magicmouse 0003:05AC:0265.0014: unknown main item tag 0x0 [ 877.661312][ T5940] magicmouse 0003:05AC:0265.0014: unknown main item tag 0x0 [ 877.661339][ T5940] magicmouse 0003:05AC:0265.0014: unknown main item tag 0x0 [ 877.661364][ T5940] magicmouse 0003:05AC:0265.0014: unknown main item tag 0x0 [ 877.661390][ T5940] magicmouse 0003:05AC:0265.0014: unknown main item tag 0x0 [ 877.661415][ T5940] magicmouse 0003:05AC:0265.0014: unknown main item tag 0x0 [ 877.661441][ T5940] magicmouse 0003:05AC:0265.0014: unknown main item tag 0x0 [ 877.661466][ T5940] magicmouse 0003:05AC:0265.0014: unknown main item tag 0x0 [ 877.661492][ T5940] magicmouse 0003:05AC:0265.0014: unknown main item tag 0x0 [ 877.661517][ T5940] magicmouse 0003:05AC:0265.0014: unknown main item tag 0x0 [ 877.761534][ T5940] magicmouse 0003:05AC:0265.0014: hidraw0: USB HID v0.03 Device [HID 05ac:0265] on usb-dummy_hcd.5-1/input0 [ 877.854733][T13921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.856669][T13921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.989821][T13952] exfat: Deprecated parameter 'debug' [ 877.990524][T13952] exFAT-fs (nullb0): invalid boot record signature [ 877.990538][T13952] exFAT-fs (nullb0): failed to read boot sector [ 877.990548][T13952] exFAT-fs (nullb0): failed to recognize exfat type [ 878.261034][ T5799] usb 6-1: USB disconnect, device number 18 [ 878.775461][ T808] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 878.794345][T13961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2470'. [ 878.935493][ T808] usb 3-1: Using ep0 maxpacket: 16 [ 878.937900][T13964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2470'. [ 878.938191][T13964] nbd: nbd64 already in use [ 878.941151][ T808] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.941253][ T808] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 878.943496][ T808] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 878.943516][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.943531][ T808] usb 3-1: Product: syz [ 878.943541][ T808] usb 3-1: Manufacturer: syz [ 878.943552][ T808] usb 3-1: SerialNumber: syz [ 879.025370][ T5799] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 879.180430][ T808] usb 3-1: 0:2 : does not exist [ 879.180518][ T808] usb 3-1: unit 6 not found! [ 879.185334][ T5799] usb 6-1: Using ep0 maxpacket: 8 [ 879.204408][ T5799] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 879.215372][ T5799] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 879.215402][ T5799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.215423][ T5799] usb 6-1: Product: syz [ 879.215439][ T5799] usb 6-1: Manufacturer: syz [ 879.215455][ T5799] usb 6-1: SerialNumber: syz [ 879.290206][ T5799] usb 6-1: config 0 descriptor?? [ 879.306512][ T5799] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 879.306559][ T5799] usb 6-1: setting power ON [ 879.306574][ T5799] dvb-usb: bulk message failed: -22 (2/0) [ 879.328976][ T5799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 879.361303][ T5799] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 879.361346][ T5799] usb 6-1: media controller created [ 879.443524][ T6932] udevd[6932]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 879.468155][ T5799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 879.520027][T13957] dvb-usb: bulk message failed: -22 (3/0) [ 879.559118][ T808] usb 3-1: USB disconnect, device number 63 [ 879.594728][ T5799] usb 6-1: selecting invalid altsetting 6 [ 879.594753][ T5799] usb 6-1: digital interface selection failed (-22) [ 879.594771][ T5799] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 879.601574][ T5799] usb 6-1: setting power OFF [ 879.601640][ T5799] dvb-usb: bulk message failed: -22 (2/0) [ 879.601709][ T5799] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 879.601731][ T5799] (NULL device *): no alternate interface [ 879.698070][ T6207] udevd[6207]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 880.004192][T13977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 881.528803][ T5799] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 881.533963][ T5799] usb 6-1: USB disconnect, device number 19 [ 881.775416][ T808] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 881.920128][ T31] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 881.985337][ T5799] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 881.985500][ T808] usb 3-1: device descriptor read/64, error -71 [ 882.036164][ T5805] Bluetooth: hci3: link tx timeout [ 882.036526][ T5805] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 882.127828][ T31] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 882.127867][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 882.127903][ T31] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 882.127928][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.134526][ T31] usb 4-1: config 0 descriptor?? [ 882.140160][T13989] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 882.167417][ T5799] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 882.167524][ T5799] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.167581][ T5799] usb 6-1: config 0 has no interface number 0 [ 882.167733][ T5799] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 882.167807][ T5799] usb 6-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 882.217547][ T5799] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 882.217649][ T5799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.217713][ T5799] usb 6-1: Product: syz [ 882.217756][ T5799] usb 6-1: Manufacturer: syz [ 882.217817][ T5799] usb 6-1: SerialNumber: syz [ 882.225400][ T808] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 882.313143][ T5799] usb 6-1: config 0 descriptor?? [ 882.375419][ T808] usb 3-1: device descriptor read/64, error -71 [ 882.486134][ T808] usb usb3-port1: attempt power cycle [ 882.588243][T11963] usb 6-1: USB disconnect, device number 20 [ 882.661762][ T31] creative-sb0540 0003:041E:3100.0015: hidraw0: USB HID v7f.fd Device [HID 041e:3100] on usb-dummy_hcd.3-1/input0 [ 882.843735][T11963] usb 4-1: USB disconnect, device number 70 [ 882.847171][ T808] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 882.883511][ T808] usb 3-1: device descriptor read/8, error -71 [ 883.145361][ T808] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 883.175225][ T808] usb 3-1: device descriptor read/8, error -71 [ 883.285710][ T808] usb usb3-port1: unable to enumerate USB device [ 883.712043][T14011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2481'. [ 883.725955][ T5884] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 884.275429][ T5114] Bluetooth: hci3: command 0x0406 tx timeout [ 884.350651][T14013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2484'. [ 884.435367][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 884.437987][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 884.438020][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 884.441224][ T5884] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 884.441254][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.441277][ T5884] usb 5-1: Product: syz [ 884.441294][ T5884] usb 5-1: Manufacturer: syz [ 884.441310][ T5884] usb 5-1: SerialNumber: syz [ 884.510300][ T5884] usb 5-1: config 0 descriptor?? [ 884.532047][ T5884] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 884.532082][ T5884] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 884.757342][T14013] ------------[ cut here ]------------ [ 884.757359][T14013] !rwb [ 884.757374][T14013] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x18a/0x220, CPU#0: syz.3.2484/14013 [ 884.757427][T14013] Modules linked in: [ 884.757451][T14013] CPU: 0 UID: 0 PID: 14013 Comm: syz.3.2484 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 884.757483][T14013] Tainted: [L]=SOFTLOCKUP [ 884.757491][T14013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 884.757506][T14013] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 884.757533][T14013] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 cd 98 33 fd eb 18 e8 c6 98 33 fd eb 0d e8 bf 98 33 fd 4c 89 ff e8 57 da 8d fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 884.757552][T14013] RSP: 0018:ffffc900042fee50 EFLAGS: 00010286 [ 884.757572][T14013] RAX: 51dbac9f528ceb00 RBX: 1ffff1100700e504 RCX: 0000000000000046 [ 884.757588][T14013] RDX: 0000000000000006 RSI: ffffffff8d565fee RDI: ffffffff8ba67a80 [ 884.757604][T14013] RBP: dffffc0000000000 R08: ffffffff8f6a78b7 R09: 1ffffffff1ed4f16 [ 884.757622][T14013] R10: dffffc0000000000 R11: fffffbfff1ed4f17 R12: ffff888038072820 [ 884.757639][T14013] R13: 0000000000000000 R14: ffff8880616d4000 R15: ffff888038072800 [ 884.757655][T14013] FS: 00007f131d70c6c0(0000) GS:ffff888126332000(0000) knlGS:0000000000000000 [ 884.757674][T14013] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 884.757689][T14013] CR2: 0000001b2f214ff8 CR3: 000000005fb76000 CR4: 00000000003526f0 [ 884.757708][T14013] Call Trace: [ 884.757718][T14013] [ 884.757738][T14013] blk_register_queue+0x382/0x430 [ 884.757770][T14013] __add_disk+0x677/0xd50 [ 884.757805][T14013] add_disk_fwnode+0xfb/0x480 [ 884.757834][T14013] nbd_dev_add+0x72c/0xb50 [ 884.757853][T14013] ? do_raw_spin_lock+0x12b/0x2f0 [ 884.757879][T14013] ? __pfx_nbd_dev_add+0x10/0x10 [ 884.757922][T14013] nbd_genl_connect+0x965/0x1c80 [ 884.757942][T14013] ? __pfx___nla_validate_parse+0x10/0x10 [ 884.757974][T14013] ? __pfx_nbd_genl_connect+0x10/0x10 [ 884.757997][T14013] ? rcu_is_watching+0x15/0xb0 [ 884.758016][T14013] ? trace_kmalloc+0x2a/0x110 [ 884.758046][T14013] ? __nla_parse+0x40/0x60 [ 884.758074][T14013] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 884.758101][T14013] genl_family_rcv_msg_doit+0x22a/0x330 [ 884.758126][T14013] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 884.758155][T14013] ? lockdep_hardirqs_on+0x7a/0x110 [ 884.758175][T14013] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 884.758201][T14013] genl_rcv_msg+0x61c/0x7a0 [ 884.758225][T14013] ? __pfx_genl_rcv_msg+0x10/0x10 [ 884.758243][T14013] ? __pfx_nbd_genl_connect+0x10/0x10 [ 884.758264][T14013] ? __pfx_ref_tracker_free+0x10/0x10 [ 884.758302][T14013] netlink_rcv_skb+0x232/0x4b0 [ 884.758328][T14013] ? __pfx_genl_rcv_msg+0x10/0x10 [ 884.758348][T14013] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 884.758384][T14013] ? netlink_deliver_tap+0x2e/0x1b0 [ 884.758409][T14013] ? netlink_deliver_tap+0x2e/0x1b0 [ 884.758447][T14013] genl_rcv+0x28/0x40 [ 884.758465][T14013] netlink_unicast+0x831/0x9f0 [ 884.758494][T14013] ? __pfx_netlink_unicast+0x10/0x10 [ 884.758518][T14013] ? netlink_sendmsg+0x650/0xb40 [ 884.758542][T14013] ? skb_put+0x11b/0x210 [ 884.758562][T14013] netlink_sendmsg+0x813/0xb40 [ 884.758594][T14013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 884.758626][T14013] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 884.758654][T14013] ____sys_sendmsg+0x94c/0x9c0 [ 884.758677][T14013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 884.758704][T14013] ? import_iovec+0x73/0xa0 [ 884.758722][T14013] ___sys_sendmsg+0x2a5/0x360 [ 884.758746][T14013] ? __pfx____sys_sendmsg+0x10/0x10 [ 884.758771][T14013] ? futex_wait+0x29a/0x380 [ 884.758811][T14013] ? __fget_files+0x2a/0x420 [ 884.758832][T14013] ? __fget_files+0x3a6/0x420 [ 884.758861][T14013] __x64_sys_sendmsg+0x1c3/0x2a0 [ 884.758883][T14013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 884.758920][T14013] ? rcu_is_watching+0x15/0xb0 [ 884.758948][T14013] do_syscall_64+0x14d/0xf80 [ 884.758967][T14013] ? trace_irq_disable+0x3b/0x150 [ 884.758987][T14013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.759023][T14013] ? clear_bhb_loop+0x40/0x90 [ 884.759044][T14013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.759061][T14013] RIP: 0033:0x7f131f4fc819 [ 884.759077][T14013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.759091][T14013] RSP: 002b:00007f131d70c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 884.759108][T14013] RAX: ffffffffffffffda RBX: 00007f131f776180 RCX: 00007f131f4fc819 [ 884.759121][T14013] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000004 [ 884.759132][T14013] RBP: 00007f131f592c91 R08: 0000000000000000 R09: 0000000000000000 [ 884.759143][T14013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.759153][T14013] R13: 00007f131f776218 R14: 00007f131f776180 R15: 00007ffe66383548 [ 884.759179][T14013] [ 884.759194][T14013] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 884.759209][T14013] CPU: 0 UID: 0 PID: 14013 Comm: syz.3.2484 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 884.759232][T14013] Tainted: [L]=SOFTLOCKUP [ 884.759238][T14013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 884.759248][T14013] Call Trace: [ 884.759256][T14013] [ 884.759263][T14013] vpanic+0x56c/0xa60 [ 884.759290][T14013] ? __pfx__printk+0x10/0x10 [ 884.759308][T14013] ? __pfx_vpanic+0x10/0x10 [ 884.759332][T14013] ? is_bpf_text_address+0x292/0x2b0 [ 884.759357][T14013] ? is_bpf_text_address+0x26/0x2b0 [ 884.759388][T14013] panic+0xc5/0xd0 [ 884.759413][T14013] ? __pfx_panic+0x10/0x10 [ 884.759468][T14013] __warn+0x315/0x4f0 [ 884.759492][T14013] ? wbt_init_enable_default+0x18a/0x220 [ 884.759512][T14013] ? wbt_init_enable_default+0x18a/0x220 [ 884.759532][T14013] __report_bug+0x29a/0x540 [ 884.759549][T14013] ? netlink_rcv_skb+0x232/0x4b0 [ 884.759573][T14013] ? genl_rcv+0x28/0x40 [ 884.759590][T14013] ? netlink_unicast+0x831/0x9f0 [ 884.759616][T14013] ? wbt_init_enable_default+0x18a/0x220 [ 884.759635][T14013] ? __pfx___report_bug+0x10/0x10 [ 884.759666][T14013] ? wbt_init_enable_default+0x18a/0x220 [ 884.759684][T14013] report_bug+0x16a/0x220 [ 884.759703][T14013] ? wbt_init_enable_default+0x18a/0x220 [ 884.759720][T14013] ? wbt_init_enable_default+0x18c/0x220 [ 884.759738][T14013] handle_bug+0x9c/0x200 [ 884.759761][T14013] exc_invalid_op+0x1a/0x50 [ 884.759783][T14013] asm_exc_invalid_op+0x1a/0x20 [ 884.759799][T14013] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 884.759817][T14013] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 cd 98 33 fd eb 18 e8 c6 98 33 fd eb 0d e8 bf 98 33 fd 4c 89 ff e8 57 da 8d fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 884.759832][T14013] RSP: 0018:ffffc900042fee50 EFLAGS: 00010286 [ 884.759846][T14013] RAX: 51dbac9f528ceb00 RBX: 1ffff1100700e504 RCX: 0000000000000046 [ 884.759858][T14013] RDX: 0000000000000006 RSI: ffffffff8d565fee RDI: ffffffff8ba67a80 [ 884.759870][T14013] RBP: dffffc0000000000 R08: ffffffff8f6a78b7 R09: 1ffffffff1ed4f16 [ 884.759884][T14013] R10: dffffc0000000000 R11: fffffbfff1ed4f17 R12: ffff888038072820 [ 884.759896][T14013] R13: 0000000000000000 R14: ffff8880616d4000 R15: ffff888038072800 [ 884.759925][T14013] blk_register_queue+0x382/0x430 [ 884.759957][T14013] __add_disk+0x677/0xd50 [ 884.759991][T14013] add_disk_fwnode+0xfb/0x480 [ 884.760022][T14013] nbd_dev_add+0x72c/0xb50 [ 884.760041][T14013] ? do_raw_spin_lock+0x12b/0x2f0 [ 884.760067][T14013] ? __pfx_nbd_dev_add+0x10/0x10 [ 884.760110][T14013] nbd_genl_connect+0x965/0x1c80 [ 884.760130][T14013] ? __pfx___nla_validate_parse+0x10/0x10 [ 884.760162][T14013] ? __pfx_nbd_genl_connect+0x10/0x10 [ 884.760187][T14013] ? rcu_is_watching+0x15/0xb0 [ 884.760206][T14013] ? trace_kmalloc+0x2a/0x110 [ 884.760250][T14013] ? __nla_parse+0x40/0x60 [ 884.760277][T14013] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 884.760303][T14013] genl_family_rcv_msg_doit+0x22a/0x330 [ 884.760328][T14013] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 884.760356][T14013] ? lockdep_hardirqs_on+0x7a/0x110 [ 884.760374][T14013] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 884.760398][T14013] genl_rcv_msg+0x61c/0x7a0 [ 884.760447][T14013] ? __pfx_genl_rcv_msg+0x10/0x10 [ 884.760466][T14013] ? __pfx_nbd_genl_connect+0x10/0x10 [ 884.760488][T14013] ? __pfx_ref_tracker_free+0x10/0x10 [ 884.760518][T14013] netlink_rcv_skb+0x232/0x4b0 [ 884.760559][T14013] ? __pfx_genl_rcv_msg+0x10/0x10 [ 884.760581][T14013] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 884.760630][T14013] ? netlink_deliver_tap+0x2e/0x1b0 [ 884.760654][T14013] ? netlink_deliver_tap+0x2e/0x1b0 [ 884.760682][T14013] genl_rcv+0x28/0x40 [ 884.760699][T14013] netlink_unicast+0x831/0x9f0 [ 884.760728][T14013] ? __pfx_netlink_unicast+0x10/0x10 [ 884.760753][T14013] ? netlink_sendmsg+0x650/0xb40 [ 884.760777][T14013] ? skb_put+0x11b/0x210 [ 884.760796][T14013] netlink_sendmsg+0x813/0xb40 [ 884.760829][T14013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 884.760860][T14013] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 884.760887][T14013] ____sys_sendmsg+0x94c/0x9c0 [ 884.760911][T14013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 884.760937][T14013] ? import_iovec+0x73/0xa0 [ 884.760955][T14013] ___sys_sendmsg+0x2a5/0x360 [ 884.760978][T14013] ? __pfx____sys_sendmsg+0x10/0x10 [ 884.761003][T14013] ? futex_wait+0x29a/0x380 [ 884.761042][T14013] ? __fget_files+0x2a/0x420 [ 884.761063][T14013] ? __fget_files+0x3a6/0x420 [ 884.761092][T14013] __x64_sys_sendmsg+0x1c3/0x2a0 [ 884.761113][T14013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 884.761139][T14013] ? rcu_is_watching+0x15/0xb0 [ 884.761167][T14013] do_syscall_64+0x14d/0xf80 [ 884.761185][T14013] ? trace_irq_disable+0x3b/0x150 [ 884.761204][T14013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.761221][T14013] ? clear_bhb_loop+0x40/0x90 [ 884.761241][T14013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.761257][T14013] RIP: 0033:0x7f131f4fc819 [ 884.761271][T14013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.761285][T14013] RSP: 002b:00007f131d70c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 884.761300][T14013] RAX: ffffffffffffffda RBX: 00007f131f776180 RCX: 00007f131f4fc819 [ 884.761312][T14013] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000004 [ 884.761323][T14013] RBP: 00007f131f592c91 R08: 0000000000000000 R09: 0000000000000000 [ 884.761333][T14013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.761343][T14013] R13: 00007f131f776218 R14: 00007f131f776180 R15: 00007ffe66383548 [ 884.761368][T14013] [ 884.761992][T14013] Kernel Offset: disabled