last executing test programs: 14.589324484s ago: executing program 2 (id=3234): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x1, 0x8, 0x9, 0x9, 0x33, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x7, 0x2, 0x9, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff327, 0xfffffff7, 0x4c4, 0x400, 0x7d, 0x10000, 0x7, 0x4, 0x9, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x6, 0x0, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x2], [0x4, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0xffffffff], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x800, 0x7, 0x5, 0x1, 0x7, 0x7, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x7, 0xd, 0x400]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) r1 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f00006af000/0x2000)=nil, 0x4000) (async) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x5a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) getresgid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = getgid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000002480)={{0x1, r2, r3, r4, r5, 0x110, 0x7}, 0xfffffffe, 0x4, 0x3, 0xffffffffffff52e9, 0x0, 0x0, 0x7}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, r2, &(0x7f0000000240)={0xc, 0x100, 0x80, 0xd8d7, 0x1, 0x1, 0xbcf, 0x0, 0x4}) (async) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000001c0)={0x2, 0x80000, r0}) setsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000000200)={@remote}, 0x14) (async) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6, 0x101}, 0xfffffffd, [0x8, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x3, 0x1, 0x0, 0x80, 0x80001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x90, 0x801, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x0, 0x8, 0x0, 0x0, 0xfffffff9, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xffff1e06, 0x3], [0xfffffffd, 0x3, 0x6, 0x6, 0x0, 0x2, 0x3, 0xff, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0xffffffff, 0xfff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffa, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffff7fff, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfd5], [0x0, 0xffffff81, 0x0, 0xd1, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x3, 0x7, 0x4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x3, 0x8000000, 0x4, 0x0, 0x0, 0x99, 0xfffffffd, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x836, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x4a92, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x3, 0xfffffffe, 0x0, 0x5, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb3, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) (async) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) (async) r7 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r7, 0xc0186e86, &(0x7f0000000180)={&(0x7f00000000c0)=[{0x2, 0x10, 0x6, 0xbafe}, {0x0, 0x5, 0x7, 0x80000000000}, {0x5, 0xffff, 0x0, 0x8000000000000001}, {0x3, 0xfff, 0x3, 0x6}, {0x8000fff, 0x1, 0x0, 0x7fffffff}, {0x5f6, 0xff, 0x7f, 0x8}], 0x6, 0x20, 0x1, 0x40000000004}) (async) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000005c00), 0x800, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) (async) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r10 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r10, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$UI_SET_LEDBIT(r8, 0x40045569, 0xe) (async) ioctl$UI_SET_SNDBIT(r8, 0x4004556a, 0x40000000005) (async) r11 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000002500)=ANY=[@ANYBLOB="12011003000000082518a8a4400001e4ee010902240001373fd14bd857220106d0020904000f02070102040905010240b5e6cc6c87c9f5e82d8234f400030c7f09058202100003b0f1"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r11) 12.926823462s ago: executing program 2 (id=3237): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x34, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x298087f6, 0x8, 0x0, 0x0}}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.90635571s ago: executing program 3 (id=3238): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40), 0x0, 0x20000044) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x2, @private0, 0x7}, 0x1c, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x800) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = syz_open_dev$usbmon(0x0, 0x7, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r3, 0x1e67e000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'veth1_vlan\x00', 0x8000}) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) accept4(r2, 0x0, 0x0, 0x800) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) 12.809520591s ago: executing program 3 (id=3239): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc1}, 0x20040000) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x57) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x28081, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r3], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = syz_clone3(&(0x7f0000000900)={0x221000100, &(0x7f00000003c0)=0xffffffffffffffff, 0x0, 0x0, {0x38}, 0x0, 0xfffffffffffffde3, 0x0, 0x0, 0x0, {r3}}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}]) r9 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYRES32=r0, @ANYRESOCT=r6]) syz_usb_control_io$uac1(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d146e0d149c83b950deacd"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200099ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r12, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) read$FUSE(r4, &(0x7f00000027c0)={0x2020}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 12.093458951s ago: executing program 1 (id=3241): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) tee(r1, r1, 0x7fffffffffffffff, 0x9) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r2, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e1a, 0x83, @loopback, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0x2}}], 0x18}, 0x60008000) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10000004}], 0x1, 0x0) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000200)=""/26, 0x20}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r5 = userfaultfd(0x80001) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x501}) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r6, &(0x7f0000019080)=""/102371, 0xffffffffffffffa6, 0x1000200) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read$FUSE(r7, &(0x7f0000005400)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000ab2000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f0000000240)="0f06baf80c66b8ed87d38866efbafc0cb000ee66b8d39000000f23c00f21f86635030002000f23f80f01cf717e0f01c4ba4100b0dfee66b9800000c00f326635001000000f3066b9e70200000f32ba2100ec", 0x52}], 0x1, 0x60, &(0x7f0000000380)=[@cr0={0x0, 0x40002}, @cstype0={0x4, 0xa}], 0x2) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.001415623s ago: executing program 0 (id=3242): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="0a24bfc4c7", 0x5}, {&(0x7f0000000240)="9356", 0x2}], 0x2, 0x0, 0xe8}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a40)="810ab2696d99df6be1b35e13443c71afb1d206b6d7eddbef5a3ca9a44670fd5186c928760523708893ddd6b3e396c4688bba503cffcfed39f1f1cd0058dc992812d7b05cb57b4096686044163079fa4d9da877d874631087f2a586ad6f8828a935c6027f829fd0ffbfe65d2522c33ed4d415a537b52be75c9b98103b252841882c746777c32919115e170fd52353d4740302966af4c5adbd3551da6fbc570cef2dc934599da71faf872d897c880a54ea7100234361949e36538afe7cbd3b86582c24d3", 0xc3}, {&(0x7f0000000b40)="db37a94abda3124bb1249c6f4c737599d78f34b358d9b60f925089a81fc45a121c8729f28504967c64b2bc66f9dae64300cf093bab31d6773b4d82704ef33ad8ba48b00876374fb122bef86686184828aced62ab8bc30878d905b94f26fb35b564456285193e2df1ccb84a5dd5d44b86e1d37e6c8790eb3dddd182e10dcd2bdb751490e1793fc2810683ba691e09b6a5f94fa528e81139e9574780b30f443ca0441aaf69a9758f5e7742f48b306ec74370e7b5e5d9e4a11af1748fff16e08a1aefba", 0xc2}, {&(0x7f0000000c40)="3fab48b11850ec5043829e060033e36b539bd7c1a5f2af28f39ccf2340fbea47cecd56bb79b0abdedc0607c1ba543590d87f28", 0x33}], 0x3}}], 0x2, 0x20040000) 11.881240256s ago: executing program 0 (id=3243): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40), 0x0, 0x20000044) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x2, @private0, 0x7}, 0x1c, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x800) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = syz_open_dev$usbmon(0x0, 0x7, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r3, 0x1e67e000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'veth1_vlan\x00', 0x8000}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="31032cbd7000fb025d250b00000000000000", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) accept4(r2, 0x0, 0x0, 0x800) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) 11.817023054s ago: executing program 0 (id=3244): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x21, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xe, 0x0, &(0x7f0000000240)="e46647c9d9b8e9a2f2bb70da5800", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1100, 0x3a, 0x1000, 0x3a, 0x7ff, 0x9, 0x4}, 0x1c) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000006000000040000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x5097, 0x8, 0xfffffffe, 0xdc}) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) close_range(r3, 0xffffffffffffffff, 0x0) 11.403984061s ago: executing program 4 (id=3245): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="05000000", @ANYRES16, @ANYBLOB="01002cbd70020500000005000000080009000200000008000b0004"], 0x24}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x4008850) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000980)={0x0, @local, @local}, &(0x7f00000009c0)=0xc) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x109000, 0x800, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bind$xdp(0xffffffffffffffff, &(0x7f00000004c0)={0x2c, 0x5, r2, 0x2a, r0}, 0xfffffffffffffcdb) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000c80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a40)={0x17c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af", 0x7) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 11.386789779s ago: executing program 1 (id=3246): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf4", 0x72}, {0x0}, {0x0}, {&(0x7f0000000780)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x30}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x30}, 0x2) r2 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) unlink(&(0x7f00000030c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000259", @ANYRES16=0x0, @ANYBLOB="31032cbd7000fbdbdf250b00000008000300", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = semget(0x1, 0x4, 0x39c) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000001400)={{}, 0x0, 0x1f, @inherit={0x68, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000000000000040000000000000007000000000000007e040000000000003a00000000000000fcffffffffffffff0700000020000000000f000000000000ee0a0000000000000502000000000000020000000000000004000000000000000400000000000000"]}, @devid}) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000100000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100c8030000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11.329852382s ago: executing program 2 (id=3247): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r0, 0x0, 0x60008000) 11.2473628s ago: executing program 2 (id=3248): pipe(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000022a700000000"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000001, 0x5, 0x4, 0x9}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x2000000000000010, &(0x7f0000000440)=ANY=[@ANYBLOB="414df3bcd9ed2e54f6e7bd82597e63301a19289cab23742f5833", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getuid() r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x3, 0x40) syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10.213775223s ago: executing program 1 (id=3249): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40), 0x0, 0x20000044) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x2, @private0, 0x7}, 0x1c, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x800) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = syz_open_dev$usbmon(0x0, 0x7, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r3, 0x1e67e000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'veth1_vlan\x00', 0x8000}) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) accept4(r2, 0x0, 0x0, 0x800) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) 9.734903691s ago: executing program 0 (id=3250): openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vbi(0x0, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14e56313260608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 8.411599087s ago: executing program 3 (id=3251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r0, 0x6, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x16, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}, "08941805f015"}}}}}}, 0x0) syz_emit_ethernet(0x78, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x6a, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x56, 0x0, @opaque="dff98c8d6b02f029f30930cc593d79e16d2f5ba45ae2ebc9ada87b3df9291090c892e0198c3f759d3e92e8decaae25b9b990f47f8df1c270029d925b2732eecacc9d666932d9b5c5dcd521b858fa"}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000100)={0x2, 0x7fff, 0x3ff, 0x1, 0x14, "57c382a118943a12bf6f26c923c85cc1fd21d4", 0x9, 0x2d}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/436], 0x27c}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x158}}, 0x4000898) dup(r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.303745558s ago: executing program 1 (id=3252): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r2 = dup(r1) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000280)=0x0) r4 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xfffffffffffffdff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0x6) kcmp(0xffffffffffffffff, r3, 0x1, r0, r4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x2, 0x4, 0x208, 0x3a, 0x3, 0x1ff, 0xc33f, 0x100}, &(0x7f00000000c0)=0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000e40), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472612c813d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYBLOB=',access=user,afid=0x0000000000000001,\x00', @ANYRESDEC, @ANYBLOB="ce3f44e8655becad904d0e3cf2da3c92db61f0c635e07903d607e3dc36d8920cea75fdebc979dc861656bd5beb1f698e2dbc3f979cc4732bf8b1f8d7b06be1f743501c1dd1d2e0881da87e40b1025cac4889223f4c09598b315e2185107b0fbb276fcc4880c485400b79670a085dc518a3b171373ef96e25bb239794bcfd770830e1b79422a5872a7c84f050cff90ea6fcf18ecd17a2ab9b5485596e3c6c7c243a57f269e8576bc8d301ef0379c4a0dade3021bade98bded16f15a5569a82ab5f4af3202bf0f0ce98de64aaed56f4571431882ea2051ef96f8a237c765e82ed08c6a53ff1007681dcb85f99bf1c6d3fe37bbc798e3"]) 6.727224791s ago: executing program 3 (id=3253): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="0a24bfc4c7", 0x5}, {&(0x7f0000000240)="9356", 0x2}], 0x2, 0x0, 0xe8}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a40)="810ab2696d99df6be1b35e13443c71afb1d206b6d7eddbef5a3ca9a44670fd5186c928760523708893ddd6b3e396c4688bba503cffcfed39f1f1cd0058dc992812d7b05cb57b4096686044163079fa4d9da877d874631087f2a586ad6f8828a935c6027f829fd0ffbfe65d2522c33ed4d415a537b52be75c9b98103b252841882c746777c32919115e170fd52353d4740302966af4c5adbd3551da6fbc570cef2dc934599da71faf872d897c880a54ea7100234361949e36538afe7cbd3b86582c24d3", 0xc3}, {&(0x7f0000000b40)="db37a94abda3124bb1249c6f4c737599d78f34b358d9b60f925089a81fc45a121c8729f28504967c64b2bc66f9dae64300cf093bab31d6773b4d82704ef33ad8ba48b00876374fb122bef86686184828aced62ab8bc30878d905b94f26fb35b564456285193e2df1ccb84a5dd5d44b86e1d37e6c8790eb3dddd182e10dcd2bdb751490e1793fc2810683ba691e09b6a5f94fa528e81139e9574780b30f443ca0441aaf69a9758f5e7742f48b306ec74370e7b5e5d9e4a11af1748fff16e08a1aefba", 0xc2}, {&(0x7f0000000c40)="3fab48b11850ec5043829e060033e36b539bd7c1a5f2af28f39ccf2340fbea47cecd56bb79b0abdedc0607c1ba543590d87f28", 0x33}], 0x3}}], 0x2, 0x20040000) 6.655357276s ago: executing program 2 (id=3254): pipe(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000022a700000000"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000001, 0x5, 0x4, 0x9}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x2000000000000010, &(0x7f0000000440)=ANY=[@ANYBLOB="414df3bcd9ed2e54f6e7bd82597e63301a19289cab23742f5833", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getuid() r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x3, 0x40) syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) read$usbmon(r6, &(0x7f0000000600)=""/4106, 0x100a) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 6.373942944s ago: executing program 3 (id=3255): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) tee(r1, r1, 0x7fffffffffffffff, 0x9) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="fee7dd3f6bb9dcea5c993ed53bc5cfdd0bc171fdf15e03fa", 0x18) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e1a, 0x83, @loopback, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0x2}}], 0x18}, 0x60008000) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10000004}], 0x1, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000200)=""/26, 0x20}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r4 = userfaultfd(0x80001) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x501}) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, &(0x7f0000019080)=""/102371, 0xffffffffffffffa6, 0x1000200) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read$FUSE(r6, &(0x7f0000005400)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000ab2000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f0000000240)="0f06baf80c66b8ed87d38866efbafc0cb000ee66b8d39000000f23c00f21f86635030002000f23f80f01cf717e0f01c4ba4100b0dfee66b9800000c00f326635001000000f3066b9e70200000f32ba2100ec", 0x52}], 0x1, 0x60, &(0x7f0000000380)=[@cr0={0x0, 0x40002}, @cstype0={0x4, 0xa}], 0x2) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.373240772s ago: executing program 0 (id=3256): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) tee(r1, r1, 0x7fffffffffffffff, 0x9) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="fee7dd3f6bb9dcea5c993ed53bc5cfdd0bc171fdf15e03fa", 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r2, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e1a, 0x83, @loopback, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0x2}}], 0x18}, 0x60008000) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10000004}], 0x1, 0x0) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000200)=""/26, 0x20}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r5 = userfaultfd(0x80001) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x501}) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r6, &(0x7f0000019080)=""/102371, 0xffffffffffffffa6, 0x1000200) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read$FUSE(r7, &(0x7f0000005400)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000ab2000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f0000000240)="0f06baf80c66b8ed87d38866efbafc0cb000ee66b8d39000000f23c00f21f86635030002000f23f80f01cf717e0f01c4ba4100b0dfee66b9800000c00f326635001000000f3066b9e70200000f32ba2100ec", 0x52}], 0x1, 0x60, &(0x7f0000000380)=[@cr0={0x0, 0x40002}, @cstype0={0x4, 0xa}], 0x2) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.283438595s ago: executing program 4 (id=3257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xdc, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPRESSIONS={0x98, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}, {0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xa6}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xbe}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xa9}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x184}}, 0x0) 1.858614227s ago: executing program 1 (id=3258): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r0, 0x0, 0x60008000) 1.794617358s ago: executing program 3 (id=3259): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf4", 0x72}, {0x0}, {0x0}, {&(0x7f0000000780)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x30}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x30}, 0x2) r2 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) unlink(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000259", @ANYRES16=0x0, @ANYBLOB="31032cbd7000fbdbdf250b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = semget(0x1, 0x4, 0x39c) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000001400)={{}, 0x0, 0x1f, @inherit={0x68, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000000000000040000000000000007000000000000007e040000000000003a00000000000000fcffffffffffffff0700000020000000000f000000000000ee0a0000000000000502000000000000020000000000000004000000000000000400000000000000"]}, @devid}) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000100000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100c8030000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.791616567s ago: executing program 2 (id=3260): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x21, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xe, 0x0, &(0x7f0000000240)="e46647c9d9b8e9a2f2bb70da5800", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1100, 0x3a, 0x1000, 0x3a, 0x7ff, 0x9, 0x4}, 0x1c) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000006000000040000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x5097, 0x8, 0xfffffffe, 0xdc}) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) close_range(r3, 0xffffffffffffffff, 0x0) 1.789024508s ago: executing program 0 (id=3261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc1}, 0x20040000) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x57) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x28081, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r3], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = syz_clone3(&(0x7f0000000900)={0x221000100, &(0x7f00000003c0)=0xffffffffffffffff, 0x0, 0x0, {0x38}, 0x0, 0xfffffffffffffde3, 0x0, 0x0, 0x0, {r3}}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) r8 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYRES32=r0, @ANYRESOCT=r5]) syz_usb_control_io$uac1(r2, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d146e0d149c83b950deacd"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200099ec}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.76584062s ago: executing program 4 (id=3262): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40), 0x0, 0x20000044) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x2, @private0, 0x7}, 0x1c, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x800) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = syz_open_dev$usbmon(0x0, 0x7, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r3, 0x1e67e000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'veth1_vlan\x00', 0x8000}) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) accept4(r2, 0x0, 0x0, 0x800) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) 1.51322714s ago: executing program 1 (id=3263): pipe(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000022a700000000"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000001, 0x5, 0x4, 0x9}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x2000000000000010, &(0x7f0000000440)=ANY=[@ANYBLOB="414df3bcd9ed2e54f6e7bd82597e63301a19289cab23742f5833", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getuid() r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x3, 0x40) syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) read$usbmon(r6, &(0x7f0000000600)=""/4106, 0x100a) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.402330846s ago: executing program 4 (id=3264): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="00032300000023a6806882a8c938d25939e0f85096ff31ed97bd640000000000000800000000000000"], 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7f}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x200, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a2320c7ffc6b506e6e3c7f8bd478c56beb9520ea32612337688c4905af416fe75be77c3f12e55f3f657129e6daf6844369cf70c947ab82e778a4263f9b75692d4e5c905bb9119b28241e191e54e38a5357ad888c9cd225dae2276839bfcc7dc87c05ba539e435888d6677bd00"/169, 0xa9}, {&(0x7f0000000440)}, {&(0x7f0000000680)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb923cac1c51270bf577cf4c79ba54a6c45a345cc13208fa430c1e54548e5a9c5cf45337451511abc0a7d3539ac22191025d5655a5d05c4024b8cb0fb4", 0xa5}, {&(0x7f0000000000)="3c969cd7b866d505f85d73a8b10fc685fb80f638aaee3c68edec508be1058a40d70e2c8feb6b5ec774b4765021967802b5c9c8341bbfdfdcfe5b", 0x3a}, {&(0x7f0000000040)="9fbe47e87659f69fddd8e97246", 0xd}, {&(0x7f0000000840)="8073a172cdcea0e349825ca6d6a3b5baff7fe3d2cda4f1fee29cba299ce0ac3eb3cae11777fe6ca858342fec34a69e840cf8ce62923dd08a467e44f86148c5e9f86ac9031ead08ec1ec561c0454ed0ba66d22d72b4d447a80143337f816714da3b95376f6986d4c14e3f7f12ff5d9585b7e18361f3572763653752b1d5b56eb6c4425b9c9a60555bcb1944616d74030dbd1fe9d49c34e7edab7b5691531b9f8e4d8e7559121a12a5cdd784c9850d079f1361b4eb8c33fd897e", 0xb9}], 0x6, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582"], 0x0) 74.088613ms ago: executing program 4 (id=3265): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="0a24bfc4c7", 0x5}, {&(0x7f0000000240)="9356", 0x2}], 0x2, &(0x7f0000000880)=ANY=[], 0xe8}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a40)="810ab2696d99df6be1b35e13443c71afb1d206b6d7eddbef5a3ca9a44670fd5186c928760523708893ddd6b3e396c4688bba503cffcfed39f1f1cd0058dc992812d7b05cb57b4096686044163079fa4d9da877d874631087f2a586ad6f8828a935c6027f829fd0ffbfe65d2522c33ed4d415a537b52be75c9b98103b252841882c746777c32919115e170fd52353d4740302966af4c5adbd3551da6fbc570cef2dc934599da71faf872d897c880a54ea7100234361949e36538afe7cbd3b86582c24d3", 0xc3}, {&(0x7f0000000b40)="db37a94abda3124bb1249c6f4c737599d78f34b358d9b60f925089a81fc45a121c8729f28504967c64b2bc66f9dae64300cf093bab31d6773b4d82704ef33ad8ba48b00876374fb122bef86686184828aced62ab8bc30878d905b94f26fb35b564456285193e2df1ccb84a5dd5d44b86e1d37e6c8790eb3dddd182e10dcd2bdb751490e1793fc2810683ba691e09b6a5f94fa528e81139e9574780b30f443ca0441aaf69a9758f5e7742f48b306ec74370e7b5e5d9e4a11af1748fff16e08a1aefba", 0xc2}, {&(0x7f0000000c40)="3fab48b11850ec5043829e060033e36b539bd7c1a5f2af28f39ccf2340fbea47cecd56bb79b0abdedc0607c1ba543590d87f28", 0x33}], 0x3}}], 0x2, 0x20040000) 0s ago: executing program 4 (id=3266): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x7}}, 0x80, 0x0}}], 0x3, 0x20000044) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x3, 0x9}]}, 0x10) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]}) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xea) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x7fff, 0x2001) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004895) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3200000000080041007369770014003300"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x28) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0844123, 0x0) r6 = socket(0x11, 0xa, 0x5) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, 0x0, 0xc0) socket$alg(0x26, 0x5, 0x0) kernel console output (not intermixed with test programs): .2675'. [ 672.701144][T14423] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.701261][T14423] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.701472][T14423] bridge_slave_0: entered allmulticast mode [ 672.703902][T14423] bridge_slave_0: entered promiscuous mode [ 672.962310][T14423] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.962516][T14423] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.962718][T14423] bridge_slave_1: entered allmulticast mode [ 672.971190][T14423] bridge_slave_1: entered promiscuous mode [ 673.050553][T14423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.074673][T14423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.291476][T14588] FAULT_INJECTION: forcing a failure. [ 673.291476][T14588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.291509][T14588] CPU: 1 UID: 0 PID: 14588 Comm: syz.4.2683 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 673.291534][T14588] Tainted: [L]=SOFTLOCKUP [ 673.291541][T14588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 673.291551][T14588] Call Trace: [ 673.291558][T14588] [ 673.291566][T14588] dump_stack_lvl+0xe8/0x150 [ 673.291591][T14588] should_fail_ex+0x46b/0x600 [ 673.291622][T14588] _copy_from_user+0x2d/0xb0 [ 673.291644][T14588] __sys_bpf+0x229/0x950 [ 673.291667][T14588] ? __pfx___sys_bpf+0x10/0x10 [ 673.291684][T14588] ? rt_mutex_slowunlock+0x1cb/0x300 [ 673.291718][T14588] ? ksys_write+0x248/0x270 [ 673.291749][T14588] ? __pfx_ksys_write+0x10/0x10 [ 673.291773][T14588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.291793][T14588] __x64_sys_bpf+0x7c/0x90 [ 673.291813][T14588] do_syscall_64+0x15f/0xf80 [ 673.291832][T14588] ? trace_irq_disable+0x3b/0x140 [ 673.291851][T14588] ? clear_bhb_loop+0x40/0x90 [ 673.291873][T14588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.291891][T14588] RIP: 0033:0x7f8cebfece59 [ 673.291908][T14588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.291923][T14588] RSP: 002b:00007f8cea21d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 673.291943][T14588] RAX: ffffffffffffffda RBX: 00007f8cec266090 RCX: 00007f8cebfece59 [ 673.291956][T14588] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 673.291968][T14588] RBP: 00007f8cea21d090 R08: 0000000000000000 R09: 0000000000000000 [ 673.291977][T14588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.291989][T14588] R13: 00007f8cec266128 R14: 00007f8cec266090 R15: 00007ffd92b74508 [ 673.292019][T14588] [ 673.416933][T14423] team0: Port device team_slave_0 added [ 673.433359][T14423] team0: Port device team_slave_1 added [ 673.702537][T14423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.702553][T14423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.702580][T14423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.747283][T14423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.747299][T14423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.747325][T14423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.900384][T14591] kvm_pr_unimpl_wrmsr: 10 callbacks suppressed [ 673.900406][T14591] kvm: kvm [14590]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 673.904011][T14591] kvm: kvm [14590]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 673.904080][T14591] kvm: kvm [14590]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 674.422591][ T1675] bridge_slave_1: left allmulticast mode [ 674.422624][ T1675] bridge_slave_1: left promiscuous mode [ 674.422881][ T1675] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.511612][ T1675] bridge_slave_0: left allmulticast mode [ 674.511645][ T1675] bridge_slave_0: left promiscuous mode [ 674.511888][ T1675] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.189723][T14634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2690'. [ 675.210058][T14629] sctp: [Deprecated]: syz.1.2692 (pid 14629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 675.210058][T14629] Use struct sctp_sack_info instead [ 675.406773][T14633] kvm: kvm [14631]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x8200 [ 675.574200][T14640] kvm: kvm [14637]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80000000 [ 675.574273][T14640] kvm: kvm [14637]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 676.979703][T14645] FAULT_INJECTION: forcing a failure. [ 676.979703][T14645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 676.979734][T14645] CPU: 1 UID: 0 PID: 14645 Comm: syz.0.2696 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 676.979756][T14645] Tainted: [L]=SOFTLOCKUP [ 676.979761][T14645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 676.979771][T14645] Call Trace: [ 676.979777][T14645] [ 676.979784][T14645] dump_stack_lvl+0xe8/0x150 [ 676.979808][T14645] should_fail_ex+0x46b/0x600 [ 676.979837][T14645] _copy_from_user+0x2d/0xb0 [ 676.979855][T14645] ___sys_sendmsg+0x1c6/0x360 [ 676.979875][T14645] ? __lock_acquire+0x6b5/0x2cf0 [ 676.979899][T14645] ? __pfx____sys_sendmsg+0x10/0x10 [ 676.979947][T14645] ? __fget_files+0x2a/0x420 [ 676.979961][T14645] ? __fget_files+0x3a6/0x420 [ 676.979983][T14645] __x64_sys_sendmsg+0x1c3/0x2a0 [ 676.980004][T14645] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 676.980031][T14645] ? __pfx_ksys_write+0x10/0x10 [ 676.980055][T14645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.980072][T14645] do_syscall_64+0x15f/0xf80 [ 676.980090][T14645] ? trace_irq_disable+0x3b/0x140 [ 676.980108][T14645] ? clear_bhb_loop+0x40/0x90 [ 676.980127][T14645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.980141][T14645] RIP: 0033:0x7f135dcfce59 [ 676.980158][T14645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.980171][T14645] RSP: 002b:00007f135bf4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.980188][T14645] RAX: ffffffffffffffda RBX: 00007f135df75fa0 RCX: 00007f135dcfce59 [ 676.980199][T14645] RDX: 0000000004000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 676.980209][T14645] RBP: 00007f135bf4e090 R08: 0000000000000000 R09: 0000000000000000 [ 676.980219][T14645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.980228][T14645] R13: 00007f135df76038 R14: 00007f135df75fa0 R15: 00007ffcac47cf48 [ 676.980254][T14645] [ 677.246605][ T48] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 677.408602][ T48] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.408663][ T48] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 677.408684][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.413263][ T48] usb 2-1: config 0 descriptor?? [ 677.830106][ T48] ath6kl: Unsupported hardware version: 0x0 [ 677.864875][ T48] ath6kl: Failed to init ath6kl core: -22 [ 677.865290][ T48] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 677.969094][ T1675] bond0 (unregistering): (slave 73ÿ): Releasing backup interface [ 678.037231][ T1675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.097830][ T1675] bond0 (unregistering): Released all slaves [ 678.100313][T14643] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 678.403711][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 678.430245][T14423] hsr_slave_0: entered promiscuous mode [ 678.431473][T14423] hsr_slave_1: entered promiscuous mode [ 678.432356][T14423] debugfs: 'hsr0' already exists in 'hsr' [ 678.432377][T14423] Cannot create hsr debugfs directory [ 678.456759][ T5960] usb 2-1: USB disconnect, device number 56 [ 678.610850][T14652] netlink: 'syz.0.2698': attribute type 10 has an invalid length. [ 678.642903][T14652] ipvlan0: entered allmulticast mode [ 678.642934][T14652] veth0_vlan: entered allmulticast mode [ 678.734136][T14652] team0: Device ipvlan0 failed to register rx_handler [ 678.805549][ T1675] IPVS: stopping backup sync thread 7614 ... [ 679.788816][T14677] kvm: kvm [14676]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80000000 [ 679.788994][T14677] kvm: kvm [14676]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 682.924549][T14724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2710'. [ 683.164752][T14723] kvm: kvm [14722]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80000000 [ 683.164828][T14723] kvm: kvm [14722]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 683.812617][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 683.995626][T14738] sctp: [Deprecated]: syz.1.2717 (pid 14738) Use of struct sctp_assoc_value in delayed_ack socket option. [ 683.995626][T14738] Use struct sctp_sack_info instead [ 684.240071][T14749] FAULT_INJECTION: forcing a failure. [ 684.240071][T14749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.240106][T14749] CPU: 0 UID: 0 PID: 14749 Comm: syz.1.2721 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 684.240135][T14749] Tainted: [L]=SOFTLOCKUP [ 684.240141][T14749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 684.240152][T14749] Call Trace: [ 684.240159][T14749] [ 684.240166][T14749] dump_stack_lvl+0xe8/0x150 [ 684.240192][T14749] should_fail_ex+0x46b/0x600 [ 684.240223][T14749] _copy_from_user+0x2d/0xb0 [ 684.240244][T14749] ___sys_sendmsg+0x1c6/0x360 [ 684.240266][T14749] ? __lock_acquire+0x6b5/0x2cf0 [ 684.240293][T14749] ? __pfx____sys_sendmsg+0x10/0x10 [ 684.240349][T14749] ? __fget_files+0x2a/0x420 [ 684.240366][T14749] ? __fget_files+0x3a6/0x420 [ 684.240392][T14749] __x64_sys_sendmsg+0x1c3/0x2a0 [ 684.240417][T14749] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 684.240448][T14749] ? __pfx_ksys_write+0x10/0x10 [ 684.240476][T14749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.240496][T14749] do_syscall_64+0x15f/0xf80 [ 684.240516][T14749] ? trace_irq_disable+0x3b/0x140 [ 684.240537][T14749] ? clear_bhb_loop+0x40/0x90 [ 684.240559][T14749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.240577][T14749] RIP: 0033:0x7fe858a6ce59 [ 684.240594][T14749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.240609][T14749] RSP: 002b:00007fe856cbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.240629][T14749] RAX: ffffffffffffffda RBX: 00007fe858ce5fa0 RCX: 00007fe858a6ce59 [ 684.240642][T14749] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 684.240654][T14749] RBP: 00007fe856cbe090 R08: 0000000000000000 R09: 0000000000000000 [ 684.240666][T14749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.240676][T14749] R13: 00007fe858ce6038 R14: 00007fe858ce5fa0 R15: 00007fff39f87218 [ 684.240725][T14749] [ 684.396656][ T5960] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 684.548825][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 118, changing to 10 [ 684.548850][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 42100, setting to 1024 [ 684.548873][ T5960] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 684.548884][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.556167][ T5960] usb 1-1: config 0 descriptor?? [ 684.578166][T14742] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 684.795435][ T5960] ath6kl: Failed to submit usb control message: -71 [ 684.795486][ T5960] ath6kl: unable to send the bmi data to the device: -71 [ 684.795501][ T5960] ath6kl: Unable to send get target info: -71 [ 684.841753][ T5960] ath6kl: Failed to init ath6kl core: -71 [ 684.843116][ T5960] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 684.982263][ T5960] usb 1-1: USB disconnect, device number 69 [ 685.261002][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2726'. [ 685.500150][T14780] FAULT_INJECTION: forcing a failure. [ 685.500150][T14780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.500186][T14780] CPU: 1 UID: 0 PID: 14780 Comm: syz.0.2727 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 685.500211][T14780] Tainted: [L]=SOFTLOCKUP [ 685.500217][T14780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 685.500228][T14780] Call Trace: [ 685.500236][T14780] [ 685.500244][T14780] dump_stack_lvl+0xe8/0x150 [ 685.500271][T14780] should_fail_ex+0x46b/0x600 [ 685.500304][T14780] _copy_from_user+0x2d/0xb0 [ 685.500325][T14780] ___sys_sendmsg+0x1c6/0x360 [ 685.500347][T14780] ? __lock_acquire+0x6b5/0x2cf0 [ 685.500373][T14780] ? __pfx____sys_sendmsg+0x10/0x10 [ 685.500428][T14780] ? __fget_files+0x2a/0x420 [ 685.500444][T14780] ? __fget_files+0x3a6/0x420 [ 685.500470][T14780] __x64_sys_sendmsg+0x1c3/0x2a0 [ 685.500495][T14780] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 685.500525][T14780] ? __pfx_ksys_write+0x10/0x10 [ 685.500553][T14780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.500572][T14780] do_syscall_64+0x15f/0xf80 [ 685.500592][T14780] ? trace_irq_disable+0x3b/0x140 [ 685.500612][T14780] ? clear_bhb_loop+0x40/0x90 [ 685.500633][T14780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.500651][T14780] RIP: 0033:0x7f135dcfce59 [ 685.500668][T14780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.500684][T14780] RSP: 002b:00007f135bf4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.500703][T14780] RAX: ffffffffffffffda RBX: 00007f135df75fa0 RCX: 00007f135dcfce59 [ 685.500717][T14780] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 685.500729][T14780] RBP: 00007f135bf4e090 R08: 0000000000000000 R09: 0000000000000000 [ 685.500740][T14780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.500751][T14780] R13: 00007f135df76038 R14: 00007f135df75fa0 R15: 00007ffcac47cf48 [ 685.500785][T14780] [ 685.805935][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.805999][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.872056][T14783] kvm: kvm [14782]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80000000 [ 685.872132][T14783] kvm: kvm [14782]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 686.293175][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 686.491234][T14802] sctp: [Deprecated]: syz.3.2730 (pid 14802) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.491234][T14802] Use struct sctp_sack_info instead [ 686.672249][ T1675] hsr_slave_0: left promiscuous mode [ 686.707258][ T1675] hsr_slave_1: left promiscuous mode [ 686.708293][ T1675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.708318][ T1675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.757805][ T1675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.757832][ T1675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.873846][ T1675] veth1_macvtap: left promiscuous mode [ 686.873956][ T1675] veth0_macvtap: left promiscuous mode [ 686.892571][ T1675] veth1_vlan: left promiscuous mode [ 686.892746][ T1675] veth0_vlan: left promiscuous mode [ 688.237633][ T1675] team0 (unregistering): Port device team_slave_1 removed [ 688.277376][ T1675] team0 (unregistering): Port device team_slave_0 removed [ 688.573618][T14798] syzkaller1: entered promiscuous mode [ 688.573646][T14798] syzkaller1: entered allmulticast mode [ 689.196805][T14831] IPVS: Scheduler module ip_vs_sip not found [ 689.406570][ T5589] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 689.570205][ T5589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 118, changing to 10 [ 689.570240][ T5589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 42100, setting to 1024 [ 689.570293][ T5589] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 689.570315][ T5589] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.623111][ T5589] usb 1-1: config 0 descriptor?? [ 689.625271][T14835] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 689.832345][ T5589] ath6kl: Failed to submit usb control message: -71 [ 689.832394][ T5589] ath6kl: unable to send the bmi data to the device: -71 [ 689.832407][ T5589] ath6kl: Unable to send get target info: -71 [ 689.836532][ T5589] ath6kl: Failed to init ath6kl core: -71 [ 689.839623][ T5589] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 689.882748][ T5589] usb 1-1: USB disconnect, device number 70 [ 690.152028][T14855] sctp: [Deprecated]: syz.4.2740 (pid 14855) Use of struct sctp_assoc_value in delayed_ack socket option. [ 690.152028][T14855] Use struct sctp_sack_info instead [ 692.970075][T14907] kvm: kvm [14906]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100004100 [ 693.004027][T14907] kvm: kvm [14906]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 693.028174][T14907] kvm: kvm [14906]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 693.028247][T14907] kvm: kvm [14906]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 693.470076][T14932] mmap: syz.0.2754 (14932) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 694.628363][T14423] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 694.657237][T14960] FAULT_INJECTION: forcing a failure. [ 694.657237][T14960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.657275][T14960] CPU: 0 UID: 0 PID: 14960 Comm: syz.4.2761 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 694.657298][T14960] Tainted: [L]=SOFTLOCKUP [ 694.657303][T14960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 694.657311][T14960] Call Trace: [ 694.657318][T14960] [ 694.657324][T14960] dump_stack_lvl+0xe8/0x150 [ 694.657347][T14960] should_fail_ex+0x46b/0x600 [ 694.657374][T14960] _copy_from_user+0x2d/0xb0 [ 694.657391][T14960] ___sys_recvmsg+0x175/0x590 [ 694.657415][T14960] ? __pfx____sys_recvmsg+0x10/0x10 [ 694.657436][T14960] ? __fget_files+0x2a/0x420 [ 694.657463][T14960] ? __fget_files+0x3a6/0x420 [ 694.657484][T14960] do_recvmmsg+0x33a/0x800 [ 694.657510][T14960] ? __pfx_do_recvmmsg+0x10/0x10 [ 694.657540][T14960] ? rt_mutex_slowunlock+0x1cb/0x300 [ 694.657570][T14960] __x64_sys_recvmmsg+0x198/0x250 [ 694.657595][T14960] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 694.657618][T14960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.657633][T14960] do_syscall_64+0x15f/0xf80 [ 694.657648][T14960] ? trace_irq_disable+0x3b/0x140 [ 694.657663][T14960] ? clear_bhb_loop+0x40/0x90 [ 694.657680][T14960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.657694][T14960] RIP: 0033:0x7f8cebfece59 [ 694.657707][T14960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.657718][T14960] RSP: 002b:00007f8cea21d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 694.657734][T14960] RAX: ffffffffffffffda RBX: 00007f8cec266090 RCX: 00007f8cebfece59 [ 694.657744][T14960] RDX: 0000000000000001 RSI: 0000200000001a40 RDI: 0000000000000003 [ 694.657753][T14960] RBP: 00007f8cea21d090 R08: 0000000000000000 R09: 0000000000000000 [ 694.657761][T14960] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 694.657770][T14960] R13: 00007f8cec266128 R14: 00007f8cec266090 R15: 00007ffd92b74508 [ 694.657793][T14960] [ 694.712548][ T31] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 694.906524][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 694.909045][ T31] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 694.911693][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 694.911719][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.911737][ T31] usb 2-1: Product: syz [ 694.911749][ T31] usb 2-1: Manufacturer: syz [ 694.911762][ T31] usb 2-1: SerialNumber: syz [ 694.969753][ T31] r8152-cfgselector 2-1: Unknown version 0x0000 [ 694.969778][ T31] r8152-cfgselector 2-1: config 0 descriptor?? [ 694.972773][T14967] netlink: 'syz.0.2764': attribute type 10 has an invalid length. [ 695.022954][T14423] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 695.292078][T14967] team0: Device ipvlan0 failed to register rx_handler [ 695.348990][T14423] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 695.372319][T14423] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 695.396000][ T31] r8152-cfgselector 2-1: USB disconnect, device number 57 [ 695.400598][T14423] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 695.601269][T14423] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 695.619685][T14423] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 695.748180][T14423] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 696.292319][T14994] IPVS: Scheduler module ip_vs_sip not found [ 696.702885][T14423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.770619][T15011] netlink: 'syz.1.2773': attribute type 10 has an invalid length. [ 696.797811][T15011] ipvlan0: entered allmulticast mode [ 696.797833][T15011] veth0_vlan: entered allmulticast mode [ 696.828144][T15011] team0: Device ipvlan0 failed to register rx_handler [ 696.967950][T15020] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2774'. [ 697.268929][T14423] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.290056][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.290292][ T3313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.372816][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.372947][ T3313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.988015][T15044] netlink: 'syz.3.2778': attribute type 2 has an invalid length. [ 698.007323][T15045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2782'. [ 698.643191][T15066] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2787'. [ 698.874344][T15050] IPVS: Scheduler module ip_vs_sip not found [ 699.213683][T14423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.582586][T14423] veth0_vlan: entered promiscuous mode [ 699.622954][T14423] veth1_vlan: entered promiscuous mode [ 699.635154][T15091] FAULT_INJECTION: forcing a failure. [ 699.635154][T15091] name failslab, interval 1, probability 0, space 0, times 0 [ 699.635188][T15091] CPU: 0 UID: 0 PID: 15091 Comm: syz.0.2795 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 699.635212][T15091] Tainted: [L]=SOFTLOCKUP [ 699.635220][T15091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 699.635231][T15091] Call Trace: [ 699.635238][T15091] [ 699.635246][T15091] dump_stack_lvl+0xe8/0x150 [ 699.635271][T15091] should_fail_ex+0x46b/0x600 [ 699.635302][T15091] should_failslab+0xa8/0x100 [ 699.635329][T15091] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 699.635349][T15091] ? __alloc_skb+0x1d0/0x7d0 [ 699.635368][T15091] ? lockdep_hardirqs_on+0x7a/0x110 [ 699.635394][T15091] __alloc_skb+0x1d0/0x7d0 [ 699.635413][T15091] netlink_sendmsg+0x5d4/0xb40 [ 699.635439][T15091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.635467][T15091] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 699.635489][T15091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.635509][T15091] sock_write_iter+0x4a1/0x4f0 [ 699.635538][T15091] ? __pfx_sock_write_iter+0x10/0x10 [ 699.635582][T15091] vfs_write+0x629/0xba0 [ 699.635621][T15091] ? __pfx_vfs_write+0x10/0x10 [ 699.635651][T15091] ? __fget_files+0x2a/0x420 [ 699.635676][T15091] ksys_write+0x156/0x270 [ 699.635699][T15091] ? __pfx_ksys_write+0x10/0x10 [ 699.635726][T15091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.635746][T15091] do_syscall_64+0x15f/0xf80 [ 699.635768][T15091] ? trace_irq_disable+0x3b/0x140 [ 699.635789][T15091] ? clear_bhb_loop+0x40/0x90 [ 699.635810][T15091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.635828][T15091] RIP: 0033:0x7f135dcfce59 [ 699.635845][T15091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.635860][T15091] RSP: 002b:00007f135bf4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 699.635879][T15091] RAX: ffffffffffffffda RBX: 00007f135df75fa0 RCX: 00007f135dcfce59 [ 699.635892][T15091] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000006 [ 699.635904][T15091] RBP: 00007f135bf4e090 R08: 0000000000000000 R09: 0000000000000000 [ 699.635915][T15091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.635926][T15091] R13: 00007f135df76038 R14: 00007f135df75fa0 R15: 00007ffcac47cf48 [ 699.635953][T15091] [ 702.531299][T14423] veth0_macvtap: entered promiscuous mode [ 702.550568][T14423] veth1_macvtap: entered promiscuous mode [ 702.596073][T14423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.678862][T14423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.710320][T15102] FAULT_INJECTION: forcing a failure. [ 702.710320][T15102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.710354][T15102] CPU: 1 UID: 0 PID: 15102 Comm: syz.1.2798 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 702.710379][T15102] Tainted: [L]=SOFTLOCKUP [ 702.710386][T15102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 702.710397][T15102] Call Trace: [ 702.710404][T15102] [ 702.710412][T15102] dump_stack_lvl+0xe8/0x150 [ 702.710439][T15102] should_fail_ex+0x46b/0x600 [ 702.710471][T15102] _copy_from_user+0x2d/0xb0 [ 702.710497][T15102] __sys_bpf+0x229/0x950 [ 702.710521][T15102] ? __pfx___sys_bpf+0x10/0x10 [ 702.710539][T15102] ? rt_mutex_slowunlock+0x1cb/0x300 [ 702.710572][T15102] ? ksys_write+0x248/0x270 [ 702.710595][T15102] ? __pfx_ksys_write+0x10/0x10 [ 702.710619][T15102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.710638][T15102] __x64_sys_bpf+0x7c/0x90 [ 702.710659][T15102] do_syscall_64+0x15f/0xf80 [ 702.710679][T15102] ? trace_irq_disable+0x3b/0x140 [ 702.710700][T15102] ? clear_bhb_loop+0x40/0x90 [ 702.710722][T15102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.710740][T15102] RIP: 0033:0x7fe858a6ce59 [ 702.710758][T15102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.710773][T15102] RSP: 002b:00007fe856cbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 702.710793][T15102] RAX: ffffffffffffffda RBX: 00007fe858ce5fa0 RCX: 00007fe858a6ce59 [ 702.710806][T15102] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000 [ 702.710818][T15102] RBP: 00007fe856cbe090 R08: 0000000000000000 R09: 0000000000000000 [ 702.710830][T15102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.710841][T15102] R13: 00007fe858ce6038 R14: 00007fe858ce5fa0 R15: 00007fff39f87218 [ 702.710870][T15102] [ 702.828929][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.837569][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.876052][ T1424] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.906544][ T1424] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.076676][ T5607] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 703.076963][ T5607] Bluetooth: hci5: Injecting HCI hardware error event [ 703.081048][ T5607] Bluetooth: hci5: hardware error 0x00 [ 703.181485][T15108] syz.4.2797 (15108): /proc/15103/oom_adj is deprecated, please use /proc/15103/oom_score_adj instead. [ 704.682759][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.682781][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.903587][T15110] netlink: 'syz.0.2799': attribute type 4 has an invalid length. [ 704.903607][T15110] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2799'. [ 705.153061][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.153081][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.426589][ T31] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 705.597931][ T31] usb 2-1: device descriptor read/64, error -71 [ 705.806708][ T5607] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 705.821024][T15148] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2643'. [ 706.476577][ T31] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 706.606721][ T31] usb 2-1: device descriptor read/64, error -71 [ 706.717245][ T31] usb usb2-port1: attempt power cycle [ 706.881655][T15161] netlink: 'syz.0.2811': attribute type 1 has an invalid length. [ 707.271263][ T31] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 707.300334][ T31] usb 2-1: device descriptor read/8, error -71 [ 707.571577][ T31] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 707.603404][ T31] usb 2-1: device descriptor read/8, error -71 [ 707.708319][ T31] usb usb2-port1: unable to enumerate USB device [ 708.676223][T15161] 8021q: adding VLAN 0 to HW filter on device bond2 [ 709.180832][T15186] FAULT_INJECTION: forcing a failure. [ 709.180832][T15186] name failslab, interval 1, probability 0, space 0, times 0 [ 709.180882][T15186] CPU: 0 UID: 0 PID: 15186 Comm: syz.1.2817 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 709.180908][T15186] Tainted: [L]=SOFTLOCKUP [ 709.180915][T15186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 709.180928][T15186] Call Trace: [ 709.180935][T15186] [ 709.180943][T15186] dump_stack_lvl+0xe8/0x150 [ 709.180968][T15186] should_fail_ex+0x46b/0x600 [ 709.180999][T15186] should_failslab+0xa8/0x100 [ 709.181020][T15186] __kmalloc_cache_noprof+0x84/0x690 [ 709.181040][T15186] ? mutex_lock_nested+0x152/0x1d0 [ 709.181072][T15186] ? snd_info_text_entry_write+0x1b1/0x440 [ 709.181091][T15186] ? snd_info_text_entry_write+0x14e/0x440 [ 709.181114][T15186] snd_info_text_entry_write+0x1b1/0x440 [ 709.181146][T15186] ? __pfx_snd_info_text_entry_write+0x10/0x10 [ 709.181165][T15186] proc_reg_write+0x1f6/0x2f0 [ 709.181186][T15186] ? __pfx_proc_reg_write+0x10/0x10 [ 709.181207][T15186] vfs_write+0x2a3/0xba0 [ 709.181238][T15186] ? __pfx_vfs_write+0x10/0x10 [ 709.181260][T15186] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 709.181283][T15186] ? lockdep_hardirqs_on+0x7a/0x110 [ 709.181304][T15186] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 709.181326][T15186] ? mutex_lock_nested+0x152/0x1d0 [ 709.181349][T15186] ? fdget_pos+0x252/0x320 [ 709.181376][T15186] ksys_write+0x156/0x270 [ 709.181399][T15186] ? __pfx_ksys_write+0x10/0x10 [ 709.181418][T15186] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 709.181451][T15186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.181471][T15186] do_syscall_64+0x15f/0xf80 [ 709.181494][T15186] ? clear_bhb_loop+0x40/0x90 [ 709.181517][T15186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.181535][T15186] RIP: 0033:0x7fe858a6ce59 [ 709.181553][T15186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.181568][T15186] RSP: 002b:00007fe856c7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 709.181588][T15186] RAX: ffffffffffffffda RBX: 00007fe858ce6180 RCX: 00007fe858a6ce59 [ 709.181602][T15186] RDX: 0000000000004000 RSI: 0000200000000380 RDI: 0000000000000005 [ 709.181614][T15186] RBP: 00007fe856c7c090 R08: 0000000000000000 R09: 0000000000000000 [ 709.181626][T15186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.181637][T15186] R13: 00007fe858ce6218 R14: 00007fe858ce6180 R15: 00007fff39f87218 [ 709.181669][T15186] [ 709.426866][T15182] IPVS: Scheduler module ip_vs_sip not found [ 709.467740][T15163] bond2: (slave gretap0): Enslaving as a backup interface with an up link [ 709.652357][ T42] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 709.808708][ T42] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 711.207897][T15195] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2820'. [ 713.031230][T15198] tmpfs: Bad value for 'mpol' [ 713.530292][T15216] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 713.530292][T15216] Please contact the netfilter-devel mailing list or update your nftables rules. [ 713.606623][ T9] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 713.737179][ T9] usb 5-1: device descriptor read/64, error -71 [ 713.965616][T15224] FAULT_INJECTION: forcing a failure. [ 713.965616][T15224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.967042][T15224] CPU: 1 UID: 0 PID: 15224 Comm: syz.2.2826 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 713.967071][T15224] Tainted: [L]=SOFTLOCKUP [ 713.967078][T15224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 713.967092][T15224] Call Trace: [ 713.967100][T15224] [ 713.967108][T15224] dump_stack_lvl+0xe8/0x150 [ 713.967136][T15224] should_fail_ex+0x46b/0x600 [ 713.967168][T15224] _copy_to_user+0x31/0xb0 [ 713.967190][T15224] simple_read_from_buffer+0xe1/0x170 [ 713.967221][T15224] proc_fail_nth_read+0x1be/0x230 [ 713.967250][T15224] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 713.967278][T15224] ? rw_verify_area+0x2ac/0x4e0 [ 713.967297][T15224] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 713.967322][T15224] vfs_read+0x212/0xa80 [ 713.967350][T15224] ? __pfx_vfs_read+0x10/0x10 [ 713.967370][T15224] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 713.967392][T15224] ? lockdep_hardirqs_on+0x7a/0x110 [ 713.967413][T15224] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 713.967433][T15224] ? mutex_lock_nested+0x152/0x1d0 [ 713.967456][T15224] ? fdget_pos+0x252/0x320 [ 713.967481][T15224] ksys_read+0x156/0x270 [ 713.967503][T15224] ? __pfx_ksys_read+0x10/0x10 [ 713.967530][T15224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.967549][T15224] do_syscall_64+0x15f/0xf80 [ 713.967579][T15224] ? trace_irq_disable+0x3b/0x140 [ 713.967600][T15224] ? clear_bhb_loop+0x40/0x90 [ 713.967622][T15224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.967640][T15224] RIP: 0033:0x7f2cff8fd68e [ 713.967657][T15224] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 713.967672][T15224] RSP: 002b:00007f2cfdb6cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 713.967692][T15224] RAX: ffffffffffffffda RBX: 00007f2cfdb6d6c0 RCX: 00007f2cff8fd68e [ 713.967706][T15224] RDX: 000000000000000f RSI: 00007f2cfdb6d0a0 RDI: 0000000000000004 [ 713.967718][T15224] RBP: 00007f2cfdb6d090 R08: 0000000000000000 R09: 0000000000000000 [ 713.967729][T15224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.967740][T15224] R13: 00007f2cffbb6128 R14: 00007f2cffbb6090 R15: 00007fff9009a918 [ 713.967771][T15224] [ 715.006519][ T9] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 715.166559][ T9] usb 5-1: device descriptor read/64, error -71 [ 715.277056][ T9] usb usb5-port1: attempt power cycle [ 715.400841][T15238] 9p: Bad value for 'rfdno' [ 715.506694][T15241] netlink: 'syz.1.2831': attribute type 10 has an invalid length. [ 715.539086][T15241] team0: Device ipvlan0 failed to register rx_handler [ 715.616539][ T9] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 715.644541][ T9] usb 5-1: device descriptor read/8, error -71 [ 715.883113][ T9] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 715.897382][ T9] usb 5-1: device descriptor read/8, error -71 [ 716.007627][ T9] usb usb5-port1: unable to enumerate USB device [ 716.093824][T15248] netlink: 556 bytes leftover after parsing attributes in process `syz.3.2832'. [ 716.899612][T15239] FAULT_INJECTION: forcing a failure. [ 716.899612][T15239] name fail_futex, interval 1, probability 0, space 0, times 1 [ 716.899650][T15239] CPU: 1 UID: 0 PID: 15239 Comm: syz.0.2830 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 716.899675][T15239] Tainted: [L]=SOFTLOCKUP [ 716.899683][T15239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 716.899694][T15239] Call Trace: [ 716.899702][T15239] [ 716.899711][T15239] dump_stack_lvl+0xe8/0x150 [ 716.899742][T15239] should_fail_ex+0x46b/0x600 [ 716.899775][T15239] get_futex_key+0x1b0/0x1590 [ 716.899803][T15239] ? perf_lock_task_context+0x785/0x850 [ 716.899834][T15239] ? __pfx_get_futex_key+0x10/0x10 [ 716.899854][T15239] ? __lock_acquire+0x6b5/0x2cf0 [ 716.899876][T15239] ? __lock_acquire+0x6b5/0x2cf0 [ 716.899904][T15239] futex_wake+0x114/0x580 [ 716.899930][T15239] ? __pfx_futex_wake+0x10/0x10 [ 716.899949][T15239] ? do_raw_spin_lock+0x12b/0x2f0 [ 716.899982][T15239] do_futex+0x395/0x420 [ 716.900004][T15239] ? __might_fault+0xaf/0x130 [ 716.900026][T15239] ? __pfx_do_futex+0x10/0x10 [ 716.900052][T15239] ? __might_fault+0xaf/0x130 [ 716.900081][T15239] mm_release+0x101/0x290 [ 716.900104][T15239] exit_mm+0x51/0x250 [ 716.900125][T15239] ? unwind_deferred_task_exit+0x67/0xa0 [ 716.900152][T15239] do_exit+0x6a2/0x22c0 [ 716.900177][T15239] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 716.900203][T15239] ? __pfx_do_exit+0x10/0x10 [ 716.900223][T15239] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 716.900240][T15239] ? reacquire_held_locks+0x104/0x190 [ 716.900264][T15239] ? rt_spin_lock+0x1e0/0x400 [ 716.900293][T15239] do_group_exit+0x21b/0x2d0 [ 716.900316][T15239] ? rt_spin_unlock+0x160/0x200 [ 716.900334][T15239] get_signal+0x125c/0x1310 [ 716.900373][T15239] arch_do_signal_or_restart+0xbc/0x850 [ 716.900399][T15239] ? preempt_schedule_thunk+0x16/0x30 [ 716.900423][T15239] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 716.900455][T15239] ? ksys_write+0x248/0x270 [ 716.900484][T15239] exit_to_user_mode_loop+0x8c/0x4d0 [ 716.900505][T15239] ? rcu_is_watching+0x15/0xb0 [ 716.900530][T15239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.900550][T15239] do_syscall_64+0x33e/0xf80 [ 716.900571][T15239] ? trace_irq_disable+0x3b/0x140 [ 716.900592][T15239] ? clear_bhb_loop+0x40/0x90 [ 716.900615][T15239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.900633][T15239] RIP: 0033:0x7f135dcfce59 [ 716.900652][T15239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.900667][T15239] RSP: 002b:00007f135bf2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 716.900687][T15239] RAX: ffffffffffffffed RBX: 00007f135df76090 RCX: 00007f135dcfce59 [ 716.900700][T15239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 716.900711][T15239] RBP: 00007f135bf2d090 R08: 0000000000000000 R09: 0000000000000000 [ 716.900722][T15239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.900733][T15239] R13: 00007f135df76128 R14: 00007f135df76090 R15: 00007ffcac47cf48 [ 716.900764][T15239] [ 717.924616][T15274] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2840'. [ 718.114877][T15277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 720.614548][ T5960] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 721.185892][ T5960] usb 1-1: device descriptor read/64, error -71 [ 721.458235][ T5960] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 723.626688][ T5960] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 724.334094][ T5960] usb 5-1: Using ep0 maxpacket: 8 [ 724.474403][ T5960] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 724.474436][ T5960] usb 5-1: config 1 interface 0 has no altsetting 0 [ 725.007307][T11090] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 725.034859][ T5960] usb 5-1: string descriptor 0 read error: -22 [ 725.035767][ T5960] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.40 [ 725.035782][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.196722][T11090] usb 2-1: Using ep0 maxpacket: 32 [ 725.402485][T11090] usb 2-1: unable to get BOS descriptor or descriptor too short [ 725.461760][T11090] usb 2-1: config 7 has an invalid interface number: 54 but max is 0 [ 725.461909][T11090] usb 2-1: config 7 has no interface number 0 [ 725.462158][T11090] usb 2-1: config 7 interface 54 altsetting 177 endpoint 0xF has invalid wMaxPacketSize 0 [ 725.462267][T11090] usb 2-1: config 7 interface 54 altsetting 177 has an endpoint descriptor with address 0x69, changing to 0x9 [ 725.462376][T11090] usb 2-1: config 7 interface 54 altsetting 177 endpoint 0x9 has invalid maxpacket 19859, setting to 1024 [ 725.462724][T11090] usb 2-1: config 7 interface 54 altsetting 177 bulk endpoint 0x9 has invalid maxpacket 1024 [ 725.462780][T11090] usb 2-1: config 7 interface 54 altsetting 177 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 725.462928][T11090] usb 2-1: config 7 interface 54 altsetting 177 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 725.463086][T11090] usb 2-1: config 7 interface 54 has no altsetting 0 [ 725.592360][T11090] usb 2-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=9d.17 [ 725.592390][T11090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.592408][T11090] usb 2-1: Product: syz [ 725.592421][T11090] usb 2-1: Manufacturer: syz [ 725.592433][T11090] usb 2-1: SerialNumber: syz [ 725.659883][T15314] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 725.761708][ T5960] usb 5-1: can't set config #1, error -71 [ 725.782382][ T5960] usb 5-1: USB disconnect, device number 81 [ 725.929449][T11090] s2255 2-1:7.54: Could not find bulk-in endpoint [ 725.929534][T11090] Sensoray 2255 driver load failed: 0xfffffff4 [ 725.929570][T11090] s2255 2-1:7.54: probe with driver s2255 failed with error -12 [ 725.978967][T11090] usb 2-1: USB disconnect, device number 62 [ 726.004464][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2853'. [ 726.004486][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2853'. [ 726.918483][T15326] FAULT_INJECTION: forcing a failure. [ 726.918483][T15326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.918517][T15326] CPU: 1 UID: 0 PID: 15326 Comm: syz.4.2855 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 726.918543][T15326] Tainted: [L]=SOFTLOCKUP [ 726.918550][T15326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 726.918561][T15326] Call Trace: [ 726.918568][T15326] [ 726.918577][T15326] dump_stack_lvl+0xe8/0x150 [ 726.918603][T15326] should_fail_ex+0x46b/0x600 [ 726.918635][T15326] _copy_from_user+0x2d/0xb0 [ 726.918656][T15326] ___sys_sendmsg+0x1c6/0x360 [ 726.918678][T15326] ? __lock_acquire+0x6b5/0x2cf0 [ 726.918704][T15326] ? __pfx____sys_sendmsg+0x10/0x10 [ 726.918759][T15326] ? __fget_files+0x2a/0x420 [ 726.918773][T15326] ? __fget_files+0x3a6/0x420 [ 726.918797][T15326] __x64_sys_sendmsg+0x1c3/0x2a0 [ 726.918822][T15326] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 726.918852][T15326] ? __pfx_ksys_write+0x10/0x10 [ 726.918880][T15326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.918900][T15326] do_syscall_64+0x15f/0xf80 [ 726.918920][T15326] ? trace_irq_disable+0x3b/0x140 [ 726.918940][T15326] ? clear_bhb_loop+0x40/0x90 [ 726.918962][T15326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.918979][T15326] RIP: 0033:0x7f8cebfece59 [ 726.918997][T15326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.919012][T15326] RSP: 002b:00007f8cea23e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.919032][T15326] RAX: ffffffffffffffda RBX: 00007f8cec265fa0 RCX: 00007f8cebfece59 [ 726.919046][T15326] RDX: 0000000020004004 RSI: 0000200000006040 RDI: 0000000000000003 [ 726.919058][T15326] RBP: 00007f8cea23e090 R08: 0000000000000000 R09: 0000000000000000 [ 726.919070][T15326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.919084][T15326] R13: 00007f8cec266038 R14: 00007f8cec265fa0 R15: 00007ffd92b74508 [ 726.919113][T15326] [ 727.936646][T11090] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 728.066557][T11090] usb 2-1: device descriptor read/64, error -71 [ 728.493229][T11090] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 728.548476][T15358] netlink: 'syz.3.2862': attribute type 4 has an invalid length. [ 728.548819][T15358] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2862'. [ 729.516591][T11090] usb 2-1: device descriptor read/64, error -71 [ 729.577268][T15368] netlink: 'syz.0.2867': attribute type 32 has an invalid length. [ 729.626839][T11090] usb usb2-port1: attempt power cycle [ 729.786670][ T5615] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 729.940918][ T5615] usb 3-1: unable to get BOS descriptor or descriptor too short [ 729.943476][ T5615] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 729.945835][ T5615] usb 3-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 729.945862][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.945881][ T5615] usb 3-1: Product: syz [ 729.945895][ T5615] usb 3-1: Manufacturer: syz [ 729.945909][ T5615] usb 3-1: SerialNumber: syz [ 730.000139][T15365] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 730.011009][T11090] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 730.027209][T11090] usb 2-1: device descriptor read/8, error -71 [ 730.095971][T15379] openvswitch: netlink: Missing valid actions attribute. [ 730.096011][T15379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.192104][T15391] FAULT_INJECTION: forcing a failure. [ 730.192104][T15391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 730.192138][T15391] CPU: 1 UID: 0 PID: 15391 Comm: syz.4.2873 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 730.192164][T15391] Tainted: [L]=SOFTLOCKUP [ 730.192170][T15391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 730.192181][T15391] Call Trace: [ 730.192189][T15391] [ 730.192197][T15391] dump_stack_lvl+0xe8/0x150 [ 730.192230][T15391] should_fail_ex+0x46b/0x600 [ 730.192262][T15391] _copy_from_user+0x2d/0xb0 [ 730.192283][T15391] __sys_bpf+0x229/0x950 [ 730.192307][T15391] ? __pfx___sys_bpf+0x10/0x10 [ 730.192325][T15391] ? rt_mutex_slowunlock+0x1cb/0x300 [ 730.192359][T15391] ? ksys_write+0x248/0x270 [ 730.192381][T15391] ? __pfx_ksys_write+0x10/0x10 [ 730.192405][T15391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.192426][T15391] __x64_sys_bpf+0x7c/0x90 [ 730.192445][T15391] do_syscall_64+0x15f/0xf80 [ 730.192464][T15391] ? trace_irq_disable+0x3b/0x140 [ 730.192484][T15391] ? clear_bhb_loop+0x40/0x90 [ 730.192507][T15391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.192525][T15391] RIP: 0033:0x7f8cebfece59 [ 730.192542][T15391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.192556][T15391] RSP: 002b:00007f8cea23e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 730.192580][T15391] RAX: ffffffffffffffda RBX: 00007f8cec265fa0 RCX: 00007f8cebfece59 [ 730.192593][T15391] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 730.192605][T15391] RBP: 00007f8cea23e090 R08: 0000000000000000 R09: 0000000000000000 [ 730.192616][T15391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.192627][T15391] R13: 00007f8cec266038 R14: 00007f8cec265fa0 R15: 00007ffd92b74508 [ 730.192657][T15391] [ 730.259227][ T5615] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 730.457279][T11090] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 730.569622][ T5960] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 730.645018][T11090] usb 2-1: device descriptor read/8, error -71 [ 730.710501][ T5960] usb 1-1: device descriptor read/64, error -71 [ 730.747049][T11090] usb usb2-port1: unable to enumerate USB device [ 730.985643][ T5960] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 731.102089][ T5615] usb 3-1: USB disconnect, device number 59 [ 731.116561][ T5960] usb 1-1: device descriptor read/64, error -71 [ 731.244695][ T5960] usb usb1-port1: attempt power cycle [ 731.617922][ T5960] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 731.646133][ T5960] usb 1-1: device descriptor read/8, error -71 [ 731.878477][ T5960] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 731.899060][ T5960] usb 1-1: device descriptor read/8, error -71 [ 732.007915][ T5960] usb usb1-port1: unable to enumerate USB device [ 733.137351][ T8576] udevd[8576]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 733.226762][ T5589] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 733.506539][ T5589] usb 5-1: Using ep0 maxpacket: 16 [ 733.507659][ T5589] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 733.509516][ T5589] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.511162][ T5589] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.512572][ T5589] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.514177][ T5589] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.515871][ T5589] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.520303][ T5589] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.522260][ T5589] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.523719][ T5589] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.525510][ T5589] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 733.525534][ T5589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 733.525552][ T5589] usb 5-1: SerialNumber: syz [ 733.538012][ T5589] usb 5-1: config 0 descriptor?? [ 733.570911][ T5589] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input42 [ 733.900855][ T4951] bcm5974 5-1:0.0: could not read from device [ 734.286734][ T31] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 734.445085][ T31] usb 4-1: device descriptor read/64, error -71 [ 734.588837][ T4951] bcm5974 5-1:0.0: could not read from device [ 734.617057][ T5589] usb 5-1: USB disconnect, device number 82 [ 734.753302][ T31] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 734.839138][ T10] page_pool_release_retry() stalled pool shutdown: id 41, 1 inflight 60 sec [ 734.913454][ T31] usb 4-1: device descriptor read/64, error -71 [ 735.017623][ T31] usb usb4-port1: attempt power cycle [ 735.044534][T15443] FAULT_INJECTION: forcing a failure. [ 735.044534][T15443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.044576][T15443] CPU: 0 UID: 0 PID: 15443 Comm: syz.2.2890 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 735.044619][T15443] Tainted: [L]=SOFTLOCKUP [ 735.044627][T15443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 735.044639][T15443] Call Trace: [ 735.044647][T15443] [ 735.044658][T15443] dump_stack_lvl+0xe8/0x150 [ 735.044689][T15443] should_fail_ex+0x46b/0x600 [ 735.044729][T15443] _copy_from_user+0x2d/0xb0 [ 735.044752][T15443] ___sys_recvmsg+0x175/0x590 [ 735.044788][T15443] ? __pfx____sys_recvmsg+0x10/0x10 [ 735.044823][T15443] ? __fget_files+0x2a/0x420 [ 735.044862][T15443] ? __fget_files+0x3a6/0x420 [ 735.044891][T15443] do_recvmmsg+0x33a/0x800 [ 735.044928][T15443] ? __pfx_do_recvmmsg+0x10/0x10 [ 735.044971][T15443] ? rt_mutex_slowunlock+0x1cb/0x300 [ 735.045006][T15443] __x64_sys_recvmmsg+0x198/0x250 [ 735.045039][T15443] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 735.045077][T15443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.045098][T15443] do_syscall_64+0x15f/0xf80 [ 735.045126][T15443] ? trace_irq_disable+0x3b/0x140 [ 735.045148][T15443] ? clear_bhb_loop+0x40/0x90 [ 735.045176][T15443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.045196][T15443] RIP: 0033:0x7f2cff93ce59 [ 735.045219][T15443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.045236][T15443] RSP: 002b:00007f2cfdb8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 735.045257][T15443] RAX: ffffffffffffffda RBX: 00007f2cffbb5fa0 RCX: 00007f2cff93ce59 [ 735.045276][T15443] RDX: 0000000000000001 RSI: 0000200000001b80 RDI: 0000000000000004 [ 735.045288][T15443] RBP: 00007f2cfdb8e090 R08: 0000000000000000 R09: 0000000000000000 [ 735.045299][T15443] R10: 0000000000014022 R11: 0000000000000246 R12: 0000000000000001 [ 735.045311][T15443] R13: 00007f2cffbb6038 R14: 00007f2cffbb5fa0 R15: 00007fff9009a918 [ 735.045347][T15443] [ 735.292253][T15447] netlink: 'syz.2.2892': attribute type 3 has an invalid length. [ 735.292267][T15447] netlink: 'syz.2.2892': attribute type 1 has an invalid length. [ 735.292274][T15447] netlink: 10480 bytes leftover after parsing attributes in process `syz.2.2892'. [ 735.396577][ T31] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 735.418456][ T31] usb 4-1: device descriptor read/8, error -71 [ 735.647242][T15463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.656628][ T31] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 735.677479][ T31] usb 4-1: device descriptor read/8, error -71 [ 735.797370][ T31] usb usb4-port1: unable to enumerate USB device [ 736.232006][T15458] kvm: kvm [15457]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80000000 [ 736.232219][T15458] kvm: kvm [15457]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 739.747964][T15477] netlink: 'syz.4.2903': attribute type 3 has an invalid length. [ 739.747985][T15477] netlink: 'syz.4.2903': attribute type 1 has an invalid length. [ 739.747998][T15477] netlink: 10480 bytes leftover after parsing attributes in process `syz.4.2903'. [ 740.296819][T15494] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 740.299202][T15494] Error validating options; rc = [-22] [ 741.131283][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2910'. [ 741.131308][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2910'. [ 741.165376][T15500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.851195][T15511] netlink: 'syz.2.2914': attribute type 3 has an invalid length. [ 741.851216][T15511] netlink: 'syz.2.2914': attribute type 1 has an invalid length. [ 741.851228][T15511] netlink: 10480 bytes leftover after parsing attributes in process `syz.2.2914'. [ 741.878837][T15515] FAULT_INJECTION: forcing a failure. [ 741.878837][T15515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.878871][T15515] CPU: 0 UID: 0 PID: 15515 Comm: syz.0.2917 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 741.878895][T15515] Tainted: [L]=SOFTLOCKUP [ 741.878901][T15515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 741.878911][T15515] Call Trace: [ 741.878919][T15515] [ 741.878926][T15515] dump_stack_lvl+0xe8/0x150 [ 741.878953][T15515] should_fail_ex+0x46b/0x600 [ 741.878984][T15515] _copy_from_user+0x2d/0xb0 [ 741.879005][T15515] ___sys_sendmsg+0x1c6/0x360 [ 741.879027][T15515] ? __lock_acquire+0x6b5/0x2cf0 [ 741.879053][T15515] ? __pfx____sys_sendmsg+0x10/0x10 [ 741.879106][T15515] ? __fget_files+0x2a/0x420 [ 741.879121][T15515] ? __fget_files+0x3a6/0x420 [ 741.879145][T15515] __x64_sys_sendmsg+0x1c3/0x2a0 [ 741.879170][T15515] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 741.879199][T15515] ? __pfx_ksys_write+0x10/0x10 [ 741.879226][T15515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.879245][T15515] do_syscall_64+0x15f/0xf80 [ 741.879271][T15515] ? trace_irq_disable+0x3b/0x140 [ 741.879292][T15515] ? clear_bhb_loop+0x40/0x90 [ 741.879313][T15515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.879330][T15515] RIP: 0033:0x7f135dcfce59 [ 741.879347][T15515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.879361][T15515] RSP: 002b:00007f135bf4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.879382][T15515] RAX: ffffffffffffffda RBX: 00007f135df75fa0 RCX: 00007f135dcfce59 [ 741.879395][T15515] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 741.879406][T15515] RBP: 00007f135bf4e090 R08: 0000000000000000 R09: 0000000000000000 [ 741.879418][T15515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.879429][T15515] R13: 00007f135df76038 R14: 00007f135df75fa0 R15: 00007ffcac47cf48 [ 741.879457][T15515] [ 741.906197][T15516] FAULT_INJECTION: forcing a failure. [ 741.906197][T15516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.906232][T15516] CPU: 0 UID: 0 PID: 15516 Comm: syz.1.2915 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 741.906263][T15516] Tainted: [L]=SOFTLOCKUP [ 741.906270][T15516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 741.906280][T15516] Call Trace: [ 741.906288][T15516] [ 741.906296][T15516] dump_stack_lvl+0xe8/0x150 [ 741.906322][T15516] should_fail_ex+0x46b/0x600 [ 741.906354][T15516] _copy_from_user+0x2d/0xb0 [ 741.906375][T15516] __sys_bpf+0x229/0x950 [ 741.906398][T15516] ? __pfx___sys_bpf+0x10/0x10 [ 741.906418][T15516] ? rt_mutex_slowunlock+0x1cb/0x300 [ 741.906449][T15516] ? ksys_write+0x248/0x270 [ 741.906469][T15516] ? __pfx_ksys_write+0x10/0x10 [ 741.906491][T15516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.906509][T15516] __x64_sys_bpf+0x7c/0x90 [ 741.906527][T15516] do_syscall_64+0x15f/0xf80 [ 741.906547][T15516] ? trace_irq_disable+0x3b/0x140 [ 741.906567][T15516] ? clear_bhb_loop+0x40/0x90 [ 741.906587][T15516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.906605][T15516] RIP: 0033:0x7fe858a6ce59 [ 741.906622][T15516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.906637][T15516] RSP: 002b:00007fe856c9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 741.906657][T15516] RAX: ffffffffffffffda RBX: 00007fe858ce6090 RCX: 00007fe858a6ce59 [ 741.906669][T15516] RDX: 0000000000000020 RSI: 0000200000000900 RDI: 0000000000000003 [ 741.906681][T15516] RBP: 00007fe856c9d090 R08: 0000000000000000 R09: 0000000000000000 [ 741.906691][T15516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.906702][T15516] R13: 00007fe858ce6128 R14: 00007fe858ce6090 R15: 00007fff39f87218 [ 741.906730][T15516] [ 742.076570][ T5615] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 742.206626][ T5615] usb 5-1: device descriptor read/64, error -71 [ 742.422500][T15528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2921'. [ 742.424206][T15528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'. [ 742.486570][ T5615] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 742.616578][ T5615] usb 5-1: device descriptor read/64, error -71 [ 742.736679][ T5615] usb usb5-port1: attempt power cycle [ 743.075506][T15538] syzkaller1: entered promiscuous mode [ 743.075530][T15538] syzkaller1: entered allmulticast mode [ 743.096530][ T5615] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 743.117363][ T5615] usb 5-1: device descriptor read/8, error -71 [ 743.356603][ T5615] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 743.377190][ T5615] usb 5-1: device descriptor read/8, error -71 [ 743.491230][ T5615] usb usb5-port1: unable to enumerate USB device [ 743.915430][T15551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2927'. [ 743.915453][T15551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2927'. [ 743.916289][T15553] netlink: 'syz.2.2929': attribute type 3 has an invalid length. [ 743.916300][T15553] netlink: 'syz.2.2929': attribute type 1 has an invalid length. [ 743.916307][T15553] netlink: 10480 bytes leftover after parsing attributes in process `syz.2.2929'. [ 745.191902][T15575] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2935'. [ 746.012790][ T5589] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 746.089118][T15574] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 746.366563][ T5589] usb 3-1: Using ep0 maxpacket: 16 [ 746.369878][ T5589] usb 3-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 746.369930][ T5589] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 746.369955][ T5589] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 746.369975][ T5589] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 746.369996][ T5589] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 746.373082][ T5589] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 746.373106][ T5589] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 746.373124][ T5589] usb 3-1: Manufacturer: syz [ 746.385371][ T5589] usb 3-1: config 0 descriptor?? [ 746.637627][T15586] netlink: 'syz.4.2940': attribute type 3 has an invalid length. [ 746.637649][T15586] netlink: 'syz.4.2940': attribute type 1 has an invalid length. [ 746.637662][T15586] netlink: 10480 bytes leftover after parsing attributes in process `syz.4.2940'. [ 746.816210][ T10] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 746.927753][T15594] IPVS: Scheduler module ip_vs_sip not found [ 747.007595][ T5589] rc_core: IR keymap rc-hauppauge not found [ 747.007614][ T5589] Registered IR keymap rc-empty [ 747.007760][ T5589] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 747.037806][ T5589] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 747.063590][ T5589] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 747.230631][T15602] overlayfs: missing 'lowerdir' [ 747.884579][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.884642][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.905096][ T5589] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input43 [ 748.000862][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 748.186885][ T5589] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 748.218985][ T5589] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 748.237756][ T5589] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 748.257914][ T5589] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 748.436653][ T5589] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 748.482480][ T5589] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 748.546276][ T5589] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 748.608372][ T5589] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 748.638244][ T5589] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 748.657466][ T5589] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 748.920765][ T5589] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 748.920798][ T5589] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 749.058063][ T10] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 749.058092][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 749.058112][ T10] usb 4-1: Product: syz [ 749.058125][ T10] usb 4-1: Manufacturer: syz [ 749.058137][ T10] usb 4-1: SerialNumber: syz [ 749.956599][T13335] Bluetooth: hci1: command tx timeout [ 750.222305][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2946'. [ 750.222489][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2946'. [ 750.277164][T15613] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2945'. [ 750.987708][ T10] usb 4-1: config 0 descriptor?? [ 750.990498][ T10] usb 4-1: can't set config #0, error -71 [ 750.996275][ T5589] usb 3-1: USB disconnect, device number 60 [ 751.044126][ T10] usb 4-1: USB disconnect, device number 64 [ 751.247475][T15619] binder: 15617:15619 ioctl c018620c 200000000540 returned -1 [ 755.672068][T15629] netlink: 'syz.4.2952': attribute type 3 has an invalid length. [ 755.672098][T15629] netlink: 'syz.4.2952': attribute type 1 has an invalid length. [ 755.672111][T15629] netlink: 10480 bytes leftover after parsing attributes in process `syz.4.2952'. [ 755.725368][T15633] FAULT_INJECTION: forcing a failure. [ 755.725368][T15633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.725396][T15633] CPU: 1 UID: 0 PID: 15633 Comm: syz.2.2951 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 755.725415][T15633] Tainted: [L]=SOFTLOCKUP [ 755.725420][T15633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 755.725428][T15633] Call Trace: [ 755.725435][T15633] [ 755.725441][T15633] dump_stack_lvl+0xe8/0x150 [ 755.725462][T15633] should_fail_ex+0x46b/0x600 [ 755.725487][T15633] _copy_from_user+0x2d/0xb0 [ 755.725504][T15633] __sys_bpf+0x229/0x950 [ 755.725522][T15633] ? __pfx___sys_bpf+0x10/0x10 [ 755.725535][T15633] ? rt_mutex_slowunlock+0x1cb/0x300 [ 755.725561][T15633] ? ksys_write+0x248/0x270 [ 755.725578][T15633] ? __pfx_ksys_write+0x10/0x10 [ 755.725596][T15633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.725610][T15633] __x64_sys_bpf+0x7c/0x90 [ 755.725625][T15633] do_syscall_64+0x15f/0xf80 [ 755.725640][T15633] ? trace_irq_disable+0x3b/0x140 [ 755.725655][T15633] ? clear_bhb_loop+0x40/0x90 [ 755.725672][T15633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.725684][T15633] RIP: 0033:0x7f2cff93ce59 [ 755.725698][T15633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.725709][T15633] RSP: 002b:00007f2cfdb8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 755.725724][T15633] RAX: ffffffffffffffda RBX: 00007f2cffbb5fa0 RCX: 00007f2cff93ce59 [ 755.725734][T15633] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 755.725743][T15633] RBP: 00007f2cfdb8e090 R08: 0000000000000000 R09: 0000000000000000 [ 755.725751][T15633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.725759][T15633] R13: 00007f2cffbb6038 R14: 00007f2cffbb5fa0 R15: 00007fff9009a918 [ 755.725781][T15633] [ 756.169144][T15648] FAULT_INJECTION: forcing a failure. [ 756.169144][T15648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.169178][T15648] CPU: 1 UID: 0 PID: 15648 Comm: syz.3.2957 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 756.169203][T15648] Tainted: [L]=SOFTLOCKUP [ 756.169209][T15648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 756.169223][T15648] Call Trace: [ 756.169230][T15648] [ 756.169238][T15648] dump_stack_lvl+0xe8/0x150 [ 756.169263][T15648] should_fail_ex+0x46b/0x600 [ 756.169295][T15648] _copy_from_user+0x2d/0xb0 [ 756.169316][T15648] do_sys_poll+0x2a0/0xf50 [ 756.169358][T15648] ? __pfx_do_sys_poll+0x10/0x10 [ 756.169380][T15648] ? is_bpf_text_address+0x26/0x2b0 [ 756.169406][T15648] ? kernel_text_address+0xa5/0xe0 [ 756.169432][T15648] ? __kernel_text_address+0xd/0x30 [ 756.169516][T15648] ? ktime_get_ts64+0xa9/0x410 [ 756.169560][T15648] ? __pfx_timespec64_add_safe+0x10/0x10 [ 756.169592][T15648] __x64_sys_poll+0x190/0x350 [ 756.169617][T15648] ? __pfx___x64_sys_poll+0x10/0x10 [ 756.169646][T15648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.169686][T15648] do_syscall_64+0x15f/0xf80 [ 756.169706][T15648] ? trace_irq_disable+0x3b/0x140 [ 756.169726][T15648] ? clear_bhb_loop+0x40/0x90 [ 756.169747][T15648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.169765][T15648] RIP: 0033:0x7fbf6a1cce59 [ 756.169782][T15648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.169796][T15648] RSP: 002b:00007fbf683fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 756.169824][T15648] RAX: ffffffffffffffda RBX: 00007fbf6a446090 RCX: 00007fbf6a1cce59 [ 756.169836][T15648] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000200000000040 [ 756.169848][T15648] RBP: 00007fbf683fd090 R08: 0000000000000000 R09: 0000000000000000 [ 756.169858][T15648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.169868][T15648] R13: 00007fbf6a446128 R14: 00007fbf6a446090 R15: 00007ffda29d65c8 [ 756.169896][T15648] [ 756.455825][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2959'. [ 756.455849][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2959'. [ 757.876327][T15667] FAULT_INJECTION: forcing a failure. [ 757.876327][T15667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.876362][T15667] CPU: 0 UID: 0 PID: 15667 Comm: syz.2.2966 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 757.876387][T15667] Tainted: [L]=SOFTLOCKUP [ 757.876394][T15667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 757.876408][T15667] Call Trace: [ 757.876415][T15667] [ 757.876422][T15667] dump_stack_lvl+0xe8/0x150 [ 757.876447][T15667] should_fail_ex+0x46b/0x600 [ 757.876479][T15667] _copy_from_user+0x2d/0xb0 [ 757.876500][T15667] ___sys_recvmsg+0x175/0x590 [ 757.876522][T15667] ? get_pid_task+0x20/0x1f0 [ 757.876543][T15667] ? get_pid_task+0x20/0x1f0 [ 757.876568][T15667] ? __pfx____sys_recvmsg+0x10/0x10 [ 757.876595][T15667] ? __fget_files+0x2a/0x420 [ 757.876627][T15667] ? __fget_files+0x3a6/0x420 [ 757.876650][T15667] __x64_sys_recvmsg+0x1c0/0x2a0 [ 757.876675][T15667] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 757.876705][T15667] ? __pfx_ksys_write+0x10/0x10 [ 757.876741][T15667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.876762][T15667] do_syscall_64+0x15f/0xf80 [ 757.876782][T15667] ? trace_irq_disable+0x3b/0x140 [ 757.876803][T15667] ? clear_bhb_loop+0x40/0x90 [ 757.876824][T15667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.876842][T15667] RIP: 0033:0x7f2cff93ce59 [ 757.876859][T15667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.876874][T15667] RSP: 002b:00007f2cfdb8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 757.876894][T15667] RAX: ffffffffffffffda RBX: 00007f2cffbb5fa0 RCX: 00007f2cff93ce59 [ 757.876907][T15667] RDX: 0000000000000000 RSI: 0000200000001700 RDI: 0000000000000003 [ 757.876919][T15667] RBP: 00007f2cfdb8e090 R08: 0000000000000000 R09: 0000000000000000 [ 757.876930][T15667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.876941][T15667] R13: 00007f2cffbb6038 R14: 00007f2cffbb5fa0 R15: 00007fff9009a918 [ 757.876969][T15667] [ 757.898596][T15669] FAULT_INJECTION: forcing a failure. [ 757.898596][T15669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.898630][T15669] CPU: 1 UID: 0 PID: 15669 Comm: syz.0.2963 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 757.898654][T15669] Tainted: [L]=SOFTLOCKUP [ 757.898660][T15669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 757.898671][T15669] Call Trace: [ 757.898678][T15669] [ 757.898685][T15669] dump_stack_lvl+0xe8/0x150 [ 757.898711][T15669] should_fail_ex+0x46b/0x600 [ 757.898743][T15669] _copy_from_user+0x2d/0xb0 [ 757.898762][T15669] ___sys_sendmsg+0x1c6/0x360 [ 757.898785][T15669] ? __lock_acquire+0x6b5/0x2cf0 [ 757.898811][T15669] ? __pfx____sys_sendmsg+0x10/0x10 [ 757.898863][T15669] ? __fget_files+0x2a/0x420 [ 757.898878][T15669] ? __fget_files+0x3a6/0x420 [ 757.898904][T15669] __x64_sys_sendmsg+0x1c3/0x2a0 [ 757.898928][T15669] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 757.898957][T15669] ? __pfx_ksys_write+0x10/0x10 [ 757.898991][T15669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.899010][T15669] do_syscall_64+0x15f/0xf80 [ 757.899030][T15669] ? trace_irq_disable+0x3b/0x140 [ 757.899051][T15669] ? clear_bhb_loop+0x40/0x90 [ 757.899072][T15669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.899089][T15669] RIP: 0033:0x7f135dcfce59 [ 757.899106][T15669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.899121][T15669] RSP: 002b:00007f135bf4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.899140][T15669] RAX: ffffffffffffffda RBX: 00007f135df75fa0 RCX: 00007f135dcfce59 [ 757.899157][T15669] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000003 [ 757.899168][T15669] RBP: 00007f135bf4e090 R08: 0000000000000000 R09: 0000000000000000 [ 757.899179][T15669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.899189][T15669] R13: 00007f135df76038 R14: 00007f135df75fa0 R15: 00007ffcac47cf48 [ 757.899217][T15669] [ 757.946545][ T31] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 758.101606][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.101642][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.101676][ T31] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 758.101704][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.122725][ T31] usb 5-1: config 0 descriptor?? [ 758.217591][ T5589] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 758.396582][ T5589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 118, changing to 10 [ 758.396616][ T5589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 42100, setting to 1024 [ 758.396714][ T5589] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 758.396736][ T5589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.460781][ T5589] usb 2-1: config 0 descriptor?? [ 758.475347][T15671] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 758.701944][ T5589] ath6kl: Failed to submit usb control message: -71 [ 758.702054][ T5589] ath6kl: unable to send the bmi data to the device: -71 [ 758.702069][ T5589] ath6kl: Unable to send get target info: -71 [ 758.774331][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 758.774450][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 758.797233][ T31] usb 5-1: USB disconnect, device number 87 [ 758.802015][ T5589] ath6kl: Failed to init ath6kl core: -71 [ 758.803281][ T5589] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 758.970213][T15689] Bluetooth: MGMT ver 1.23 [ 758.973445][T15689] 9p: Bad value for 'rfdno' [ 759.050596][ T5589] usb 2-1: USB disconnect, device number 67 [ 759.174840][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2973'. [ 759.174856][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2973'. [ 759.245831][ T36] kauditd_printk_skb: 43 callbacks suppressed [ 759.245848][ T36] audit: type=1326 audit(1778649480.038:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15698 comm="syz.2.2974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cff93ce59 code=0x7ffc0000 [ 759.257075][ T36] audit: type=1326 audit(1778649480.038:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15698 comm="syz.2.2974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cff93ce59 code=0x7ffc0000 [ 759.626032][ T36] audit: type=1326 audit(1778649480.048:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15698 comm="syz.2.2974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f2cff93ce59 code=0x7ffc0000 [ 759.626077][ T36] audit: type=1326 audit(1778649480.418:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15698 comm="syz.2.2974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cff93ce59 code=0x7ffc0000 [ 759.626116][ T36] audit: type=1326 audit(1778649480.418:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15698 comm="syz.2.2974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cff93ce59 code=0x7ffc0000 [ 759.629728][ T36] audit: type=1326 audit(1778649480.428:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15698 comm="syz.2.2974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cff93ce59 code=0x7ffc0000 [ 759.629806][ T36] audit: type=1326 audit(1778649480.428:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15698 comm="syz.2.2974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cff93ce59 code=0x7ffc0000 [ 759.629844][ T36] audit: type=1326 audit(1778649480.428:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15698 comm="syz.2.2974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cff93ce59 code=0x7ffc0000 [ 759.634233][ T36] audit: type=1326 audit(1778649480.428:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15698 comm="syz.2.2974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cff93ce59 code=0x7ffc0000 [ 759.634285][ T36] audit: type=1326 audit(1778649480.428:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15698 comm="syz.2.2974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cff93ce59 code=0x7ffc0000 [ 759.667378][T15696] IPVS: Scheduler module ip_vs_sip not found [ 761.256865][ T5615] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 761.633488][ T5615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 118, changing to 10 [ 761.633623][ T5615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 42100, setting to 1024 [ 761.633737][ T5615] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 761.633870][ T5615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.071826][ T5615] usb 5-1: config 0 descriptor?? [ 762.140807][T15710] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 762.833170][T15720] FAULT_INJECTION: forcing a failure. [ 762.833170][T15720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.833200][T15720] CPU: 1 UID: 0 PID: 15720 Comm: syz.0.2978 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 762.833219][T15720] Tainted: [L]=SOFTLOCKUP [ 762.833224][T15720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 762.833243][T15720] Call Trace: [ 762.833249][T15720] [ 762.833255][T15720] dump_stack_lvl+0xe8/0x150 [ 762.833278][T15720] should_fail_ex+0x46b/0x600 [ 762.833302][T15720] _copy_from_user+0x2d/0xb0 [ 762.833318][T15720] ___sys_sendmsg+0x1c6/0x360 [ 762.833336][T15720] ? __lock_acquire+0x6b5/0x2cf0 [ 762.833356][T15720] ? __pfx____sys_sendmsg+0x10/0x10 [ 762.833397][T15720] ? __fget_files+0x2a/0x420 [ 762.833409][T15720] ? __fget_files+0x3a6/0x420 [ 762.833428][T15720] __x64_sys_sendmsg+0x1c3/0x2a0 [ 762.833447][T15720] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 762.833470][T15720] ? __pfx_ksys_write+0x10/0x10 [ 762.833498][T15720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.833512][T15720] do_syscall_64+0x15f/0xf80 [ 762.833528][T15720] ? trace_irq_disable+0x3b/0x140 [ 762.833544][T15720] ? clear_bhb_loop+0x40/0x90 [ 762.833560][T15720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.833573][T15720] RIP: 0033:0x7f135dcfce59 [ 762.833587][T15720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.833598][T15720] RSP: 002b:00007f135bf2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.833613][T15720] RAX: ffffffffffffffda RBX: 00007f135df76090 RCX: 00007f135dcfce59 [ 762.833623][T15720] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000004 [ 762.833631][T15720] RBP: 00007f135bf2d090 R08: 0000000000000000 R09: 0000000000000000 [ 762.833639][T15720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.833647][T15720] R13: 00007f135df76128 R14: 00007f135df76090 R15: 00007ffcac47cf48 [ 762.833669][T15720] [ 762.998085][ T5615] ath6kl: Failed to submit usb control message: -71 [ 762.998135][ T5615] ath6kl: unable to send the bmi data to the device: -71 [ 762.998150][ T5615] ath6kl: Unable to send get target info: -71 [ 763.028052][ T5615] ath6kl: Failed to init ath6kl core: -71 [ 763.029325][ T5615] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 763.138829][ T5615] usb 5-1: USB disconnect, device number 88 [ 763.792533][T15739] kvm: kvm [15737]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x10000008f [ 763.797833][T15739] kvm: kvm [15737]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x87 [ 763.797903][T15739] kvm: kvm [15737]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 764.087397][ T5615] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 764.102900][T15747] IPVS: Scheduler module ip_vs_sip not found [ 764.364917][ T5615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.364948][ T5615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.364984][ T5615] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 764.365005][ T5615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.389138][ T5615] usb 5-1: config 0 descriptor?? [ 764.888007][ T5615] usbhid 5-1:0.0: can't add hid device: -71 [ 764.888115][ T5615] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 764.892357][ T5615] usb 5-1: USB disconnect, device number 89 [ 766.214105][T15764] FAULT_INJECTION: forcing a failure. [ 766.214105][T15764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.214635][T15764] CPU: 1 UID: 0 PID: 15764 Comm: syz.4.2995 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 766.214664][T15764] Tainted: [L]=SOFTLOCKUP [ 766.214671][T15764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 766.214682][T15764] Call Trace: [ 766.214690][T15764] [ 766.214698][T15764] dump_stack_lvl+0xe8/0x150 [ 766.214726][T15764] should_fail_ex+0x46b/0x600 [ 766.214759][T15764] _copy_to_user+0x31/0xb0 [ 766.214784][T15764] simple_read_from_buffer+0xe1/0x170 [ 766.214815][T15764] proc_fail_nth_read+0x1be/0x230 [ 766.214845][T15764] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 766.214878][T15764] ? rw_verify_area+0x2ac/0x4e0 [ 766.214902][T15764] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 766.214929][T15764] vfs_read+0x212/0xa80 [ 766.214957][T15764] ? __pfx_vfs_read+0x10/0x10 [ 766.214979][T15764] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 766.215003][T15764] ? lockdep_hardirqs_on+0x7a/0x110 [ 766.215024][T15764] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 766.215045][T15764] ? mutex_lock_nested+0x152/0x1d0 [ 766.215069][T15764] ? fdget_pos+0x252/0x320 [ 766.215095][T15764] ksys_read+0x156/0x270 [ 766.215118][T15764] ? __pfx_ksys_read+0x10/0x10 [ 766.215145][T15764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.215174][T15764] do_syscall_64+0x15f/0xf80 [ 766.215208][T15764] ? clear_bhb_loop+0x40/0x90 [ 766.215231][T15764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.215249][T15764] RIP: 0033:0x7f8cebfad68e [ 766.215266][T15764] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 766.215295][T15764] RSP: 002b:00007f8cea23dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 766.215314][T15764] RAX: ffffffffffffffda RBX: 00007f8cea23e6c0 RCX: 00007f8cebfad68e [ 766.215334][T15764] RDX: 000000000000000f RSI: 00007f8cea23e0a0 RDI: 0000000000000004 [ 766.215346][T15764] RBP: 00007f8cea23e090 R08: 0000000000000000 R09: 0000000000000000 [ 766.215358][T15764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.215369][T15764] R13: 00007f8cec266038 R14: 00007f8cec265fa0 R15: 00007ffd92b74508 [ 766.215399][T15764] [ 767.466633][T15784] netlink: 556 bytes leftover after parsing attributes in process `syz.0.2998'. [ 767.821135][T15786] netlink: 'syz.2.3004': attribute type 10 has an invalid length. [ 767.822155][T15786] ipvlan0: entered allmulticast mode [ 767.822539][T15786] veth0_vlan: entered allmulticast mode [ 768.970044][ T5960] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 769.118990][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.119022][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.119063][ T5960] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 769.119084][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.181699][ T5960] usb 1-1: config 0 descriptor?? [ 769.210219][T15786] team0: Device ipvlan0 failed to register rx_handler [ 769.729710][ T5960] usbhid 1-1:0.0: can't add hid device: -71 [ 769.729847][ T5960] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 769.760623][ T5960] usb 1-1: USB disconnect, device number 77 [ 769.845729][T15820] tmpfs: Bad value for 'mpol' [ 770.308057][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 770.463959][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 118, changing to 10 [ 770.463991][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 42100, setting to 1024 [ 770.464031][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 770.464052][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.509769][ T10] usb 3-1: config 0 descriptor?? [ 770.511198][T15825] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 770.717503][ T10] ath6kl: Failed to submit usb control message: -71 [ 770.717546][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 770.717561][ T10] ath6kl: Unable to send get target info: -71 [ 770.750867][ T10] ath6kl: Failed to init ath6kl core: -71 [ 770.755669][ T10] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 770.777334][ T10] usb 3-1: USB disconnect, device number 61 [ 770.957444][T15842] netlink: 'syz.1.3022': attribute type 10 has an invalid length. [ 770.981333][T15842] team0: Device ipvlan0 failed to register rx_handler [ 771.334133][T15849] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3025'. [ 771.612099][T15856] netlink: 'syz.4.3027': attribute type 10 has an invalid length. [ 771.612135][T15856] ipvlan0: entered allmulticast mode [ 771.612151][T15856] veth0_vlan: entered allmulticast mode [ 771.615530][T15856] team0: Device ipvlan0 failed to register rx_handler [ 771.656566][ T5589] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 771.806569][ T5589] usb 3-1: Using ep0 maxpacket: 32 [ 771.809093][ T5589] usb 3-1: config 0 interface 0 has no altsetting 0 [ 771.809128][ T5589] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 771.809149][ T5589] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.846880][ T5589] usb 3-1: config 0 descriptor?? [ 772.064644][T15863] netlink: 'syz.3.3031': attribute type 32 has an invalid length. [ 772.236259][T15870] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3034'. [ 772.294779][ T5589] hid-retrode 0003:0403:97C1.000D: unknown main item tag 0x0 [ 772.294815][ T5589] hid-retrode 0003:0403:97C1.000D: unknown main item tag 0x0 [ 772.294840][ T5589] hid-retrode 0003:0403:97C1.000D: unknown main item tag 0x0 [ 772.294864][ T5589] hid-retrode 0003:0403:97C1.000D: unknown main item tag 0x0 [ 772.294889][ T5589] hid-retrode 0003:0403:97C1.000D: unknown main item tag 0x0 [ 772.294913][ T5589] hid-retrode 0003:0403:97C1.000D: unknown main item tag 0x0 [ 772.294938][ T5589] hid-retrode 0003:0403:97C1.000D: unknown main item tag 0x0 [ 772.294963][ T5589] hid-retrode 0003:0403:97C1.000D: unknown main item tag 0x0 [ 772.294987][ T5589] hid-retrode 0003:0403:97C1.000D: unknown main item tag 0x0 [ 772.295011][ T5589] hid-retrode 0003:0403:97C1.000D: unknown main item tag 0x0 [ 772.555434][T15851] netlink: 'syz.2.3026': attribute type 10 has an invalid length. [ 772.960795][ T5589] hid-retrode 0003:0403:97C1.000D: hidraw0: USB HID v0.04 Device [HID 0403:97c1] on usb-dummy_hcd.2-1/input0 [ 773.548171][T15851] team0: Port device dummy0 added [ 773.758331][ T10] usb 3-1: USB disconnect, device number 62 [ 777.324405][T15916] netlink: 'syz.0.3042': attribute type 10 has an invalid length. [ 777.330467][T15916] team0: Device ipvlan0 failed to register rx_handler [ 777.410816][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3045'. [ 777.410839][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3045'. [ 778.211667][T15937] netlink: 71 bytes leftover after parsing attributes in process `syz.2.3051'. [ 778.456646][ T5589] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 778.620951][ T5589] usb 2-1: unable to get BOS descriptor or descriptor too short [ 778.622443][ T5589] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 778.622482][ T5589] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 778.622507][ T5589] usb 2-1: config 1 interface 0 has no altsetting 0 [ 778.628113][ T5589] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 778.628140][ T5589] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.628158][ T5589] usb 2-1: Product: syz [ 778.628170][ T5589] usb 2-1: Manufacturer: syz [ 778.628183][ T5589] usb 2-1: SerialNumber: syz [ 778.873898][ T5589] smsusb:smsusb_probe: board id=8, interface number 0 [ 778.874080][ T5589] smsusb:smsusb_probe: Device initialized with return code -19 [ 778.969093][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3057'. [ 778.969110][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3057'. [ 779.027427][T15934] netlink: 'syz.4.3049': attribute type 4 has an invalid length. [ 779.027448][T15934] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3049'. [ 779.057004][ T5589] usb 2-1: USB disconnect, device number 68 [ 779.300297][ T9] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 779.453026][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.453051][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 779.480862][ T9] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 779.480891][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.480909][ T9] usb 1-1: Product: syz [ 779.480922][ T9] usb 1-1: Manufacturer: syz [ 779.480935][ T9] usb 1-1: SerialNumber: syz [ 779.520761][ T9] usb 1-1: config 0 descriptor?? [ 780.013026][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3063'. [ 780.013076][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3063'. [ 780.044773][T15976] netlink: 'syz.4.3062': attribute type 10 has an invalid length. [ 780.051840][T15976] team0: Device ipvlan0 failed to register rx_handler [ 780.098471][T15979] netlink: 'syz.3.3065': attribute type 32 has an invalid length. [ 780.505015][T15983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.505628][T15983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.339271][T16006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3070'. [ 781.339345][T16006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3070'. [ 784.092568][ T10] usb 1-1: USB disconnect, device number 78 [ 784.329203][T16027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3074'. [ 784.745188][T16019] kvm: kvm [16018]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 784.834869][T16019] kvm: kvm [16018]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 785.145262][T16019] kvm: kvm [16018]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 785.479263][T16019] kvm: kvm [16018]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 785.771020][T16019] kvm: kvm [16018]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 787.543995][T16039] FAULT_INJECTION: forcing a failure. [ 787.543995][T16039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.544028][T16039] CPU: 0 UID: 0 PID: 16039 Comm: syz.1.3080 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 787.544052][T16039] Tainted: [L]=SOFTLOCKUP [ 787.544059][T16039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 787.544069][T16039] Call Trace: [ 787.544076][T16039] [ 787.544084][T16039] dump_stack_lvl+0xe8/0x150 [ 787.544110][T16039] should_fail_ex+0x46b/0x600 [ 787.544142][T16039] _copy_from_user+0x2d/0xb0 [ 787.544163][T16039] ___sys_sendmsg+0x1c6/0x360 [ 787.544193][T16039] ? __lock_acquire+0x6b5/0x2cf0 [ 787.544220][T16039] ? __pfx____sys_sendmsg+0x10/0x10 [ 787.544271][T16039] ? __fget_files+0x2a/0x420 [ 787.544287][T16039] ? __fget_files+0x3a6/0x420 [ 787.544312][T16039] __x64_sys_sendmsg+0x1c3/0x2a0 [ 787.544335][T16039] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 787.544365][T16039] ? __pfx_ksys_write+0x10/0x10 [ 787.544393][T16039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.544411][T16039] do_syscall_64+0x15f/0xf80 [ 787.544431][T16039] ? trace_irq_disable+0x3b/0x140 [ 787.544452][T16039] ? clear_bhb_loop+0x40/0x90 [ 787.544473][T16039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.544491][T16039] RIP: 0033:0x7fe858a6ce59 [ 787.544510][T16039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.544525][T16039] RSP: 002b:00007fe856cbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 787.544544][T16039] RAX: ffffffffffffffda RBX: 00007fe858ce5fa0 RCX: 00007fe858a6ce59 [ 787.544557][T16039] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 787.544568][T16039] RBP: 00007fe856cbe090 R08: 0000000000000000 R09: 0000000000000000 [ 787.544580][T16039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.544591][T16039] R13: 00007fe858ce6038 R14: 00007fe858ce5fa0 R15: 00007fff39f87218 [ 787.544620][T16039] [ 787.572489][T16042] netlink: 'syz.4.3082': attribute type 32 has an invalid length. [ 787.921886][T16055] netlink: 'syz.2.3083': attribute type 10 has an invalid length. [ 788.016391][T16055] team0: Device ipvlan0 failed to register rx_handler [ 788.308980][T16053] kvm: kvm [16050]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 788.358473][T16053] kvm: kvm [16050]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 788.363865][T16053] kvm: kvm [16050]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 788.369262][T16053] kvm: kvm [16050]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 788.374642][T16053] kvm: kvm [16050]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 788.784978][T16080] netlink: 'syz.4.3090': attribute type 10 has an invalid length. [ 788.809590][T16080] team0: Device ipvlan0 failed to register rx_handler [ 790.083685][T16090] FAULT_INJECTION: forcing a failure. [ 790.083685][T16090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.083718][T16090] CPU: 0 UID: 0 PID: 16090 Comm: syz.4.3095 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 790.083743][T16090] Tainted: [L]=SOFTLOCKUP [ 790.083749][T16090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 790.083759][T16090] Call Trace: [ 790.083767][T16090] [ 790.083774][T16090] dump_stack_lvl+0xe8/0x150 [ 790.083801][T16090] should_fail_ex+0x46b/0x600 [ 790.083831][T16090] _copy_from_user+0x2d/0xb0 [ 790.083853][T16090] ___sys_sendmsg+0x1c6/0x360 [ 790.083874][T16090] ? __lock_acquire+0x6b5/0x2cf0 [ 790.083902][T16090] ? __pfx____sys_sendmsg+0x10/0x10 [ 790.083955][T16090] ? __fget_files+0x2a/0x420 [ 790.083971][T16090] ? __fget_files+0x3a6/0x420 [ 790.083995][T16090] __x64_sys_sendmsg+0x1c3/0x2a0 [ 790.084017][T16090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 790.084045][T16090] ? __pfx_ksys_write+0x10/0x10 [ 790.084072][T16090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.084091][T16090] do_syscall_64+0x15f/0xf80 [ 790.084111][T16090] ? trace_irq_disable+0x3b/0x140 [ 790.084132][T16090] ? clear_bhb_loop+0x40/0x90 [ 790.084154][T16090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.084171][T16090] RIP: 0033:0x7f8cebfece59 [ 790.084188][T16090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.084203][T16090] RSP: 002b:00007f8cea23e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 790.084223][T16090] RAX: ffffffffffffffda RBX: 00007f8cec265fa0 RCX: 00007f8cebfece59 [ 790.084236][T16090] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 790.084255][T16090] RBP: 00007f8cea23e090 R08: 0000000000000000 R09: 0000000000000000 [ 790.084268][T16090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.084279][T16090] R13: 00007f8cec266038 R14: 00007f8cec265fa0 R15: 00007ffd92b74508 [ 790.084307][T16090] [ 790.557812][T16107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3100'. [ 790.557835][T16107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3100'. [ 790.626958][T16108] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3097'. [ 790.987550][ T31] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 791.266551][ T31] usb 3-1: device descriptor read/64, error -71 [ 791.326311][T16112] netlink: 'syz.0.3101': attribute type 10 has an invalid length. [ 791.329533][T16112] team0: Device ipvlan0 failed to register rx_handler [ 791.517229][ T31] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 792.046672][ T31] usb 3-1: device descriptor read/64, error -71 [ 792.087125][T16116] netlink: 'syz.1.3102': attribute type 10 has an invalid length. [ 792.158956][ T31] usb usb3-port1: attempt power cycle [ 792.213660][T16116] team0: Device ipvlan0 failed to register rx_handler [ 792.596551][ T31] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 792.617597][ T31] usb 3-1: device descriptor read/8, error -71 [ 792.876538][ T31] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 792.898567][ T31] usb 3-1: device descriptor read/8, error -71 [ 793.007153][ T31] usb usb3-port1: unable to enumerate USB device [ 793.438719][ T31] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 794.426219][ T5615] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 794.432564][T16153] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3112'. [ 795.228826][ T5615] usb 5-1: Using ep0 maxpacket: 32 [ 795.429594][ T5615] usb 5-1: config 0 interface 0 has no altsetting 0 [ 795.429620][ T5615] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 795.429632][ T5615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.435222][ T5615] usb 5-1: config 0 descriptor?? [ 795.658978][T16158] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3113'. [ 796.706712][ T5615] hid_parser_main: 37 callbacks suppressed [ 796.706735][ T5615] hid-retrode 0003:0403:97C1.000E: unknown main item tag 0x0 [ 796.706763][ T5615] hid-retrode 0003:0403:97C1.000E: unknown main item tag 0x0 [ 796.706786][ T5615] hid-retrode 0003:0403:97C1.000E: unknown main item tag 0x0 [ 796.706809][ T5615] hid-retrode 0003:0403:97C1.000E: unknown main item tag 0x0 [ 796.706832][ T5615] hid-retrode 0003:0403:97C1.000E: unknown main item tag 0x0 [ 796.706854][ T5615] hid-retrode 0003:0403:97C1.000E: unknown main item tag 0x0 [ 796.706878][ T5615] hid-retrode 0003:0403:97C1.000E: unknown main item tag 0x0 [ 796.706901][ T5615] hid-retrode 0003:0403:97C1.000E: unknown main item tag 0x0 [ 796.706924][ T5615] hid-retrode 0003:0403:97C1.000E: unknown main item tag 0x0 [ 796.706949][ T5615] hid-retrode 0003:0403:97C1.000E: unknown main item tag 0x0 [ 796.726169][ T5615] hid-retrode 0003:0403:97C1.000E: hidraw0: USB HID v0.04 Device [HID 0403:97c1] on usb-dummy_hcd.4-1/input0 [ 796.927362][T16148] netlink: 'syz.4.3111': attribute type 10 has an invalid length. [ 796.949159][T11090] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 797.009688][ T5615] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 797.116572][T11090] usb 1-1: Using ep0 maxpacket: 32 [ 797.119826][T11090] usb 1-1: config 0 interface 0 has no altsetting 0 [ 797.119863][T11090] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 797.119885][T11090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.157768][ T5615] usb 3-1: Using ep0 maxpacket: 32 [ 797.162539][T11090] usb 1-1: config 0 descriptor?? [ 797.169260][ T5615] usb 3-1: config 0 interface 0 has no altsetting 0 [ 797.169297][ T5615] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 797.169318][ T5615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.232894][ T5615] usb 3-1: config 0 descriptor?? [ 797.492631][T16148] team0: Port device 4@0Ù added [ 797.597093][ T10] usb 5-1: USB disconnect, device number 90 [ 797.635305][T11090] hid-retrode 0003:0403:97C1.000F: hidraw1: USB HID v0.04 Device [HID 0403:97c1] on usb-dummy_hcd.0-1/input0 [ 797.849065][T16161] netlink: 'syz.0.3115': attribute type 10 has an invalid length. [ 797.876748][T16163] netlink: 'syz.2.3116': attribute type 10 has an invalid length. [ 797.951470][T16161] team0: Port device 4@0Ù added [ 797.986740][ T5615] hid-retrode 0003:0403:97C1.0010: hidraw0: USB HID v0.04 Device [HID 0403:97c1] on usb-dummy_hcd.2-1/input0 [ 798.040946][ T9] usb 1-1: USB disconnect, device number 79 [ 798.147195][T11090] usb 3-1: USB disconnect, device number 68 [ 798.153565][T16180] netlink: 'syz.3.3118': attribute type 10 has an invalid length. [ 798.153600][T16180] ipvlan0: entered allmulticast mode [ 798.153615][T16180] veth0_vlan: entered allmulticast mode [ 798.220201][T16177] fido_id[16177]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 798.239627][T16180] `: Device ipvlan0 failed to register rx_handler [ 798.371051][T16183] netlink: 'syz.4.3119': attribute type 10 has an invalid length. [ 798.373639][T16183] team0: Device ipvlan0 failed to register rx_handler [ 798.669448][T16190] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 799.111930][T16204] 9p: Bad value for 'rfdno' [ 799.209904][T16206] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3124'. [ 802.056998][ T5589] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 802.706089][ T5589] usb 4-1: Using ep0 maxpacket: 32 [ 802.920539][ T5589] usb 4-1: config 0 interface 0 has no altsetting 0 [ 802.920564][ T5589] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 802.920576][ T5589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.966012][ T5589] usb 4-1: config 0 descriptor?? [ 803.246935][T16227] netlink: 'syz.4.3132': attribute type 10 has an invalid length. [ 803.305999][T16227] team0: Device ipvlan0 failed to register rx_handler [ 803.459218][ T5589] hid_parser_main: 131 callbacks suppressed [ 803.459240][ T5589] hid-retrode 0003:0403:97C1.0011: unknown main item tag 0x0 [ 803.459268][ T5589] hid-retrode 0003:0403:97C1.0011: unknown main item tag 0x0 [ 803.459292][ T5589] hid-retrode 0003:0403:97C1.0011: unknown main item tag 0x0 [ 803.459314][ T5589] hid-retrode 0003:0403:97C1.0011: unknown main item tag 0x0 [ 803.459337][ T5589] hid-retrode 0003:0403:97C1.0011: unknown main item tag 0x0 [ 803.459364][ T5589] hid-retrode 0003:0403:97C1.0011: unknown main item tag 0x0 [ 803.459387][ T5589] hid-retrode 0003:0403:97C1.0011: unknown main item tag 0x0 [ 803.459410][ T5589] hid-retrode 0003:0403:97C1.0011: unknown main item tag 0x0 [ 803.459433][ T5589] hid-retrode 0003:0403:97C1.0011: unknown main item tag 0x0 [ 803.459456][ T5589] hid-retrode 0003:0403:97C1.0011: unknown main item tag 0x0 [ 803.562996][ T5589] hid-retrode 0003:0403:97C1.0011: hidraw0: USB HID v0.04 Device [HID 0403:97c1] on usb-dummy_hcd.3-1/input0 [ 803.578755][T16224] netlink: 'syz.3.3131': attribute type 10 has an invalid length. [ 803.782865][T16224] `: Port device 4@0Ù added [ 803.812304][ T9] usb 4-1: USB disconnect, device number 65 [ 803.984044][T16245] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3135'. [ 805.306910][T16247] kvm_pr_unimpl_wrmsr: 6 callbacks suppressed [ 805.306938][T16247] kvm: kvm [16246]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 805.312545][T16247] kvm: kvm [16246]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 805.317990][T16247] kvm: kvm [16246]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 805.323426][T16247] kvm: kvm [16246]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 805.328873][T16247] kvm: kvm [16246]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 805.334369][T16247] kvm: kvm [16246]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 805.339777][T16247] kvm: kvm [16246]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 805.345234][T16247] kvm: kvm [16246]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 805.350713][T16247] kvm: kvm [16246]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 805.356156][T16247] kvm: kvm [16246]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 805.683712][T16258] batadv_slave_1: entered promiscuous mode [ 805.747656][T16260] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 805.891068][T16257] batadv_slave_1: left promiscuous mode [ 809.067883][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.068152][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.487853][T16293] netlink: 'syz.1.3150': attribute type 10 has an invalid length. [ 811.512441][T16293] team0: Device ipvlan0 failed to register rx_handler [ 811.768081][T16300] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3148'. [ 813.103202][T16308] netlink: 'syz.3.3147': attribute type 4 has an invalid length. [ 813.103224][T16308] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3147'. [ 813.216018][T16311] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3153'. [ 814.545751][T16318] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3156'. [ 814.670799][T16323] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3155'. [ 815.607952][T16328] netlink: 'syz.2.3159': attribute type 32 has an invalid length. [ 815.608264][T16326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3158'. [ 815.608282][T16326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3158'. [ 816.632678][T16348] netlink: 'syz.1.3164': attribute type 10 has an invalid length. [ 816.860750][T16355] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3161'. [ 817.763981][T16348] team0: Device ipvlan0 failed to register rx_handler [ 817.951033][T16361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3166'. [ 817.951057][T16361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3166'. [ 818.160017][ T9] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 818.276634][T16370] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3167'. [ 819.023635][T16371] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3168'. [ 819.088481][T16372] tmpfs: Bad value for 'mpol' [ 819.122874][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 118, changing to 10 [ 819.122908][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 42100, setting to 1024 [ 819.122948][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 819.122967][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.177802][ T9] usb 3-1: config 0 descriptor?? [ 819.183072][T16359] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 819.420489][ T9] ath6kl: Failed to submit usb control message: -71 [ 819.420534][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 819.420547][ T9] ath6kl: Unable to send get target info: -71 [ 819.464676][ T9] ath6kl: Failed to init ath6kl core: -71 [ 819.507520][ T9] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 819.546948][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3172'. [ 819.546972][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3172'. [ 819.565472][ T9] usb 3-1: USB disconnect, device number 69 [ 820.018290][ T31] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 820.276678][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 820.285606][ T31] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 820.285636][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.285654][ T31] usb 4-1: Product: syz [ 820.285666][ T31] usb 4-1: Manufacturer: syz [ 820.285678][ T31] usb 4-1: SerialNumber: syz [ 820.305366][ T31] usb 4-1: config 0 descriptor?? [ 820.312477][ T31] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 820.329415][ T31] usb 4-1: Detected FT-X [ 821.118703][T16394] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3176'. [ 821.461027][T16394] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input44 [ 822.789262][T16399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.817549][T16399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.591642][T16404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3179'. [ 825.591666][T16404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3179'. [ 826.351338][ T31] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 826.351861][ T31] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 826.371298][ T31] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 826.382681][ T31] usb 4-1: USB disconnect, device number 66 [ 826.419603][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 826.610033][ T31] ftdi_sio 4-1:0.0: device disconnected [ 826.739774][T16413] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3180'. [ 827.629734][T16421] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3182'. [ 827.689161][T16422] tmpfs: Bad value for 'mpol' [ 827.936115][T16431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3188'. [ 827.936150][T16431] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3188'. [ 829.658155][T16448] FAULT_INJECTION: forcing a failure. [ 829.658155][T16448] name failslab, interval 1, probability 0, space 0, times 0 [ 829.658191][T16448] CPU: 0 UID: 0 PID: 16448 Comm: syz.3.3192 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 829.658215][T16448] Tainted: [L]=SOFTLOCKUP [ 829.658221][T16448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 829.658231][T16448] Call Trace: [ 829.658239][T16448] [ 829.658247][T16448] dump_stack_lvl+0xe8/0x150 [ 829.658272][T16448] should_fail_ex+0x46b/0x600 [ 829.658303][T16448] should_failslab+0xa8/0x100 [ 829.658325][T16448] __kmalloc_noprof+0xdf/0x7b0 [ 829.658342][T16448] ? kfree+0x4d/0x6c0 [ 829.658359][T16448] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 829.658391][T16448] tomoyo_realpath_from_path+0xe3/0x5d0 [ 829.658418][T16448] ? tomoyo_domain+0xd8/0x130 [ 829.658442][T16448] ? tomoyo_path_number_perm+0x219/0x630 [ 829.658465][T16448] tomoyo_path_number_perm+0x246/0x630 [ 829.658489][T16448] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 829.658511][T16448] ? __lock_acquire+0x6b5/0x2cf0 [ 829.658537][T16448] ? do_raw_spin_lock+0x12b/0x2f0 [ 829.658589][T16448] ? __fget_files+0x2a/0x420 [ 829.658609][T16448] ? __fget_files+0x2a/0x420 [ 829.658625][T16448] ? __fget_files+0x3a6/0x420 [ 829.658640][T16448] ? __fget_files+0x2a/0x420 [ 829.658660][T16448] security_file_ioctl+0xc3/0x2a0 [ 829.658686][T16448] __se_sys_ioctl+0x47/0x170 [ 829.658707][T16448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.658728][T16448] do_syscall_64+0x15f/0xf80 [ 829.658748][T16448] ? trace_irq_disable+0x3b/0x140 [ 829.658767][T16448] ? clear_bhb_loop+0x40/0x90 [ 829.658788][T16448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.658806][T16448] RIP: 0033:0x7fbf6a1cce59 [ 829.658823][T16448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.658837][T16448] RSP: 002b:00007fbf6841e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 829.658857][T16448] RAX: ffffffffffffffda RBX: 00007fbf6a445fa0 RCX: 00007fbf6a1cce59 [ 829.658870][T16448] RDX: 00002000000000c0 RSI: 00000000400442c8 RDI: 0000000000000007 [ 829.658889][T16448] RBP: 00007fbf6841e090 R08: 0000000000000000 R09: 0000000000000000 [ 829.658900][T16448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.658910][T16448] R13: 00007fbf6a446038 R14: 00007fbf6a445fa0 R15: 00007ffda29d65c8 [ 829.658936][T16448] [ 829.662274][T16448] ERROR: Out of memory at tomoyo_realpath_from_path. [ 829.756677][ T5589] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 829.922317][ T5589] usb 3-1: Using ep0 maxpacket: 32 [ 829.949092][ T5589] usb 3-1: config 0 interface 0 has no altsetting 0 [ 829.949130][ T5589] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 829.949151][ T5589] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.962865][ T5589] usb 3-1: config 0 descriptor?? [ 830.130206][ T5588] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 830.157157][T16456] netlink: 'syz.1.3178': attribute type 10 has an invalid length. [ 830.304136][ T5588] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.304160][ T5588] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 830.314321][ T5588] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 830.314350][ T5588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.314952][ T5588] usb 5-1: Product: syz [ 830.314968][ T5588] usb 5-1: Manufacturer: syz [ 830.314981][ T5588] usb 5-1: SerialNumber: syz [ 830.350979][ T5588] usb 5-1: config 0 descriptor?? [ 830.404451][ T5589] hid_parser_main: 37 callbacks suppressed [ 830.404475][ T5589] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 830.404505][ T5589] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 830.404528][ T5589] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 830.404552][ T5589] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 830.404578][ T5589] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 830.404602][ T5589] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 830.404626][ T5589] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 830.404658][ T5589] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 830.404685][ T5589] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 830.404711][ T5589] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 830.406208][T16456] team0: Device ipvlan0 failed to register rx_handler [ 830.486883][ T5589] hid-retrode 0003:0403:97C1.0012: hidraw0: USB HID v0.04 Device [HID 0403:97c1] on usb-dummy_hcd.2-1/input0 [ 830.652187][T16440] netlink: 'syz.2.3190': attribute type 10 has an invalid length. [ 830.696106][T16464] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3196'. [ 830.747845][ T5589] usb 3-1: USB disconnect, device number 70 [ 830.895079][T16471] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3197'. [ 831.086007][T16481] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3199'. [ 831.150932][T16482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.153069][T16482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.320120][T13335] Bluetooth: hci1: link tx timeout [ 831.320326][T13335] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 831.453594][T13335] Bluetooth: hci1: link tx timeout [ 831.453609][T13335] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 831.522596][T13335] Bluetooth: hci1: link tx timeout [ 831.522615][T13335] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 831.963302][T13335] Bluetooth: hci1: link tx timeout [ 831.970749][T13335] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 832.343003][T13335] Bluetooth: hci1: link tx timeout [ 832.343063][T13335] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 833.441461][T13335] Bluetooth: hci1: command 0x0406 tx timeout [ 833.542565][ T5589] usb 5-1: USB disconnect, device number 91 [ 833.564701][T13335] Bluetooth: hci1: link tx timeout [ 835.195875][T16528] netlink: 'syz.1.3207': attribute type 10 has an invalid length. [ 835.208028][T16528] team0: Device ipvlan0 failed to register rx_handler [ 836.961433][T16554] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3215'. [ 840.280541][T16579] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 840.612994][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3225'. [ 840.613025][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3225'. [ 840.644200][T16592] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3228'. [ 840.644846][T16594] netlink: 'syz.4.3224': attribute type 10 has an invalid length. [ 840.659953][T16594] team0: Device ipvlan0 failed to register rx_handler [ 840.705394][T16597] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3227'. [ 841.662273][T16617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3233'. [ 841.781595][T16615] input: syz1 as /devices/virtual/input/input46 [ 841.834687][T16615] input: failed to attach handler evdev to device input46, error: -4 [ 842.114130][T16624] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3235'. [ 844.485320][T16652] netlink: 'syz.0.3244': attribute type 10 has an invalid length. [ 844.557499][T16652] team0: Device ipvlan0 failed to register rx_handler [ 845.997641][ T10] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 846.217601][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 846.357779][ T10] usb 5-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 846.357906][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 846.357943][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 846.358009][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 846.358074][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 846.461646][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 846.461707][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 846.461727][ T10] usb 5-1: Manufacturer: syz [ 846.808233][ T10] usb 5-1: config 0 descriptor?? [ 848.594356][T16681] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3251'. [ 849.596679][ T10] rc_core: IR keymap rc-hauppauge not found [ 849.596700][ T10] Registered IR keymap rc-empty [ 849.597872][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 849.616584][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 849.638789][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 849.641793][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input47 [ 849.645047][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 849.656639][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 849.676785][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 849.696767][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 849.716620][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 849.736703][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 849.756636][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 849.776635][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 849.799751][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 849.817758][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 849.855579][ T10] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 849.855602][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 849.886604][ T10] usb 5-1: USB disconnect, device number 92 [ 849.906333][T16690] 9p: Bad value for 'rfdno' [ 851.552166][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3257'. [ 851.552224][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3257'. [ 854.634681][T16730] netlink: 'syz.2.3260': attribute type 10 has an invalid length. [ 854.655995][T16730] team0: Device ipvlan0 failed to register rx_handler [ 855.156539][ T31] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 855.310040][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 118, changing to 10 [ 855.310072][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 42100, setting to 1024 [ 855.310113][ T31] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 855.310136][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.367471][ T31] usb 5-1: config 0 descriptor?? [ 855.369936][T16741] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 857.951992][ T31] ath6kl: Failed to submit usb control message: -71 [ 857.952042][ T31] ath6kl: unable to send the bmi data to the device: -71 [ 857.952057][ T31] ath6kl: Unable to send get target info: -71 [ 858.978270][ T5797] ------------[ cut here ]------------ [ 858.978286][ T5797] kcov->t != t [ 858.978297][ T5797] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#0: udevd/5797 [ 858.978340][ T5797] Modules linked in: [ 858.978362][ T5797] CPU: 0 UID: 0 PID: 5797 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 858.978389][ T5797] Tainted: [L]=SOFTLOCKUP [ 858.978396][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 858.978407][ T5797] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 858.978428][ T5797] Code: 10 00 00 48 8b bb 90 00 00 00 e8 36 b3 55 00 48 89 df 5b 41 5e 41 5f e9 29 70 5b 00 7c 1c 5b 41 5e 41 5f e9 8d 1b 5c 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 9b b3 5a 09 48 89 df be 03 00 [ 858.978444][ T5797] RSP: 0018:ffffc900057a7d20 EFLAGS: 00010202 [ 858.978462][ T5797] RAX: 3f88fc6d8250b100 RBX: ffff8880354bd100 RCX: 0000000000000000 [ 858.978482][ T5797] RDX: 00000000a3061da0 RSI: ffffffff8ba74fc0 RDI: 00000000ffffffff [ 858.978497][ T5797] RBP: ffffc900057a7e78 R08: ffffffff8b1f2900 R09: ffffffff8dfc8140 [ 858.978511][ T5797] R10: dffffc0000000000 R11: fffffbfff1f11dff R12: dffffc0000000000 [ 858.978525][ T5797] R13: 0000000000000000 R14: ffff8880354bd108 R15: ffff88801eb08000 [ 858.978540][ T5797] FS: 00007fb0d32af880(0000) GS:ffff888126176000(0000) knlGS:0000000000000000 [ 858.978556][ T5797] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 858.978569][ T5797] CR2: 0000560cbf097a38 CR3: 0000000036a46000 CR4: 00000000003526f0 [ 858.978587][ T5797] Call Trace: [ 858.978595][ T5797] [ 858.978606][ T5797] do_exit+0x150/0x22c0 [ 858.978632][ T5797] ? lockdep_hardirqs_on+0x7a/0x110 [ 858.978656][ T5797] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 858.978687][ T5797] ? __pfx_do_exit+0x10/0x10 [ 858.978711][ T5797] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 858.978734][ T5797] ? __rcu_read_unlock+0x83/0xe0 [ 858.978759][ T5797] ? rt_spin_unlock+0x160/0x200 [ 858.978780][ T5797] do_group_exit+0x21b/0x2d0 [ 858.978807][ T5797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.978829][ T5797] __x64_sys_exit_group+0x3f/0x40 [ 858.978854][ T5797] x64_sys_call+0x221a/0x2240 [ 858.978877][ T5797] do_syscall_64+0x15f/0xf80 [ 858.978918][ T5797] ? trace_irq_disable+0x3b/0x140 [ 858.978941][ T5797] ? clear_bhb_loop+0x40/0x90 [ 858.978964][ T5797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.978983][ T5797] RIP: 0033:0x7fb0d33e76c5 [ 858.979002][ T5797] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 858.979018][ T5797] RSP: 002b:00007ffdb522d598 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 858.979038][ T5797] RAX: ffffffffffffffda RBX: 0000560cbf0a0b20 RCX: 00007fb0d33e76c5 [ 858.979051][ T5797] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 858.979065][ T5797] RBP: 0000560cbf08e910 R08: 0000000000000000 R09: 0000000000000000 [ 858.979077][ T5797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.979088][ T5797] R13: 00007ffdb522d5e0 R14: 0000000000000000 R15: 0000000000000000 [ 858.979119][ T5797] [ 858.979135][ T5797] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 858.979151][ T5797] CPU: 0 UID: 0 PID: 5797 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 858.979176][ T5797] Tainted: [L]=SOFTLOCKUP [ 858.979183][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 858.979194][ T5797] Call Trace: [ 858.979202][ T5797] [ 858.979210][ T5797] vpanic+0x56c/0xa60 [ 858.979233][ T5797] ? __pfx__printk+0x10/0x10 [ 858.979259][ T5797] ? __pfx_vpanic+0x10/0x10 [ 858.979279][ T5797] ? is_bpf_text_address+0x292/0x2b0 [ 858.979303][ T5797] ? is_bpf_text_address+0x26/0x2b0 [ 858.979335][ T5797] panic+0xc5/0xd0 [ 858.979356][ T5797] ? __pfx_panic+0x10/0x10 [ 858.979399][ T5797] __warn+0x315/0x4c0 [ 858.979420][ T5797] ? kcov_task_exit+0xf5/0x160 [ 858.979442][ T5797] ? kcov_task_exit+0xf5/0x160 [ 858.979462][ T5797] __report_bug+0x29a/0x540 [ 858.979498][ T5797] ? kcov_task_exit+0xf5/0x160 [ 858.979518][ T5797] ? __pfx___report_bug+0x10/0x10 [ 858.979539][ T5797] ? irqentry_exit+0x218/0x760 [ 858.979560][ T5797] ? trace_irq_disable+0x3b/0x140 [ 858.979588][ T5797] ? kcov_task_exit+0xf7/0x160 [ 858.979606][ T5797] ? kcov_task_exit+0xf5/0x160 [ 858.979632][ T5797] ? kcov_task_exit+0xf5/0x160 [ 858.979651][ T5797] report_bug+0x16a/0x220 [ 858.979674][ T5797] ? kcov_task_exit+0xf5/0x160 [ 858.979692][ T5797] ? kcov_task_exit+0xf7/0x160 [ 858.979710][ T5797] handle_bug+0x9c/0x200 [ 858.979735][ T5797] exc_invalid_op+0x1a/0x50 [ 858.979760][ T5797] asm_exc_invalid_op+0x1a/0x20 [ 858.979777][ T5797] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 858.979798][ T5797] Code: 10 00 00 48 8b bb 90 00 00 00 e8 36 b3 55 00 48 89 df 5b 41 5e 41 5f e9 29 70 5b 00 7c 1c 5b 41 5e 41 5f e9 8d 1b 5c 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 9b b3 5a 09 48 89 df be 03 00 [ 858.979814][ T5797] RSP: 0018:ffffc900057a7d20 EFLAGS: 00010202 [ 858.979831][ T5797] RAX: 3f88fc6d8250b100 RBX: ffff8880354bd100 RCX: 0000000000000000 [ 858.979845][ T5797] RDX: 00000000a3061da0 RSI: ffffffff8ba74fc0 RDI: 00000000ffffffff [ 858.979858][ T5797] RBP: ffffc900057a7e78 R08: ffffffff8b1f2900 R09: ffffffff8dfc8140 [ 858.979872][ T5797] R10: dffffc0000000000 R11: fffffbfff1f11dff R12: dffffc0000000000 [ 858.979887][ T5797] R13: 0000000000000000 R14: ffff8880354bd108 R15: ffff88801eb08000 [ 858.979908][ T5797] ? rt_spin_lock+0x1e0/0x400 [ 858.979936][ T5797] do_exit+0x150/0x22c0 [ 858.979959][ T5797] ? lockdep_hardirqs_on+0x7a/0x110 [ 858.979981][ T5797] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 858.980009][ T5797] ? __pfx_do_exit+0x10/0x10 [ 858.980033][ T5797] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 858.980056][ T5797] ? __rcu_read_unlock+0x83/0xe0 [ 858.980080][ T5797] ? rt_spin_unlock+0x160/0x200 [ 858.980103][ T5797] do_group_exit+0x21b/0x2d0 [ 858.980129][ T5797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.980149][ T5797] __x64_sys_exit_group+0x3f/0x40 [ 858.980173][ T5797] x64_sys_call+0x221a/0x2240 [ 858.980196][ T5797] do_syscall_64+0x15f/0xf80 [ 858.980218][ T5797] ? trace_irq_disable+0x3b/0x140 [ 858.980238][ T5797] ? clear_bhb_loop+0x40/0x90 [ 858.980262][ T5797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.980281][ T5797] RIP: 0033:0x7fb0d33e76c5 [ 858.980297][ T5797] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 858.980312][ T5797] RSP: 002b:00007ffdb522d598 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 858.980331][ T5797] RAX: ffffffffffffffda RBX: 0000560cbf0a0b20 RCX: 00007fb0d33e76c5 [ 858.980345][ T5797] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 858.980358][ T5797] RBP: 0000560cbf08e910 R08: 0000000000000000 R09: 0000000000000000 [ 858.980371][ T5797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.980383][ T5797] R13: 00007ffdb522d5e0 R14: 0000000000000000 R15: 0000000000000000 [ 858.980413][ T5797] [ 858.981197][ T5797] Kernel Offset: disabled