last executing test programs: 12m9.262388372s ago: executing program 0 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000e00)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff0100"/28], 0x110) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x10, '\x00', @c}) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x82002, 0x105) io_submit(0x0, 0x2, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000000)="92545cd7", 0x4, 0xc, 0x0, 0x0, r4}, 0x0]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000226111540000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 12m7.588933085s ago: executing program 4 (id=31): socket$inet_sctp(0x2, 0x5, 0x84) close(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000240)) writev(r5, &(0x7f0000000100), 0x0) close_range(r4, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100"/47, @ANYRES32=0x0, @ANYRES32=0x0], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000000c0)=0x10046, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 12m5.302803409s ago: executing program 4 (id=34): socket$inet_sctp(0x2, 0x5, 0x84) close(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000000240)) writev(r4, &(0x7f0000000100), 0x0) close_range(r3, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100"/47, @ANYRES32=0x0, @ANYRES32=0x0], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000000c0)=0x10046, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 12m3.972199897s ago: executing program 4 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000e00)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff0100"/28], 0x110) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x10, '\x00', @c}) chdir(0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x82002, 0x105) io_submit(0x0, 0x2, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000000)="92545cd7", 0x4, 0xc, 0x0, 0x0, r4}, 0x0]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000226111540000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 12m3.717638298s ago: executing program 0 (id=38): socket$inet_sctp(0x2, 0x5, 0x84) close(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000240)) writev(r5, &(0x7f0000000100), 0x0) close_range(r4, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100"/47, @ANYRES32=0x0, @ANYRES32=0x0], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000000c0)=0x10046, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 11m59.746116492s ago: executing program 0 (id=43): socket$inet_sctp(0x2, 0x5, 0x84) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000240)) writev(r5, &(0x7f0000000100), 0x0) close_range(r4, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100"/47, @ANYRES32=0x0, @ANYRES32=0x0], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000000c0)=0x10046, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 11m59.745495403s ago: executing program 4 (id=44): socket$inet_sctp(0x2, 0x5, 0x84) close(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000240)) writev(r5, &(0x7f0000000100), 0x0) close_range(r4, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100"/47, @ANYRES32=0x0, @ANYRES32=0x0], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000000c0)=0x10046, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 11m56.247550311s ago: executing program 0 (id=48): socket$inet_sctp(0x2, 0x5, 0x84) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000240)) writev(r5, &(0x7f0000000100), 0x0) close_range(r4, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100"/47, @ANYRES32=0x0, @ANYRES32=0x0], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000000c0)=0x10046, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 11m56.24619428s ago: executing program 4 (id=49): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000e00)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff0100"/28], 0x110) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x10, '\x00', @c}) chdir(0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x82002, 0x105) io_submit(0x0, 0x2, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000000)="92545cd7", 0x4, 0xc, 0x0, 0x0, r4}, 0x0]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000226111540000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 11m52.654900184s ago: executing program 4 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000e00)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff0100"/28], 0x110) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x10, '\x00', @c}) chdir(0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x82002, 0x105) io_submit(0x0, 0x2, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8, r3, &(0x7f0000000000)="92545cd7", 0x4, 0xc, 0x0, 0x0, r3}, 0x0]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000226111540000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 11m52.634035561s ago: executing program 0 (id=53): socket$inet_sctp(0x2, 0x5, 0x84) close(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) writev(r5, &(0x7f0000000100), 0x0) close_range(r4, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100"/47, @ANYRES32=0x0, @ANYRES32=0x0], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000000c0)=0x10046, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 11m48.704807644s ago: executing program 0 (id=56): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x400c844) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setrlimit(0x7, &(0x7f0000000380)={0x1, 0x9}) io_submit(0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) syslog(0x3, &(0x7f00000004c0)=""/164, 0xa4) socket$alg(0x26, 0x5, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) 11m35.880875255s ago: executing program 32 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000e00)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff0100"/28], 0x110) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x10, '\x00', @c}) chdir(0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x82002, 0x105) io_submit(0x0, 0x2, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8, r3, &(0x7f0000000000)="92545cd7", 0x4, 0xc, 0x0, 0x0, r3}, 0x0]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000226111540000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 11m31.338773793s ago: executing program 33 (id=56): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x400c844) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setrlimit(0x7, &(0x7f0000000380)={0x1, 0x9}) io_submit(0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) syslog(0x3, &(0x7f00000004c0)=""/164, 0xa4) socket$alg(0x26, 0x5, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) 8m39.222230898s ago: executing program 3 (id=275): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) geteuid() r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, 0x0, 0x24000840) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0) 8m37.175105812s ago: executing program 3 (id=279): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8m32.746589233s ago: executing program 3 (id=282): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) geteuid() r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, 0x0, 0x24000840) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 8m30.721469445s ago: executing program 3 (id=283): r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) sendmsg$tipc(r0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) 8m29.042464483s ago: executing program 3 (id=285): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xf3a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 8m27.902374783s ago: executing program 3 (id=287): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) geteuid() r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, 0x0, 0x24000840) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, 0x0) 8m9.86042967s ago: executing program 34 (id=287): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) geteuid() r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, 0x0, 0x24000840) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, 0x0) 18.273537969s ago: executing program 6 (id=1041): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x20000014) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, 0x0, 0x0) 15.338393635s ago: executing program 7 (id=1046): set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)='%-010d \x00'}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e21}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe6, 0xe6, 0x7, [@var={0xd, 0x0, 0x0, 0xe, 0x1, 0x2}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x10, 0x2}, {0xc, 0x3}, {0x0, 0x2}, {0x3, 0x4}, {0x8}, {0x8, 0x1}, {0xf, 0x4}, {0x2, 0x2}, {0x3, 0x4}, {0xf}]}, @ptr={0x10, 0x0, 0x0, 0x2, 0x3}, @restrict={0xf, 0x0, 0x0, 0xb, 0x1}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x3}, @datasec={0x9, 0x6, 0x0, 0xf, 0x2, [{0x1, 0x5b576216, 0x3}, {0x3, 0xc24c, 0x4}, {0x1, 0x1, 0xd}, {0x5, 0xffff, 0x100}, {0x4, 0x1}, {0x5, 0x0, 0x9}], "68ff"}]}, {0x0, [0x30, 0x0, 0x2e, 0x61, 0x0]}}, &(0x7f00000007c0)=""/237, 0x107, 0xed, 0x0, 0x5}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000940)={0x8, 0x0}, 0x8) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r6, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c001}, 0x40000940) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00000000000000fe8000000000000000000000000000bb000000000a"], 0xe0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x6, 0x1c, &(0x7f0000000480)=@raw=[@jmp={0x5, 0x0, 0x2, 0xb, 0x7, 0x1, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101}, @map_idx={0x18, 0x9}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}], &(0x7f00000000c0)='syzkaller\x00', 0x7ca, 0xce, &(0x7f0000000580)=""/206, 0x41100, 0x1, '\x00', r3, @fallback=0x35, r4, 0x8, &(0x7f00000008c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0xa, 0x6}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)=[r7, r0], &(0x7f0000000a40), 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000067bd7b20221802327daa0102030109021200010000100009042a02009a4c11004316227c50bf41382fbd285604d52a64f3220181a7546552b7fe70ad74e050e73f16ad31b8bde9921066bd803245d17715eb1413b6ac01a17f8796d3917461735f65a203518db3a192f5dd0279bfb9941990035c421c809445c96eb4b444113f8030a7ff2b4fa2f660118a46a9708dfe2c2b4fafeca97f160e86b1d3a574af1391fc5bb46e7e9385ea946756a14032ed0a4ac0ac43f96ddfff0c808c2fba97e639bbbc1754f72ff20b7fd12c72f9d827f73053ae9e85ffee77c56f5ec5"], 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022dfe0000000000090400000283b22b0009"], 0x0) r10 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x2000000, 0x20000) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r10, 0x84, 0x12, &(0x7f0000000c80)=0x4, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0xa, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x4000885) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) 12.501296412s ago: executing program 1 (id=1052): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100, r3}, 0x0) close(r3) close(r2) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x100, r4}, 0x0) landlock_restrict_self(r1, 0x0) 12.425366602s ago: executing program 7 (id=1053): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x1, 0x2, 0xb3ff, 0x0, 0x0, "71a4b85f10d0554b"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)=0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x8400, 0x8, 0x0, 0x10000, 0x1d, "4415264a88b82c521113fb235902af2556c6b6"}) 10.424151336s ago: executing program 7 (id=1057): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040)=0xfffffffc, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xf, {[@global=@item_012={0x1, 0x1, 0x7, 'p'}, @local=@item_4={0x3, 0x2, 0x0, "78057970"}, @main=@item_012={0x2, 0x0, 0x9, "f792"}, @main=@item_4={0x3, 0x0, 0x0, "9ef12d19"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x0, 0x70790578}) bpf$PROG_LOAD(0x5, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0xca, 0x0, 0x2000, 0x1}, 0x10) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB='mpol=default=']) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) memfd_create(&(0x7f0000000100)='\x91\x7f\x00$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95\xceSc(\xa0\v\xde\x1b\xc4\xda\xb8q\xa2\xff\x15\xa59\x0e\xdf\xed\x00l\xba\x18\x13\x833_\xb8\xc9\xf3C\x88u5\x94\x95\x00yh\x9cE\xd0$)\x8eT\x8e\xe5\x00H\xab\x0e\x01!\x19^\xd8Z\t\x00\xef\xea:\x8c\x19\x833\x15\xc0\xcd\xa8', 0x1) 8.559746466s ago: executing program 1 (id=1059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x70bd2e, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20004000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x01\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.547724429s ago: executing program 6 (id=1064): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r3], 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 6.505244853s ago: executing program 5 (id=1065): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000202cd77100304d8b8bb30010203010902120001de0000080904"], 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 6.443903931s ago: executing program 1 (id=1066): prctl$PR_GET_SPECULATION_CTRL(0x22, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac1(0x5, 0xb1, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYRESHEX], 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)="3b80bb", 0x3, r1}, 0x68) get_robust_list(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@enum={0xe, 0x5, 0x0, 0x6, 0x4, [{0x0, 0x3}, {0xf, 0x7}, {0xa}, {0x6, 0x5}, {0xc, 0xbb8d}]}]}, {0x0, [0x2e, 0x61, 0x2e]}}, &(0x7f0000000240)=""/46, 0x51, 0x2e, 0x1, 0x60}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x2, 0x7fe2, 0xffffffff, 0x12}, 0x50) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410, 0x1}}) unshare(0x22020600) unshare(0x2a020400) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f00000000c0)={'veth1_to_hsr\x00', {0x2, 0x0, @local}}) read(r4, &(0x7f0000000280)=""/166, 0xa6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x7e52db258aaa9fa1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000002060104000000000000000005000004050005000a0000000500010007000000480007800500150003000000084309400000000108000640000010ff05000700330000000c00028008000140ac1e00010800094000000006060005404e240000060005404e200000"], 0x6c}, 0x1, 0x0, 0x0, 0x8841}, 0x800) brk(0xcee) 5.268937293s ago: executing program 6 (id=1067): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x1, 0x2, 0xb3ff, 0x0, 0x0, "71a4b85f10d0554b"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)=0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x8400, 0x8, 0x0, 0x10000, 0x1d, "4415264a88b82c521113fb235902af2556c6b6"}) 5.168086426s ago: executing program 2 (id=1068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x70bd2e, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20004000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x01\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60x0) io_submit(r3, 0x1, &(0x7f0000000480)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe18e0b8a6f2fa6e2}]) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000d0605000000000000000000010000090500010007000000050001000700000011000300686173685edb9ea516525e24d56481c83a6e65742c6e6574000000000c000300686173683a6970000500050003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 4.115132437s ago: executing program 5 (id=1072): r0 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$ttys(0xc, 0x2, 0x1) 3.660265657s ago: executing program 1 (id=1073): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r0, &(0x7f00000038c0)=[{0x0}], 0x1) 3.515856343s ago: executing program 1 (id=1074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x20000014) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, 0x0, 0x0) 3.101221008s ago: executing program 5 (id=1075): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0xe, 0x0) 3.01602692s ago: executing program 6 (id=1076): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, 0x0) 2.928373069s ago: executing program 5 (id=1077): syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000001000200000008000300ac1414aa080006000900000021e7099376338d4a5f27b472761928f60601ffa7d857d69fc1aa1654fdc527db47a4054979b790e00ba5f55f7fb6649bf529d27df0abc27eb733501caaa6530abe7475df072aec4d44b9ae65de73d5860747ebede0e1b6ede5f497cb67e060f5e359305b62000557e1ef778770a70a6356d4738fb42b5910f0b9439989b729a32cb5497d65250dbf9338151177cf0adba953723ce76a08aa91eb97"], 0x30}}, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x479af, 0x1, 0x7ffd, 0x400252}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x627, 0x14, 0x43, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.650449376s ago: executing program 7 (id=1078): syz_usb_connect(0x5, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000202cd77100304d8b8bb30010203010902120001de0000080904"], 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) 2.648759188s ago: executing program 5 (id=1079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a08777aa89df3c33edaa000001000001"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x24040010) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0xbf, 0x9, 0x0, 0x0, 0x2}, [@FRA_SRC={0x8, 0x2, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x44044) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r8], 0x1}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc885}, 0xc000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010025bd7000fedbdf2d00000000", @ANYRES32=0x0, @ANYBLOB="10230408000200001400030062647630000000000000000000180016801400018010000600080000000a00000001000000e547b2808efc10927e604feb20a0c0fbf079d3"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) ioctl$TCSETA(r9, 0x5406, &(0x7f0000000000)={0x1, 0x2, 0xb3ff, 0x0, 0x0, "71a4b85f10d0554b"}) ioctl$TIOCPKT(r9, 0x5420, &(0x7f0000000480)=0x1) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000080)={0x8400, 0x8, 0x0, 0x10000, 0x1d, "4415264a88b82c521113fb235902af2556c6b6"}) 2.575922969s ago: executing program 6 (id=1080): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040)=0xfffffffc, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xf, {[@global=@item_012={0x1, 0x1, 0x7, 'p'}, @local=@item_4={0x3, 0x2, 0x0, "78057970"}, @main=@item_012={0x2, 0x0, 0x9, "f792"}, @main=@item_4={0x3, 0x0, 0x0, "9ef12d19"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x0, 0x70790578}) bpf$PROG_LOAD(0x5, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0xca, 0x0, 0x2000, 0x1}, 0x10) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB='mpol=default=']) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 2.532101426s ago: executing program 2 (id=1081): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a08777aa89df3c33edaa000001000001"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x24040010) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0xbf, 0x9, 0x0, 0x0, 0x2}, [@FRA_SRC={0x8, 0x2, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x44044) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r8], 0x1}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc885}, 0xc000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010025bd7000fedbdf2d00000000", @ANYRES32=0x0, @ANYBLOB="10230408000200001400030062647630000000000000000000180016801400018010000600080000000a00000001000000e547b2808efc10927e604feb20a0c0fbf079d3"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) ioctl$TCSETA(r9, 0x5406, &(0x7f0000000000)={0x1, 0x2, 0xb3ff, 0x0, 0x0, "71a4b85f10d0554b"}) ioctl$TIOCPKT(r9, 0x5420, &(0x7f0000000480)=0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.293850335s ago: executing program 5 (id=1082): prctl$PR_GET_SPECULATION_CTRL(0x22, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac1(0x5, 0xb1, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYRESHEX], 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)="3b80bb", 0x3, r1}, 0x68) get_robust_list(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@enum={0xe, 0x5, 0x0, 0x6, 0x4, [{0x0, 0x3}, {0xf, 0x7}, {0xa}, {0x6, 0x5}, {0xc, 0xbb8d}]}]}, {0x0, [0x2e, 0x61, 0x2e]}}, &(0x7f0000000240)=""/46, 0x51, 0x2e, 0x1, 0x60}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x2, 0x7fe2, 0xffffffff, 0x12}, 0x50) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410, 0x1}}) unshare(0x22020600) unshare(0x2a020400) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f00000000c0)={'veth1_to_hsr\x00', {0x2, 0x0, @local}}) read(r4, &(0x7f0000000280)=""/166, 0xa6) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000120a01030000000000000000020000000900020073797a3100000000c6ff03400000000a14000000110001000000000a31e8427d8d46440bcb32bb5489b370bc8c9100cca4d9222dcd69fb3a2916177d49eb21b722138f3b2280dc4bb8fab51314fb510edb0358cf67f661eb14eabd17ff242ac9913563f8924258de0d17ffb950b2470d3494be9be35702ceb2c12b8a564477177ce8709001b093d739090ad78af58f4b34ce26d224709d880000000000000000"], 0x50}}, 0x0) brk(0xcee) 1.208521337s ago: executing program 2 (id=1083): socket$inet6_sctp(0xa, 0x5, 0x84) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.039576915s ago: executing program 2 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a08777aa89df3c33edaa000001000001"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x24040010) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0xbf, 0x9, 0x0, 0x0, 0x2}, [@FRA_SRC={0x8, 0x2, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x44044) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r8], 0x1}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc885}, 0xc000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010025bd7000fedbdf2d00000000", @ANYRES32=0x0, @ANYBLOB="10230408000200001400030062647630000000000000000000180016801400018010000600080000000a00000001000000e547b2808efc10927e604feb20a0c0fbf079d3"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) ioctl$TCSETA(r9, 0x5406, &(0x7f0000000000)={0x1, 0x2, 0xb3ff, 0x0, 0x0, "71a4b85f10d0554b"}) ioctl$TIOCPKT(r9, 0x5420, &(0x7f0000000480)=0x1) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000080)={0x8400, 0x8, 0x0, 0x10000, 0x1d, "4415264a88b82c521113fb235902af2556c6b6"}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1085): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x60240, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010207010320b804020640000102030109021b00010105f07f0904"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002955a4f40f32c19e04ffb0102030109022d00013180090507000000060800091162b367e12306af090505031000810509"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$vim2m(&(0x7f00000005c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000040)={0x0, 0x101c, 0x2, @stepwise={0x408, 0x8, 0x7ff, 0x0, 0xaeae, 0x84a}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff76, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x42800}, 0x4000880) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40804}, 0x44080) r7 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000300)={r8, 0xfffffffa}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x8f37, 0x8000, 0x40, 0x7f, r8}, 0x10) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x5, 0xf7af, 0x5, 0x40, 0x18, "4cb8b910acda715e64ee57062d59a56f2584c4"}) kernel console output (not intermixed with test programs): ve_1 removed [ 639.508005][ T69] team0 (unregistering): Port device team_slave_0 removed [ 640.156949][ T69] team0 (unregistering): Port device team_slave_1 removed [ 640.289022][ T69] team0 (unregistering): Port device team_slave_0 removed [ 640.687817][ T5815] Bluetooth: hci0: command tx timeout [ 641.059634][ T69] team0 (unregistering): Port device team_slave_1 removed [ 641.296495][ T69] team0 (unregistering): Port device team_slave_0 removed [ 645.758088][ T69] team0 (unregistering): Port device team_slave_1 removed [ 645.850255][ T69] team0 (unregistering): Port device team_slave_0 removed [ 647.593018][ T9067] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.593198][ T9067] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.593419][ T9067] bridge_slave_0: entered allmulticast mode [ 647.602212][ T9067] bridge_slave_0: entered promiscuous mode [ 647.617825][ T9067] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.617964][ T9067] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.618135][ T9067] bridge_slave_1: entered allmulticast mode [ 647.636457][ T9067] bridge_slave_1: entered promiscuous mode [ 647.663007][ T8740] veth0_vlan: entered promiscuous mode [ 647.883371][ T9067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.065701][ T9067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.137596][ T9177] netlink: 64 bytes leftover after parsing attributes in process `syz.1.637'. [ 648.759606][ T8740] veth1_vlan: entered promiscuous mode [ 650.038575][ T9067] team0: Port device team_slave_0 added [ 650.056063][ T9067] team0: Port device team_slave_1 added [ 650.308828][ T9067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.308845][ T9067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.308870][ T9067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.311781][ T9067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.311795][ T9067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.311819][ T9067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.279890][ T9067] hsr_slave_0: entered promiscuous mode [ 652.281164][ T9067] hsr_slave_1: entered promiscuous mode [ 652.282070][ T9067] debugfs: 'hsr0' already exists in 'hsr' [ 652.282092][ T9067] Cannot create hsr debugfs directory [ 652.601675][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 652.604176][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 652.605263][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 652.607311][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 652.648452][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 653.475175][ T9224] netlink: 64 bytes leftover after parsing attributes in process `syz.2.645'. [ 654.388138][ T9101] chnl_net:caif_netlink_parms(): no params data found [ 654.687965][ T5815] Bluetooth: hci5: command tx timeout [ 656.768292][ T5815] Bluetooth: hci5: command tx timeout [ 657.699703][ T9101] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.699885][ T9101] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.700077][ T9101] bridge_slave_0: entered allmulticast mode [ 657.738983][ T9101] bridge_slave_0: entered promiscuous mode [ 657.790020][ T9101] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.790133][ T9101] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.790291][ T9101] bridge_slave_1: entered allmulticast mode [ 657.791713][ T9101] bridge_slave_1: entered promiscuous mode [ 658.087525][ T58] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 658.251924][ T58] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 658.255188][ T58] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 658.255215][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.255234][ T58] usb 2-1: Product: syz [ 658.255248][ T58] usb 2-1: Manufacturer: syz [ 658.255261][ T58] usb 2-1: SerialNumber: syz [ 658.309639][ T58] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 658.769470][ T58] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 658.769944][ T58] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 658.769994][ T58] usb 2-1: media controller created [ 658.849513][ T5815] Bluetooth: hci5: command tx timeout [ 658.883061][ T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 659.504791][ T58] usb 2-1: USB disconnect, device number 10 [ 659.545828][ T9101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.601465][ T9101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.768957][ T9101] team0: Port device team_slave_0 added [ 659.818710][ T9101] team0: Port device team_slave_1 added [ 660.928762][ T5815] Bluetooth: hci5: command tx timeout [ 663.419634][ T9101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.419650][ T9101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.419675][ T9101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.899989][ T9101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.900000][ T9101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.900016][ T9101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.917666][ T58] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 664.022251][ T9207] chnl_net:caif_netlink_parms(): no params data found [ 664.074694][ T58] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 664.091070][ T58] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 664.091099][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.091117][ T58] usb 2-1: Product: syz [ 664.091131][ T58] usb 2-1: Manufacturer: syz [ 664.091145][ T58] usb 2-1: SerialNumber: syz [ 664.161089][ T58] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 664.186028][ T9101] hsr_slave_0: entered promiscuous mode [ 664.187319][ T9101] hsr_slave_1: entered promiscuous mode [ 664.201468][ T9101] debugfs: 'hsr0' already exists in 'hsr' [ 664.201490][ T9101] Cannot create hsr debugfs directory [ 664.556329][ T58] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 664.556776][ T58] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 664.556824][ T58] usb 2-1: media controller created [ 664.579705][ T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 664.602750][ T9207] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.602861][ T9207] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.603041][ T9207] bridge_slave_0: entered allmulticast mode [ 664.604398][ T9207] bridge_slave_0: entered promiscuous mode [ 664.991053][ T9207] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.991248][ T9207] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.991481][ T9207] bridge_slave_1: entered allmulticast mode [ 664.994045][ T9207] bridge_slave_1: entered promiscuous mode [ 666.882961][ T809] usb 2-1: USB disconnect, device number 11 [ 667.125330][ T9207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.272495][ T9207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.968437][ T9075] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 670.409134][ T9067] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 670.443066][ T9207] team0: Port device team_slave_0 added [ 670.455717][ T9067] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 670.476395][ T9075] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 670.482943][ T9075] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 670.482970][ T9075] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.482989][ T9075] usb 3-1: Product: syz [ 670.483001][ T9075] usb 3-1: Manufacturer: syz [ 670.483015][ T9075] usb 3-1: SerialNumber: syz [ 670.518036][ T9075] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 670.595276][ T9207] team0: Port device team_slave_1 added [ 670.645390][ T9067] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 670.890593][ T9067] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 670.926645][ T9075] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 670.929332][ T9075] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 670.929386][ T9075] usb 3-1: media controller created [ 670.968908][ T9075] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 671.401104][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.401116][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.401130][ T9207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.451524][ T5875] usb 3-1: USB disconnect, device number 7 [ 671.599840][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.599851][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.599866][ T9207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.858317][ T9207] hsr_slave_0: entered promiscuous mode [ 671.859146][ T9207] hsr_slave_1: entered promiscuous mode [ 671.859668][ T9207] debugfs: 'hsr0' already exists in 'hsr' [ 671.859683][ T9207] Cannot create hsr debugfs directory [ 672.505125][ T9400] netlink: 64 bytes leftover after parsing attributes in process `syz.2.673'. [ 676.495970][ T69] bridge_slave_1: left allmulticast mode [ 676.495996][ T69] bridge_slave_1: left promiscuous mode [ 676.496141][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.549538][ T69] bridge_slave_0: left allmulticast mode [ 676.549557][ T69] bridge_slave_0: left promiscuous mode [ 676.549711][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.641107][ T69] bridge_slave_1: left allmulticast mode [ 676.641127][ T69] bridge_slave_1: left promiscuous mode [ 676.641263][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.699185][ T69] bridge_slave_0: left allmulticast mode [ 676.699214][ T69] bridge_slave_0: left promiscuous mode [ 676.699447][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.780531][ T69] bridge_slave_1: left allmulticast mode [ 676.780552][ T69] bridge_slave_1: left promiscuous mode [ 676.780700][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.838324][ T69] bridge_slave_0: left allmulticast mode [ 676.838343][ T69] bridge_slave_0: left promiscuous mode [ 676.838533][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.947599][ T58] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 677.258850][ T58] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 677.261250][ T58] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 677.261276][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.261294][ T58] usb 3-1: Product: syz [ 677.261307][ T58] usb 3-1: Manufacturer: syz [ 677.261319][ T58] usb 3-1: SerialNumber: syz [ 677.299936][ T58] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 677.691413][ T58] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 677.691861][ T58] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 677.691911][ T58] usb 3-1: media controller created [ 677.733365][ T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 678.054562][ T809] usb 3-1: USB disconnect, device number 8 [ 680.504560][ T9446] netlink: 64 bytes leftover after parsing attributes in process `syz.1.685'. [ 681.019231][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.945572][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.129578][ T69] bond0 (unregistering): Released all slaves [ 683.728598][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.788499][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.809706][ T69] bond0 (unregistering): Released all slaves [ 684.578822][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.640218][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.659377][ T69] bond0 (unregistering): Released all slaves [ 685.406592][ T9101] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 686.026868][ T9101] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 686.103495][ T9101] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 687.278993][ T9101] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 688.690128][ T9067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.817575][ T69] hsr_slave_0: left promiscuous mode [ 689.857559][ T69] hsr_slave_1: left promiscuous mode [ 689.858308][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.888069][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.047573][ T69] hsr_slave_0: left promiscuous mode [ 690.067544][ T69] hsr_slave_1: left promiscuous mode [ 690.068147][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.108171][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.267636][ T69] hsr_slave_0: left promiscuous mode [ 690.287637][ T69] hsr_slave_1: left promiscuous mode [ 690.288197][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.338318][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.445202][ T69] veth1_vlan: left promiscuous mode [ 690.445349][ T69] veth0_vlan: left promiscuous mode [ 691.234653][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 691.287998][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 691.323582][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 691.339264][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 691.340235][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 692.684941][ T5815] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 692.707081][ T5815] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 692.716568][ T5815] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 692.720787][ T5815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 692.738136][ T5815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 693.597550][ T5812] Bluetooth: hci2: command tx timeout [ 694.769421][ T5812] Bluetooth: hci6: command tx timeout [ 695.350899][ T9531] FAULT_INJECTION: forcing a failure. [ 695.350899][ T9531] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 695.350933][ T9531] CPU: 0 UID: 0 PID: 9531 Comm: syz.1.708 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 695.350946][ T9531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 695.350958][ T9531] Call Trace: [ 695.350962][ T9531] [ 695.350969][ T9531] dump_stack_lvl+0xe8/0x150 [ 695.350994][ T9531] should_fail_ex+0x46b/0x600 [ 695.351008][ T9531] _copy_from_user+0x2d/0xb0 [ 695.351022][ T9531] __sys_bpf+0x229/0x920 [ 695.351037][ T9531] ? __pfx___sys_bpf+0x10/0x10 [ 695.351049][ T9531] ? rt_mutex_slowunlock+0x1cb/0x300 [ 695.351067][ T9531] ? ksys_write+0x248/0x270 [ 695.351084][ T9531] ? __pfx_ksys_write+0x10/0x10 [ 695.351099][ T9531] __x64_sys_bpf+0x7c/0x90 [ 695.351112][ T9531] do_syscall_64+0xe2/0xf80 [ 695.351125][ T9531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.351135][ T9531] ? trace_irq_disable+0x37/0x100 [ 695.351147][ T9531] ? clear_bhb_loop+0x60/0xb0 [ 695.351159][ T9531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.351168][ T9531] RIP: 0033:0x7f96aaf1aeb9 [ 695.351183][ T9531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.351192][ T9531] RSP: 002b:00007f96a9176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 695.351207][ T9531] RAX: ffffffffffffffda RBX: 00007f96ab195fa0 RCX: 00007f96aaf1aeb9 [ 695.351214][ T9531] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 695.351220][ T9531] RBP: 00007f96a9176090 R08: 0000000000000000 R09: 0000000000000000 [ 695.351227][ T9531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.351233][ T9531] R13: 00007f96ab196038 R14: 00007f96ab195fa0 R15: 00007ffd3f9e3ce8 [ 695.351248][ T9531] [ 695.578425][ T69] team0 (unregistering): Port device team_slave_1 removed [ 695.753521][ T5812] Bluetooth: hci2: command tx timeout [ 696.598135][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.598212][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.027551][ T5812] Bluetooth: hci6: command tx timeout [ 697.280269][ T69] team0 (unregistering): Port device team_slave_0 removed [ 697.568521][ T809] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 697.719874][ T809] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 697.723688][ T809] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 697.723715][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.723735][ T809] usb 3-1: Product: syz [ 697.723748][ T809] usb 3-1: Manufacturer: syz [ 697.723762][ T809] usb 3-1: SerialNumber: syz [ 697.794490][ T809] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 697.807657][ T5812] Bluetooth: hci2: command tx timeout [ 699.087989][ T5812] Bluetooth: hci6: command tx timeout [ 699.402758][ T809] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 699.403016][ T809] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 699.403043][ T809] usb 3-1: media controller created [ 699.420923][ T809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 699.699840][ T809] usb 3-1: USB disconnect, device number 9 [ 699.888365][ T5812] Bluetooth: hci2: command tx timeout [ 700.347615][ T5861] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 700.511109][ T5861] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 700.530325][ T5861] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 700.530353][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.530364][ T5861] usb 2-1: Product: syz [ 700.530372][ T5861] usb 2-1: Manufacturer: syz [ 700.530379][ T5861] usb 2-1: SerialNumber: syz [ 700.570962][ T5861] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 700.959570][ T5861] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 700.960027][ T5861] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 700.960076][ T5861] usb 2-1: media controller created [ 701.008447][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 701.167573][ T5812] Bluetooth: hci6: command tx timeout [ 701.382923][ T5861] usb 2-1: USB disconnect, device number 12 [ 704.938303][ T69] team0 (unregistering): Port device team_slave_1 removed [ 705.180717][ T9597] binder_alloc: 9596: binder_alloc_buf size -8273688283117807584 failed, no address space [ 705.180807][ T9597] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 705.181047][ T9597] binder: 9596:9597 ioctl c0306201 2000000001c0 returned -14 [ 705.249265][ T69] team0 (unregistering): Port device team_slave_0 removed [ 707.691095][ T9611] FAULT_INJECTION: forcing a failure. [ 707.691095][ T9611] name failslab, interval 1, probability 0, space 0, times 1 [ 707.691117][ T9611] CPU: 1 UID: 0 PID: 9611 Comm: syz.2.736 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 707.691129][ T9611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 707.691135][ T9611] Call Trace: [ 707.691140][ T9611] [ 707.691144][ T9611] dump_stack_lvl+0xe8/0x150 [ 707.691163][ T9611] should_fail_ex+0x46b/0x600 [ 707.691177][ T9611] should_failslab+0xa8/0x100 [ 707.691194][ T9611] __kmalloc_noprof+0xdf/0x7c0 [ 707.691210][ T9611] ? kfree+0x4d/0x8f0 [ 707.691221][ T9611] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 707.691234][ T9611] tomoyo_realpath_from_path+0xe3/0x5d0 [ 707.691244][ T9611] ? tomoyo_domain+0xd8/0x130 [ 707.691257][ T9611] ? tomoyo_path_number_perm+0x219/0x630 [ 707.691271][ T9611] tomoyo_path_number_perm+0x246/0x630 [ 707.691285][ T9611] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 707.691298][ T9611] ? __lock_acquire+0x6b5/0x2cf0 [ 707.691311][ T9611] ? do_raw_spin_lock+0x12b/0x2f0 [ 707.691340][ T9611] ? __fget_files+0x2a/0x420 [ 707.691351][ T9611] ? __fget_files+0x2a/0x420 [ 707.691358][ T9611] ? __fget_files+0x3a6/0x420 [ 707.691366][ T9611] ? __fget_files+0x2a/0x420 [ 707.691377][ T9611] security_file_ioctl+0xc3/0x2a0 [ 707.691392][ T9611] __se_sys_ioctl+0x47/0x170 [ 707.691405][ T9611] do_syscall_64+0xe2/0xf80 [ 707.691419][ T9611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.691429][ T9611] ? trace_irq_disable+0x37/0x100 [ 707.691442][ T9611] ? clear_bhb_loop+0x60/0xb0 [ 707.691453][ T9611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.691464][ T9611] RIP: 0033:0x7fe95d35aeb9 [ 707.691473][ T9611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.691482][ T9611] RSP: 002b:00007fe95b5b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 707.691494][ T9611] RAX: ffffffffffffffda RBX: 00007fe95d5d5fa0 RCX: 00007fe95d35aeb9 [ 707.691501][ T9611] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 707.691507][ T9611] RBP: 00007fe95b5b6090 R08: 0000000000000000 R09: 0000000000000000 [ 707.691514][ T9611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.691519][ T9611] R13: 00007fe95d5d6038 R14: 00007fe95d5d5fa0 R15: 00007ffd8f18d808 [ 707.691535][ T9611] [ 707.691550][ T9611] ERROR: Out of memory at tomoyo_realpath_from_path. [ 707.691693][ T9611] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 708.099845][ T9618] netlink: 52 bytes leftover after parsing attributes in process `syz.2.739'. [ 709.468538][ T9628] netlink: 64 bytes leftover after parsing attributes in process `syz.2.742'. [ 710.201603][ T9630] netlink: 'syz.2.743': attribute type 2 has an invalid length. [ 710.968250][ T5815] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 710.972812][ T5815] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 710.975709][ T5815] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 710.981534][ T5815] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 710.982303][ T5815] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 711.269635][ T69] team0 (unregistering): Port device team_slave_1 removed [ 711.307607][ T5861] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 711.459942][ T5861] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 711.462179][ T5861] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 711.462202][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.462212][ T5861] usb 3-1: Product: syz [ 711.462219][ T5861] usb 3-1: Manufacturer: syz [ 711.462226][ T5861] usb 3-1: SerialNumber: syz [ 711.494389][ T5861] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 711.529079][ T69] team0 (unregistering): Port device team_slave_0 removed [ 711.900082][ T5861] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 711.900341][ T5861] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 711.900368][ T5861] usb 3-1: media controller created [ 711.912060][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 712.034253][ T5861] usb 3-1: USB disconnect, device number 10 [ 712.618994][ T9647] FAULT_INJECTION: forcing a failure. [ 712.618994][ T9647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.619016][ T9647] CPU: 1 UID: 0 PID: 9647 Comm: syz.2.747 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 712.619029][ T9647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 712.619036][ T9647] Call Trace: [ 712.619041][ T9647] [ 712.619046][ T9647] dump_stack_lvl+0xe8/0x150 [ 712.619065][ T9647] should_fail_ex+0x46b/0x600 [ 712.619079][ T9647] _copy_to_user+0x31/0xb0 [ 712.619093][ T9647] simple_read_from_buffer+0xe1/0x170 [ 712.619111][ T9647] proc_fail_nth_read+0x1be/0x230 [ 712.619125][ T9647] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 712.619138][ T9647] ? rw_verify_area+0x2ac/0x4e0 [ 712.619149][ T9647] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 712.619159][ T9647] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 712.619172][ T9647] vfs_read+0x212/0xa70 [ 712.619187][ T9647] ? __pfx_vfs_read+0x10/0x10 [ 712.619200][ T9647] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 712.619214][ T9647] ? lockdep_hardirqs_on+0x7a/0x110 [ 712.619227][ T9647] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 712.619239][ T9647] ? mutex_lock_nested+0x152/0x1d0 [ 712.619248][ T9647] ? fdget_pos+0x252/0x320 [ 712.619262][ T9647] ksys_read+0x156/0x270 [ 712.619274][ T9647] ? __pfx_ksys_read+0x10/0x10 [ 712.619291][ T9647] do_syscall_64+0xe2/0xf80 [ 712.619304][ T9647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.619314][ T9647] ? trace_irq_disable+0x37/0x100 [ 712.619326][ T9647] ? clear_bhb_loop+0x60/0xb0 [ 712.619338][ T9647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.619348][ T9647] RIP: 0033:0x7fe95d31b78e [ 712.619358][ T9647] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 712.619367][ T9647] RSP: 002b:00007fe95b594fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 712.619378][ T9647] RAX: ffffffffffffffda RBX: 00007fe95b5956c0 RCX: 00007fe95d31b78e [ 712.619386][ T9647] RDX: 000000000000000f RSI: 00007fe95b5950a0 RDI: 0000000000000004 [ 712.619392][ T9647] RBP: 00007fe95b595090 R08: 0000000000000000 R09: 0000000000000000 [ 712.619398][ T9647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.619404][ T9647] R13: 00007fe95d5d6128 R14: 00007fe95d5d6090 R15: 00007ffd8f18d808 [ 712.619419][ T9647] [ 712.743757][ T9649] netlink: 'syz.2.748': attribute type 2 has an invalid length. [ 712.802013][ T9650] netlink: 'syz.2.748': attribute type 2 has an invalid length. [ 712.957563][ T9652] block nbd2: Device being setup by another task [ 713.007581][ T5815] Bluetooth: hci7: command tx timeout [ 713.535029][ T9649] !: entered promiscuous mode [ 713.554333][ T9650] !: left promiscuous mode [ 713.573397][ T9648] block nbd2: shutting down sockets [ 714.133809][ T9660] netlink: 64 bytes leftover after parsing attributes in process `syz.1.750'. [ 714.781401][ T9296] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 715.089887][ T5815] Bluetooth: hci7: command tx timeout [ 715.775908][ T9296] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 715.801430][ T9296] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 715.801461][ T9296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.801481][ T9296] usb 3-1: Product: syz [ 715.801495][ T9296] usb 3-1: Manufacturer: syz [ 715.801519][ T9296] usb 3-1: SerialNumber: syz [ 715.886933][ T9296] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 716.157542][ T5861] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 716.262008][ T9296] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 716.262458][ T9296] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 716.262507][ T9296] usb 3-1: media controller created [ 716.278029][ T9296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 716.319968][ T5861] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 716.323150][ T5861] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 716.323186][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.323206][ T5861] usb 2-1: Product: syz [ 716.323219][ T5861] usb 2-1: Manufacturer: syz [ 716.323231][ T5861] usb 2-1: SerialNumber: syz [ 716.401029][ T5861] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 716.824336][ T5861] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 716.824783][ T5861] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 716.824831][ T5861] usb 2-1: media controller created [ 716.827943][ T9296] usb 3-1: USB disconnect, device number 11 [ 716.899500][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 717.175251][ T5815] Bluetooth: hci7: command tx timeout [ 717.248250][ T9296] usb 2-1: USB disconnect, device number 13 [ 717.249596][ T9499] chnl_net:caif_netlink_parms(): no params data found [ 717.414424][ T9509] chnl_net:caif_netlink_parms(): no params data found [ 717.583483][ T9634] chnl_net:caif_netlink_parms(): no params data found [ 719.082296][ T9499] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.082490][ T9499] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.082667][ T9499] bridge_slave_0: entered allmulticast mode [ 719.085153][ T9499] bridge_slave_0: entered promiscuous mode [ 719.156225][ T9499] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.156360][ T9499] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.156810][ T9499] bridge_slave_1: entered allmulticast mode [ 719.183307][ T9499] bridge_slave_1: entered promiscuous mode [ 719.237512][ T5861] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 719.257539][ T5815] Bluetooth: hci7: command tx timeout [ 719.387554][ T5861] usb 2-1: Using ep0 maxpacket: 16 [ 719.394240][ T5861] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 719.394265][ T5861] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 719.403979][ T5861] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 719.404008][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.404028][ T5861] usb 2-1: Product: syz [ 719.404042][ T5861] usb 2-1: Manufacturer: syz [ 719.404056][ T5861] usb 2-1: SerialNumber: syz [ 719.461923][ T9499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.541436][ T9499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.541951][ T9509] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.542300][ T9509] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.542578][ T9509] bridge_slave_0: entered allmulticast mode [ 719.546254][ T9509] bridge_slave_0: entered promiscuous mode [ 719.683036][ T9693] kAFS: unable to lookup cell 'Þ({^ú@' [ 719.695932][ T9634] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.696105][ T9634] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.696403][ T9634] bridge_slave_0: entered allmulticast mode [ 719.720512][ T9634] bridge_slave_0: entered promiscuous mode [ 719.744309][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 719.770512][ T9509] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.770628][ T9509] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.770800][ T9509] bridge_slave_1: entered allmulticast mode [ 719.772732][ T9509] bridge_slave_1: entered promiscuous mode [ 719.811056][ T9634] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.811192][ T9634] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.811400][ T9634] bridge_slave_1: entered allmulticast mode [ 719.813753][ T9634] bridge_slave_1: entered promiscuous mode [ 719.881031][ T9499] team0: Port device team_slave_0 added [ 719.888115][ T9703] netlink: 'syz.2.758': attribute type 2 has an invalid length. [ 719.965874][ T9499] team0: Port device team_slave_1 added [ 719.971043][ T9509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.996735][ T9634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.001006][ T9509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.082958][ T9634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.084036][ T9499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.084050][ T9499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.084076][ T9499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.158663][ T9499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.158680][ T9499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.158706][ T9499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.223922][ T9705] netlink: 64 bytes leftover after parsing attributes in process `syz.2.759'. [ 720.379241][ T9509] team0: Port device team_slave_0 added [ 720.390883][ T9634] team0: Port device team_slave_0 added [ 720.410629][ T9509] team0: Port device team_slave_1 added [ 720.419268][ T9634] team0: Port device team_slave_1 added [ 720.481721][ T5861] usb 2-1: 0:2 : does not exist [ 720.500441][ T5861] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 720.669446][ T5861] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 720.681645][ T5861] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 720.691264][ T5861] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 720.783052][ T5861] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 720.789641][ T5861] usb 2-1: USB disconnect, device number 14 [ 720.838986][ T9643] udevd[9643]: setting owner of /dev/bus/usb/002/014 to uid=0, gid=0 failed: No such file or directory [ 720.872912][ T9643] udevd[9643]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 721.161989][ T5861] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 721.162027][ T5861] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 721.162051][ T5861] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 721.162072][ T5861] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 721.162094][ T5861] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 721.162117][ T5861] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 721.162142][ T5861] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 721.162166][ T5861] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 721.162187][ T5861] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 721.162209][ T5861] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 721.201458][ T5861] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 721.268676][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.268692][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.268719][ T9509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.282831][ T9634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.282848][ T9634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.282873][ T9634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.431266][ T9719] fido_id[9719]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 721.454556][ T9499] hsr_slave_0: entered promiscuous mode [ 721.455840][ T9499] hsr_slave_1: entered promiscuous mode [ 721.470883][ T9721] capability: warning: `syz.1.764' uses 32-bit capabilities (legacy support in use) [ 721.501057][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.501073][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.501099][ T9509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.506567][ T9634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.506581][ T9634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.506608][ T9634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.618168][ T9725] netlink: 'syz.1.766': attribute type 2 has an invalid length. [ 721.812767][ T9509] hsr_slave_0: entered promiscuous mode [ 721.814147][ T9509] hsr_slave_1: entered promiscuous mode [ 721.815094][ T9509] debugfs: 'hsr0' already exists in 'hsr' [ 721.815118][ T9509] Cannot create hsr debugfs directory [ 721.866069][ T9634] hsr_slave_0: entered promiscuous mode [ 721.873793][ T9634] hsr_slave_1: entered promiscuous mode [ 721.874751][ T9634] debugfs: 'hsr0' already exists in 'hsr' [ 721.874774][ T9634] Cannot create hsr debugfs directory [ 721.898697][ T9727] netlink: 64 bytes leftover after parsing attributes in process `syz.2.767'. [ 722.106111][ T9737] FAULT_INJECTION: forcing a failure. [ 722.106111][ T9737] name failslab, interval 1, probability 0, space 0, times 0 [ 722.106143][ T9737] CPU: 0 UID: 0 PID: 9737 Comm: syz.1.770 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 722.106166][ T9737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 722.106177][ T9737] Call Trace: [ 722.106185][ T9737] [ 722.106193][ T9737] dump_stack_lvl+0xe8/0x150 [ 722.106225][ T9737] should_fail_ex+0x46b/0x600 [ 722.106250][ T9737] should_failslab+0xa8/0x100 [ 722.106279][ T9737] __kmalloc_noprof+0xdf/0x7c0 [ 722.106305][ T9737] ? kfree+0x4d/0x8f0 [ 722.106326][ T9737] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 722.106352][ T9737] tomoyo_realpath_from_path+0xe3/0x5d0 [ 722.106373][ T9737] ? tomoyo_domain+0xd8/0x130 [ 722.106398][ T9737] ? tomoyo_path_number_perm+0x219/0x630 [ 722.106424][ T9737] tomoyo_path_number_perm+0x246/0x630 [ 722.106452][ T9737] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 722.106476][ T9737] ? __lock_acquire+0x6b5/0x2cf0 [ 722.106500][ T9737] ? do_raw_spin_lock+0x12b/0x2f0 [ 722.106558][ T9737] ? __fget_files+0x2a/0x420 [ 722.106578][ T9737] ? __fget_files+0x2a/0x420 [ 722.106594][ T9737] ? __fget_files+0x3a6/0x420 [ 722.106609][ T9737] ? __fget_files+0x2a/0x420 [ 722.106630][ T9737] security_file_ioctl+0xc3/0x2a0 [ 722.106658][ T9737] __se_sys_ioctl+0x47/0x170 [ 722.106683][ T9737] do_syscall_64+0xe2/0xf80 [ 722.106718][ T9737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.106737][ T9737] ? trace_irq_disable+0x37/0x100 [ 722.106761][ T9737] ? clear_bhb_loop+0x60/0xb0 [ 722.106784][ T9737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.106802][ T9737] RIP: 0033:0x7f96aaf1aeb9 [ 722.106819][ T9737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.106836][ T9737] RSP: 002b:00007f96a9176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 722.106855][ T9737] RAX: ffffffffffffffda RBX: 00007f96ab195fa0 RCX: 00007f96aaf1aeb9 [ 722.106870][ T9737] RDX: 0000200000000500 RSI: 0000000000000001 RDI: 0000000000000003 [ 722.106882][ T9737] RBP: 00007f96a9176090 R08: 0000000000000000 R09: 0000000000000000 [ 722.106894][ T9737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.106905][ T9737] R13: 00007f96ab196038 R14: 00007f96ab195fa0 R15: 00007ffd3f9e3ce8 [ 722.106935][ T9737] [ 722.106943][ T9737] ERROR: Out of memory at tomoyo_realpath_from_path. [ 722.106955][ T9737] program syz.1.770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 722.337664][ T58] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 722.497504][ T58] usb 3-1: Using ep0 maxpacket: 16 [ 722.503423][ T58] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 722.503446][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.503457][ T58] usb 3-1: Product: syz [ 722.503464][ T58] usb 3-1: Manufacturer: syz [ 722.503471][ T58] usb 3-1: SerialNumber: syz [ 722.756024][ T9735] ptrace attach of "./syz-executor exec"[5797] was attempted by "./syz-executor exec"[9735] [ 722.959545][ T58] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 723.236571][ T58] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 723.302600][ T9643] udevd[9643]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 723.374495][ T58] usb 3-1: USB disconnect, device number 12 [ 723.847656][ T809] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 723.976680][ T9747] FAULT_INJECTION: forcing a failure. [ 723.976680][ T9747] name failslab, interval 1, probability 0, space 0, times 0 [ 723.976713][ T9747] CPU: 1 UID: 0 PID: 9747 Comm: syz.2.775 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 723.976734][ T9747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 723.976746][ T9747] Call Trace: [ 723.976753][ T9747] [ 723.976760][ T9747] dump_stack_lvl+0xe8/0x150 [ 723.976790][ T9747] should_fail_ex+0x46b/0x600 [ 723.976814][ T9747] should_failslab+0xa8/0x100 [ 723.976842][ T9747] __kmalloc_noprof+0xdf/0x7c0 [ 723.976867][ T9747] ? kfree+0x4d/0x8f0 [ 723.976887][ T9747] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 723.976911][ T9747] tomoyo_realpath_from_path+0xe3/0x5d0 [ 723.976931][ T9747] ? tomoyo_domain+0xd8/0x130 [ 723.976954][ T9747] ? tomoyo_path_number_perm+0x219/0x630 [ 723.976979][ T9747] tomoyo_path_number_perm+0x246/0x630 [ 723.977007][ T9747] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 723.977032][ T9747] ? __lock_acquire+0x6b5/0x2cf0 [ 723.977055][ T9747] ? do_raw_spin_lock+0x12b/0x2f0 [ 723.977112][ T9747] ? __fget_files+0x2a/0x420 [ 723.977131][ T9747] ? __fget_files+0x2a/0x420 [ 723.977144][ T9747] ? __fget_files+0x3a6/0x420 [ 723.977158][ T9747] ? __fget_files+0x2a/0x420 [ 723.977176][ T9747] security_file_ioctl+0xc3/0x2a0 [ 723.977199][ T9747] __se_sys_ioctl+0x47/0x170 [ 723.977213][ T9747] do_syscall_64+0xe2/0xf80 [ 723.977226][ T9747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.977236][ T9747] ? trace_irq_disable+0x37/0x100 [ 723.977248][ T9747] ? clear_bhb_loop+0x60/0xb0 [ 723.977260][ T9747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.977270][ T9747] RIP: 0033:0x7fe95d35aeb9 [ 723.977280][ T9747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.977289][ T9747] RSP: 002b:00007fe95b5b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 723.977300][ T9747] RAX: ffffffffffffffda RBX: 00007fe95d5d5fa0 RCX: 00007fe95d35aeb9 [ 723.977307][ T9747] RDX: 0000000000000000 RSI: 000000008004745a RDI: 0000000000000003 [ 723.977314][ T9747] RBP: 00007fe95b5b6090 R08: 0000000000000000 R09: 0000000000000000 [ 723.977320][ T9747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.977326][ T9747] R13: 00007fe95d5d6038 R14: 00007fe95d5d5fa0 R15: 00007ffd8f18d808 [ 723.977342][ T9747] [ 723.977347][ T9747] ERROR: Out of memory at tomoyo_realpath_from_path. [ 724.026659][ T809] usb 2-1: Using ep0 maxpacket: 16 [ 724.068249][ T809] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.068277][ T809] usb 2-1: config 0 interface 0 has no altsetting 0 [ 724.068298][ T809] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 724.068310][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.158868][ T809] usb 2-1: config 0 descriptor?? [ 724.604113][ T9751] netlink: 64 bytes leftover after parsing attributes in process `syz.2.777'. [ 724.736791][ T809] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 725.884492][ T810] usb 2-1: USB disconnect, device number 15 [ 726.187637][ T809] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 726.363408][ T809] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 726.380078][ T809] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 726.380102][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.380112][ T809] usb 3-1: Product: syz [ 726.380119][ T809] usb 3-1: Manufacturer: syz [ 726.380127][ T809] usb 3-1: SerialNumber: syz [ 726.438954][ T809] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 727.036776][ T809] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 727.037218][ T809] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 727.037273][ T809] usb 3-1: media controller created [ 727.088430][ T809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 727.127576][ T69] bridge_slave_1: left allmulticast mode [ 727.127603][ T69] bridge_slave_1: left promiscuous mode [ 727.127850][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.222077][ T69] bridge_slave_0: left allmulticast mode [ 727.222105][ T69] bridge_slave_0: left promiscuous mode [ 727.222368][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.359669][ T809] usb 3-1: USB disconnect, device number 13 [ 727.382585][ T69] bridge_slave_1: left allmulticast mode [ 727.382612][ T69] bridge_slave_1: left promiscuous mode [ 727.382845][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.553594][ T69] bridge_slave_0: left allmulticast mode [ 727.553624][ T69] bridge_slave_0: left promiscuous mode [ 727.553853][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.658925][ T69] bridge_slave_1: left allmulticast mode [ 727.658954][ T69] bridge_slave_1: left promiscuous mode [ 727.659193][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.745485][ T9791] FAULT_INJECTION: forcing a failure. [ 727.745485][ T9791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.745518][ T9791] CPU: 1 UID: 0 PID: 9791 Comm: syz.2.783 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 727.745541][ T9791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 727.745553][ T9791] Call Trace: [ 727.745560][ T9791] [ 727.745569][ T9791] dump_stack_lvl+0xe8/0x150 [ 727.745600][ T9791] should_fail_ex+0x46b/0x600 [ 727.745625][ T9791] _copy_from_user+0x2d/0xb0 [ 727.745652][ T9791] ___sys_sendmsg+0x1c6/0x360 [ 727.745672][ T9791] ? __lock_acquire+0x6b5/0x2cf0 [ 727.745698][ T9791] ? __pfx____sys_sendmsg+0x10/0x10 [ 727.745749][ T9791] ? __fget_files+0x2a/0x420 [ 727.745767][ T9791] ? __fget_files+0x3a6/0x420 [ 727.745793][ T9791] __x64_sys_sendmsg+0x1c3/0x2a0 [ 727.745816][ T9791] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 727.745845][ T9791] ? __pfx_ksys_write+0x10/0x10 [ 727.745880][ T9791] do_syscall_64+0xe2/0xf80 [ 727.745905][ T9791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.745924][ T9791] ? trace_irq_disable+0x37/0x100 [ 727.745949][ T9791] ? clear_bhb_loop+0x60/0xb0 [ 727.745972][ T9791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.745991][ T9791] RIP: 0033:0x7fe95d35aeb9 [ 727.746008][ T9791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.746025][ T9791] RSP: 002b:00007fe95b5b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.746051][ T9791] RAX: ffffffffffffffda RBX: 00007fe95d5d5fa0 RCX: 00007fe95d35aeb9 [ 727.746065][ T9791] RDX: 0000000000004010 RSI: 0000200000000180 RDI: 0000000000000003 [ 727.746078][ T9791] RBP: 00007fe95b5b6090 R08: 0000000000000000 R09: 0000000000000000 [ 727.746091][ T9791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.746103][ T9791] R13: 00007fe95d5d6038 R14: 00007fe95d5d5fa0 R15: 00007ffd8f18d808 [ 727.746133][ T9791] [ 727.948666][ T69] bridge_slave_0: left allmulticast mode [ 727.948686][ T69] bridge_slave_0: left promiscuous mode [ 727.948834][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.317531][ T9009] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 728.447615][ T9009] usb 3-1: device descriptor read/64, error -71 [ 728.448013][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.537955][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.599349][ T69] bond0 (unregistering): Released all slaves [ 728.697698][ T9009] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 728.827543][ T9009] usb 3-1: device descriptor read/64, error -71 [ 728.828085][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.909368][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.937956][ T9009] usb usb3-port1: attempt power cycle [ 728.971311][ T69] bond0 (unregistering): Released all slaves [ 729.186857][ T9801] netlink: 64 bytes leftover after parsing attributes in process `syz.1.786'. [ 729.477557][ T9009] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 729.484785][ T9803] trusted_key: syz.1.787 sent an empty control message without MSG_MORE. [ 729.503861][ T9009] usb 3-1: device descriptor read/8, error -71 [ 729.737526][ T9009] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 729.758741][ T9009] usb 3-1: device descriptor read/8, error -71 [ 729.869751][ T9009] usb usb3-port1: unable to enumerate USB device [ 730.247957][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.348838][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.409311][ T69] bond0 (unregistering): Released all slaves [ 730.431967][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'. [ 730.765887][ T9296] hid_parser_main: 8 callbacks suppressed [ 730.765909][ T9296] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 730.765939][ T9296] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 730.765970][ T9296] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 730.765994][ T9296] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 730.766019][ T9296] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 730.766048][ T9296] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 730.766073][ T9296] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 730.766098][ T9296] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 730.766123][ T9296] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 730.766148][ T9296] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 730.900402][ T9296] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 730.988652][ T9817] fido_id[9817]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 731.086833][ T810] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 731.304750][ T9824] fido_id[9824]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 731.421722][ T69] hsr_slave_0: left promiscuous mode [ 731.467623][ T69] hsr_slave_1: left promiscuous mode [ 731.468567][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.497623][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.197535][ T69] hsr_slave_0: left promiscuous mode [ 732.228160][ T69] hsr_slave_1: left promiscuous mode [ 732.285011][ T9842] netlink: 64 bytes leftover after parsing attributes in process `syz.2.794'. [ 732.429038][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.613302][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.667710][ T9296] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 732.767600][ T69] hsr_slave_0: left promiscuous mode [ 732.787581][ T69] hsr_slave_1: left promiscuous mode [ 732.788189][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.831169][ T9296] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 732.831196][ T9296] usb 2-1: config 0 has no interface number 0 [ 732.831237][ T9296] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 732.831252][ T9296] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 732.831313][ T9296] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 732.831348][ T9296] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 732.831371][ T9296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.835370][ T9296] usb 2-1: config 0 descriptor?? [ 732.841450][ T9296] gspca_main: spca561-2.14.0 probing abcd:cdee [ 732.898893][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.046240][ T9296] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 733.047111][ T9296] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 733.047143][ T9296] usb 2-1: MIDIStreaming interface descriptor not found [ 733.208001][ T9296] usb 2-1: USB disconnect, device number 16 [ 733.887932][ T69] team0 (unregistering): Port device team_slave_1 removed [ 733.978209][ T69] team0 (unregistering): Port device team_slave_0 removed [ 734.868008][ T69] team0 (unregistering): Port device team_slave_1 removed [ 734.971887][ T69] team0 (unregistering): Port device team_slave_0 removed [ 735.213835][ T9865] netlink: 64 bytes leftover after parsing attributes in process `syz.1.804'. [ 736.118196][ T69] team0 (unregistering): Port device team_slave_1 removed [ 736.207923][ T69] team0 (unregistering): Port device team_slave_0 removed [ 737.173127][ T9296] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 737.268396][ T9883] FAULT_INJECTION: forcing a failure. [ 737.268396][ T9883] name failslab, interval 1, probability 0, space 0, times 0 [ 737.268454][ T9883] CPU: 0 UID: 0 PID: 9883 Comm: syz.2.809 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 737.268477][ T9883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 737.268490][ T9883] Call Trace: [ 737.268498][ T9883] [ 737.268507][ T9883] dump_stack_lvl+0xe8/0x150 [ 737.268538][ T9883] should_fail_ex+0x46b/0x600 [ 737.268565][ T9883] should_failslab+0xa8/0x100 [ 737.268596][ T9883] __kmalloc_noprof+0xdf/0x7c0 [ 737.268623][ T9883] ? kfree+0x4d/0x8f0 [ 737.268650][ T9883] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 737.268675][ T9883] tomoyo_realpath_from_path+0xe3/0x5d0 [ 737.268697][ T9883] ? tomoyo_domain+0xd8/0x130 [ 737.268722][ T9883] ? tomoyo_path_number_perm+0x219/0x630 [ 737.268749][ T9883] tomoyo_path_number_perm+0x246/0x630 [ 737.268778][ T9883] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 737.268804][ T9883] ? __lock_acquire+0x6b5/0x2cf0 [ 737.268839][ T9883] ? __pfx___schedule+0x10/0x10 [ 737.268882][ T9883] ? __fget_files+0x2a/0x420 [ 737.268902][ T9883] ? __fget_files+0x2a/0x420 [ 737.268919][ T9883] ? __fget_files+0x3a6/0x420 [ 737.268935][ T9883] ? __fget_files+0x2a/0x420 [ 737.268956][ T9883] security_file_ioctl+0xc3/0x2a0 [ 737.268986][ T9883] __se_sys_ioctl+0x47/0x170 [ 737.269011][ T9883] do_syscall_64+0xe2/0xf80 [ 737.269036][ T9883] ? rcu_is_watching+0x15/0xb0 [ 737.269060][ T9883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.269079][ T9883] ? clear_bhb_loop+0x60/0xb0 [ 737.269103][ T9883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.269123][ T9883] RIP: 0033:0x7fe95d35aeb9 [ 737.269140][ T9883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.269158][ T9883] RSP: 002b:00007fe95b574028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 737.269178][ T9883] RAX: ffffffffffffffda RBX: 00007fe95d5d6180 RCX: 00007fe95d35aeb9 [ 737.269193][ T9883] RDX: 0000200000000100 RSI: 0000000000004601 RDI: 0000000000000008 [ 737.269206][ T9883] RBP: 00007fe95b574090 R08: 0000000000000000 R09: 0000000000000000 [ 737.269219][ T9883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.269231][ T9883] R13: 00007fe95d5d6218 R14: 00007fe95d5d6180 R15: 00007ffd8f18d808 [ 737.269263][ T9883] [ 737.269293][ T9883] ERROR: Out of memory at tomoyo_realpath_from_path. [ 737.653959][ T9499] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 737.818801][ T9499] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 737.852564][ T9296] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 737.852592][ T9296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.852612][ T9296] usb 2-1: Product: syz [ 737.852625][ T9296] usb 2-1: Manufacturer: syz [ 737.852639][ T9296] usb 2-1: SerialNumber: syz [ 737.968352][ T9499] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 738.074614][ T9499] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 738.326666][ T9296] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 738.326744][ T9296] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 738.465863][ T9634] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 738.553533][ T9634] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 738.598901][ T9634] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 738.664936][ T9634] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 739.317968][ T9874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.318495][ T9874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.344577][ T9296] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 739.344629][ T9296] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 739.376202][ T9296] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 739.457377][ T9296] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 739.485461][ T9296] usb 2-1: USB disconnect, device number 17 [ 739.690054][ T9509] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 739.758092][ T9509] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 740.032243][ T9509] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 740.416722][ T9509] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 740.426428][ T37] audit: type=1326 audit(1769439258.213:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9940 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95d35aeb9 code=0x7ffc0000 [ 740.431735][ T37] audit: type=1326 audit(1769439258.213:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9940 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95d35aeb9 code=0x7ffc0000 [ 740.473722][ T37] audit: type=1326 audit(1769439258.263:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9940 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe95d35aeb9 code=0x7ffc0000 [ 740.475139][ T37] audit: type=1326 audit(1769439258.263:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9940 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95d35aeb9 code=0x7ffc0000 [ 740.478054][ T37] audit: type=1326 audit(1769439258.263:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9940 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95d35aeb9 code=0x7ffc0000 [ 740.483618][ T37] audit: type=1326 audit(1769439258.273:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9940 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe95d35aeb9 code=0x7ffc0000 [ 740.499922][ T37] audit: type=1326 audit(1769439258.283:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9940 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95d35aeb9 code=0x7ffc0000 [ 740.500774][ T37] audit: type=1326 audit(1769439258.293:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9940 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95d35aeb9 code=0x7ffc0000 [ 740.501022][ T37] audit: type=1326 audit(1769439258.293:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9940 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe95d35aeb9 code=0x7ffc0000 [ 740.501285][ T37] audit: type=1326 audit(1769439258.293:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9940 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95d35aeb9 code=0x7ffc0000 [ 740.565343][ T9942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.816'. [ 740.706453][ T9499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.099440][ T9499] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.169891][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.170048][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.227212][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.227345][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.303520][ T9634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.431500][ T9634] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.474647][ T3961] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.475535][ T3961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.489359][ T9971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.821'. [ 741.537067][ T9509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.566564][ T3961] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.566796][ T3961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.707075][ T9509] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.781714][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.796718][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.835905][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.867603][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.336277][ T9499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.757533][ T58] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 742.761628][ T9634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.893081][ T9509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.907564][ T58] usb 3-1: Using ep0 maxpacket: 16 [ 742.909411][ T58] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 742.909434][ T58] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 742.979936][ T58] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 742.979966][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.979985][ T58] usb 3-1: Product: syz [ 742.979999][ T58] usb 3-1: Manufacturer: syz [ 742.980013][ T58] usb 3-1: SerialNumber: syz [ 743.239673][T10007] kAFS: unable to lookup cell 'Þ({^ú@' [ 743.646200][ T9499] veth0_vlan: entered promiscuous mode [ 743.764353][ T9499] veth1_vlan: entered promiscuous mode [ 743.847600][ T58] usb 3-1: 0:2 : does not exist [ 743.867017][ T58] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 743.898279][ T58] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 743.921020][ T58] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 743.951905][ T58] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 743.983888][ T58] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 744.003968][ T58] usb 3-1: USB disconnect, device number 18 [ 744.048336][ T9499] veth0_macvtap: entered promiscuous mode [ 744.092895][ T9921] udevd[9921]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 744.128245][ T9499] veth1_macvtap: entered promiscuous mode [ 744.234992][ T9499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.431171][ T9499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.464912][ T9634] veth0_vlan: entered promiscuous mode [ 744.484002][ T69] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.498642][ T69] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.504155][ T69] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.533496][ T69] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.553447][ T9634] veth1_vlan: entered promiscuous mode [ 744.753851][ T9509] veth0_vlan: entered promiscuous mode [ 744.833874][ T9509] veth1_vlan: entered promiscuous mode [ 744.921697][ T9634] veth0_macvtap: entered promiscuous mode [ 744.927791][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.927810][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.994353][ T9634] veth1_macvtap: entered promiscuous mode [ 745.186565][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.186578][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.257096][ T9509] veth0_macvtap: entered promiscuous mode [ 745.276332][ T9634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.307807][ T9509] veth1_macvtap: entered promiscuous mode [ 745.317027][ T9634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.384590][ T161] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.394779][ T161] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.411223][ T161] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.411387][ T161] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.441137][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.470410][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.474349][ T1164] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.480061][ T69] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.480528][ T69] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.524047][ T3961] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.182076][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.182097][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.390357][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.390378][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.428946][ T5876] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 748.588195][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.588215][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.627524][ T5876] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 748.631687][ T5876] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 748.631715][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.631735][ T5876] usb 2-1: Product: syz [ 748.631749][ T5876] usb 2-1: Manufacturer: syz [ 748.631763][ T5876] usb 2-1: SerialNumber: syz [ 748.764263][ T5876] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 748.888534][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.888561][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.149486][ T5876] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 749.149939][ T5876] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 749.149988][ T5876] usb 2-1: media controller created [ 749.193521][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 749.831431][ T5861] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 751.078517][ T5861] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 751.078547][ T5861] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 751.078568][ T5861] usb 6-1: Product: syz [ 751.078582][ T5861] usb 6-1: Manufacturer: syz [ 751.078595][ T5861] usb 6-1: SerialNumber: syz [ 751.098069][ T5861] usb 6-1: config 0 descriptor?? [ 751.101734][ T5861] ch341 6-1:0.0: ch341-uart converter detected [ 751.316968][ T5861] usb 6-1: failed to receive control message: -121 [ 751.317027][ T5861] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 751.589003][ T9296] usb 6-1: USB disconnect, device number 2 [ 751.594317][ T9296] ch341 6-1:0.0: device disconnected [ 751.733836][ T5861] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 752.453939][ T58] usb 2-1: USB disconnect, device number 18 [ 752.672943][ T5861] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 752.703544][ T5861] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 752.705961][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.705984][ T5861] usb 3-1: Product: syz [ 752.705991][ T5861] usb 3-1: Manufacturer: syz [ 752.705999][ T5861] usb 3-1: SerialNumber: syz [ 752.726430][ T5861] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 753.215397][ T5861] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 753.215846][ T5861] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 753.215897][ T5861] usb 3-1: media controller created [ 753.272822][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 753.987539][ T9075] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 754.137522][ T9075] usb 6-1: Using ep0 maxpacket: 16 [ 754.143052][ T9075] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 754.143082][ T9075] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.143102][ T9075] usb 6-1: Product: syz [ 754.143116][ T9075] usb 6-1: Manufacturer: syz [ 754.143129][ T9075] usb 6-1: SerialNumber: syz [ 755.185675][T10121] ptrace attach of "./syz-executor exec"[9499] was attempted by "./syz-executor exec"[10121] [ 755.470696][ T9075] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 755.508877][ T9075] snd-usb-audio 6-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 755.547490][ T9075] usb 6-1: USB disconnect, device number 3 [ 755.617428][ T9921] udevd[9921]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 755.646159][T10128] block nbd7: shutting down sockets [ 755.671438][ T5861] usb 3-1: USB disconnect, device number 19 [ 755.797700][ T58] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 756.853587][ T58] usb 2-1: Using ep0 maxpacket: 16 [ 756.867255][ T58] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 756.867284][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.867303][ T58] usb 2-1: Product: syz [ 756.867316][ T58] usb 2-1: Manufacturer: syz [ 756.867330][ T58] usb 2-1: SerialNumber: syz [ 757.162180][T10127] ptrace attach of "./syz-executor exec"[5795] was attempted by "./syz-executor exec"[10127] [ 757.230410][T10147] IPVS: set_ctl: invalid protocol: 61 224.0.0.2:20002 [ 757.258337][ T5861] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 757.388562][ T58] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 757.413519][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.413601][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.455561][ T5861] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 757.455592][ T5861] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.455611][ T5861] usb 8-1: Product: syz [ 757.455624][ T5861] usb 8-1: Manufacturer: syz [ 757.455632][ T5861] usb 8-1: SerialNumber: syz [ 757.548666][T10152] netlink: 'syz.2.869': attribute type 2 has an invalid length. [ 757.594112][T10154] netlink: 'syz.2.869': attribute type 2 has an invalid length. [ 757.622932][ T58] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 757.648478][ T58] usb 2-1: USB disconnect, device number 19 [ 757.713853][ T9921] udevd[9921]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 757.783884][T10152] !: entered promiscuous mode [ 757.785498][T10154] !: left promiscuous mode [ 757.847622][T10152] block nbd2: Device being setup by another task [ 757.913418][ T5861] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 757.913621][ T5861] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 757.998283][T10151] block nbd2: shutting down sockets [ 758.457368][T10165] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 758.567245][T10141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.567877][T10141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.570952][ T5861] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 758.571024][ T5861] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 758.573919][ T5861] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 759.193935][ T5861] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 759.237626][ T5861] usb 8-1: USB disconnect, device number 2 [ 759.588034][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.878'. [ 761.127953][ T5883] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 761.730144][ T5883] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 761.730173][ T5883] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 761.730191][ T5883] usb 6-1: config 0 has no interface number 0 [ 761.730234][ T5883] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 30768, setting to 64 [ 761.730262][ T5883] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 761.730287][ T5883] usb 6-1: config 0 interface 52 has no altsetting 0 [ 761.732132][ T5883] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 761.732159][ T5883] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 761.732179][ T5883] usb 6-1: Manufacturer: syz [ 761.829465][ T5883] usb 6-1: config 0 descriptor?? [ 761.835319][ T5883] hub 6-1:0.52: bad descriptor, ignoring hub [ 761.835356][ T5883] hub 6-1:0.52: probe with driver hub failed with error -5 [ 762.281573][ T5883] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input5 [ 762.439415][T10185] netlink: 28 bytes leftover after parsing attributes in process `syz.5.880'. [ 762.738423][ T9009] usb 6-1: USB disconnect, device number 4 [ 762.837774][ T5861] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 763.009909][ T5861] usb 8-1: Using ep0 maxpacket: 16 [ 763.017209][ T5861] usb 8-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 763.017238][ T5861] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.017257][ T5861] usb 8-1: Product: syz [ 763.017272][ T5861] usb 8-1: Manufacturer: syz [ 763.017285][ T5861] usb 8-1: SerialNumber: syz [ 763.332664][T10204] ptrace attach of "./syz-executor exec"[9634] was attempted by "./syz-executor exec"[10204] [ 763.758735][ T5861] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 765.030886][ T5861] snd-usb-audio 8-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 765.056950][ T5861] usb 8-1: USB disconnect, device number 3 [ 765.075951][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.892'. [ 765.135146][ T9921] udevd[9921]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 766.177528][ T9296] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 766.327572][ T9296] usb 6-1: Using ep0 maxpacket: 16 [ 766.330103][ T9296] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 766.330127][ T9296] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 766.333147][ T9296] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 766.333173][ T9296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.333192][ T9296] usb 6-1: Product: syz [ 766.333206][ T9296] usb 6-1: Manufacturer: syz [ 766.333219][ T9296] usb 6-1: SerialNumber: syz [ 766.699150][T10219] kAFS: unable to lookup cell 'Þ({^ú@' [ 767.115803][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.894'. [ 768.676192][T10245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.901'. [ 768.977706][ T9296] usb 6-1: 0:2 : does not exist [ 769.006995][ T9296] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5) [ 769.024040][ T9296] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 769.039800][ T9296] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 769.045333][ T9296] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 769.061096][T10251] ======================================================= [ 769.061096][T10251] WARNING: The mand mount option has been deprecated and [ 769.061096][T10251] and is ignored by this kernel. Remove the mand [ 769.061096][T10251] option from the mount to silence this warning. [ 769.061096][T10251] ======================================================= [ 769.120268][ T9296] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 769.137194][ T9296] usb 6-1: USB disconnect, device number 5 [ 769.411412][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 770.445792][ T9921] udevd[9921]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 771.305404][T10276] netlink: 28 bytes leftover after parsing attributes in process `syz.7.912'. [ 774.063646][T10293] syz_tun: entered promiscuous mode [ 774.159090][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 774.367537][ T58] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 774.654728][ T9653] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 774.673896][ T58] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 774.691850][ T58] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 774.691879][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.691899][ T58] usb 7-1: Product: syz [ 774.691913][ T58] usb 7-1: Manufacturer: syz [ 774.691926][ T58] usb 7-1: SerialNumber: syz [ 774.749828][ T58] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 774.817523][ T9653] usb 3-1: Using ep0 maxpacket: 32 [ 774.821396][ T9653] usb 3-1: unable to get BOS descriptor or descriptor too short [ 774.825986][ T9653] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 775.097288][ T9653] usb 3-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 0.40 [ 775.098016][ T9653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.098039][ T9653] usb 3-1: Product: syz [ 775.098053][ T9653] usb 3-1: Manufacturer: syz [ 775.098067][ T9653] usb 3-1: SerialNumber: syz [ 775.569734][ T9296] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 776.201794][T10301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.202569][T10301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.302571][ T9296] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 776.302655][ T9296] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 776.302676][ T9296] usb 6-1: Product: syz [ 776.302689][ T9296] usb 6-1: Manufacturer: syz [ 776.302699][ T9296] usb 6-1: SerialNumber: syz [ 776.364827][ T9296] usb 6-1: config 0 descriptor?? [ 776.379771][ T9296] ch341 6-1:0.0: ch341-uart converter detected [ 776.421558][T10301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.435143][T10301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.589685][ T9296] usb 6-1: failed to receive control message: -121 [ 776.589723][ T9296] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 776.867793][ T9296] usb 6-1: USB disconnect, device number 6 [ 776.897133][ T9296] ch341 6-1:0.0: device disconnected [ 776.984655][ T9653] usb 3-1: USB disconnect, device number 20 [ 776.986677][ T58] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 776.987115][ T58] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 776.987164][ T58] usb 7-1: media controller created [ 777.084587][ T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 777.265689][ T58] usb 7-1: USB disconnect, device number 2 [ 778.515850][T10339] syz_tun: entered promiscuous mode [ 778.637536][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.931'. [ 779.067789][ T9075] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 779.278113][ T9075] usb 3-1: Using ep0 maxpacket: 16 [ 779.374156][ T9296] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 779.690031][ T9075] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 779.690240][ T9075] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 779.838339][ T9075] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 779.838884][ T9075] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.838907][ T9075] usb 3-1: Product: syz [ 779.838922][ T9075] usb 3-1: Manufacturer: syz [ 779.838937][ T9075] usb 3-1: SerialNumber: syz [ 780.047534][ T9296] usb 7-1: Using ep0 maxpacket: 32 [ 780.054018][ T9296] usb 7-1: unable to get BOS descriptor or descriptor too short [ 780.055245][ T9296] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.059360][ T9296] usb 7-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 0.40 [ 780.059385][ T9296] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.059405][ T9296] usb 7-1: Product: syz [ 780.059418][ T9296] usb 7-1: Manufacturer: syz [ 780.059432][ T9296] usb 7-1: SerialNumber: syz [ 780.169265][T10350] kAFS: unable to lookup cell 'Þ({^ú@' [ 780.253234][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.935'. [ 780.365292][T10357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.366450][T10357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.568692][T10357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.569180][T10357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.581702][T10385] tipc: Trying to set illegal importance in message [ 780.643051][ T9296] usb 7-1: USB disconnect, device number 3 [ 780.817545][ T58] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 780.865989][ T9075] usb 3-1: 0:2 : does not exist [ 780.893752][ T9075] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 780.924368][ T9075] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 780.947632][ T9075] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 780.970114][ T58] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 780.970146][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 780.970171][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 780.970192][ T58] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 780.970232][ T58] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 780.970254][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.970522][ T9075] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 780.988834][ T58] usb 8-1: config 0 descriptor?? [ 781.103818][ T9075] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 781.117960][ T9075] usb 3-1: USB disconnect, device number 21 [ 781.244541][ T9921] udevd[9921]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 781.414024][ T58] hid_parser_main: 26 callbacks suppressed [ 781.414047][ T58] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 781.459856][ T58] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 781.638984][ T9653] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 781.719923][ T9075] usb 8-1: USB disconnect, device number 4 [ 781.787635][ T9653] usb 3-1: Using ep0 maxpacket: 16 [ 781.791030][ T9653] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 781.791047][ T9653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.791057][ T9653] usb 3-1: Product: syz [ 781.791064][ T9653] usb 3-1: Manufacturer: syz [ 781.791071][ T9653] usb 3-1: SerialNumber: syz [ 783.038918][T10389] ptrace attach of "./syz-executor exec"[5797] was attempted by "./syz-executor exec"[10389] [ 783.201535][T10411] tipc: Trying to set illegal importance in message [ 783.249753][ T9653] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 783.503121][ T9653] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 783.564887][ T9653] usb 3-1: USB disconnect, device number 22 [ 783.728156][ T9075] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 783.857705][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 783.880052][ T9075] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 783.880085][ T9075] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 783.880347][ T9075] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 783.880370][ T9075] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 783.880414][ T9075] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 783.880501][ T9075] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.070567][ T9921] udevd[9921]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 784.073871][ T9075] usb 6-1: config 0 descriptor?? [ 785.037611][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 785.101792][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 785.108290][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 785.120371][ T10] usb 2-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 0.40 [ 785.120407][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.120426][ T10] usb 2-1: Product: syz [ 785.120952][ T10] usb 2-1: Manufacturer: syz [ 785.120968][ T10] usb 2-1: SerialNumber: syz [ 785.404938][T10416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.404974][ T9075] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 785.405447][T10416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.619639][ T9075] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 785.680869][T10416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.681345][T10416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.334337][ T10] usb 2-1: USB disconnect, device number 20 [ 786.495561][ T9653] usb 6-1: USB disconnect, device number 7 [ 787.217511][ T9653] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 787.225868][T10449] fido_id[10449]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 787.373190][ T9653] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 787.373218][ T9653] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 787.373236][ T9653] usb 6-1: config 0 has no interface number 0 [ 787.373287][ T9653] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 30768, setting to 64 [ 787.373301][ T9653] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 787.373314][ T9653] usb 6-1: config 0 interface 52 has no altsetting 0 [ 787.374390][ T9653] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 787.374413][ T9653] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 787.374424][ T9653] usb 6-1: Manufacturer: syz [ 787.463429][ T9653] usb 6-1: config 0 descriptor?? [ 787.475401][ T9653] hub 6-1:0.52: bad descriptor, ignoring hub [ 787.475438][ T9653] hub 6-1:0.52: probe with driver hub failed with error -5 [ 787.507816][ T9075] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 787.667626][ T9075] usb 2-1: Using ep0 maxpacket: 16 [ 787.676664][ T9075] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 787.676691][ T9075] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 787.717487][ T9075] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 787.717575][ T9075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.717594][ T9075] usb 2-1: Product: syz [ 787.717607][ T9075] usb 2-1: Manufacturer: syz [ 787.717620][ T9075] usb 2-1: SerialNumber: syz [ 787.791491][ T9653] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input8 [ 787.995153][T10448] netlink: 28 bytes leftover after parsing attributes in process `syz.5.974'. [ 788.049536][T10454] kAFS: unable to lookup cell 'Þ({^ú@' [ 788.143710][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'. [ 788.238157][ T9653] usb 6-1: USB disconnect, device number 8 [ 788.853076][ T9075] usb 2-1: 0:2 : does not exist [ 788.894476][ T9075] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 788.930233][ T9075] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 788.971059][ T9075] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 789.022341][ T9075] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 789.120742][ T9075] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 789.138675][ T9075] usb 2-1: USB disconnect, device number 21 [ 789.494806][ T9921] udevd[9921]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 789.719764][ T9075] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 790.817538][ T9075] usb 2-1: Using ep0 maxpacket: 16 [ 790.844146][ T9075] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 790.844204][ T9075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.844224][ T9075] usb 2-1: Product: syz [ 790.844237][ T9075] usb 2-1: Manufacturer: syz [ 790.844251][ T9075] usb 2-1: SerialNumber: syz [ 791.230259][T10476] ptrace attach of "./syz-executor exec"[5795] was attempted by "./syz-executor exec"[10476] [ 791.262531][T10490] netlink: 28 bytes leftover after parsing attributes in process `syz.6.987'. [ 791.464498][ T9075] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 791.560143][ T5876] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 791.659447][ T9075] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 791.675459][ T9075] usb 2-1: USB disconnect, device number 22 [ 793.051327][ T5876] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 793.051358][ T5876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.051378][ T5876] usb 8-1: Product: syz [ 793.051391][ T5876] usb 8-1: Manufacturer: syz [ 793.051406][ T5876] usb 8-1: SerialNumber: syz [ 793.544090][ T9921] udevd[9921]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 793.732413][ T5876] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 793.738305][ T5876] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 793.881248][T10510] netlink: 28 bytes leftover after parsing attributes in process `syz.6.992'. [ 794.359180][T10492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.365856][T10492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.405775][ T5876] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 794.405830][ T5876] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 794.432412][ T5876] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 794.632725][ T5876] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 794.870849][ T5876] usb 8-1: USB disconnect, device number 5 [ 799.027622][ T5861] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 799.177551][ T5861] usb 7-1: Using ep0 maxpacket: 16 [ 799.179966][ T5861] usb 7-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 799.179991][ T5861] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 799.185715][ T5861] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 799.185742][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.185760][ T5861] usb 7-1: Product: syz [ 799.185773][ T5861] usb 7-1: Manufacturer: syz [ 799.185786][ T5861] usb 7-1: SerialNumber: syz [ 799.257539][ T9653] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 799.421006][T10550] kAFS: unable to lookup cell 'Þ({^ú@' [ 799.424016][ T5876] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 799.424050][ T5876] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 799.424246][ T5876] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 799.424275][ T5876] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 799.424300][ T5876] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 799.424325][ T5876] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 799.424349][ T5876] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 799.424374][ T5876] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 799.424399][ T5876] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 799.424424][ T5876] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 799.424574][ T9653] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 799.424598][ T9653] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 799.428227][ T810] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 799.454289][ T9653] usb 3-1: Product: syz [ 799.454309][ T9653] usb 3-1: Manufacturer: syz [ 799.454323][ T9653] usb 3-1: SerialNumber: syz [ 799.495879][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1002'. [ 799.526110][ T5876] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 799.597747][ T810] usb 8-1: Using ep0 maxpacket: 16 [ 799.600527][ T810] usb 8-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 799.600541][ T810] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 799.604096][ T810] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 799.604118][ T810] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.604128][ T810] usb 8-1: Product: syz [ 799.604135][ T810] usb 8-1: Manufacturer: syz [ 799.604142][ T810] usb 8-1: SerialNumber: syz [ 799.831357][T10570] fido_id[10570]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 799.835472][ T9653] usb 3-1: config 0 descriptor?? [ 799.936900][ T9653] ch341 3-1:0.0: ch341-uart converter detected [ 799.964059][T10565] kAFS: unable to lookup cell 'Þ({^ú@' [ 800.022923][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1008'. [ 800.125417][ T9653] usb 3-1: failed to receive control message: -121 [ 800.125452][ T9653] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 800.270031][ T5861] usb 7-1: 0:2 : does not exist [ 800.286626][ T5861] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5) [ 800.300847][ T5861] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 800.322349][ T5861] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 800.363825][ T5861] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 800.433922][ T5861] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 800.463840][ T5861] usb 7-1: USB disconnect, device number 4 [ 800.466318][ T9009] usb 3-1: USB disconnect, device number 23 [ 800.488985][ T9009] ch341 3-1:0.0: device disconnected [ 800.743228][ T810] usb 8-1: 0:2 : does not exist [ 800.760370][ T810] usb 8-1: 5:0: cannot get min/max values for control 4 (id 5) [ 800.788589][ T810] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 800.807086][ T810] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 800.834999][ T810] usb 8-1: 5:0: failed to get current value for ch 1 (-22) [ 801.883219][ T9653] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 802.000843][ T810] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 802.038523][ T9653] usb 2-1: Using ep0 maxpacket: 16 [ 802.040970][ T9653] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 802.040993][ T9653] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 802.045987][ T9653] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 802.046014][ T9653] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.046033][ T9653] usb 2-1: Product: syz [ 802.046050][ T9653] usb 2-1: Manufacturer: syz [ 802.046059][ T9653] usb 2-1: SerialNumber: syz [ 802.118189][ T810] usb 8-1: USB disconnect, device number 6 [ 803.648514][T10592] kAFS: unable to lookup cell 'Þ({^ú@' [ 804.689173][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 805.057518][ T5861] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 806.149520][ T9653] usb 2-1: 0:2 : does not exist [ 806.197332][ T9653] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 806.208385][ T9653] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 806.246642][ T9653] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 806.262228][ T9653] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 806.345206][ T810] hid_parser_main: 8 callbacks suppressed [ 806.345227][ T810] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 806.345263][ T810] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 806.345288][ T810] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 806.345314][ T810] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 806.345339][ T810] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 806.345363][ T810] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 806.345387][ T810] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 806.345412][ T810] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 806.345435][ T810] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 806.345459][ T810] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 807.372483][ T810] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 808.489714][ T9653] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 808.548257][ T9653] usb 2-1: USB disconnect, device number 23 [ 808.732458][T10622] fido_id[10622]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 808.758769][T10088] udevd[10088]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.997498][ T9296] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 810.003309][ T9296] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 810.003329][ T9296] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 810.003338][ T9296] usb 3-1: config 0 has no interface number 0 [ 810.003363][ T9296] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 30768, setting to 64 [ 810.003377][ T9296] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 810.003390][ T9296] usb 3-1: config 0 interface 52 has no altsetting 0 [ 810.004290][ T9296] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 810.004306][ T9296] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 810.004316][ T9296] usb 3-1: Manufacturer: syz [ 810.050755][ T9296] usb 3-1: config 0 descriptor?? [ 810.097120][ T9296] hub 3-1:0.52: bad descriptor, ignoring hub [ 810.097141][ T9296] hub 3-1:0.52: probe with driver hub failed with error -5 [ 810.885187][ T9653] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 811.027654][ T9296] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input9 [ 811.057879][ T9653] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 811.057906][ T9653] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 811.057924][ T9653] usb 2-1: config 0 has no interface number 0 [ 811.057970][ T9653] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 30768, setting to 64 [ 811.057996][ T9653] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 811.058021][ T9653] usb 2-1: config 0 interface 52 has no altsetting 0 [ 811.085828][ T9653] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 811.085857][ T9653] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 811.085876][ T9653] usb 2-1: Manufacturer: syz [ 811.121257][T10626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1026'. [ 811.327905][ T9653] usb 2-1: config 0 descriptor?? [ 811.343049][ T9653] hub 2-1:0.52: bad descriptor, ignoring hub [ 811.343094][ T9653] hub 2-1:0.52: probe with driver hub failed with error -5 [ 811.414561][ T9296] usb 3-1: USB disconnect, device number 24 [ 811.687554][ T809] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 811.770478][ T9653] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input10 [ 811.837549][ T809] usb 7-1: Using ep0 maxpacket: 16 [ 811.861734][ T809] usb 7-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 811.861751][ T809] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 811.866416][ T809] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 811.866433][ T809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.866444][ T809] usb 7-1: Product: syz [ 811.866451][ T809] usb 7-1: Manufacturer: syz [ 811.866458][ T809] usb 7-1: SerialNumber: syz [ 812.002801][T10632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1028'. [ 812.168136][ T5876] usb 2-1: USB disconnect, device number 24 [ 813.187955][T10639] kAFS: unable to lookup cell 'Þ({^ú@' [ 813.348995][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1030'. [ 813.897965][ T810] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 814.237964][ T5876] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 814.408481][ T810] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 814.408508][ T810] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 814.408535][ T810] usb 6-1: config 0 has no interface number 0 [ 814.408664][ T810] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 30768, setting to 64 [ 814.408691][ T810] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 814.408717][ T810] usb 6-1: config 0 interface 52 has no altsetting 0 [ 814.410637][ T810] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 814.410663][ T810] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 814.410683][ T810] usb 6-1: Manufacturer: syz [ 814.555962][ T809] usb 7-1: 0:2 : does not exist [ 814.572057][ T810] usb 6-1: config 0 descriptor?? [ 814.575999][ T810] hub 6-1:0.52: bad descriptor, ignoring hub [ 814.576042][ T810] hub 6-1:0.52: probe with driver hub failed with error -5 [ 814.582561][ T809] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5) [ 814.588916][ T809] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 814.594555][ T809] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 814.608848][ T809] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 814.641837][ T5876] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 814.641869][ T5876] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 814.641889][ T5876] usb 3-1: Product: syz [ 814.641904][ T5876] usb 3-1: Manufacturer: syz [ 814.641917][ T5876] usb 3-1: SerialNumber: syz [ 814.666478][ T5876] usb 3-1: config 0 descriptor?? [ 814.702364][ T5876] ch341 3-1:0.0: ch341-uart converter detected [ 815.612568][ T809] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 815.663887][ T810] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input11 [ 815.700369][ T5876] usb 3-1: failed to receive control message: -121 [ 815.700427][ T5876] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 815.837638][ T809] usb 7-1: USB disconnect, device number 6 [ 815.844174][T10654] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1034'. [ 816.719694][T10660] Bluetooth: hci6: command 0x0406 tx timeout [ 816.723874][T10660] Bluetooth: hci2: command 0x0406 tx timeout [ 816.867947][ T9296] usb 3-1: USB disconnect, device number 25 [ 817.132834][ T810] usb 6-1: Failed to suspend device, error -71 [ 817.145927][ T9296] ch341 3-1:0.0: device disconnected [ 817.154291][ T810] usb 6-1: USB disconnect, device number 9 [ 818.917048][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.917308][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.386686][T10698] syz_tun: entered promiscuous mode [ 819.707506][ T810] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 820.907562][ T810] usb 8-1: Using ep0 maxpacket: 32 [ 820.909151][ T810] usb 8-1: config 0 has an invalid interface number: 42 but max is 0 [ 820.909165][ T810] usb 8-1: config 0 has no interface number 0 [ 820.909183][ T810] usb 8-1: config 0 interface 42 has no altsetting 0 [ 820.911839][ T810] usb 8-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=aa.7d [ 820.911864][ T810] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.911883][ T810] usb 8-1: Product: syz [ 820.911897][ T810] usb 8-1: Manufacturer: syz [ 820.911909][ T810] usb 8-1: SerialNumber: syz [ 820.917098][ T810] usb 8-1: config 0 descriptor?? [ 820.985398][ T810] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 820.985666][ T810] dvb-usb: bulk message failed: -22 (3/0) [ 821.025488][ T810] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 821.026073][ T810] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 821.026109][ T810] usb 8-1: media controller created [ 821.061493][ T810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 821.110198][ T810] dvb-usb: bulk message failed: -22 (6/0) [ 821.111167][ T810] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 821.115439][ T810] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input12 [ 821.127539][T10698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.128056][T10698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.179883][ T810] dvb-usb: schedule remote query interval to 150 msecs. [ 821.179994][ T810] dvb-usb: bulk message failed: -22 (3/0) [ 821.185655][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1046'. [ 821.185676][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1046'. [ 821.185702][T10698] netlink: 'syz.7.1046': attribute type 11 has an invalid length. [ 821.225897][ T810] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 821.340286][ T810] dvb-usb: bulk message failed: -22 (1/0) [ 821.340333][ T810] dvb-usb: error while querying for an remote control event. [ 821.416733][ T809] usb 8-1: USB disconnect, device number 7 [ 821.552764][ T809] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 823.570889][ T9075] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 824.076292][ T9075] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 824.076311][ T9075] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 824.076321][ T9075] usb 2-1: Product: syz [ 824.076329][ T9075] usb 2-1: Manufacturer: syz [ 824.076336][ T9075] usb 2-1: SerialNumber: syz [ 824.111885][ T9075] usb 2-1: config 0 descriptor?? [ 824.112055][T10731] tipc: Trying to set illegal importance in message [ 824.124186][ T9075] ch341 2-1:0.0: ch341-uart converter detected [ 824.802699][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 824.999320][ T9075] usb 2-1: failed to receive control message: -121 [ 824.999379][ T9075] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 825.237518][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 825.240726][ T10] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 825.240742][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.240759][ T10] usb 6-1: Product: syz [ 825.240772][ T10] usb 6-1: Manufacturer: syz [ 825.240786][ T10] usb 6-1: SerialNumber: syz [ 825.267594][ T9075] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 825.345249][ T5883] usb 2-1: USB disconnect, device number 25 [ 825.353311][ T5883] ch341 2-1:0.0: device disconnected [ 825.419891][ T9075] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 825.419911][ T9075] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 825.419956][ T9075] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 825.419968][ T9075] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 825.419991][ T9075] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 825.420003][ T9075] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.426431][ T9075] usb 8-1: config 0 descriptor?? [ 825.487535][ T5876] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 825.641289][ T5876] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 825.641308][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.641318][ T5876] usb 3-1: Product: syz [ 825.641325][ T5876] usb 3-1: Manufacturer: syz [ 825.641333][ T5876] usb 3-1: SerialNumber: syz [ 825.685953][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 825.901421][ T9075] hid_parser_main: 8 callbacks suppressed [ 825.901437][ T9075] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 826.145627][ T9075] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 826.186610][ T10] snd-usb-audio 6-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 826.292287][ T5876] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 826.294262][ T5876] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 826.299834][ T10] usb 6-1: USB disconnect, device number 10 [ 826.530399][ T10] usb 8-1: USB disconnect, device number 8 [ 826.670259][ T9921] udevd[9921]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 826.806717][T10742] fido_id[10742]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 827.666124][T10748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.679668][T10748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.747711][ T5876] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 827.747771][ T5876] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 827.750222][ T5876] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 827.898631][ T5876] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 827.958425][ T5876] usb 3-1: USB disconnect, device number 26 [ 828.777958][ T9075] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 829.018106][ T9075] usb 6-1: Using ep0 maxpacket: 16 [ 829.072774][ T9075] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 829.072805][ T9075] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.072825][ T9075] usb 6-1: Product: syz [ 829.072839][ T9075] usb 6-1: Manufacturer: syz [ 829.072853][ T9075] usb 6-1: SerialNumber: syz [ 829.292958][ T810] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 829.557137][ T9075] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 829.589295][ T810] usb 2-1: Using ep0 maxpacket: 16 [ 829.593106][ T810] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 829.593131][ T810] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 829.595991][ T810] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 829.596016][ T810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.596041][ T810] usb 2-1: Product: syz [ 829.596055][ T810] usb 2-1: Manufacturer: syz [ 829.596068][ T810] usb 2-1: SerialNumber: syz [ 829.785283][ T9075] snd-usb-audio 6-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 829.797602][ T9075] usb 6-1: USB disconnect, device number 11 [ 829.856933][T10762] kAFS: unable to lookup cell 'Þ({^ú@' [ 829.966558][ T9921] udevd[9921]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 830.017509][ T5861] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 830.184376][ T5861] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 830.184394][ T5861] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 830.184411][ T5861] usb 7-1: Product: syz [ 830.184419][ T5861] usb 7-1: Manufacturer: syz [ 830.184426][ T5861] usb 7-1: SerialNumber: syz [ 830.193645][ T5861] usb 7-1: config 0 descriptor?? [ 830.231624][ T5861] ch341 7-1:0.0: ch341-uart converter detected [ 830.327544][ T9653] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 830.357710][ T5875] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 830.430164][ T5861] usb 7-1: failed to receive control message: -121 [ 830.430224][ T5861] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 830.490999][ T9653] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 830.491027][ T9653] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 830.491046][ T9653] usb 3-1: config 0 has no interface number 0 [ 830.491142][ T9653] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 30768, setting to 64 [ 830.491170][ T9653] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 830.491196][ T9653] usb 3-1: config 0 interface 52 has no altsetting 0 [ 830.492868][ T9653] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 830.492896][ T9653] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 830.493124][ T9653] usb 3-1: Manufacturer: syz [ 830.552052][ T5875] usb 8-1: Using ep0 maxpacket: 16 [ 830.582353][ T5875] usb 8-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 830.582431][ T5875] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 830.663752][ T9653] usb 3-1: config 0 descriptor?? [ 830.677572][ T5875] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 830.677590][ T5875] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.677922][ T5875] usb 8-1: Product: syz [ 830.677930][ T5875] usb 8-1: Manufacturer: syz [ 830.677938][ T5875] usb 8-1: SerialNumber: syz [ 830.681553][ T9653] hub 3-1:0.52: bad descriptor, ignoring hub [ 830.681574][ T9653] hub 3-1:0.52: probe with driver hub failed with error -5 [ 830.735941][ T9075] usb 7-1: USB disconnect, device number 7 [ 830.752661][ T9075] ch341 7-1:0.0: device disconnected [ 830.768375][ T810] usb 2-1: 0:2 : does not exist [ 830.794679][ T810] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 830.824620][ T810] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 830.844729][ T810] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 830.862760][ T810] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 830.912127][ T9653] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input14 [ 830.965215][ T810] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 830.990225][ T810] usb 2-1: USB disconnect, device number 26 [ 831.000603][T10776] kAFS: unable to lookup cell 'Þ({^ú@' [ 831.130323][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1070'. [ 831.133824][T10775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1071'. [ 831.383198][ T5861] usb 3-1: USB disconnect, device number 27 [ 831.599614][T10789] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1077'. [ 831.775722][ T5875] usb 8-1: 0:2 : does not exist [ 831.798037][ T5875] usb 8-1: 5:0: cannot get min/max values for control 4 (id 5) [ 831.811157][ T5875] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 831.865822][ T5875] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 831.889570][ T5875] usb 8-1: 5:0: failed to get current value for ch 1 (-22) [ 831.965771][T10795] tipc: Trying to set illegal importance in message [ 832.025412][ T5875] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 833.008587][ T5875] usb 8-1: USB disconnect, device number 9 [ 833.277537][ T5861] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 833.381967][T10085] udevd[10085]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 833.429704][ T9921] udevd[9921]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 833.455896][ T5861] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 833.455927][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 833.455951][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 833.455975][ T5861] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 833.456014][ T5861] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 833.456044][ T5861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.471670][ T9653] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 833.480276][ T5861] usb 7-1: config 0 descriptor?? [ 834.457477][ T9653] usb 6-1: Using ep0 maxpacket: 16 [ 834.477186][ T9653] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 834.477212][ T9653] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 834.488381][ T5875] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 834.493867][ T9653] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 834.493883][ T9653] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.493893][ T9653] usb 6-1: Product: syz [ 834.493900][ T9653] usb 6-1: Manufacturer: syz [ 834.493908][ T9653] usb 6-1: SerialNumber: syz [ 834.620638][T10666] ------------[ cut here ]------------ [ 834.620652][T10666] in_task() && kcov_mode_enabled(mode) [ 834.620667][T10666] WARNING: kernel/kcov.c:872 at kcov_remote_start+0x5d8/0x710, CPU#1: kworker/u8:18/10666 [ 834.620716][T10666] Modules linked in: [ 834.620739][T10666] CPU: 1 UID: 0 PID: 10666 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 834.620763][T10666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 834.620777][T10666] Workqueue: events_unbound cfg80211_wiphy_work [ 834.620802][T10666] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 834.620830][T10666] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 92 18 cd 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 1a 25 4a 09 89 c0 48 c7 c7 a0 03 26 [ 834.620849][T10666] RSP: 0018:ffffc9000afa7978 EFLAGS: 00010202 [ 834.620866][T10666] RAX: 0000000000000002 RBX: ffff888030068000 RCX: 0000000000000000 [ 834.620881][T10666] RDX: 0000000000000000 RSI: ffffffff8b85e7e0 RDI: ffffffff8b85e7a0 [ 834.620895][T10666] RBP: ffff888023af68c0 R08: ffffffff8b0f9bf0 R09: ffffffff8dbc77c0 [ 834.620911][T10666] R10: dffffc0000000000 R11: fffffbfff1e8fbcf R12: ffff88805c9bdd08 [ 834.620927][T10666] R13: ffff88805c9c07c0 R14: 0000000000000000 R15: ffff88805c9bdd20 [ 834.620942][T10666] FS: 0000000000000000(0000) GS:ffff8881266c9000(0000) knlGS:0000000000000000 [ 834.620959][T10666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 834.620973][T10666] CR2: 00007fe95d5d7dac CR3: 00000000363ec000 CR4: 00000000003526f0 [ 834.620991][T10666] Call Trace: [ 834.620999][T10666] [ 834.621020][T10666] ieee80211_iface_work+0x211/0x12b0 [ 834.621057][T10666] cfg80211_wiphy_work+0x2ab/0x450 [ 834.621083][T10666] ? process_scheduled_works+0xa0f/0x17a0 [ 834.621118][T10666] process_scheduled_works+0xaec/0x17a0 [ 834.621178][T10666] ? __pfx_process_scheduled_works+0x10/0x10 [ 834.621207][T10666] ? do_raw_spin_lock+0x12b/0x2f0 [ 834.621241][T10666] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 834.621269][T10666] ? schedule+0x90/0x360 [ 834.621303][T10666] worker_thread+0xda6/0x1360 [ 834.621340][T10666] ? __kthread_parkme+0x19c/0x1f0 [ 834.621369][T10666] kthread+0x726/0x8b0 [ 834.621396][T10666] ? __pfx_worker_thread+0x10/0x10 [ 834.621416][T10666] ? __pfx_kthread+0x10/0x10 [ 834.621438][T10666] ? rt_spin_unlock+0x14f/0x200 [ 834.621464][T10666] ? rt_spin_unlock+0x160/0x200 [ 834.621482][T10666] ? __pfx_kthread+0x10/0x10 [ 834.621508][T10666] ret_from_fork+0x51b/0xa40 [ 834.621533][T10666] ? __pfx_ret_from_fork+0x10/0x10 [ 834.621553][T10666] ? __switch_to+0xc82/0x1410 [ 834.621586][T10666] ? __pfx_kthread+0x10/0x10 [ 834.621612][T10666] ret_from_fork_asm+0x1a/0x30 [ 834.621659][T10666] [ 834.621673][T10666] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 834.621688][T10666] CPU: 1 UID: 0 PID: 10666 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 834.621710][T10666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 834.621723][T10666] Workqueue: events_unbound cfg80211_wiphy_work [ 834.621747][T10666] Call Trace: [ 834.621754][T10666] [ 834.621762][T10666] vpanic+0x1e0/0x670 [ 834.621793][T10666] panic+0xc5/0xd0 [ 834.621819][T10666] ? __pfx_panic+0x10/0x10 [ 834.621856][T10666] ? ret_from_fork_asm+0x1a/0x30 [ 834.621891][T10666] __warn+0x315/0x4a0 [ 834.621916][T10666] ? kcov_remote_start+0x5d8/0x710 [ 834.621944][T10666] ? kcov_remote_start+0x5d8/0x710 [ 834.621972][T10666] __report_bug+0x29a/0x540 [ 834.622004][T10666] ? kcov_remote_start+0x5d8/0x710 [ 834.622036][T10666] ? __pfx___report_bug+0x10/0x10 [ 834.622061][T10666] ? do_raw_spin_lock+0x12b/0x2f0 [ 834.622091][T10666] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 834.622118][T10666] ? rt_spin_lock+0x1e0/0x400 [ 834.622139][T10666] ? rt_spin_lock+0x1e0/0x400 [ 834.622161][T10666] ? kcov_remote_start+0x5d8/0x710 [ 834.622188][T10666] report_bug+0x16a/0x220 [ 834.622213][T10666] ? kcov_remote_start+0x5d8/0x710 [ 834.622238][T10666] ? kcov_remote_start+0x5da/0x710 [ 834.622264][T10666] handle_bug+0x98/0x200 [ 834.622293][T10666] exc_invalid_op+0x1a/0x50 [ 834.622323][T10666] asm_exc_invalid_op+0x1a/0x20 [ 834.622342][T10666] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 834.622368][T10666] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 92 18 cd 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 1a 25 4a 09 89 c0 48 c7 c7 a0 03 26 [ 834.622385][T10666] RSP: 0018:ffffc9000afa7978 EFLAGS: 00010202 [ 834.622402][T10666] RAX: 0000000000000002 RBX: ffff888030068000 RCX: 0000000000000000 [ 834.622416][T10666] RDX: 0000000000000000 RSI: ffffffff8b85e7e0 RDI: ffffffff8b85e7a0 [ 834.622431][T10666] RBP: ffff888023af68c0 R08: ffffffff8b0f9bf0 R09: ffffffff8dbc77c0 [ 834.622447][T10666] R10: dffffc0000000000 R11: fffffbfff1e8fbcf R12: ffff88805c9bdd08 [ 834.622463][T10666] R13: ffff88805c9c07c0 R14: 0000000000000000 R15: ffff88805c9bdd20 [ 834.622485][T10666] ? rt_spin_lock+0x1e0/0x400 [ 834.622513][T10666] ? kcov_remote_start+0xe0/0x710 [ 834.622543][T10666] ieee80211_iface_work+0x211/0x12b0 [ 834.622578][T10666] cfg80211_wiphy_work+0x2ab/0x450 [ 834.622603][T10666] ? process_scheduled_works+0xa0f/0x17a0 [ 834.622636][T10666] process_scheduled_works+0xaec/0x17a0 [ 834.622696][T10666] ? __pfx_process_scheduled_works+0x10/0x10 [ 834.622725][T10666] ? do_raw_spin_lock+0x12b/0x2f0 [ 834.622758][T10666] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 834.622785][T10666] ? schedule+0x90/0x360 [ 834.622819][T10666] worker_thread+0xda6/0x1360 [ 834.622856][T10666] ? __kthread_parkme+0x19c/0x1f0 [ 834.622885][T10666] kthread+0x726/0x8b0 [ 834.622912][T10666] ? __pfx_worker_thread+0x10/0x10 [ 834.622932][T10666] ? __pfx_kthread+0x10/0x10 [ 834.622955][T10666] ? rt_spin_unlock+0x14f/0x200 [ 834.622980][T10666] ? rt_spin_unlock+0x160/0x200 [ 834.622999][T10666] ? __pfx_kthread+0x10/0x10 [ 834.623031][T10666] ret_from_fork+0x51b/0xa40 [ 834.623055][T10666] ? __pfx_ret_from_fork+0x10/0x10 [ 834.623074][T10666] ? __switch_to+0xc82/0x1410 [ 834.623107][T10666] ? __pfx_kthread+0x10/0x10 [ 834.623133][T10666] ret_from_fork_asm+0x1a/0x30 [ 834.623180][T10666] [ 834.623503][T10666] Kernel Offset: disabled