last executing test programs: 16m12.956634237s ago: executing program 32 (id=170): r0 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000001cc0)={r1, 0x7, &(0x7f0000001c00)=[0x7fff, 0x7, 0xd, 0x3, 0x5, 0x3, 0x4aa], &(0x7f0000001c40)=[0x6, 0x9], &(0x7f0000001c80)=[0x2, 0x8000, 0x9, 0x1, 0xb, 0x6, 0x8000, 0x1588, 0x0]}) 11m28.97446828s ago: executing program 33 (id=1107): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x2, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x62}, {0x2, 0x3, 0x4, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x1}, {0x0, 0x5, 0x0, 0xa78a}, 0xfffffffe, 0x6e6bb9, 0x1}, {{@in=@empty, 0x4d5, 0x1a303e36047f2fea}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x2, 0x1, 0x7, 0x0, 0x0, 0x1}}, 0xe8) 9m5.111766734s ago: executing program 34 (id=1888): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x1) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$dri(&(0x7f00000001c0), 0xa33, 0x44040) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f00007b6000/0x10000)=nil, 0x10000, 0xb635773f06ebbeef, 0x20010, r1, 0x16440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r4) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) read(r8, &(0x7f0000000040)=""/138, 0x8a) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r10 = open(&(0x7f0000000180)='./file1\x00', 0x0, 0x44) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r9, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r10, {0x83c}}, './file1\x00'}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x28000080) sendmsg$inet6(r6, 0x0, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x5, 0x0, 0xe655, 0x2, 0x20, 0x8, 0xff}, 0x9c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 6m31.663181768s ago: executing program 35 (id=2735): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000018000100000000007cdbdf250a2094"], 0x30}}, 0x4000) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200080, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000181b0000", @ANYRES32=0x1, @ANYBLOB="00004efb87846ac54423f43a7150815a36a11ce429a4bbeb10a150f8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000080000001823000000000022640f00003981bd000000000064c0d33302563b71a5b8f05fb8a5295857a597c9310c852655b6", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7f, 0xa2, &(0x7f0000000500)=""/162, 0x41100, 0x8, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x6}, 0x10, 0x1d848, r0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x7ca}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000440)=r3) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000001ff0)={0x1d, r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000) sendmsg$can_raw(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)=';', 0x1}], 0x2}], 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 5m21.363838009s ago: executing program 6 (id=3042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_subtree(r0, 0x0, 0x0) 5m20.955821219s ago: executing program 6 (id=3045): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b80cdd64bdf00000000000869045aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab5920aef6c3e007fe61241638962cf0b89ef506cfd3f1d4163d3cfca3733b30070a7cf53021a95fdaf3c7220a0e23db436659a8c54328a702688f92b6b71569d65e33d46f8d8ae24ba69c657afac04379cb536008c219991704f11c51b1d076f03b0f917c766f3a7598bbc00feb3bc8e88f79df517b37b56bcbc290080000000000000e675458a43b8a8935bf9cf0be7d0aeaac41405e341cd0ba0d6fd562489dad595712a4051bb6cf826ab757193fc09d305f95c55d5746419000000000000007b61803bd430ef06000000000000001e93f640f159320c8b088f4d6497682eb312d4967aff9e4c14c66c90000054ed82c7cba4c81f91d6dfed18767bf0df584b4b6c4204df411f921e3aa02a67dd324b8176020e9c024751e539c05727f82c92046bfe64babb6d7ba86526b7886a0c2481c5812812a6fa3fca3758cbd8c32b25c28be225bd1f16297baa065f5bf96330fad0aaa4388c06c0eb2ecdf829af9577fcd868cc269b740000b7ad193c5e5850df01aff96877d73a63246ce6f0467167626329ab910b7a13d9ec9a64e7f6b56aeab8c38f69a213c96e2d2ad7978c9d721c270f27e7025d576535198742d403ec43572d7d0baf00e882617b260627805ca44200335ea4363066944d0aa6feb9705b09ba40d4642519281151f875cbf13a582f90ad719f0eccf02a473dd508a16138904933689ea6050041206473075eaeff2b69c2f2bf6f691c3560e068743a08e9771280da61fd8fdc3f7a35ea352e35753c59ebc1bd27ab6603e6afb1b3f057fbb7ed3aabe702b3c6301d3f5c295d1d69d1541d0e64631c95d6c0999e27e8d1a58f6a00f19102d2bfaf53f25a45637b1c577ae50c4c5669b13a4ed999dd10d2f091dcda39d9abc40c64a20c14ff0b1bf4d23fe07ae90fa0eba9c64bf89b26e7d8d70710b04f9ece5969023acadbb4582272e5b3a0429a5645b0c824ad36f7cc8be12b3874d5a19349b0ede845e9dddcab4a78b08ed60104002aabb17eb1840bc8e0ed1dd8b9b7eeaf32a185d80250a7f2252775905eeeb756eadafe20bbc616bc44b347abc8caf722b2c3b06884c1d3690f23b06fa4541bb2a81073b452764f04bd39008b65ee222cf697ac21b087548e9708dffaff2859e973b1e88668c8022cc6dac8548167e5798ec9c7d288a7fa7749f07513187cd8f060abbbc5e37dd1ba3aab927be1b409be733b7408534e5b0951e9ecfd0a1c77e3a29be47e896aecac0bc4093330124615056e3ce0ce6ac91b1242d3bb2e787a186dc2ec284d60e9d8a03884a22eeaa1efa497ee88c6cb565b164a260afb5157e392b1ebb1a4d4f992011ecbac4a0a7ff5bdcef7994a422bb2761edd2d8f20f5f879a88f89d48b8314f862585e4b7a9d6a6681f40e8b82cc6555dce2db951d164cc9a70e640ac8974faa2587a6e3af3b9458f7d4b4077b3002536b10ea24d73307a33090c4c270909a5322eac32cb175e68fa83457b21465c08c02dcefccc0c714c2862ddbe567755f05c1e671328d160d3752345ca1db6e74c720e42afca982ba6befd96c5575f1dd8f87ff6606301c0000000000000000000000000000000000000004d0d54b4caf78018766cdb971e8b168d4763c1f00000003d4e1d842caf457797f93db93e4f38a9dbd79f6bf5dc40b55fdbf9b856665061b2e2924f27eb2d2b5a181ccfd9eeb11dec165b6f12433f00bb06124041ffdcdcdc91f3b3b76635a689c9249cf69bcae654bfa81e75b7c7002b883c56026d83520395b7d511f607cf2f899c7b1c75e2192f775d72247167285857588ace1115fbebfee3c16b84cf7036d41c493a63c09f2ce46c1f5995c2d7fe58c15e64bb4cb7e7f336cc22fa1ea1363bce375bd3d579be1dddb08ed5147b629e4b3f0e65783ee5e20d9270802f2a7500738d95216743bc36a04ba8d486fb26252d684b84fa24639089064ca7b93057c041f12d544dab4d24a4f952b4f265a69ba279929959991b7ac63786055b3c029a0e8b6e42ad33cba2661957cff0700000000000029bb61462623a58556cd62844d4d23cc738ee5b36c71d2c010b089251d5806000b1ade92dd9f441468967c052aecd9de81b4b55d06670597991f37ddc4fa19a6369d5bf76c474633a337f676ad255869881da5cadcf49ce9188129cc978977f87b32bd4945717075cbb4d3e01e67ff087644f52fcf0a3c732b0586cb87972c43d2616bf4e521dc310fbf1760243d51a197d3ecfd74bd625e9f496175513f3e97854ea76e26e96a8639a297871485a8609f8ca842b3321932c4d9e224a0cec5946cec9e359fd3687415cad5fb8c678136f36d9f781fade9f2469477748f4dfa0f56c326c89bb5d07f35aaf95303b5a620fc84e1c73557b2277831f8f633f0d293c0e3f4f93149887271e645f50a4e57010a9b76457f6ad73231a905206bbb1b95248aed85a9df9dea64cc1fd1f06a98530000000000000045fcc1fb138fce0faec0a423e860d5b308d7849381b294106af25f15fec047d5b844a99f36e342165df728e381b48c20e0900f8d265157467d3494f2b93c7f3c817688cec2d226f50edb115c2e075f3c663a4b4169bc6fd7d4fbce205f2a1ae263ae0db900fa0a13cf796e0d7a9dad86953c13ed6241206d682e194c64c491de6a531e9bd45abe705f07000a82ccd41a2c1b23bac44b7371a3a0aeab3647c56f0680cd30ca260189dffed79c2cfae39d8160d3fac695b75654a4a5695b9edec673e75d97950fd4d80bdf8e2d83a3232768b1231b09ef4d995a783eb8f731523e9f6c2ee9119d567acd471bc391bd4f07600d5b04b71c1f1fd7e219b8df5123e4c529db3ce74353e8a39e2d21ce0954334951d509cdce531fb14230fa3b7331a943e7223b0ac8725a0d45a213fa249a8801959480ecdc5999c9df72debe8510d0620fce7be7086d5b72e857243f0a7883d9749b1f40936b51631e0060a0d9901d730000000000000000"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x3e, 0x0, &(0x7f00000000c0)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000400e8d50000000100000bb500000500242c108906f212bd0a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m20.943324043s ago: executing program 6 (id=3046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x10) 5m20.878047763s ago: executing program 6 (id=3047): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}]}}], 0x1, 0xc0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x2c}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m20.256145897s ago: executing program 6 (id=3049): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m20.205610751s ago: executing program 2 (id=3050): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'team_slave_1\x00', @random="01320032b0ff"}) 5m19.921887209s ago: executing program 6 (id=3051): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 5m19.920834028s ago: executing program 2 (id=3052): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000440)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r4, &(0x7f00000006c0)}, 0x20) 5m19.833870369s ago: executing program 2 (id=3053): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000040000000400"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5m19.70415579s ago: executing program 2 (id=3054): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x15, 0x0, 0x40f00, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m19.689797614s ago: executing program 2 (id=3055): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4000040) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x1fffffffff, 0xb, 0x80006, 0x4000000000000e51, 0x7, 0x547a, 0x103d, 0x200000000006, 0x0, 0x5861, 0x5, 0x1, 0x0, 0x40000000009, 0x40000000080a8d, 0x800000068], 0x30000, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) 5m18.866681762s ago: executing program 2 (id=3060): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x0) r1 = dup(r0) write$binfmt_elf32(r1, 0x0, 0x58) fanotify_init(0x200, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) syz_usb_connect$hid(0x2, 0x3c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000010000400a1503120000000000010902240001008010000904421d1257ad0ea75d21090033012205f7d7af7d"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002", @ANYRESDEC=0x0, @ANYRESDEC=r2], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) syz_usb_connect(0x0, 0x77, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x5d, 0xff, 0x2b, 0xff, 0x15c2, 0x43, 0xcd5a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x9, 0x5, 0x90, 0x2d, "", [{{0x9, 0x4, 0x5, 0x4, 0x0, 0x72, 0x3, 0x77, 0x3, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "194e1ce62102"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xc2, 0x8, 0x45c, 0x9b}, [@dmm={0x7, 0x24, 0x14, 0xf3c, 0x5}, @mdlm={0x15, 0x24, 0x12, 0xc5}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x3, 0x7}, @country_functional={0x12, 0x24, 0x7, 0xe, 0x7ff, [0xf7, 0x1f30, 0x0, 0x9, 0x8, 0x2]}]}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x51, 0x52, 0x81, 0x8, 0x3}, 0x110, &(0x7f0000000780)={0x5, 0xf, 0x110, 0x6, [@generic={0x96, 0x10, 0x1, "bd7031e6347d80d671222f401fa16997b1d21b1d601ac776ccb1f09b5da68029850977fa76883afed6017fa23a34e09d0a5a57881bb7beb4b8ae9da62d74417438315273850e58c303ea0ea8e63ff0014ca8d77c54b6afc33b3bd68ecefaddcf2ff295be4b4ecbce422ef401cfead06cc3d00bc162cfc54165c293c868d592aca7c0e64d0c855a525717ccdadf07a01059ff52"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x8, 0x9, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x2, 0x38, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x800, 0xe10f, 0x7, [0x0, 0x0, 0xc000, 0x3fc0, 0xff0000, 0x0]}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x101, 0xf00, 0x80, [0xf, 0xf, 0xff3f00, 0xffc00f, 0x0, 0xff00f0]}, @ssp_cap={0x1c, 0x10, 0xa, 0xf, 0x4, 0x1fc1, 0xf000, 0xfb, [0xffc090, 0xf, 0x3f30, 0x0]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x816}}, {0xd6, &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x407}}, {0x1d, &(0x7f00000008c0)=@string={0x1d, 0x3, "8dca4c6d4ec9cd4fa43a1c1fa64ecd3f8d83931558c205c042469d"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r4, &(0x7f0000000b40)={0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, &(0x7f0000000ac0)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x0, "be4b"}]}}, &(0x7f0000000b00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0xf9, 0x1, {0x22, 0x408}}}}, &(0x7f0000000d80)={0x2c, &(0x7f0000000b80)={0x0, 0xa, 0x3b, "69e3264b2953874a09e16ab0ac31321e7e2c1d1c4ffdd77d7539e2c553e21a71c927b08f21dcfa21640622de96bd3ce0121f24d6761a2635f1a460"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c80)={0x20, 0x1, 0x92, "4b75e8a1c64a8e1886acd61f548409f5ba83688d96bac2fdbdded6b41efcab4cf452889ef946633aa1ab6bf6eebbd4271893522f1692fb23c81df606cd1b79f0cddf163659c62e476a9d7cac43f20df4da4db55c4ab3c6b05412a96ab13cc8e5b0301fbe3af25b84b52ec35cb038e60a1223e934007ca4ec65118ad9d0d4612a6c2d9309b942ecc0d0e43f0f103e357b010d"}, &(0x7f0000000d40)={0x20, 0x3, 0x1, 0x4}}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0xfffc, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) syz_usb_control_io$hid(r4, 0x0, 0x0) 5m4.559971006s ago: executing program 36 (id=3051): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 5m3.057499651s ago: executing program 37 (id=3060): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x0) r1 = dup(r0) write$binfmt_elf32(r1, 0x0, 0x58) fanotify_init(0x200, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) syz_usb_connect$hid(0x2, 0x3c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000010000400a1503120000000000010902240001008010000904421d1257ad0ea75d21090033012205f7d7af7d"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002", @ANYRESDEC=0x0, @ANYRESDEC=r2], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) syz_usb_connect(0x0, 0x77, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x5d, 0xff, 0x2b, 0xff, 0x15c2, 0x43, 0xcd5a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x9, 0x5, 0x90, 0x2d, "", [{{0x9, 0x4, 0x5, 0x4, 0x0, 0x72, 0x3, 0x77, 0x3, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "194e1ce62102"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xc2, 0x8, 0x45c, 0x9b}, [@dmm={0x7, 0x24, 0x14, 0xf3c, 0x5}, @mdlm={0x15, 0x24, 0x12, 0xc5}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x3, 0x7}, @country_functional={0x12, 0x24, 0x7, 0xe, 0x7ff, [0xf7, 0x1f30, 0x0, 0x9, 0x8, 0x2]}]}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x51, 0x52, 0x81, 0x8, 0x3}, 0x110, &(0x7f0000000780)={0x5, 0xf, 0x110, 0x6, [@generic={0x96, 0x10, 0x1, "bd7031e6347d80d671222f401fa16997b1d21b1d601ac776ccb1f09b5da68029850977fa76883afed6017fa23a34e09d0a5a57881bb7beb4b8ae9da62d74417438315273850e58c303ea0ea8e63ff0014ca8d77c54b6afc33b3bd68ecefaddcf2ff295be4b4ecbce422ef401cfead06cc3d00bc162cfc54165c293c868d592aca7c0e64d0c855a525717ccdadf07a01059ff52"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x8, 0x9, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x2, 0x38, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x800, 0xe10f, 0x7, [0x0, 0x0, 0xc000, 0x3fc0, 0xff0000, 0x0]}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x101, 0xf00, 0x80, [0xf, 0xf, 0xff3f00, 0xffc00f, 0x0, 0xff00f0]}, @ssp_cap={0x1c, 0x10, 0xa, 0xf, 0x4, 0x1fc1, 0xf000, 0xfb, [0xffc090, 0xf, 0x3f30, 0x0]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x816}}, {0xd6, &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x407}}, {0x1d, &(0x7f00000008c0)=@string={0x1d, 0x3, "8dca4c6d4ec9cd4fa43a1c1fa64ecd3f8d83931558c205c042469d"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r4, &(0x7f0000000b40)={0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, &(0x7f0000000ac0)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x0, "be4b"}]}}, &(0x7f0000000b00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0xf9, 0x1, {0x22, 0x408}}}}, &(0x7f0000000d80)={0x2c, &(0x7f0000000b80)={0x0, 0xa, 0x3b, "69e3264b2953874a09e16ab0ac31321e7e2c1d1c4ffdd77d7539e2c553e21a71c927b08f21dcfa21640622de96bd3ce0121f24d6761a2635f1a460"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c80)={0x20, 0x1, 0x92, "4b75e8a1c64a8e1886acd61f548409f5ba83688d96bac2fdbdded6b41efcab4cf452889ef946633aa1ab6bf6eebbd4271893522f1692fb23c81df606cd1b79f0cddf163659c62e476a9d7cac43f20df4da4db55c4ab3c6b05412a96ab13cc8e5b0301fbe3af25b84b52ec35cb038e60a1223e934007ca4ec65118ad9d0d4612a6c2d9309b942ecc0d0e43f0f103e357b010d"}, &(0x7f0000000d40)={0x20, 0x3, 0x1, 0x4}}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0xfffc, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) syz_usb_control_io$hid(r4, 0x0, 0x0) 4m26.721331424s ago: executing program 8 (id=3154): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fchdir(r2) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) r3 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x6, 0x1, 0x900, 0x0, 0xffffff80}}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800000010000304400000000000000000000400", @ANYRES32=0x0, @ANYBLOB="40a3000000000000240012800b0001006d616373656300001400028005000b000000000005000a000000000008000500", @ANYRES32=r1, @ANYBLOB="050027000300000008002c00030000000a000200aa"], 0x68}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 4m26.219801292s ago: executing program 8 (id=3155): msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/93) 4m25.847581074s ago: executing program 8 (id=3157): openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) 4m25.590265425s ago: executing program 8 (id=3158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "d60400", 0x14, 0x6, 0xff, @remote, @local, {[], {{0xf5, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) (fail_nth: 3) 4m25.275663034s ago: executing program 8 (id=3159): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x3, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffbfffff}]}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000010003704feffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c31507000b14bf26"], 0x20}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004054) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000780)={0x0, 0xcd1d, 0x10000}, &(0x7f0000000000), &(0x7f0000000140)) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m24.103582537s ago: executing program 8 (id=3161): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x3, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffbfffff}]}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000010003704feffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c31507000b14bf26"], 0x20}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004054) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001"], 0x28}}, 0x802) r8 = syz_io_uring_setup(0x82e, &(0x7f0000000780)={0x0, 0xcd1d, 0x10000}, &(0x7f0000000000), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, 0x0, 0x1) epoll_create1(0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m8.761321183s ago: executing program 38 (id=3161): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x3, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffbfffff}]}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000010003704feffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c31507000b14bf26"], 0x20}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004054) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001"], 0x28}}, 0x802) r8 = syz_io_uring_setup(0x82e, &(0x7f0000000780)={0x0, 0xcd1d, 0x10000}, &(0x7f0000000000), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, 0x0, 0x1) epoll_create1(0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m24.786013244s ago: executing program 9 (id=3326): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @discrete={0x1, 0x3}}) (fail_nth: 4) 3m24.227639272s ago: executing program 9 (id=3328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x28, r1, 0x403, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x4000080) (fail_nth: 4) 3m23.948246935s ago: executing program 9 (id=3329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/47, 0x2f}, {&(0x7f0000003a40)=""/4093, 0xffd}, {&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000000480)=""/74, 0x4a}], 0x5}, 0x81}], 0x1, 0x120, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x1000, 0x200) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00005c1f0f050500000000000000000700002808000540d3602652"], 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0xc0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'hsr0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 3m23.124621415s ago: executing program 9 (id=3332): unshare(0x22020600) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xffff, @local}]}, &(0x7f0000000440)=0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f000000a080)={0xfc, {"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", 0x1000}}, 0x1006) 3m22.679461228s ago: executing program 9 (id=3334): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f7a0000000400"/20, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0x7, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) add_key(&(0x7f0000000340)='logon\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)="25543a44ffd654f1", 0x8, 0xfffffffffffffffb) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2ced, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x5, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0xa, 0x64}}}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x6, &(0x7f0000000180)=0x801, 0x4) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x40000) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) r7 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x5, 0x30}, 0x2b) socket$alg(0x26, 0x5, 0x0) r8 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r10 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e17fb55ae6f1221bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec9dd110f31ba5ae65e31f00e641832d29ed658b91f349b801b8b0d2de59d006ce210a0351b6bbd06c77c9aa67b5d7287fc1bfa1d0bf035ccdd4b20d7f95b5c77afde046b146ce8b395126fceb6cca68972ac02bc7d9b0aa6453cbca85e30a02db8f48b9eb10526d00f4e90971d6c844fb8b2fb70ec826465726fb78cc47db98cf04ba351e13fcd9ab1c4c2a18f2fb931951347528d02aa982f43adc7275cf628880d83ec1ec3f1f408d21a04e388b2460a6f33071ba190c3538bcc29d16bb0119570263af15bd2ae5f09c5d3177c3bf98da9b729d76aa92467ea00d4a5c1791881390e1aaaa1afaa6babf2598c7427fa29529c23b76d599f39c57e79a15d27d92289c1fc2b8c3ad7aac902c44dcedda161e66f", 0x25d, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r9, r10}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="9e08211f743771674fa0c63fa9a15891121cf2a65aa964ee24210cc71fb8a52149b46d4975e557a4e2f8c7000b876540ee598c0ae3d776eb29bfd7fcf0c5b2f42108f1088df8b56a5f4e26911b937e83df0cd2e7383cfe8d8a0cf2762556c664e91a7d059c0091c0581ee268e900d57ab8e9784b7b479547c555c65780bcb7ba843789c4ff816584cbe132765aa2740dacbf81083fe070cc773d8cf42982e89b2d58696b9e40baf5abeb3be2e441563a30d539fe9d99b69e", 0xb8}, {&(0x7f0000000440)}, {0x0}, {0x0}], 0x4, &(0x7f0000000780)=[{0x10, 0x116, 0x1}, {0x30, 0x114, 0xc, "54cff09aa5f33d1d4e3749f21ebb4d5efdfbbd0cf01cedde11"}], 0x40}, 0xc840) 3m20.411311451s ago: executing program 9 (id=3345): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) userfaultfd(0x80001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000010003704feffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c31507000b14bf26"], 0x20}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004054) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001"], 0x28}}, 0x802) r7 = syz_io_uring_setup(0x82e, &(0x7f0000000780)={0x0, 0xcd1d, 0x10000}, &(0x7f0000000000), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, 0x0, 0x1) epoll_create1(0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m5.174713098s ago: executing program 39 (id=3345): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) userfaultfd(0x80001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000010003704feffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c31507000b14bf26"], 0x20}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004054) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001"], 0x28}}, 0x802) r7 = syz_io_uring_setup(0x82e, &(0x7f0000000780)={0x0, 0xcd1d, 0x10000}, &(0x7f0000000000), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, 0x0, 0x1) epoll_create1(0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m59.319438975s ago: executing program 4 (id=3416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10) sendmsg$sock(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000055) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000a40)="05a363abbffe057f76581f8d3c96ab47acc2332cf870064d32ac77bbc7437e25747cc4be7f64b50e0079ea652a37b19ebecb055959c4ebb6722ee9e96ae641e9eaf6f37887f955223d9297f36075f68d88faaf2773f81c0810ae400ea05c75ad9c44ed334f3f93b040ecf6ad600fc565921e51287764e9f170c0d3123078d14622d49cf303c53d0c562e21a649a14f315b6804f95934a9e7d753b298dec7aafc34c546f4586cd49664138726cad0ab769696ab87930ae22ed88621903c0136e7027d8b6e76286551506b9f0158fb1fc38bea69b55fec212bded4e7aa855e1c217009694bbdacf1971ffa6858a53c9bc06bae526bff5c41a0a0ef7eafa50517d08d4e1d7b1efaaf58bf3c6b19010de905ee5f617e65129663fc69156a5d87a47350d1b19bd79ab1656e18d82bbd73735a8f602f7f6a8c29e50ba5fd4e389c7946f78a2c2fcc1de0d05f3766a45502b9a5bca5b7c0175d3d07a21955b63285e4a851bb02e54ead9448513216a4f06aa3a5c0628ac22c6bb4b41d005abb37ee5238f806aae60f9a4d8bf3918c16e417daaf574165d2024a6d4eff97dcddc8479ea4dbb485ef4dcc08fcdb287df99297fab819418ccb3a1ce9b955d735e4b2f9246219047728211a5fe8fc8db465ba44b45be71dd89ceeb990177410e8ef42c75dfd9ab79bee8c2195a7ca73794835fb2e594a62b3ec8d0bca75d42e4f4b792b455eea349d52e18355dfdec4928c580f3860da7cf9e6b1c8797922f0260a6aeac9c8eb6802741f4d2bc31339316255c70dc1d8d8d236260547f721fb54baf5c361fc10a4095dc10a4a411de20e5efd5df330b298b951a28ff7e229e2813d2f6baebf481f5177be1cdcb35fc1a7924dddcc916b85e8fb5555fbc6f5c8eddde76f90182284200a26e179b52e076685f2e88c1103fe6003abfa50bfb9dd7bf6fc2600c4a64bb9edcc576caae1978b3c52bed5269f8bdbf9e86ad518aa1c361d56084497fd0675dc0bcecd29a64c8496f3775fb7816b2def8c0a0cd0a8cfa0e5de8c8bd6308311db622bc6e64596b6329091f8b8669fb1f52336086cfa7d0c580fdff7621e90570c5861a22f885b54191c24a1dcf596bb305cc4b12d66ff54ce8e8ef63bdd65ea700e171ac9e4c2f27f0689ad54b2551d616140780a98fbe3b6c172e87dca412390e3189c66f18953faf79184cdaa620f08b902abeb309b91b464152e817ed014d84b51e8b61f95fc824a19719c1fa99eb689547fd91d752b051af1501d631c20bf9607ba69decdf4aa515bca1f7851048a974fc7845a2c569e226c2e849c2f2e2c208bcab0f72082d0f9b6cbbc695d0bd14a0a5e0fc3364ebdc1376726e2a1702aa77cb2264ac1c12687f9ae05f988c8a147c083eb2a0107bc8446af58bd2b513c89da96006234e685fdb83ce21796561325cf79c57e22737e7a2f36d46deb8ffec12b32e49477779fef0a9710a4aa5b9128421bf706be4006134086bae06cbfdd4bbcacadbb1b640f1242eade58b502d8299f2e8fd9cdb134466386480c4e43a982f6e7437d124318b1efcb33e07e2eb09bae8e719540d5cc253def6f0147b5f18c0fe289afc228eac39c7508fd78b6c6a1c4cb0aa746a0666d14e15c04211ebd03b51893124fd781cc27b329f5365347c4deffdb643388ea6eb257dac481afc695e291e466698b53fb159ce11c5580d0bb186ef493785db13ca77514dcbbd5c9ed27bebed06bc99b9a8ec9d3accb9dc67fa243a7ef379fa9961711d18a1a92ef83c175b2f39086f9a41158b3561d2efc37da9950dddd2be2abfd7de22dd183236a92795b5c095ec53d4f56d55f49e478689643dd00cb94cda733a1951719876760f66bc2438b55347e72f707260d5c4be8588c557d5c01439b9d191b6269916503ef8674258f0042c63f1cece8be4366e08b62e1c18a6a53f8a952e9c3378a87123ddd17cdea59f1f1c719e505bd7811b53d3d49890490b679bad7526ee7e8c5ddbb8eafcd99c5a6ef1a6993b121827ffe7cbfb08ef60599f3b4a47d6b18c637606144f065b82e7f7bf380013cd48a69c940cdc180f81def692a971bb2302dcc22a4ce8e8a8ffba8caad4495be7a715e1e6d00db33fc70e38debab2cefcd8a34ce3a0c2175e3e2f00460378a238ea5293f4b45d0de492ea966d396f4e285494f88028b91705fae249877bae74039a2cd2dc9a13d91abc620fda5763877d0738bf51bbd8d9ec1f21cc656399b1de0bbcf27e3e196c34a47d97a2dcbb533774ae5257e58ee8a63e1fefcd78031b1b87db7347db50496980e7a71fc1489d878bc0492136ff7583829595e90b9f6941fc9b3c92e35e3d60df16d327782fa51c49ac4ce62ebf964ee13a3f96398300871bf12650b4a687d7ecd0c0a766375e2f5cb0576e5c03dc3d20fb789bfe785fc99c962e5efd3da303b8554bd6b628149f1c51679acca7d83a9e2e08cde32949368f7ce91eeaf76d42af568bcac0a49b6dc3874143600132a0b7d3d0a4014a06243154f12cd157155fdce51a25b3afb0bd2553a0bd030ac39699d2abf02b5b34a63560567f7f71e0ace11eacc0e8b96a2150290f4eb8872a95b4661afc67823031497f32e38c3acc53d6a8834d827c3b5afcf3f909c95d4264a44ecebd3e022d2627481c0bfcf36cbb5468cfb79baae0334dce849aed8120ef55e4ccac7d173d2bcf0249bd5f070c3ed05d08dff25d10f1c8629a934f0796f2b416fe02a7fa808ad10821c5ab768556631ae41127ffa9a99d6c302eb7f70f77dc0944c26634b33255cac90d9c782c72d260760dba9abbc8720dc9fc206a0c58a2c761bd750673ec1037b53b6f55382145f5b9b6431a07b7c2ed48a1f9d7c0f9ad1e4832540bc6b395c36f1d3e78f0930a471f1afbe7fb8287a75b156bd7b2a837c4a44225d76cf953c1e7bd991b1a456580654561e67e4783079aa368581ad0576dc9811a34911147421fdf5c7bb6f193ed34c5af268f08e48652d3a5a3890a82e6fe86b624a515ad90f8ad56c731d55f3aabf82c8c3a71cb1fd834b5040967adadf03b561fae7a5020ab1ebeb6abdd4165bf1410048444648e54058638f32b50acc26c69b42b1cbebad0c8acab4c4b605bc9dabdfb32052933601754941cc36642d86c14430b317500a41b7f0160906f8329060af3bc4f02aefbf00d020baf08784971ad23dca853ae90ad5a6dcadb6f85eee9ed2a22cd985d1dd3faf5a4195b759bf339439113b8e94dfd5871bfbdda7db5be69b22b1363ed21cb111aa6218e72e30d934ba19828a60648431eeb6afd73ab6a6a4a66895abb5ca4657155a8737e5e487eab2d0db47c16759ac5aaca26e3288a25a5a2649898858fd08f1c7ec56491361fa55ac05dd5a3243abaf355ef9d0cb22676d1ca795e5dfba82a6ddba80b2ad75351227fd2219f47b695b0ea864a7ed8f4c040fea35f7f63a5d94c60336c5226a64045ddb39761e030529cd9d3d3ea44e8950f2810a7b4aa15ff1ff08a2f08f7ecdb21595d454f6d0ac14f712c360a7407047658fff9ab91acafe0b6753c3f962d482f8b415c6c5af71930ec0c11484bdebe25a51afe41efb4f1507ef26d8896e46da503d5ba12c95a705c07344f86c3f2e2fd2e8ff91805f457f98bb71f301be32cf470ee3cfabe334d8d889204809d985f1423a5e2a226b24f679e326f312060ee3676b10ff6bbf99d929bae3d2491627662effafd1e105d6bcf47e87f158c85ec593837f7a5c3f8d11216c5e48f9d1e1b37d267b8eb1f0bfd533b2a83df32899360358c511bf716b27fc36c1d408cbdc198b5777cc4f7afc17608485fcb891d95d18840c33ecbdf5ccae04d7821f14d35492a64067b0783b95d1fb0c25a90798dbabcc909451b7157c46f2b36272574175cec69258a04710438ed1f1c715093b58ed689ab185a48488d322c34404faaa18c8409a551e283fa449188de8db1f009cad45ffbb6fe9af13cc0dabc3846821672de4735c1775d7733c24a1cabab06fe14623f3404870764e8690ee0153b1f9f6bf72fda2d07c04eec95f0db763dc174f777c246900c847d1ad71421591e4a93bbced3dee3e1b19db6fe113a206dd5039a1bd938fa66820d1999b59e2d8f3eb10fcd2569b2c6deaf02a099a8f222e8cfa350886e012e3de76850aed5ee498ce02ccaf0e90571687c6ae331ba65cf37dacf5d218de26fcd4a9baceb70d9f13ec00a6a10c6431f5afbdb9054eeae41a697f5a700073ab5c2871f4cacbd7481074b58240b2704fd35df337c7a560d7a86a6973f0e087d30aa21febf379df57620d4b43235f90ebe3394a8c09e7e5af69fe08f402b6b85823520c41865632366470f21eb8c0495dcedaae1c6ffe3b42511a36fc0138692dc38acf860084480b2bf8d57146bdac5a136f82b6d953e7642733f1abd438c352421012af8b7492744ebe71a0266142644fde4fc1d34acb83d8befa78178f6984e620da4eb3da7fe1340d2222a14e13efece8b88d0a8e5ba00bc3321fdfa2017f6046c3794a52a368a720ce359432a94b37da575aabfeff65f27b366edcae7950f0f0b180910664bc8359ababa4a4f9e3fcb8c82741c010d6fdd98083261c69a3be07d129184e48bcc5cde7a6d5ffb2636a325b239d08bf00e247780e475171e1bafa5a29f89bae2bb4c2f5c0eabd2f01d02102a470f0317030bf26cf4f564c4ee1b0e84f638c06fa82bd91ae3569673193b924074eac0039cf401bbfae4c1201734b21a1cfd1709383c7e8fd8e5ad9b03e0719a177c79a524684e63d0bf84251df9b43a4791e58e20e40fc31452956ec91e6592b3d7450b274eb6cb79fe2d02c1462ab5c6c97ce34a53fecdeec74a6df5c5a5dfef07e95305115534615e19784653b6e497b0ce20d9a0182a51d82737e834f10238702b58080f7974b59fd3272930987c99cc08fe30f2e3723abcbed9569cc5f9394340c420cbdfb693f344b6203ce516481249904c10ed653d9c148d78eae31dbc3a7717749c003ef2db5129642e1b86610fcec57cfe413271cd8a8886981a98e449ef8a1a960b7c8d9c8e32bd579dbd15c7e8f455d3066c8dcb38741fe9e69ee9e4e712163011801aea815c45904aeeed326f511ae84c25b711e9be65f6683e84730a919fded3ad9de162de3535df20c1a561efd6091c7099d9ce3268b2a274d8b5fcdc1e01634fee8fe827a3e9d27e0826faab52267092478e93f9f07c27e1a5aa7da204edc3cee1755a16a692be05d83388ac02927869a03c13baaf3e7f1489d637009418bad57dde0d4b58e96ff9c971977033ef298beac9c618151e3ca5b13684468a109a64fb21550d4b6441b136d1416414f2fdf9cb85223374bbc5b5cf3ddc4a4c7f42db6f5db41a91e51277c2d6710199717f69722d6014970993b64640f62dfd20552f0d6962899791a013a94a95b7cfb550c5c6cd3acdfe49ea11d926c558d1eddb48de445574649cfc8813ce70b37ee4ba7ed00610c7ff7b5284bf79226d85926930aade30056e0ba8f7b84f55c5ddbf3ad24960d17fe05550163fd4cc74fbd8661165feaeac5d673798bda9259507f71c469675030163462a5768c83a87af53d27b8708aebb2ea28644eeccb3a5de737dacb48f106e07182cc57251e8bd1450f64929246131b46378b6b66f6457f493dbdf28134cc669be8c13c10e7cbecefaba938a07dc876e4fc4036f3e19ce9a78de892c459f4ac2e13420b9202446756a375f57e4fd68872ba05d669d5ea5ea64a994a386959c5f82e74af7ee2e790112f634f9554499452f763d825f4f2710d0a29", 0x1000) 2m57.568658368s ago: executing program 4 (id=3417): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000001580)=ANY=[], 0x3d0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x80000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r0, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) write$char_usb(r0, &(0x7f0000000600)="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", 0x915) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 2m57.363559661s ago: executing program 4 (id=3418): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0) 2m57.113801073s ago: executing program 4 (id=3420): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f}, 0x18}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x13d) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3e8, 0x400, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40000d1}, 0x4) 2m56.560154888s ago: executing program 4 (id=3422): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000030000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000010000200050800500020000b50000080003000dac0f00090001"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m55.517316375s ago: executing program 4 (id=3424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {0x0, 0x4107}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) (fail_nth: 4) 2m40.358421954s ago: executing program 40 (id=3424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {0x0, 0x4107}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) (fail_nth: 4) 19.687177255s ago: executing program 7 (id=3866): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0x18000000, 0x1000000}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xe1, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809e60000000000850000006d0000001801000020696c2519738b28c677749400000000002020207b1af8df00000000bfa100000000000007010000f8ffffffb7020000082db99cc52f000085"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x5, '\x00', r2, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r5, &(0x7f00000005c0)=[{{&(0x7f00000002c0)=@can, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000740)="e10096bef035b9ea1125a4a5ab3c7a047d0a8511bb0718752818ef694b5a071aeeea079650d088611d38f651f0d2346306c7f8d7f47bb099f5facdf690c1348aa5a6038fe848e7d3", 0x48}, {&(0x7f00000007c0)="9947a6b272e09178d898a1a89bbcca441bd62b7739638c6a6650b256e46915793dfe2d7f430692436ab6f873509c7400261fdde7a8819de5fa9ed249e53c48ac32a4de53055c4063510075e6ba610be9940be965d47c32f69047599b25514d36765207056975ebe740c1650853097a655cc6c565dc661d2202c05b4b534985009d104cc38d9408131b09fa70390f87ba1357b2a91072fb2ce1b2e4f58464f2ddfedbbba86d8a944d223be19225136f614dfa983e125ccade2d3cac188492da3a", 0xc0}, {&(0x7f0000000880)="6c42cb03879523d78f1607a3153c6b1808ea727bdff045afc3eebdf4132916d0fee0dd47475e143bfd7856a088d95d245de89203881d1c22864dc2358e848c36bdd08d8f747ee9f3b5d43e5f2e9e9d2446d1728384322e78744203d0fcbdecabfb918d661e24fd6e0c2778979363ffc20a124b356a2bd338aa588b2830f047c757464879b145621b7464fb7058f1647a6dce4c8cc9e8a3a37cc62f8a34b381f708951b37bbfd254c51fe132a3cf10156e0a902d79d21bd759beefbde811fe5", 0xbf}, {&(0x7f0000000940)="dd41b5c7c619a806266daae1f8f20f14994c01465187b0e4e8a847fcb21b6e8152c88c6d1d52a8632497566dd63293d4fef7651c0872ea019ba7732584f492d62fa953481ca64510e256ba09ae34e4cd02773ce4c5cfa9c7e4882b674455d410ee26fe04073712e12d4c143814393221fd12d7bf2b62c4cc22f4137afa3b991933d1ccdb7438b1c61426a01bc8d518bd674b80aa37d305db79e30a6a18a2a15156833e8b4aa3a08d316c1c56c40799e59823b7eeac5e8c441eca88659862c9d10b222ae6dc6d2da52681b9f125d26cfe49d862f92d359c755ebc099f9716ec4e5fc565618a4c3e389174a50adef8306b21869d0caf7b31ba148d683a1f8099e63b4542531930c63763fb04a1fdcd91d769c23c549a10fee54ed39f4ec04bf86c54fd9e02bc384111efd23d52e517efeab34958d3c7b977f9b15a0ea875db9c08bfe538268210c5f37b000439ebead0f8f452ac13a468fa8e96e2f4ca5672c279d6159246df3509b84f9f9b821aee65470c1b08b0e8fdbb77d30b4af0f3bca6bdb54b3413a1bd87d83b84420d12394df5e411fe08888cbc43a04e841ada3518e3c0efe1a381c7ea0d7e8e1f7583218c14cc3673833b0e915e8144953226c3e8772ddf81cc2aaad7e2e5a6a3e58af64b5cd49340470962baf0dbb5064527e2a2f98ebe564bede20adbd58d5aa7c4dee85fd1e4f793daff8e41098d3192b5d989bed240ab9b7abca3aa52a8f067fd2992e41ca671158cc489516093eb4c695513da501b089e700e75f955a6c404c92e1944f91ee542a538fe719b2486be49eeac0b226f467e2018b78a24ee4c0fff55859ee05c07f69c1dffc0d2fd20ea2240b6ad3aa919732d4c6e20fc41c4ecbd65875cc6d85ce4cd8f19f261969b4d9e896fb80f988925039060e00f2a7921238790a5b41b683d858bbe2280aeaac702a50f7d9f385a1bafce9d9e9a5a58334fbf021a5afdd4a6732a8ecf95a9f664cb57327b3bca3a7bba4eefbfaa967daa6c58e5e689059fad2eef76f9d7f9219e2123107f2da16fb47fba28cf177bd0ce1a3f9f0a450e698e1ff2be84bedff8724a662f3fe20f6f42377a8cbfae25e3f59a4fbf22e1892f58fa0600c174da0e89c9c6fb9e07468c4d83b96aafd31984101ed6535db3b31435d40c84d4b55f465c1bb67c79095f80708ee4718fe5412f64b77a59ce91c07bf6fa51d2cc188c296b90993cc1e422b02126635562bcd79f1eb7b417207077feb3832b31bcf39b8f8438b5d2db5964da181c0fa009c59fe981658e732302676c50de7a8a123b1dd3effdbf904f8bed41ea4e4a7f3a2385e895b2d29e04cf4b4bfe83a95c34808f25aea61238d930ed44b3dc7ce3de6e312c1152319e3e97437b227876c5c3caf587706613159a31bd18406ab6c7b27e190734d86f19f4912ca9f7413bfdc91e9c96aa04322260f926b2ea550aff3d13de557b94d77afc755692ab50c8d90e04445809b982c6ec0263555902d1e8e66818bf987f1522cf32478e96b03eaa4564d95eacf3c1cfe11b09fe0218dfe8596110070b3a03154e5d01f25a6f1d257a1c17d4e43e40382b0f3d5bf5b29efb257508f32695237e596855383ce6afb5b6f5a8230873ca8f683b79166ec2f9258763b8a059b252facbf93fa67f501a803c2d4b5d336f129a969249e68c689605af00882dd244825e70ac93e3de084d0b513844700bd66880d9ade9be784bf1ca5875447be2142d6efeb18cd11142f66e4575097eca9ac2eaadd720697eb2d957d4ed4316aaf8f7b9cab69afa9dcb29d8486128e109dae7ecb82ceb4759c6dfd9982376d0e56a074d7d5ecdcd2515e4d995e60a4321d3c653b6c7afd14df9408884a581eec4629e684ff1a110844879cac0df89b7e1bc8f944f71a1fc0d50d90dc1c135a879eb93cc15f085971ef5d763a7395a8351716a42f75ecd432ad5fcddd4a0ff0c6e34fd631ab53e9555fcb36070ff8391bdec90c185a0f5a3bcf6505f88cf79b942dec628421c50afea7b46cddbe7aa14bb0f2fcc032a7aaf3563c1aa667e5daf14adc8e02b560e3fe1de3b631d3b29f3be6c814442935cb40a415dafc829d86227bfee89f050ab9d42a47daebef405c9b498e609c7638ba4ed21e30033e45e8ae4590ee5ec15447148f93dec93f2c132136a884744b8f78448e84b64fccd4abd93db78ecbc0378eaca0323135a27482576f8a2e07d6aa280aaa2f9c247c6131b95537204eaf942d14ac4bf0453792df254d877399a0c0ae17b3a102c48d9e6be8f50d584257b1a993d494ea22b5e57e0adac0ef4c53ba26fed28f51477858fd51728ec67b74df17994f3ae0ae218f809c6f1faea657e0a979726e599c888bf1c11d20f60f3cd2e8b53faa096c4622e25ac04aea8444b1a52c8c963a02eebeeb54fbe247e29051dd41e52893cc67d5241ee55e5f4f068b104f17fda60d8262f5088e1eadbac98cc999bbaf614a4704ce0d5f24e57c46a661a603cc9051276955e7c0692b20206090bf408a11f2e7f4191f9f6f3a47835fcd1dadfffecec1b20937796c8f8f3d79cd68c96f49c9c413d5594fc5b5299a6c2f135bbcd7c899fa32b39a466a191093cb4c3a0113e385145deb5583d1fdc0b62c184241c93f29690d7ea4b9142ef3407a7ada513588d71bbef98773d8db011c3745f1c23e6c6a22e3d4ab4f98b539309c785d1018afb81c9b0a9dd7ca22e671f3e73d57b33b06406bd6b645a4adc068f8fe011f1a5785240a0d8a0665fd195c93cdb2d076257f90ba8113fd0c498c9e339489f2d0ad9886e3f27ba011bdcf74947aa1a305eddc68ac176ebb900aa2efe0600a4df4b605cb8ec3c19a3707ba13c888fec197fe41e2a8fbf9c1a907315195195a709a5ecbc8b506dacd296dd7db63f6fb6b2089e8b2e563ec2d71ffa8674ddaf15421d28160fde00f9db0b8c508ca618ea45bcc574a3651482854ca245440595b36a8c708e6957c320ad2d051dae2ad5a6a0452296dc2937c33d2935207caabac210af86b3c9a4427292d6fbe7b95090f8090f25d82f4ecb1063fa9129fb8d7782307d0d0ec7a535ec9477f6f613b36a7e9449500e9c5f031be2669b71386a0332daceacdd565b96e39ef457e6e80ac9f03d3a7f5f11cff1ae248cdbec2f068529cf33c1afd9b854203496ff3a38d0613db4a490685e85681421b969cd71dd3b58251276d6d050b270d61e7eb4c6952de53ea8d41f78c9bf4c79973daa2d90823082dde11244d6946e445edc8e68e21bf8473790da72da0f922afc9bfa51d491f9f37986f0cd1cac24b7c788ab8a665d8a761b43576698bfead488a459e927600efeea2d1255795763d94ab7095fa4415fb87c0205ede55e55d2b0340f28a33277c6cfc46428d6202b68b65f31f15689baaefdcba647413b0a6b86ad97bd45e68495a650632dc34a2763fda0531a314945feb91db13901499c8e268033aad6537bbdcc9a95ed52b7413bbf72fe32bd8e1fc5cc653db541a727268d295e8e95b0dc49cbab3a4ea9462e3bd59d9e608e23a90f95d5efed236c4eac87290902bea263c7af2559190763e4b64f20880ce4b3b68bd6767d933cb50cbab2250d44a7a61f8ab7fb14c0506a26ab4a2c06e608bd8a93dad7edbb56166432dd28c0c7b081480220c0ff1a999410ad06f4e442fbefc257d04010b24308652461f686b28b0b3dd5d677fc43a3b1625a4f29e0e279137a8ee20957a2151572f34c5fd05bf54b4a04a4388d565a9131ebaf2dea4e9859e580645af3bb6798f74a623dd40fa16cccd7d614da84473a1616f8d63a3ed62f2c415a1af4c84246cf730643e459b0e4b3d16f488608fd21f6c993432f5d807df4c0df6377be2416f56b70dfeea8ed7f9ecf4b802fe2f7b43afd2174e2af1e8db9ec6ea3da8819baa928ccfe982cd81153271da49d95231001c5a27d3cbc6c3c36ac17bec2b81c23464b52c159f310168d8538b3cdd92a20530112990d180d97e45909160ce3b1fe8fb286365b0d6c318dbe548ab1a510764afb3217619028ed35ed92891f8583adb6ca17d465c27d5415d4cea6116164b3de84a316bc1ce0704ae5a9f6efc603f02af998f9567065a9965870f54e2e36845ad1d0dac7b276ed9282957faa6865ecbc2d87aa7ebfe0914c5f0655270f688b4fbfd20ec83b6c2be3e71a2e7b7243320f9ebb52c0619fe42d176f6d706e1fa51f192b0fa3899a109d30d475356c6752f4a6fea26cd290f843c485448b4ddf4f7eabcaa2d14532a72e9c9af1c7701d0220c0abb8322796a3225f3dd1d19ed3411da6c92019ca751d100d44cfde9edebf9f2746d6281310e8f90347adab156f5d5e05be50f3168130dc5aea76690e805246e12a7027a3c8e9e0af054365b629df3a654f2596ea31154123944477d5115e22d2243b1a1f338cb4e513eba227e8686406eaa0e1497534e0ec4b4b3a4d17716e91a9b15a63c3fffa01e1bdb74031299b74269fe05f2eef3d702f5db0a5459bb738f990a17734bfefb342949a44fd769ac3226bed7aafa2e81ca017076a18ceb0b1b559c05347a901ba5f17721f24a68c5fc89b343a7519731021c610858492996c79fb6b98d5e515426961cc90fe983ea4d3e9f0052b7678a71e7800f2e5d69ae0e89fb272b1fe7e05b075760eab34191997e5f70857c2e57d7a319a13e4a2b523e9ae79caaf29ef8055cbd7dbbfd489336b7533a89005a8d966bf6cd02b64c9cfe5adf9e19620ff28da195860c3ba5067560d20463082d64f52dfcc7f70d3080764e8516efc853d5fc731d99be51324c54f61f8865b6939cca4d6a4bf4a2fb4b6c74393f16003ba199f1824646d6b72802ab7c967fba7590418eea1683fc0db22ab82ac4c90bbae91fae102c01b9096e9505a21ca646aad823c62191df1b341b197872e6bcfc476b6c3b1796c1ef65254c77275a0c3918faab04edd750f4ea025581f0c99e40b72e3056ff5460adf63694740aee1856767aac114ca327cbac6c54e52a8d19678d57efd4587687e35966deeb0da1f9e95e699332be8b940bad2d46b584796ed85da54ebeaa0b9b903bce0338d3714da4c59c3f68b373f2eb47b88d5d847c4a0d3c92d1ef10c4b20a9109371b6f22c88c4bc9a1aa28a7662e47bfb208835b6e953e11321237d9fc08d7ad1287eb3c68c0d92812ea6d0b75a853a6b9b7774086f556d81794feb141da8357207bb5a14213c5da58f0927a5b6b44c9df1515a9251dc565e477da4cb487a262b48426cdd62d2de42d572b6141f3e62ba256a7954561950c06ede89028656ba2b5279d1a3a0b0b0c102fdff90de8d88fb0521d538a0be927168678f0e9eabc3c6c4397e3b89217ba240b5143ae2c1175cfae9b8e3a0751baa3e5c58c7a8177de8313ccd57737e95769604b0a0362fe74cc6af0421c89f4f45b0a54a0c60cd199b709f92bcb06195fb1afb70244c527036db9e250cf9ef8ec224c21b35d86c584e71c6dd733a197be7a61fe4f122ba8af8322428a42a07c96c0f90b135aa7bfd12e118918c78ced15c45bb37614275b1647fa24862f07b8de84d0681908ce4b8a6e0cf20050e172fd340e61f1678e6771a1f019cf034216438bfe869ea5f061ca2aa12988a14272ca93e14fc149e50818a1499b169629f31a674ae0d9c274403b11b1ef1d5be8fe5f496139dd3323a0c816fe56a31a75ac950da26616dfc510eb2b3cf89d1e0f9c2aa5f09d0cecf7acd6f4871860ff637b27683437630ca78ab67b71bb31d4e4df8570c58794a7beac915705fa79c1cea3558270f71cf978983ae", 0xffe}, {&(0x7f0000001f00)="584aff948e1a595b00f372bb7d3876c722449a6b10427a03afbcb7768a80aa74609a50d7eef498f09e32a7a11a9773ec0f98782d2e876227b82779a90d43c73910a0fc97f74af2ef7d50686b28ae7f125322bc46e575f065ff", 0x59}, {&(0x7f0000001a00)="27ba7c67ac143dc9fa8c6e05ff595a01cb182148eeff040d62dbad36570a2803d41848f6a516b1b54ee8e2d47a87e83958966e2c33d0d1316f0a369e0e6635955bffa035151b8e4203484dcdac375627a0505c1f8589d09474f08645c9b267239db9041fc7b7ab39b8c19742c485507f4a243c1a0cb6a02f6e20208f0bd8ac2fb6", 0x81}, {&(0x7f00000003c0)}, {&(0x7f0000001ac0)="6e710bf282862e7ddecebe920e04ee29ae2e0c66885651a2e204aabf0918c007fde55ee0a74e3db8b70ac143d535318316c3b0123d0d63468eba1d1c9c55dd545c9ccdda54bfeb6da93e53fa4a82ac0df9b6582c7e5dcb0f8b7e0848ccede455bd6c4150af528009031df532547da14c512950b803dd6f66ced4f14cda08906e4a9535785aff51456398a0a0f381cc15d9ba2eadd33dbe41c3ec2b1f3deb99119c987702d9df951e24187369ca80b9af621eb188137bee36f6d580da72de4fefc3062e9a1b92a579d3698d3aadb68500f974aaa2161e865eb8949ca16ad13858596555", 0xe3}, {&(0x7f0000001bc0)="29bc38f26d33d28e10283149aef84ab847c8c7b0149de782c4d1544cbc6e18e71831267a31877982f8c28b0b8ef527dbad3defad654815bdc32a7976e164b188eae0bc3c5fabb37bd33d3f74ac812542b94efa320e71ff8cacbc03c13811ad8ee4523b27aabc4e43f7f7eccf89dd72cded19f50c650c22c42cb950c0ef68cc7af5c3597d6e859834580d033d7f94736c99667ef483f487386f580374d89af78751f4ab7e18f8b86887b8010b6f0dbda9c49d76a358291add52de43ff6e1f69521808a090bb05227a1779da1d766d3d27ac51d1e1bb8c8b75898010a095a6aa73c7329b5ef7e2891208e016233159ab7a", 0xf0}], 0x9, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x160}}], 0x1, 0x48051) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000019080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r7, 0x0) write(r6, &(0x7f0000000000)="29000000140005b7ff000000040860eb0101b6ff02159f026ed638eeb738256e06a40e07fff0797e2a", 0x29) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r8, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/233, 0xe9}, {0x0}, {&(0x7f0000000600)=""/185, 0xb9}], 0x3) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000004200011025bd7000fddb000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) clock_gettime(0x0, 0x0) 17.592144253s ago: executing program 0 (id=3872): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0xc, 0x0, r0, 0x0, 0x0, 0x0, 0x22044840, 0x1}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0xffffffffffff2168}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 16.534088286s ago: executing program 7 (id=3875): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='+cpu'], 0x5) 13.718825356s ago: executing program 0 (id=3881): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) preadv2(r1, 0x0, 0x0, 0x37, 0x0, 0x0) 13.368423014s ago: executing program 1 (id=3884): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) socket(0x10, 0x803, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x14a900, 0x0) sendmsg$unix(r1, 0x0, 0x10) close(r1) (async) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000540)={0xf0f024}) (async) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x4}}) (async) syz_open_dev$loop(0x0, 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x9, 0x0, 0x2, 0x0, 0x6, 0x0, 0x2}}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000040)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="0021ae000000ae21a0eea3bb90617372a5bb0600000000000000fbb0c87782c9045a6a451f8576f319b3e0047560d21254b0774fa26010af868ffde27f9413fc287f33e4dbd15c77f560e99822267f2b850b99269cc433b7f863022641206f3e0604162bb86dc94c9cd7b1fdb26c1f148aeb6d3316b6414d4204e23d745d3a9dcf57fbbb2a1ae1ba83cc3ce1c929d47cc2c17677f199631dcd53b94d9229053c0dce172d7e6fe146d337fbc244ef033a7266a368"], &(0x7f0000000400)=ANY=[@ANYBLOB="0003040000b0a7f6d1373ae192d9fe28f89726aeb10004032004"]}, &(0x7f00000003c0)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="000e6f000000c3972aa2cdb9e4d49bc5f78a8085fbafc2d2603a18fbe3c64946517e418b35fe565cd9299a66cdf401d69ab84ea7cf16d45818945f4b05712f76fc363b6dc3d20f1d1ada8cb2098cfbb7b110418f3c11ebabbaee458f81f240a09c18d1d5dba9ac87053e1e01000000000000000000"], &(0x7f0000000180)={0x0, 0xa, 0x1, 0xb4}, &(0x7f0000000200)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x2}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "cb234f963dd6d0cfc5b10f99e0e64e24faeee83584eefc4ae7ac0781377bef71aa59e51899a6bca9bf07f9c8a78dc7"}}) (async) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000480)=ANY=[@ANYRES8=r3], 0x0, 0x0}) (async) accept4(r4, &(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x80, 0x0) 13.296449286s ago: executing program 7 (id=3885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020}, 0x2020) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r5, &(0x7f0000000200)=@can, &(0x7f00000002c0)=0x80, 0x0) 10.487682746s ago: executing program 0 (id=3887): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004054) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000780)={0x0, 0xcd1d, 0x10000}, &(0x7f0000000000), &(0x7f0000000140)) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.443864232s ago: executing program 3 (id=3888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x2000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000002c0)=0x8) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x4094642f, 0x0) 9.57951574s ago: executing program 0 (id=3891): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0xc, 0x0, r0, 0x0, 0x0, 0x0, 0x22044840, 0x1}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0xffffffffffff2168}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 9.068101828s ago: executing program 7 (id=3893): r0 = syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f7000000010902120001800000"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000002180), 0x0, 0x80) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/147) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000040)={0xa305e823f919a31b, 0x1, 0x6, 0x0, 0x8}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) mq_open(&(0x7f0000000040)='-\'$(:*{:\x00', 0x40, 0x24, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', 0x0, 0x29, 0x1e, 0x5, 0x5, 0x14, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x8, 0x0, 0x6}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000200)={0x14, &(0x7f0000000300)={0x40, 0xa, 0xb0, {0xb0, 0x9, "ae112cb738ec2dd3baf0fceef2aafd7f5a75ef3fdcb49315cb012bcb12e4bbd10df4c910ba97cb4b8db75b3fcdb71531d94843915a417dbc7fa946328657df36fe3aa7989c41b98edef185ec30cf66342f05ddaecde383912be7e6791b591af1c53ec65819bf6cf748f8658ebe9325f458c663c664919dee1b2628daa1852aeef29b97f1d237105756a25478ec509a900fd5181ea04f7b2254e939ded67b6cc643a0a19e172f905ee1608aa60322"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}}, &(0x7f0000000640)={0x44, &(0x7f0000000400)={0x40, 0xf, 0xd1, "07249cd6e1a76f76564e639aa6394bcea71fccc055c35dc59074a4a75a31eb712413ac49ce8e80b6053baab9c4ce094d9dd84c4f499752a5f1e0fa88fb5e93deb8ae9fa17fbcd5cb69e7d38a35b45a53f4ac0b81327dcbdc8fbc7b38fbcf94a10c01cb054581fd2c9525c82e7a4aed5fd7b2ec31bd469626475d660efb08120adb4291b91f60a2166389c7e04cdeabb5e49e4fb0c2c0ee2ce4a7696f6f2cf364a3858efedd6f966e8b2d88db5b00b17c1faefd4fe58e3564276fec90018eb71e3c223d035fa991bc5d0ccf852d7186cc34"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000500)={0x20, 0x81, 0x3, "7d9e7c"}, &(0x7f0000000540)=ANY=[@ANYBLOB="2082fbff00d0a8267c"], &(0x7f0000000580)={0x20, 0x83, 0x1, '|'}, &(0x7f00000005c0)={0x20, 0x84, 0x3, "6ae78b"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "49e81e"}}) 9.038695442s ago: executing program 1 (id=3894): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400", @ANYBLOB, @ANYRES32=0x0], 0x50) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000480)=0x6, 0x4) 7.335700859s ago: executing program 5 (id=3896): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 7.220530309s ago: executing program 3 (id=3897): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0x7f, 0x1f, 0x0, 0x83}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) read$midi(r1, 0x0, 0x20) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x6728) write$dsp(r0, &(0x7f00000001c0)="a5830a602214f6b4e928d758f38a5a7cb4b31c0900000000000000784caa11d6", 0x20) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000280)={r6, 0x7}, 0x8) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0xa) 5.958002657s ago: executing program 7 (id=3898): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x2cb11000) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = memfd_create(&(0x7f0000000800)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\x10\xa2\x9b\xd1(J\x18\xdc\xeb>\xfd\x0f\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\x05v\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x5) r3 = dup(r2) r4 = memfd_create(&(0x7f0000002600)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00x\xdd\x02', 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x7, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)={0x3c, 0x2d, 0xc05, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x1c, 0x0, 0x0, 0x1, [@typed={0x16, 0x1, 0x0, 0x0, @binary="37d7483164b967c6c6fbf4f74ab8a5aa6cf6"}]}]}, 0x3c}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'gretap0\x00', @local}) 5.927357658s ago: executing program 5 (id=3899): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x80) (async) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x8) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x4000032f, 0x0, r1}, &(0x7f0000000500)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x10, 0x0, 0xffffffffffffffff, &(0x7f00000005c0)={0x241, 0x6, 0x35}, &(0x7f0000000600)='./file1\x00', 0x18, 0x0, 0x12345}) (async) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0xa96) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0x80, 0x1, 0x20}}) (rerun: 32) 5.275685795s ago: executing program 5 (id=3900): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000000)=r4) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x80000001, 0x0, 0x8}}}}]}, 0x44}}, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x2402c004) 4.785825868s ago: executing program 1 (id=3901): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004054) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000780)={0x0, 0xcd1d, 0x10000}, &(0x7f0000000000), &(0x7f0000000140)) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.585993122s ago: executing program 5 (id=3902): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x803, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 4.273348699s ago: executing program 3 (id=3903): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000003300), r0) 4.192274191s ago: executing program 1 (id=3904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fanotify_init(0x2, 0x400) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) fanotify_mark(r3, 0x21, 0x4000100a, r3, 0x0) fanotify_mark(r3, 0x22, 0x4000003b, r3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 4.124212676s ago: executing program 5 (id=3905): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000005c0), 0x8040, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4.021809032s ago: executing program 3 (id=3906): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0xfffffffc, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1a001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x20004042) sendmsg$inet6(r5, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e20, 0x5, @local, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000004c0)="aa9a655d7f9ec7ff95c2fd44725c914928cacc2357ebf25182296eab2b8203c602a19fe63b3b45b7e4c7aa272abf86120fadae53b7880784f1604c0f70940306fb3087ed6ffbd13aa52e0b76c7abfac8e31d061a056b693babcbd11b541329d49a49083effc3a1404a80d66a69c3a02e16ec38172c5818d3d9ab332f26b3a4e2b92cedddc739b4d62dbba2baba0ac184ba6147c21c174d54dedafbe07e2affb12b2f35c8dd62612670247a28963b165a1b14780aa1752ffaf6c04990992583ac0d6e0e50f1b9179848ca6312a64c15acf68bce1ac6b50881ea3047a5", 0xdc}, {&(0x7f0000000040)="68a8d27ff87cf6e4c7c912", 0xb}, {&(0x7f00000005c0)="78a2bea4b36bb2269f50d9447519014319c12dd76887eedde2cf9dbcc881bd0444a7281ee2d886ef6ffe3cbd30230543e80ea8a3ee036a72771c9cd0b1cf486dc1e9f89cee24a9daccbdde494975add7abc20531c9a886ec28b9a486c5fcfb9244a7f9399ae313577ab0b588ae55042954c2f3073b9b9c1f00a5313b8d75ffc70e7fce92afeb5012db811f2e3d362b9d8841856319916d4b747fc452565be8a30525e2c3e8e1e2fbcee923a592a4f421cb3228cfbfaf50e33aa2777616e355e01cf56490aed95661c340832a020cfacbc3fb3135c0c141242bc9f572c02a45c3828b251029fcc7ac92420a2cc3181079114e139fa91ee11988b2a741d3a0bc816e62802de68deeecdd2bb093429a1a9894a55789e155cdcf0a923af920efe158dd2fcf6b83498565e1f551cd4dbf57e9ac78da3e0f78575170ed979ab908290de6f258b56efe1303d9dbe507163ebe1046a4e881608ac8b3b3f4c3f0e374fa5e3d051a28eaf0fffa670b60b6394a8f26162052939ff762b11e7a457786f2c861bb9deabdd45ff3871152275baa39a181cad4816f3295278b579266e7d96461eb249a5132126d48f553f871259e66cb7da70b20134bd650decc098f52b1096c9f1c941545d6d9b4bc4d754e434832386909f090ae99edd81902038a03016d76be6cf2111e6dd7ee993dffa2a1a5ef50f867654451fd07c30060696fc6cf7ed21b3b960875e66b3af866dd91813db31fe681208eb063af6a514d039cd40d6a3155afefc06c01ebf743fe0489fb43b08807db893c3d7ad33b3e7d793d1c306066a4fe586e650c293e0d5af1d7c7e25f0a59194f9b2a35667a09e7a0a4f8332ad537b304489bed12b168048d393909e5b713206bdc83b0d8cee1ca05c72937f74fd3cd3e3f356c25e7d2af5a38769b8b35b06f6441d8c13ed16ba4ae23d82af2a6626bc3716f94db70f34935dcb05c863c0cae2acc1bdb995971aff77f36219af80f25a145bbf65e2ecb8e82913da8b633c0620f9b50e172f9b5617fb1dbb847f946e8d8833f9ae900b49b2131c8392d0afefff1552bafdb2263190251f8fc8d93561e4a282d33e00392e9840f026ac4a09e4d6466c724374f749add53a86593933bdbe6b03d89b9102d91d02e9ee10736f551e024802e4210230cf477492588740b92019a663a417fcd8187a6013541d977f212f71783ed43c7bf0233aa689ee179bc997d82b7235258359734e6934dc369dc0a8d29f1bbe2bcfb3e875a28eb3d9542f0d75fcc353eafd71bd214e88fe0fb4ba77d4faec47757bf46f5f17fc4991ca3c71aafd6d441ab468ab63a17e902ed065345d1fa5c8f23e80c26c02456e57a12c852b60cda93c17c10adb881b0c00e307734e4b259104d46d4fa17307017ee5d4ccd70b0d5fa0b0889da5b145ac9c41b6a48b6d5c175584702080b2c9b182f9951236798f8d0755b8a27ef5fc70b3b623f5d740484bfcf9b78d7c10bd664bc3262a93ca1d9f39ceae8219cda9dfd9d2c6b94492b61d313311cd32f0b57c6a2e763ff92571cdc4d22ae951c397680dc70d752986efe41e036f14d757f085c150efb87de83bee6a9a55183715d878462994a49e0322275a05cd16c4151c5a372589c778f15e8fee1c1843aca0bb1f3191f7f2e52330774bb28143703754e33df53b90d8979edd1d249960ed751891eb26c3ff14f1651de294cea82ea64ec20b6f14fef33e4acc593b121452fa6db6a06e6ee4b038fdabc5dc64439e5b0d0848e4d70ada10a9a2bbfa87e4a95a3662187539e258fae82409eba2c62044ebbbc34888cd9dc9245b4bf8e23b2659269a8c659666cfe01f269806ddbc1498a57d730dca8fa53d333504d522db67f773f97c6ccceb38baf9a8e551b9bc4dae4d4e4e575b0ab2e332b156f3463e40d5c1656c5933d8eae6d7a7ff55073a792aacdcd9f269905857971912a6445f3b8391fa6aa7974c2ac15d2328186f9f9e905f1c35f484a87d29a435007708a704d4987baf4537c1da5d1250c0bd538ce60527fbd861bbae66893b2d5f643ce166d454fc626f24bd09177bcb491d47d4176763203da4ce9c1a97369a913c080d116382855fdc17f79e1efc668c0d2387c6e1be371adf6be4d1838cd8a93789959227591cbcf36cabf5b6581f1ea069d70c9593d83c44e6d4dfc63f02d8629706679ed51a8c388ce5dd43921699dcbb4e4d6bc78e4ba8fac1d79d994b3e6901a9442fa4b6608a8118cadade38096224c45e7ef8f2ef4139a3e6360aaa596def5f6d934ad99ff4fbd6680f0a9835c713d6e11a87545f017b7a526a63ef0db8077630759b60830de830e0a0a38412da33c06ff8f9ddcd90d23b16485096f1c6aa895d486028eefcbdd94b2346e56812343ba7ba50f2aa258520e75c1ae732eba6b5507d6d35b2e5e6d525467d4930ce791449575a264d5217a29544f5e655ae258ef9ffdfa949d2596caf4cbe90906e52dc222dbdb9aae99380e8fcaeea729450c0287200efd912c2510801fad89b2a8b09cce71a9701f884354384937543b811475c25377efef0340bd644e411a7971ac5bcb660e079a1378024180feb51abe11e48ab2267ecaa8dbafac5395f17a2aca0044127ed9b37856b39747d8a228156ce2e94e111681933929ede6a0495fc341fa4494f0e2228c2999f8c6a468118023a2007b503b9e5683b6a61810be5db641c1ed5e31e6e4d8d8d7e13d5a86935a5abb7e3f2664a8a7c0af61fe135f8ab82e8279a86be804a0760bc8de4add8be408511692fbd5bedfe6007cef41a3c3a162fd00d5a47282c863f3cbc5f8fff851db4a7eb51c4cde4ae4263f2781dfec53dc41f490c05adde7ad6964371cf07990557b0ba995d0ed2ab7dde0b4d6f97d62136c5506de94184b138da333f5a3cd81be1de11d38cf636a59d4ccf4fdc928b9c38aebf456523cd9c5e930cdf855dafa43c293f3bb0bc8198c59f108e8bf87533a80ff6e23d37589f6f3e87add296a1484ed75d5de4d107e38b2181939c3a9c585363c26d1d565efe1358cde132772d029bae8963db46bf0eafed31a2f4234c565f95f795f0aca4b74fc903accf64e784a83bb38c4398ff6658584c4bdf0a8e0a041ab0e6d1b7742e6240f0ba4aa3d80af07b627426a38c107f7fc7261a74fc85219fa8cd8ecec75850da7bae01c243b046957b6ddd45005d66efd030725a33458dad91b91f55902fb48ab48969e4994e8b0c8f71fb026ba7c609dd38e9d14bd4ad1201bd4382940392c9f8e2804b3e8b71b4329620cf3869e67f478c7018a5fc5549384820df1dd93ad232a5a57ab81a86287e689f377d2a3b9b519d6fe3a08bc659d6f8e6aa500281b23dfaf12049456c2a00e6cb5009a997713950490d11bb0525e1f46fdd653d370fb506d7545bd3b4789b416c1d9a5ac4584cef88d991e2bf421f69dd7c7e3f22b7ed2cf4a0145aaf0ab85f82ab3a5fa2050252c472118798f963a1278b2e5a9fccd5d67e50515c38990bc25efaeb06bd30ab054036d7f7af39ca60964f6625bffbda1da7328726b53944bc77743702c2b26b8783ed365fdf2c7889dc2ac29ddb7ab578a9b80fdefd71900803a9d1ab15d46bfa720577716625833e023509cc6443ee8b019811c0e61631cf092170f40b51ce032eca615e5b8f0e89be4d4567a6a2dec78bf5365a9430aafd06058d503d3d5a50a46ab88c29df2484066db243b08f1d20a4f8f8f83c80f33407b945dde09d0f9d82d741801abc97ea3840013283daa0839d2119038927097eea9672f28a065f919962e0848273ce006529a9f8fdd127d24d388dce0bfe8dd0265f1533ce4346791579e3cc5a95ecf596db3a999e29b2e4e965ba506ee65748822f7ea97c215062010ab8b4bffaf61918bde8fe6f8b11ed8c6d49739638ad95b7554e1612e19ece30f398d6ccbcdf45692c2b76dbc66f2aec7b61ee9b92a8cc22cb811af617b6948327c203f9be6871bf77d833fc168ea69e5a1067fcc899b9e19e55793c2b6a08fffe2d43609ed3b08dc089c1de870fcfd5728ab7e3d6ecdbceceaaac5786d34121bf4ac40835f9ca52a63541daf1b6b4453db93388b9512f866215784d9db7f6f1e0cda60a3e3e36b69bbce897e98f9fe8c152c3345d52b8a960b9e7b1db67209c331d7e5cc16f2a5df87fbdd4ccac051c517d66acf0dc6d47d243e5845f7e87b5edb44427e2f7647a866196f60c3e37a96ebf4fe66b7ca8459084d20ac78a0be20b20cf8640eac715e75cb5b9212837b66cde7d3d5b4c5236b308bd46bc7aaac72e5008c5b5a27b02258470cdf00e937e454e37d1850c51f0937bcd7bde2923ad0e02fad7ff33d057411620e7cbfe34e4e473faacf570c76c9a8e9574a71bceed7641bfa1b7393ff957c405751639113b7724e28cb54b5b24b4c34c843a1e83bd0bd259d46c50c906916c76270cff8cf9219e4835a83dfd6424514b1646ec38c9bcbf1f691be75354903e79cc2c18c99f13a1b3bc4c0d3758279fc84a55fcae5a4a1fbe4232d71105fec8508a80a2e325c29da1bef7be753fdb58bcfb2f1d507fc4dda735d184e2cb0a260464a1701380aee5e0c51b16ff2db054423405a9c11eeaeeda0c7e45a4f856d318bcbb4b172d0b0eb9f68fcfc56d98e9e6bc18b2c19a96e160e10b6ba18bd0ac068e6e8eb7d344ec5bf74385c8ca175952b41479240d5201a8ddce7a932d2b3d09f73eb31299575e61e13f47b5ffc5ea9242383dff3fad9923f5931e99754588fe209694a83c26f9e7e84f4ce085376dd6f713e46a04c45de19f5bfab477502baf12e364fb0f1efa6dec8d28738497bc529ded9182a4bb2597f6ae19fd754c684d5194fd8a92da14abe7f2c5c8f1aa197aa5262518b7bc571252900c8b07d1f96e5f4a25c220d50203852f1ea5dfb0ab2fd76dc1c4a27086a5e7b8b2011b651d23aea1e3628e2908665086f10b44e08263921ca871f45e54f02f0351cd9aeaa8fc2bb395828261ae13275f36ff15a24e84e413ebd75a3a896b7b65ba1dcddd56bea3681dcf23080d9e51bd68a383dfb630660cf634a58799144eeeb7f05f2bbe5f5ee25c2282cca1f8045a66c033b20d47d1813aa52dba16e4a2cbf66d9d5c7ba3b37a6ff46c1e1ad67f31f5454c7e02dfaa9b315bc69c2fbf9d8aba5f0609b83bd705a752bf530c3f769badeb57f31da77d3c1702090219d26d205d7fc4aab8941e8c12866718b5c29d7765768803d1dcf47d63db00d499c6631122bf20b5bf8e80de47608fec9ee3c7adfb314fdb2e7d986dddd2ddf33ed66fe5f815474c36c22cd6eacae640b8cc4e25b626357cb0237a8aeaad2f3d48617247ea55ab835a4e9fbad63785a612114c2c3aa9f52ab2e3521861efdca21ff0560e604cfdde02d905870701a9e7ec385329daf9e9168a41edc0b88d9400bf336fe6a033bda9d41ad1e61086e39b785e2f55edd5b0a37de254f8b36b0d7196ae665a0f6f1716cab9f31c9857a02c641d6462915406873337bc763c0a9b4d7efbd1dad38125f884914e29530490b2e826f3135384666f6c6c404039b4b4b0fbd9fde13edb16850d14e6305ea05957640b01b4d65d45bf3cfadc5c8b5224004cab65bc00dacc10f1f2738915a001facc7205b001b7f68e8cb69265484c24edde3e3fc25262817b7a31610d68dcf1c8611b6398697cacf39ed4afce599f861be8bf6a58132b629dba11c868157d7743e920544810dc0fb4fe0f74c4c39df3ecb864a148b7428bee99023d77ea82c4deb5a52f64a4400d990dda36d74bb972209dc3e1152af66ef64", 0x1000}], 0x3, &(0x7f0000000280)=[@tclass={{0x14, 0x29, 0x43, 0x6}}], 0x18}, 0x400c4) 3.931782942s ago: executing program 1 (id=3907): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000040), 0x3, 0x88c02) r0 = syz_io_uring_setup(0xb5b, &(0x7f0000000640)={0x0, 0x7e9e, 0x0, 0x0, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/203, 0xcb}], 0x1}) io_uring_enter(r0, 0xf27, 0x1000000, 0x0, 0x0, 0x0) 3.809011497s ago: executing program 5 (id=3908): r0 = syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f7000000010902120001800000"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000002180), 0x0, 0x80) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/147) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000040)={0xa305e823f919a31b, 0x1, 0x6, 0x0, 0x8}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) mq_open(&(0x7f0000000040)='-\'$(:*{:\x00', 0x40, 0x24, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', 0x0, 0x29, 0x1e, 0x5, 0x5, 0x14, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x8, 0x0, 0x6}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000200)={0x14, &(0x7f0000000300)={0x40, 0xa, 0xcd, {0xcd, 0x9, "ae112cb738ec2dd3baf0fceef2aafd7f5a75ef3fdcb49315cb012bcb12e4bbd10df4c910ba97cb4b8db75b3fcdb71531d94843915a417dbc7fa946328657df36fe3aa7989c41b98edef185ec30cf66342f05ddaecde383912be7e6791b591af1c53ec65819bf6cf748f8658ebe9325f458c663c664919dee1b2628daa1852aeef29b97f1d237105756a25478ec509a900fd5181ea04f7b2254e939ded67b6cc643a0a19e172f905ee1608aa6032238c8bd34004fa2006d93b26050d9576e0d0fcca34b01d27806b25117bc"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}}, &(0x7f0000000640)={0x44, &(0x7f0000000400)={0x40, 0xf, 0xd1, "07249cd6e1a76f76564e639aa6394bcea71fccc055c35dc59074a4a75a31eb712413ac49ce8e80b6053baab9c4ce094d9dd84c4f499752a5f1e0fa88fb5e93deb8ae9fa17fbcd5cb69e7d38a35b45a53f4ac0b81327dcbdc8fbc7b38fbcf94a10c01cb054581fd2c9525c82e7a4aed5fd7b2ec31bd469626475d660efb08120adb4291b91f60a2166389c7e04cdeabb5e49e4fb0c2c0ee2ce4a7696f6f2cf364a3858efedd6f966e8b2d88db5b00b17c1faefd4fe58e3564276fec90018eb71e3c223d035fa991bc5d0ccf852d7186cc34"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000500)={0x20, 0x81, 0x3, "7d9e7c"}, &(0x7f0000000540)=ANY=[@ANYBLOB="2082fbff00d0a8267c"], &(0x7f0000000580)={0x20, 0x83, 0x1, '|'}, &(0x7f00000005c0)={0x20, 0x84, 0x3, "6ae78b"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "49e81e"}}) 2.893635246s ago: executing program 0 (id=3909): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 1.763716899s ago: executing program 3 (id=3910): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r6, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4004080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r2, 0x0, 0x9, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="24e29a7247683fbb4d26209e3a10a9ff7f000037543e36fa83c5d729d0695ab3066245b7583e6f2d0bdeda85df3ef3dc2e6b4e2d20038caf4473af0c57e8260f85131a7618cc708e06aae983a1aa24badee3bebc3546e578daa464f1f8613aea2a75b89db8aae50d0e00000000000000696eea7d0543e2ced67be969504dcf47dfd24b70218d3884e7a639c2e52d16b3fc6bb1a1ce34bfcfbd628be62400"/180, 0xb4}], 0x1, 0x0) write$binfmt_script(r8, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 1.761261803s ago: executing program 7 (id=3911): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) unshare(0x24020400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9", 0x2, 0x1, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x8, 0x2, 0x819}, 0x14) dup(0xffffffffffffffff) 1.487845385s ago: executing program 0 (id=3912): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x14, 0x4, "b4865713"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="00036c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000680)={0x40, 0x7, 0x4, "292cc4ed"}, 0x0, 0x0, 0x0, 0x0}) 288.053839ms ago: executing program 3 (id=3913): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020}, 0x2020) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) accept4(r5, &(0x7f0000000200)=@can, &(0x7f00000002c0)=0x80, 0x0) 0s ago: executing program 1 (id=3914): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004054) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000780)={0x0, 0xcd1d, 0x10000}, &(0x7f0000000000), &(0x7f0000000140)) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T1209] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 930.420953][ T60] Bluetooth: hci3: command tx timeout [ 930.570944][ T809] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 930.930906][ T809] usb 6-1: Using ep0 maxpacket: 32 [ 932.131772][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.131865][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.154301][ T809] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 932.154335][ T809] usb 6-1: config 0 has no interface number 0 [ 932.164572][ T809] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 932.164603][ T809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.164623][ T809] usb 6-1: Product: syz [ 932.164637][ T809] usb 6-1: Manufacturer: syz [ 932.164650][ T809] usb 6-1: SerialNumber: syz [ 932.169928][ T809] usb 6-1: config 0 descriptor?? [ 932.435347][T16537] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.435650][T16537] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.436034][T16537] bridge_slave_0: entered allmulticast mode [ 932.444825][T16537] bridge_slave_0: entered promiscuous mode [ 932.510930][ T60] Bluetooth: hci3: command tx timeout [ 932.670613][ T809] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 932.670649][ T809] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 933.005423][T16537] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.006461][T16537] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.015447][T16537] bridge_slave_1: entered allmulticast mode [ 933.055219][T16537] bridge_slave_1: entered promiscuous mode [ 933.827523][ T1122] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.892993][ T809] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 933.893350][ T809] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 934.101124][ T60] Bluetooth: hci6: command 0x0406 tx timeout [ 934.417229][ T1122] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.449200][T16537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.472204][T16537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.581332][ T60] Bluetooth: hci3: command tx timeout [ 934.621026][ T809] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 934.709088][ T1122] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.761443][ T809] usb 1-1: device descriptor read/64, error -71 [ 934.768113][T16537] team0: Port device team_slave_0 added [ 934.781216][T16537] team0: Port device team_slave_1 added [ 934.942773][ T5880] usb 6-1: USB disconnect, device number 115 [ 935.003276][ T809] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 935.249070][ T1122] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.251035][ T809] usb 1-1: device descriptor read/64, error -71 [ 936.128590][ T809] usb usb1-port1: attempt power cycle [ 936.157087][T16537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 936.157107][T16537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.157136][T16537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 936.214235][T14893] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 936.413250][T16537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 936.413270][T16537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.413300][T16537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.530991][ T809] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 936.551852][ T809] usb 1-1: device descriptor read/8, error -71 [ 936.646422][T16537] hsr_slave_0: entered promiscuous mode [ 936.647832][T16537] hsr_slave_1: entered promiscuous mode [ 936.792840][ T809] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 936.812238][ T809] usb 1-1: device descriptor read/8, error -71 [ 936.921313][ T809] usb usb1-port1: unable to enumerate USB device [ 937.648956][T16683] netlink: 'syz.5.3431': attribute type 1 has an invalid length. [ 937.943117][ T1122] bond0 (unregistering): Released all slaves [ 938.132532][T16687] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3432'. [ 938.147075][ T1122] : left promiscuous mode [ 938.570982][T16697] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 938.726568][ T31] usb 6-1: new full-speed USB device number 116 using dummy_hcd [ 938.741248][T16697] usb 1-1: Using ep0 maxpacket: 32 [ 938.743996][T16697] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 938.744028][T16697] usb 1-1: config 0 has no interface number 0 [ 938.747329][T16697] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 938.747363][T16697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.747383][T16697] usb 1-1: Product: syz [ 938.747398][T16697] usb 1-1: Manufacturer: syz [ 938.747413][T16697] usb 1-1: SerialNumber: syz [ 938.824151][T16697] usb 1-1: config 0 descriptor?? [ 938.888382][ T31] usb 6-1: config 0 has an invalid interface number: 66 but max is 0 [ 938.888415][ T31] usb 6-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 938.888436][ T31] usb 6-1: config 0 has no interface number 0 [ 938.888485][ T31] usb 6-1: config 0 interface 66 altsetting 29 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 938.888513][ T31] usb 6-1: config 0 interface 66 has no altsetting 0 [ 938.888551][ T31] usb 6-1: New USB device found, idVendor=150a, idProduct=1203, bcdDevice= 0.00 [ 938.888575][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.917311][ T31] usb 6-1: config 0 descriptor?? [ 939.263022][T16697] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 939.263057][T16697] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 939.881494][ T31] usb 6-1: string descriptor 0 read error: -71 [ 939.940364][ T31] usb 6-1: USB disconnect, device number 116 [ 940.505591][T16697] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 940.505901][T16697] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 941.304504][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 941.574207][ T1122] hsr_slave_0: left promiscuous mode [ 941.574697][ T5888] usb 1-1: USB disconnect, device number 53 [ 941.601168][T13531] usb 6-1: new full-speed USB device number 117 using dummy_hcd [ 941.637352][ T1122] hsr_slave_1: left promiscuous mode [ 941.702888][ T1122] veth1_macvtap: left promiscuous mode [ 941.703007][ T1122] veth0_macvtap: left promiscuous mode [ 941.703309][ T1122] veth1_vlan: left promiscuous mode [ 941.703509][ T1122] veth0_vlan: left promiscuous mode [ 941.753270][T13531] usb 6-1: unable to get BOS descriptor or descriptor too short [ 941.753904][T13531] usb 6-1: not running at top speed; connect to a high speed hub [ 941.755182][T13531] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 941.755208][T13531] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 941.755277][T13531] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 941.755306][T13531] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 941.757836][T13531] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 941.757861][T13531] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.757874][T13531] usb 6-1: Product: syz [ 941.757883][T13531] usb 6-1: Manufacturer: syz [ 941.757891][T13531] usb 6-1: SerialNumber: syz [ 942.093985][T16743] FAULT_INJECTION: forcing a failure. [ 942.093985][T16743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.094052][T16743] CPU: 0 UID: 0 PID: 16743 Comm: syz.0.3442 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 942.094082][T16743] Tainted: [L]=SOFTLOCKUP [ 942.094090][T16743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 942.094103][T16743] Call Trace: [ 942.094112][T16743] [ 942.094122][T16743] dump_stack_lvl+0xe8/0x150 [ 942.094161][T16743] should_fail_ex+0x46b/0x600 [ 942.094194][T16743] _copy_to_user+0x31/0xb0 [ 942.094225][T16743] bpf_test_finish+0x1db/0x6b0 [ 942.094264][T16743] ? __pfx_bpf_test_finish+0x10/0x10 [ 942.094299][T16743] ? _copy_from_user+0x94/0xb0 [ 942.094346][T16743] ? bpf_test_init+0x113/0x150 [ 942.094375][T16743] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 942.094439][T16743] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 942.094485][T16743] ? __fget_files+0x2a/0x420 [ 942.094518][T16743] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 942.094548][T16743] bpf_prog_test_run+0x2cd/0x340 [ 942.094580][T16743] __sys_bpf+0x643/0x950 [ 942.094609][T16743] ? __pfx___sys_bpf+0x10/0x10 [ 942.094632][T16743] ? rt_mutex_slowunlock+0x1cb/0x300 [ 942.094676][T16743] ? ksys_write+0x248/0x270 [ 942.094709][T16743] ? __pfx_ksys_write+0x10/0x10 [ 942.094748][T16743] __x64_sys_bpf+0x7c/0x90 [ 942.094773][T16743] do_syscall_64+0x14d/0xf80 [ 942.094803][T16743] ? trace_irq_disable+0x3b/0x150 [ 942.094828][T16743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.094851][T16743] ? clear_bhb_loop+0x40/0x90 [ 942.094877][T16743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.094898][T16743] RIP: 0033:0x7f8a00e6c799 [ 942.094917][T16743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.094932][T16743] RSP: 002b:00007f89ff0c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 942.094955][T16743] RAX: ffffffffffffffda RBX: 00007f8a010e5fa0 RCX: 00007f8a00e6c799 [ 942.094971][T16743] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 942.094986][T16743] RBP: 00007f89ff0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 942.094998][T16743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.095010][T16743] R13: 00007f8a010e6038 R14: 00007f8a010e5fa0 R15: 00007ffffb075348 [ 942.095043][T16743] [ 942.881924][T13531] usb 6-1: 0:2 : does not exist [ 944.045650][T13531] usb 6-1: USB disconnect, device number 117 [ 944.551045][ T5871] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 944.680984][ T5871] usb 1-1: device descriptor read/64, error -71 [ 945.479243][ T5871] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 945.743528][ T5871] usb 1-1: device descriptor read/64, error -71 [ 945.861739][ T5871] usb usb1-port1: attempt power cycle [ 946.220961][ T5871] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 946.261808][ T5871] usb 1-1: device descriptor read/8, error -71 [ 946.509371][ T5871] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 946.536793][ T5871] usb 1-1: device descriptor read/8, error -71 [ 946.651590][ T5871] usb usb1-port1: unable to enumerate USB device [ 946.762892][T14893] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 947.550286][T16789] libceph: resolve '0..' (ret=-3): failed [ 947.954092][T16537] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 948.081141][T13531] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 948.252248][T16537] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 948.259393][T13531] usb 1-1: unable to get BOS descriptor or descriptor too short [ 948.283001][T13531] usb 1-1: config 1 interface 0 has no altsetting 0 [ 948.292691][T13531] usb 1-1: string descriptor 0 read error: -22 [ 948.292809][T13531] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 948.292824][T13531] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.376003][T16537] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 948.494841][T16537] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 949.137555][T13531] usbhid 1-1:1.0: can't add hid device: -71 [ 949.137958][T13531] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 949.157754][T13531] usb 1-1: USB disconnect, device number 58 [ 949.336670][T16537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.442816][T16537] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.456030][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.456375][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.521404][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.521559][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.051672][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 950.071855][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 950.073715][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 950.075343][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 950.076152][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 951.345666][T16537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.041078][ T6881] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 952.191634][ T5799] Bluetooth: hci0: command tx timeout [ 952.206300][ T6881] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 952.206334][ T6881] usb 1-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 952.206356][ T6881] usb 1-1: config 0 has no interface number 0 [ 952.206416][ T6881] usb 1-1: config 0 interface 66 altsetting 29 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 952.206457][ T6881] usb 1-1: config 0 interface 66 has no altsetting 0 [ 952.206492][ T6881] usb 1-1: New USB device found, idVendor=150a, idProduct=1203, bcdDevice= 0.00 [ 952.206516][ T6881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.212981][ T6881] usb 1-1: config 0 descriptor?? [ 952.502182][ T1122] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 952.823983][ T789] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.860132][ T6881] usb 1-1: string descriptor 0 read error: -71 [ 952.876861][ T6881] usb 1-1: USB disconnect, device number 59 [ 953.297612][ T789] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.584230][T16815] chnl_net:caif_netlink_parms(): no params data found [ 953.868389][T16874] FAULT_INJECTION: forcing a failure. [ 953.868389][T16874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.868433][T16874] CPU: 0 UID: 0 PID: 16874 Comm: syz.5.3466 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 953.868463][T16874] Tainted: [L]=SOFTLOCKUP [ 953.868471][T16874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 953.868485][T16874] Call Trace: [ 953.868494][T16874] [ 953.868503][T16874] dump_stack_lvl+0xe8/0x150 [ 953.868541][T16874] should_fail_ex+0x46b/0x600 [ 953.868574][T16874] _copy_from_iter+0x1d3/0x1670 [ 953.868610][T16874] ? trace_kmem_cache_alloc+0x29/0xf0 [ 953.868641][T16874] ? __alloc_skb+0x27d/0x7d0 [ 953.868671][T16874] ? __pfx__copy_from_iter+0x10/0x10 [ 953.868698][T16874] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 953.868729][T16874] ? __alloc_skb+0x27d/0x7d0 [ 953.868764][T16874] ? netlink_sendmsg+0x650/0xb40 [ 953.868790][T16874] ? skb_put+0x11b/0x210 [ 953.868825][T16874] netlink_sendmsg+0x6c0/0xb40 [ 953.868863][T16874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 953.868892][T16874] ? unwind_get_return_address+0x4d/0x90 [ 953.868919][T16874] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 953.868951][T16874] ____sys_sendmsg+0x94c/0x9c0 [ 953.868979][T16874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 953.869008][T16874] ? import_iovec+0x73/0xa0 [ 953.869040][T16874] ___sys_sendmsg+0x2a5/0x360 [ 953.869066][T16874] ? __pfx____sys_sendmsg+0x10/0x10 [ 953.869123][T16874] ? __fget_files+0x2a/0x420 [ 953.869148][T16874] ? __fget_files+0x3a6/0x420 [ 953.869183][T16874] __x64_sys_sendmsg+0x1c3/0x2a0 [ 953.869208][T16874] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 953.869240][T16874] ? __pfx_ksys_write+0x10/0x10 [ 953.869291][T16874] do_syscall_64+0x14d/0xf80 [ 953.869323][T16874] ? trace_irq_disable+0x3b/0x150 [ 953.869347][T16874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.869368][T16874] ? clear_bhb_loop+0x40/0x90 [ 953.869394][T16874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.869413][T16874] RIP: 0033:0x7f0eb91dc799 [ 953.869435][T16874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.869453][T16874] RSP: 002b:00007f0eb7436028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 953.869477][T16874] RAX: ffffffffffffffda RBX: 00007f0eb9455fa0 RCX: 00007f0eb91dc799 [ 953.869493][T16874] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000004 [ 953.869507][T16874] RBP: 00007f0eb7436090 R08: 0000000000000000 R09: 0000000000000000 [ 953.869520][T16874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.869533][T16874] R13: 00007f0eb9456038 R14: 00007f0eb9455fa0 R15: 00007ffd9f5203a8 [ 953.869568][T16874] [ 954.266450][ T5799] Bluetooth: hci0: command tx timeout [ 954.302870][ T789] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.641311][T16537] veth0_vlan: entered promiscuous mode [ 956.294039][ T6881] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 956.341230][ T5799] Bluetooth: hci0: command tx timeout [ 956.472803][ T6881] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 956.472838][ T6881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.499955][ T6881] usb 1-1: config 0 descriptor?? [ 956.513954][ T6881] cp210x 1-1:0.0: cp210x converter detected [ 956.647595][ T789] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.793335][T16537] veth1_vlan: entered promiscuous mode [ 956.915428][ T6881] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -32 [ 956.915463][ T6881] cp210x 1-1:0.0: GPIO initialisation failed: -32 [ 956.943483][ T6881] usb 1-1: cp210x converter now attached to ttyUSB0 [ 956.959937][ T6881] usb 1-1: USB disconnect, device number 60 [ 956.993157][ T6881] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 956.994036][ T6881] cp210x 1-1:0.0: device disconnected [ 957.032336][T16815] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.032511][T16815] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.032768][T16815] bridge_slave_0: entered allmulticast mode [ 957.045537][T16815] bridge_slave_0: entered promiscuous mode [ 957.082134][T16815] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.082848][T16815] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.083112][T16815] bridge_slave_1: entered allmulticast mode [ 957.095269][T16815] bridge_slave_1: entered promiscuous mode [ 957.336745][T16815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.479304][T16815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.801988][T16815] team0: Port device team_slave_0 added [ 957.961774][ T37] audit: type=1326 audit(1773737547.036:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16927 comm="syz.5.3476" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0eb91dc799 code=0x0 [ 958.185776][T16815] team0: Port device team_slave_1 added [ 958.226870][T16937] random: crng reseeded on system resumption [ 958.263471][T11377] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 958.421359][ T5799] Bluetooth: hci0: command tx timeout [ 958.497003][T16537] veth0_macvtap: entered promiscuous mode [ 958.499543][ T789] bridge0: port 3(team0) entered disabled state [ 958.570967][ T5928] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 958.576962][ T789] bridge_slave_1: left allmulticast mode [ 958.576994][ T789] bridge_slave_1: left promiscuous mode [ 958.577262][ T789] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.706525][ T789] bridge_slave_0: left allmulticast mode [ 958.706560][ T789] bridge_slave_0: left promiscuous mode [ 958.706843][ T789] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.721040][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 958.740126][ T5928] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 958.740170][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.740190][ T5928] usb 1-1: Product: syz [ 958.740206][ T5928] usb 1-1: Manufacturer: syz [ 958.740221][ T5928] usb 1-1: SerialNumber: syz [ 958.782448][ T5928] usb 1-1: config 0 descriptor?? [ 958.833692][ T5928] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 958.988490][ T5928] gspca_topro: reg_w err -71 [ 959.011943][ T5928] gspca_topro: Sensor soi763a [ 959.134737][ T5928] usb 1-1: USB disconnect, device number 61 [ 961.031941][ T789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.098198][ T789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.115235][ T789] bond0 (unregistering): Released all slaves [ 961.137709][ T789] bond1 (unregistering): Released all slaves [ 961.194845][T16815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.194859][T16815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.194875][T16815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.223706][T16815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.223725][T16815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.223750][T16815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.243115][T16537] veth1_macvtap: entered promiscuous mode [ 961.569588][T16815] hsr_slave_0: entered promiscuous mode [ 961.633296][T16815] hsr_slave_1: entered promiscuous mode [ 961.651814][T16815] debugfs: 'hsr0' already exists in 'hsr' [ 961.651847][T16815] Cannot create hsr debugfs directory [ 962.393749][T16537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.087783][T16537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.411214][T17014] libceph: resolve '0..' (ret=-3): failed [ 963.478722][ T789] hsr_slave_0: left promiscuous mode [ 963.520965][ T789] hsr_slave_1: left promiscuous mode [ 963.522201][ T789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.522251][ T789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.583615][ T789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.583645][ T789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.681287][ T31] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 963.736041][ T789] veth1_macvtap: left promiscuous mode [ 963.736159][ T789] veth0_macvtap: left promiscuous mode [ 963.736460][ T789] veth1_vlan: left promiscuous mode [ 963.736680][ T789] veth0_vlan: left promiscuous mode [ 963.834096][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 963.837023][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 963.844081][ T31] usb 1-1: string descriptor 0 read error: -22 [ 963.844229][ T31] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 963.844251][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.044146][T14853] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 964.429286][ T31] usbhid 1-1:1.0: can't add hid device: -71 [ 964.429474][ T31] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 964.479884][ T31] usb 1-1: USB disconnect, device number 62 [ 964.820552][T17029] FAULT_INJECTION: forcing a failure. [ 964.820552][T17029] name failslab, interval 1, probability 0, space 0, times 0 [ 964.820702][T17029] CPU: 0 UID: 0 PID: 17029 Comm: syz.5.3494 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 964.820733][T17029] Tainted: [L]=SOFTLOCKUP [ 964.820741][T17029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 964.820758][T17029] Call Trace: [ 964.820767][T17029] [ 964.820777][T17029] dump_stack_lvl+0xe8/0x150 [ 964.820815][T17029] should_fail_ex+0x46b/0x600 [ 964.820846][T17029] should_failslab+0xa8/0x100 [ 964.820871][T17029] kmem_cache_alloc_noprof+0x87/0x680 [ 964.820900][T17029] ? rcu_is_watching+0x15/0xb0 [ 964.820923][T17029] ? security_file_alloc+0x34/0x310 [ 964.820960][T17029] security_file_alloc+0x34/0x310 [ 964.820993][T17029] init_file+0x96/0x2d0 [ 964.821020][T17029] alloc_empty_file+0x6e/0x1d0 [ 964.821044][T17029] path_openat+0x11b/0x38a0 [ 964.821086][T17029] ? try_to_take_rt_mutex+0x840/0xb00 [ 964.821216][T17029] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 964.821264][T17029] ? __pfx_path_openat+0x10/0x10 [ 964.821296][T17029] ? __lock_acquire+0x6b5/0x2cf0 [ 964.821332][T17029] ? do_raw_spin_lock+0x12b/0x2f0 [ 964.821371][T17029] do_file_open+0x23e/0x4a0 [ 964.821402][T17029] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 964.821437][T17029] ? __pfx_do_file_open+0x10/0x10 [ 964.821466][T17029] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 964.821515][T17029] ? alloc_fd+0x64e/0x6c0 [ 964.821554][T17029] do_sys_openat2+0x113/0x200 [ 964.821580][T17029] ? lockdep_hardirqs_on+0x7a/0x110 [ 964.821614][T17029] ? __pfx_do_sys_openat2+0x10/0x10 [ 964.821652][T17029] __x64_sys_openat+0x138/0x170 [ 964.821684][T17029] do_syscall_64+0x14d/0xf80 [ 964.821715][T17029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.821738][T17029] ? clear_bhb_loop+0x40/0x90 [ 964.821765][T17029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.821787][T17029] RIP: 0033:0x7f0eb919cfce [ 964.821810][T17029] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 964.821829][T17029] RSP: 002b:00007f0eb7414f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 964.821853][T17029] RAX: ffffffffffffffda RBX: 00007f0eb74156c0 RCX: 00007f0eb919cfce [ 964.821871][T17029] RDX: 0000000000000000 RSI: 00007f0eb9272330 RDI: ffffffffffffff9c [ 964.821886][T17029] RBP: 00007f0eb7415090 R08: 0000000000000000 R09: 0000000000000000 [ 964.821900][T17029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.821914][T17029] R13: 00007f0eb9456128 R14: 00007f0eb9456090 R15: 00007ffd9f5203a8 [ 964.821950][T17029] [ 965.680923][ T789] team_slave_1 (unregistering): left promiscuous mode [ 965.680957][ T789] team_slave_1 (unregistering): left allmulticast mode [ 965.735442][ T789] team0 (unregistering): Port device team_slave_1 removed [ 965.770086][ T789] team_slave_0 (unregistering): left promiscuous mode [ 965.770118][ T789] team_slave_0 (unregistering): left allmulticast mode [ 965.801960][ T789] team0 (unregistering): Port device team_slave_0 removed [ 966.185394][T14893] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.237279][T14893] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.274419][T14893] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.462996][T14893] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.585431][T14893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.585455][T14893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.633756][ T789] IPVS: stop unused estimator thread 0... [ 969.675665][T17081] FAULT_INJECTION: forcing a failure. [ 969.675665][T17081] name failslab, interval 1, probability 0, space 0, times 0 [ 969.675707][T17081] CPU: 1 UID: 0 PID: 17081 Comm: syz.0.3507 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 969.675737][T17081] Tainted: [L]=SOFTLOCKUP [ 969.675745][T17081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 969.675759][T17081] Call Trace: [ 969.675768][T17081] [ 969.675778][T17081] dump_stack_lvl+0xe8/0x150 [ 969.675816][T17081] should_fail_ex+0x46b/0x600 [ 969.675850][T17081] should_failslab+0xa8/0x100 [ 969.675874][T17081] kmem_cache_alloc_noprof+0x87/0x680 [ 969.675903][T17081] ? rcu_is_watching+0x15/0xb0 [ 969.675925][T17081] ? security_file_alloc+0x34/0x310 [ 969.675961][T17081] security_file_alloc+0x34/0x310 [ 969.675994][T17081] init_file+0x96/0x2d0 [ 969.676022][T17081] alloc_empty_file+0x6e/0x1d0 [ 969.676048][T17081] path_openat+0x11b/0x38a0 [ 969.676086][T17081] ? try_to_take_rt_mutex+0x840/0xb00 [ 969.676114][T17081] ? arch_stack_walk+0xfb/0x150 [ 969.676143][T17081] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 969.676178][T17081] ? __pfx_path_openat+0x10/0x10 [ 969.676207][T17081] ? __lock_acquire+0x6b5/0x2cf0 [ 969.676231][T17081] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 969.676271][T17081] ? do_raw_spin_lock+0x12b/0x2f0 [ 969.676310][T17081] do_file_open+0x23e/0x4a0 [ 969.676340][T17081] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 969.676376][T17081] ? __pfx_do_file_open+0x10/0x10 [ 969.676413][T17081] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 969.676462][T17081] ? alloc_fd+0x64e/0x6c0 [ 969.676499][T17081] do_sys_openat2+0x113/0x200 [ 969.676528][T17081] ? __pfx_do_sys_openat2+0x10/0x10 [ 969.676555][T17081] ? ksys_write+0x248/0x270 [ 969.676586][T17081] ? __pfx_ksys_write+0x10/0x10 [ 969.676618][T17081] __x64_sys_openat+0x138/0x170 [ 969.676649][T17081] do_syscall_64+0x14d/0xf80 [ 969.676678][T17081] ? trace_irq_disable+0x3b/0x150 [ 969.676703][T17081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.676726][T17081] ? clear_bhb_loop+0x40/0x90 [ 969.676752][T17081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.676772][T17081] RIP: 0033:0x7f8a00e6c799 [ 969.676792][T17081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.676811][T17081] RSP: 002b:00007f89ff0c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 969.676835][T17081] RAX: ffffffffffffffda RBX: 00007f8a010e5fa0 RCX: 00007f8a00e6c799 [ 969.676851][T17081] RDX: 00000000000082c0 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 969.676867][T17081] RBP: 00007f89ff0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 969.676881][T17081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.676894][T17081] R13: 00007f8a010e6038 R14: 00007f8a010e5fa0 R15: 00007ffffb075348 [ 969.676928][T17081] [ 969.781920][T14042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 969.810275][T17083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3508'. [ 969.810301][T17083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3508'. [ 969.861037][ T36] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 970.133187][ T36] usb 6-1: config 0 has an invalid interface number: 66 but max is 0 [ 970.133219][ T36] usb 6-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 970.133238][ T36] usb 6-1: config 0 has no interface number 0 [ 970.133266][ T36] usb 6-1: config 0 interface 66 altsetting 29 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 970.133282][ T36] usb 6-1: config 0 interface 66 has no altsetting 0 [ 970.133312][ T36] usb 6-1: New USB device found, idVendor=150a, idProduct=1203, bcdDevice= 0.00 [ 970.133336][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.137906][ T36] usb 6-1: config 0 descriptor?? [ 970.455172][T11413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.455206][T11413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.685686][ T36] usb 6-1: string descriptor 0 read error: -71 [ 970.713472][ T36] usb 6-1: USB disconnect, device number 118 [ 971.255424][T16815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 971.306582][T16815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 971.349782][T16815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 971.453159][T16815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 971.730942][ T5872] usb 6-1: new full-speed USB device number 119 using dummy_hcd [ 971.896519][ T5872] usb 6-1: config 0 has no interfaces? [ 971.896563][ T5872] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 971.896585][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.913602][ T5872] usb 6-1: config 0 descriptor?? [ 972.025482][T16815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.068225][T16815] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.085996][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.086143][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.105807][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.113000][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.165837][ T5872] usb 6-1: USB disconnect, device number 119 [ 972.858857][T17118] binder: 17117:17118 ioctl c0306201 0 returned -14 [ 972.907545][T16815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.924228][T17119] binder: 17117:17119 ioctl c0306201 0 returned -14 [ 972.930216][T17119] binder: 17117:17119 ioctl 3b88 200000000000 returned -22 [ 972.932876][T17119] binder: 17117:17119 ioctl 3b88 200000000040 returned -22 [ 973.020230][T16815] veth0_vlan: entered promiscuous mode [ 973.068915][T16815] veth1_vlan: entered promiscuous mode [ 973.166381][T16815] veth0_macvtap: entered promiscuous mode [ 973.185167][T16815] veth1_macvtap: entered promiscuous mode [ 973.211043][T17120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 973.228966][T17119] binder: 17117:17119 ioctl 3b83 200000000080 returned -22 [ 973.249240][T16815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.333588][T16815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 973.381318][ T1122] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.427614][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.461574][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.467182][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.610489][T17126] libceph: resolve '0..' (ret=-3): failed [ 974.000909][T16690] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 974.038232][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.038248][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.174444][T16690] usb 1-1: unable to get BOS descriptor or descriptor too short [ 974.178041][T16690] usb 1-1: config 1 interface 0 has no altsetting 0 [ 974.203330][T16690] usb 1-1: string descriptor 0 read error: -22 [ 974.203500][T16690] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 974.203527][T16690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.247752][T14042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.247842][T14042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.099729][T16690] usbhid 1-1:1.0: can't add hid device: -71 [ 975.099869][T16690] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 975.127559][T16690] usb 1-1: USB disconnect, device number 63 [ 975.541482][ T789] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 977.451299][T16697] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 977.761045][T16697] usb 4-1: Using ep0 maxpacket: 8 [ 977.778136][T16697] usb 4-1: unable to get BOS descriptor or descriptor too short [ 977.779381][T16697] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 17, changing to 7 [ 977.798901][T16697] usb 4-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 977.798933][T16697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.798952][T16697] usb 4-1: Product: syz [ 977.798966][T16697] usb 4-1: Manufacturer: syz [ 977.798979][T16697] usb 4-1: SerialNumber: syz [ 978.201165][T17167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.201806][T17167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.631554][T16697] usb 4-1: interface 3 not found [ 978.858100][T17186] FAULT_INJECTION: forcing a failure. [ 978.858100][T17186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 978.858142][T17186] CPU: 0 UID: 0 PID: 17186 Comm: syz.1.3529 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 978.858172][T17186] Tainted: [L]=SOFTLOCKUP [ 978.858191][T17186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 978.858205][T17186] Call Trace: [ 978.858213][T17186] [ 978.858223][T17186] dump_stack_lvl+0xe8/0x150 [ 978.858260][T17186] should_fail_ex+0x46b/0x600 [ 978.858293][T17186] _copy_from_iter+0x1d3/0x1670 [ 978.858330][T17186] ? trace_kmem_cache_alloc+0x29/0xf0 [ 978.858360][T17186] ? __alloc_skb+0x27d/0x7d0 [ 978.858390][T17186] ? __pfx__copy_from_iter+0x10/0x10 [ 978.858416][T17186] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 978.858444][T17186] ? __alloc_skb+0x27d/0x7d0 [ 978.858480][T17186] ? netlink_sendmsg+0x650/0xb40 [ 978.858505][T17186] ? skb_put+0x11b/0x210 [ 978.858539][T17186] netlink_sendmsg+0x6c0/0xb40 [ 978.858575][T17186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 978.858606][T17186] ? unwind_get_return_address+0x4d/0x90 [ 978.858631][T17186] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 978.858665][T17186] ____sys_sendmsg+0x94c/0x9c0 [ 978.858692][T17186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 978.858723][T17186] ? import_iovec+0x73/0xa0 [ 978.858756][T17186] ___sys_sendmsg+0x2a5/0x360 [ 978.858784][T17186] ? __pfx____sys_sendmsg+0x10/0x10 [ 978.858840][T17186] ? __fget_files+0x2a/0x420 [ 978.858864][T17186] ? __fget_files+0x3a6/0x420 [ 978.858898][T17186] __x64_sys_sendmsg+0x1c3/0x2a0 [ 978.858919][T17186] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 978.858948][T17186] ? __pfx_ksys_write+0x10/0x10 [ 978.858986][T17186] do_syscall_64+0x14d/0xf80 [ 978.859016][T17186] ? trace_irq_disable+0x3b/0x150 [ 978.859038][T17186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.859062][T17186] ? clear_bhb_loop+0x40/0x90 [ 978.859088][T17186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.859110][T17186] RIP: 0033:0x7f5cca82c799 [ 978.859130][T17186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.859146][T17186] RSP: 002b:00007f5cc8a7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 978.859167][T17186] RAX: ffffffffffffffda RBX: 00007f5ccaaa5fa0 RCX: 00007f5cca82c799 [ 978.859191][T17186] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 978.859204][T17186] RBP: 00007f5cc8a7e090 R08: 0000000000000000 R09: 0000000000000000 [ 978.859217][T17186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.859229][T17186] R13: 00007f5ccaaa6038 R14: 00007f5ccaaa5fa0 R15: 00007ffe6080ef68 [ 978.859262][T17186] [ 979.321730][ T5880] usb 4-1: USB disconnect, device number 59 [ 979.556598][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 979.561104][ T9] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 979.598851][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 979.610373][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 979.622739][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 979.624493][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 979.713547][ T9] usb 2-1: config 0 has an invalid interface number: 30 but max is 0 [ 979.713581][ T9] usb 2-1: config 0 has no interface number 0 [ 979.713615][ T9] usb 2-1: config 0 interface 30 has no altsetting 0 [ 979.716169][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04 [ 979.716199][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.716218][ T9] usb 2-1: Product: syz [ 979.716233][ T9] usb 2-1: Manufacturer: syz [ 979.716248][ T9] usb 2-1: SerialNumber: syz [ 979.736252][ T9] usb 2-1: config 0 descriptor?? [ 979.800556][ T9] hub 2-1:0.30: bad descriptor, ignoring hub [ 979.800598][ T9] hub 2-1:0.30: probe with driver hub failed with error -5 [ 979.818120][ T9] keyspan 2-1:0.30: Keyspan - (without firmware) converter detected [ 980.161424][T16697] usb 2-1: USB disconnect, device number 95 [ 980.162910][T16697] keyspan 2-1:0.30: device disconnected [ 980.797298][T17216] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3534'. [ 981.183892][ T1122] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.702231][ T5799] Bluetooth: hci4: command tx timeout [ 981.976293][ T1122] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.181162][ T5864] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 982.361853][ T5864] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 982.361921][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.363467][ T5864] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 982.363494][ T5864] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 982.363515][ T5864] usb 2-1: Manufacturer: syz [ 982.430993][ T5864] usb 2-1: config 0 descriptor?? [ 982.592567][ T1122] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.610932][ T5864] rc_core: IR keymap rc-hauppauge not found [ 982.610958][ T5864] Registered IR keymap rc-empty [ 982.613793][ T5864] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 982.617472][ T5864] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31 [ 982.802636][ T36] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 982.894934][ C1] igorplugusb 2-1:0.0: receive overflow, at least 11 lost [ 982.954372][ T36] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 982.954407][ T36] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 982.954489][ T36] usb 4-1: config 220 has no interface number 2 [ 982.954565][ T36] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 982.954652][ T36] usb 4-1: config 220 interface 0 has no altsetting 0 [ 982.954672][ T36] usb 4-1: config 220 interface 76 has no altsetting 0 [ 982.954692][ T36] usb 4-1: config 220 interface 1 has no altsetting 0 [ 982.957791][ T36] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 982.957878][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.957901][ T36] usb 4-1: Product: syz [ 982.957916][ T36] usb 4-1: Manufacturer: syz [ 982.957931][ T36] usb 4-1: SerialNumber: syz [ 983.327174][ T36] usb 4-1: selecting invalid altsetting 0 [ 983.327708][ T36] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 983.327743][ T36] uvcvideo 4-1:220.0: No valid video chain found. [ 983.389241][ T36] usb 4-1: selecting invalid altsetting 0 [ 983.389284][ T36] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 983.414565][ T36] usb 4-1: USB disconnect, device number 60 [ 983.599810][ T1122] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.607231][ T5880] usb 2-1: USB disconnect, device number 96 [ 983.785541][ T5799] Bluetooth: hci4: command tx timeout [ 983.934270][T17272] FAULT_INJECTION: forcing a failure. [ 983.934270][T17272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.934313][T17272] CPU: 1 UID: 0 PID: 17272 Comm: syz.1.3544 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 983.934349][T17272] Tainted: [L]=SOFTLOCKUP [ 983.934356][T17272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 983.934370][T17272] Call Trace: [ 983.934379][T17272] [ 983.934388][T17272] dump_stack_lvl+0xe8/0x150 [ 983.934426][T17272] should_fail_ex+0x46b/0x600 [ 983.934461][T17272] _copy_to_user+0x31/0xb0 [ 983.934494][T17272] simple_read_from_buffer+0xe1/0x170 [ 983.934527][T17272] proc_fail_nth_read+0x1be/0x230 [ 983.934557][T17272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 983.934585][T17272] ? rw_verify_area+0x2ac/0x4e0 [ 983.934613][T17272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 983.934639][T17272] vfs_read+0x212/0xa80 [ 983.934680][T17272] ? __pfx_vfs_read+0x10/0x10 [ 983.934713][T17272] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 983.934746][T17272] ? lockdep_hardirqs_on+0x7a/0x110 [ 983.934777][T17272] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 983.934809][T17272] ? mutex_lock_nested+0x152/0x1d0 [ 983.934834][T17272] ? fdget_pos+0x252/0x320 [ 983.934872][T17272] ksys_read+0x156/0x270 [ 983.934903][T17272] ? __pfx_ksys_read+0x10/0x10 [ 983.934947][T17272] do_syscall_64+0x14d/0xf80 [ 983.934978][T17272] ? trace_irq_disable+0x3b/0x150 [ 983.935001][T17272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.935024][T17272] ? clear_bhb_loop+0x40/0x90 [ 983.935050][T17272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.935071][T17272] RIP: 0033:0x7f5cca7ecfce [ 983.935093][T17272] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 983.935110][T17272] RSP: 002b:00007f5cc8a7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 983.935142][T17272] RAX: ffffffffffffffda RBX: 00007f5cc8a7e6c0 RCX: 00007f5cca7ecfce [ 983.935158][T17272] RDX: 000000000000000f RSI: 00007f5cc8a7e0a0 RDI: 0000000000000004 [ 983.935172][T17272] RBP: 00007f5cc8a7e090 R08: 0000000000000000 R09: 0000000000000000 [ 983.935186][T17272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.935199][T17272] R13: 00007f5ccaaa6038 R14: 00007f5ccaaa5fa0 R15: 00007ffe6080ef68 [ 983.935235][T17272] [ 984.771317][T17191] chnl_net:caif_netlink_parms(): no params data found [ 984.959557][T17288] overlay: filesystem on ./file1 not supported as upperdir [ 985.207802][ T1122] bridge_slave_1: left allmulticast mode [ 985.207831][ T1122] bridge_slave_1: left promiscuous mode [ 985.208045][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.294861][ T1122] bridge_slave_0: left allmulticast mode [ 985.294895][ T1122] bridge_slave_0: left promiscuous mode [ 985.295208][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.300961][ T5799] Bluetooth: hci2: command 0x0406 tx timeout [ 985.860952][ T60] Bluetooth: hci4: command tx timeout [ 986.491807][T17328] FAULT_INJECTION: forcing a failure. [ 986.491807][T17328] name failslab, interval 1, probability 0, space 0, times 0 [ 986.491847][T17328] CPU: 1 UID: 0 PID: 17328 Comm: syz.0.3551 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 986.491878][T17328] Tainted: [L]=SOFTLOCKUP [ 986.491886][T17328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 986.491899][T17328] Call Trace: [ 986.491908][T17328] [ 986.491918][T17328] dump_stack_lvl+0xe8/0x150 [ 986.491957][T17328] should_fail_ex+0x46b/0x600 [ 986.491991][T17328] should_failslab+0xa8/0x100 [ 986.492016][T17328] __kmalloc_noprof+0xdf/0x7b0 [ 986.492046][T17328] ? kfree+0x4d/0x6c0 [ 986.492074][T17328] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 986.492116][T17328] tomoyo_realpath_from_path+0xe3/0x5d0 [ 986.492154][T17328] ? tomoyo_path_number_perm+0x219/0x630 [ 986.492188][T17328] tomoyo_path_number_perm+0x246/0x630 [ 986.492223][T17328] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 986.492260][T17328] ? __lock_acquire+0x6b5/0x2cf0 [ 986.492320][T17328] ? __fget_files+0x2a/0x420 [ 986.492352][T17328] ? __fget_files+0x2a/0x420 [ 986.492375][T17328] ? __fget_files+0x3a6/0x420 [ 986.492401][T17328] ? __fget_files+0x2a/0x420 [ 986.492432][T17328] security_file_ioctl+0xc3/0x2a0 [ 986.492469][T17328] __se_sys_ioctl+0x47/0x170 [ 986.492507][T17328] do_syscall_64+0x14d/0xf80 [ 986.492539][T17328] ? trace_irq_disable+0x3b/0x150 [ 986.492562][T17328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.492585][T17328] ? clear_bhb_loop+0x40/0x90 [ 986.492613][T17328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.492636][T17328] RIP: 0033:0x7f8a00e6c799 [ 986.492657][T17328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.492677][T17328] RSP: 002b:00007f89ff0c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 986.492701][T17328] RAX: ffffffffffffffda RBX: 00007f8a010e5fa0 RCX: 00007f8a00e6c799 [ 986.492718][T17328] RDX: 0000200000000340 RSI: 00000000c0585609 RDI: 0000000000000003 [ 986.492733][T17328] RBP: 00007f89ff0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 986.492747][T17328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.492760][T17328] R13: 00007f8a010e6038 R14: 00007f8a010e5fa0 R15: 00007ffffb075348 [ 986.492796][T17328] [ 986.492805][T17328] ERROR: Out of memory at tomoyo_realpath_from_path. [ 987.351551][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 987.411706][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 987.472594][ T1122] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 987.492091][ T1122] bond0 (unregistering): Released all slaves [ 987.498521][ T1122] bond1 (unregistering): Released all slaves [ 987.524659][ T1122] bond2 (unregistering): Released all slaves [ 987.543328][ T1122] bond3 (unregistering): Released all slaves [ 987.574617][ T1122] bond4 (unregistering): Released all slaves [ 987.661221][T17191] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.661382][T17191] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.661651][T17191] bridge_slave_0: entered allmulticast mode [ 987.665905][T17191] bridge_slave_0: entered promiscuous mode [ 987.751595][T17191] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.751739][T17191] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.752005][T17191] bridge_slave_1: entered allmulticast mode [ 987.755097][T17191] bridge_slave_1: entered promiscuous mode [ 987.926301][ T1122] : left promiscuous mode [ 987.953657][ T60] Bluetooth: hci4: command tx timeout [ 988.788355][T17191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 988.820539][T17191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.187839][T17358] net_ratelimit: 254 callbacks suppressed [ 989.187865][T17358] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 989.187957][T17358] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 989.188406][T17358] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 989.188505][T17358] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 989.188803][T17358] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 989.188885][T17358] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 989.189161][T17358] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 989.189243][T17358] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 989.189455][T17358] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 989.189501][T17358] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 989.374369][T17191] team0: Port device team_slave_0 added [ 989.403714][T17191] team0: Port device team_slave_1 added [ 989.601069][T17191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.601104][T17191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 989.601134][T17191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.607952][T17191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.607973][T17191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 989.608003][T17191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.623380][T17371] netlink: 'syz.3.3560': attribute type 1 has an invalid length. [ 991.367421][T17191] hsr_slave_0: entered promiscuous mode [ 991.368806][T17191] hsr_slave_1: entered promiscuous mode [ 991.369697][T17191] debugfs: 'hsr0' already exists in 'hsr' [ 991.369720][T17191] Cannot create hsr debugfs directory [ 991.846599][T17391] IPv6: NLM_F_CREATE should be specified when creating new route [ 991.846726][T17391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 991.846739][T17391] IPv6: NLM_F_CREATE should be set when creating new route [ 991.846776][T17391] IPv6: NLM_F_CREATE should be set when creating new route [ 991.984056][T17391] netlink: 'syz.3.3567': attribute type 22 has an invalid length. [ 993.393533][T17409] overlay: filesystem on ./bus not supported as upperdir [ 993.468858][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.468936][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.634255][T17415] vivid-000: ================= START STATUS ================= [ 993.634282][T17415] vivid-000: Radio HW Seek Mode: Bounded [ 993.634307][T17415] vivid-000: Radio Programmable HW Seek: false [ 993.634328][T17415] vivid-000: RDS Rx I/O Mode: Block I/O [ 993.634349][T17415] vivid-000: Generate RBDS Instead of RDS: false [ 993.634370][T17415] vivid-000: RDS Reception: true [ 993.634401][T17415] vivid-000: RDS Program Type: 0 inactive [ 993.634427][T17415] vivid-000: RDS PS Name: inactive [ 993.634451][T17415] vivid-000: RDS Radio Text: inactive [ 993.634476][T17415] vivid-000: RDS Traffic Announcement: false inactive [ 993.634501][T17415] vivid-000: RDS Traffic Program: false inactive [ 993.634525][T17415] vivid-000: RDS Music: false inactive [ 993.634552][T17415] vivid-000: ================== END STATUS ================== [ 994.618758][ T1122] hsr_slave_0: left promiscuous mode [ 994.693241][ T1122] hsr_slave_1: left promiscuous mode [ 994.714313][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 994.714346][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.811955][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 994.811987][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.974671][ T1122] veth1_to_hsr: left allmulticast mode [ 994.974735][ T1122] veth1_to_hsr: left promiscuous mode [ 994.975050][ T1122] veth1_macvtap: left promiscuous mode [ 994.975159][ T1122] veth0_macvtap: left promiscuous mode [ 994.975451][ T1122] veth1_vlan: left promiscuous mode [ 994.975694][ T1122] veth0_vlan: left promiscuous mode [ 995.160946][ T36] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 995.322270][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 995.325560][ T36] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 995.325592][ T36] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 995.325618][ T36] usb 4-1: config 0 interface 0 has no altsetting 0 [ 995.329062][ T36] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 995.329092][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.329113][ T36] usb 4-1: Product: syz [ 995.329129][ T36] usb 4-1: Manufacturer: syz [ 995.329144][ T36] usb 4-1: SerialNumber: syz [ 995.349639][ T36] usb 4-1: config 0 descriptor?? [ 995.762797][ T36] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 996.821646][ T36] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT) [ 996.821736][ T36] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 997.101796][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 997.131723][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 997.566568][T16697] usb 4-1: USB disconnect, device number 61 [ 998.668393][T17489] FAULT_INJECTION: forcing a failure. [ 998.668393][T17489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.668433][T17489] CPU: 0 UID: 0 PID: 17489 Comm: syz.0.3584 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 998.668463][T17489] Tainted: [L]=SOFTLOCKUP [ 998.668471][T17489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 998.668482][T17489] Call Trace: [ 998.668492][T17489] [ 998.668501][T17489] dump_stack_lvl+0xe8/0x150 [ 998.668527][T17489] should_fail_ex+0x46b/0x600 [ 998.668547][T17489] _copy_from_user+0x2d/0xb0 [ 998.668565][T17489] comedi_unlocked_ioctl+0xaef/0x1b00 [ 998.668583][T17489] ? irqentry_exit+0x59e/0x620 [ 998.668600][T17489] ? lockdep_hardirqs_on+0x7a/0x110 [ 998.668617][T17489] ? irqentry_exit+0x59e/0x620 [ 998.668633][T17489] ? trace_irq_disable+0x3b/0x150 [ 998.668652][T17489] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 998.668665][T17489] ? tomoyo_path_number_perm+0x219/0x630 [ 998.668688][T17489] ? tomoyo_path_number_perm+0x55e/0x630 [ 998.668708][T17489] ? do_vfs_ioctl+0x117b/0x1540 [ 998.668722][T17489] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 998.668734][T17489] ? __pfx_smack_log+0x10/0x10 [ 998.668749][T17489] ? smk_access+0x14c/0x4e0 [ 998.668768][T17489] ? smk_tskacc+0x311/0x3a0 [ 998.668786][T17489] ? smack_file_ioctl+0x2c2/0x360 [ 998.668804][T17489] ? __pfx_smack_file_ioctl+0x10/0x10 [ 998.668828][T17489] ? __fget_files+0x3a6/0x420 [ 998.668843][T17489] ? __fget_files+0x2a/0x420 [ 998.668859][T17489] ? bpf_lsm_file_ioctl+0x9/0x20 [ 998.668872][T17489] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 998.668886][T17489] __se_sys_ioctl+0xff/0x170 [ 998.668906][T17489] do_syscall_64+0x14d/0xf80 [ 998.668923][T17489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.668936][T17489] ? clear_bhb_loop+0x40/0x90 [ 998.668951][T17489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.668963][T17489] RIP: 0033:0x7f8a00e6c799 [ 998.668977][T17489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.668988][T17489] RSP: 002b:00007f89ff0a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 998.669003][T17489] RAX: ffffffffffffffda RBX: 00007f8a010e6090 RCX: 00007f8a00e6c799 [ 998.669012][T17489] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000006 [ 998.669021][T17489] RBP: 00007f89ff0a5090 R08: 0000000000000000 R09: 0000000000000000 [ 998.669029][T17489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.669037][T17489] R13: 00007f8a010e6128 R14: 00007f8a010e6090 R15: 00007ffffb075348 [ 998.669057][T17489] [ 1000.775470][ T1122] IPVS: stop unused estimator thread 0... [ 1001.759999][T17191] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1001.883759][T17191] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1001.886091][T17526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1001.969496][T17191] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1002.028250][T17191] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1002.918038][T17548] Bluetooth: MGMT ver 1.23 [ 1003.461760][T17191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.493450][T17191] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.510261][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.519530][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.546041][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.550637][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.420560][T17191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1009.530559][T17599] netlink: 'syz.1.3604': attribute type 1 has an invalid length. [ 1010.030367][T17191] veth0_vlan: entered promiscuous mode [ 1010.128272][T17191] veth1_vlan: entered promiscuous mode [ 1010.268022][T17191] veth0_macvtap: entered promiscuous mode [ 1010.288888][T17191] veth1_macvtap: entered promiscuous mode [ 1010.374524][T17191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.415436][T17604] loop8: detected capacity change from 0 to 8 [ 1010.439448][T17191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.492692][T17604] Dev loop8: unable to read RDB block 8 [ 1010.493757][T17604] loop8: unable to read partition table [ 1010.653127][T17604] loop8: partition table beyond EOD, truncated [ 1010.653175][T17604] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 1011.340598][T11377] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.348348][T17611] netlink: 'syz.0.3606': attribute type 1 has an invalid length. [ 1011.349576][T11377] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.351565][T11377] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.393975][T11377] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.240012][ T1209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.240036][ T1209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.457224][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.457246][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.653546][T17661] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3621'. [ 1013.776559][ T9] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1013.920923][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1013.926086][ T9] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1013.926130][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.926151][ T9] usb 1-1: Product: syz [ 1013.926167][ T9] usb 1-1: Manufacturer: syz [ 1013.926182][ T9] usb 1-1: SerialNumber: syz [ 1013.978011][ T9] usb 1-1: config 0 descriptor?? [ 1014.011010][ T6881] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 1014.169323][ T6881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1014.175710][ T6881] usb 2-1: not running at top speed; connect to a high speed hub [ 1014.177578][ T6881] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.177604][ T6881] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1014.177667][ T6881] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1014.177691][ T6881] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1014.180714][ T6881] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1014.184257][ T6881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.184284][ T6881] usb 2-1: Product: syz [ 1014.184298][ T6881] usb 2-1: Manufacturer: syz [ 1014.184312][ T6881] usb 2-1: SerialNumber: syz [ 1014.361317][ T9] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 064 [ 1014.999354][T17683] i2c i2c-1: failure reading data [ 1015.000275][ T6881] usb 2-1: 0:2 : does not exist [ 1015.030651][T17656] 8021q: VLANs not supported on vcan0 [ 1015.190153][T16690] usb 1-1: USB disconnect, device number 64 [ 1015.322446][ T6881] usb 2-1: USB disconnect, device number 97 [ 1015.497462][T15758] udevd[15758]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1016.985864][T17713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1016.997890][T17713] tipc: Started in network mode [ 1016.997922][T17713] tipc: Node identity c2874837ade, cluster identity 4711 [ 1017.002053][T17713] tipc: Enabled bearer , priority 0 [ 1017.003434][T17713] syzkaller0: entered promiscuous mode [ 1017.003458][T17713] syzkaller0: entered allmulticast mode [ 1017.429703][T17713] tipc: Resetting bearer [ 1017.975680][T17713] tipc: Disabling bearer [ 1019.365791][T16690] tipc: Node number set to 1869039671 [ 1022.621117][ T5871] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 1022.778838][ T5871] usb 4-1: not running at top speed; connect to a high speed hub [ 1022.780635][ T5871] usb 4-1: config 3 has an invalid interface number: 63 but max is 1 [ 1022.780666][ T5871] usb 4-1: config 3 has an invalid interface number: 222 but max is 1 [ 1022.780689][ T5871] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1022.780710][ T5871] usb 4-1: config 3 has no interface number 0 [ 1022.781650][ T5871] usb 4-1: config 3 has no interface number 1 [ 1022.781716][ T5871] usb 4-1: config 3 interface 63 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1022.781738][ T5871] usb 4-1: config 3 interface 63 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1022.781758][ T5871] usb 4-1: config 3 interface 63 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 1022.781780][ T5871] usb 4-1: config 3 interface 63 altsetting 127 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1022.781834][ T5871] usb 4-1: config 3 interface 222 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1022.781858][ T5871] usb 4-1: config 3 interface 222 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1022.781880][ T5871] usb 4-1: config 3 interface 222 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1022.781905][ T5871] usb 4-1: config 3 interface 222 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1022.781926][ T5871] usb 4-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 1022.781948][ T5871] usb 4-1: config 3 interface 222 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1022.781972][ T5871] usb 4-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 1022.781993][ T5871] usb 4-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1022.782015][ T5871] usb 4-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1022.782036][ T5871] usb 4-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1022.782056][ T5871] usb 4-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1022.782076][ T5871] usb 4-1: config 3 interface 222 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1022.782096][ T5871] usb 4-1: config 3 interface 63 has no altsetting 0 [ 1022.782112][ T5871] usb 4-1: config 3 interface 222 has no altsetting 0 [ 1022.785283][ T5871] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0020, bcdDevice=c7.ff [ 1022.785341][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.785361][ T5871] usb 4-1: Product: syz [ 1022.785375][ T5871] usb 4-1: Manufacturer: syz [ 1022.785389][ T5871] usb 4-1: SerialNumber: syz [ 1022.843825][T17761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1022.983379][T17761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1023.510116][ T5871] dvb-usb: found a 'Elgato EyeTV Dtt Dlx PD378S' in cold state, will try to load a firmware [ 1024.098771][ T5871] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1024.116916][ T5871] dib0700: firmware download failed at 7 with -8 [ 1024.481000][T17778] libceph: resolve '0..' (ret=-3): failed [ 1024.621747][ T5871] dvb-usb: found a 'Elgato EyeTV Dtt Dlx PD378S' in cold state, will try to load a firmware [ 1024.624063][ T5871] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1024.624191][ T5871] dib0700: firmware download failed at 7 with -8 [ 1024.750934][T16690] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1024.770685][ T5871] usb 4-1: USB disconnect, device number 62 [ 1024.931954][T16690] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1024.936938][T16690] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1024.954929][T16690] usb 2-1: string descriptor 0 read error: -22 [ 1024.955096][T16690] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 1024.955130][T16690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.439809][T16690] usbhid 2-1:1.0: can't add hid device: -71 [ 1027.439950][T16690] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1027.449317][T16690] usb 2-1: USB disconnect, device number 98 [ 1028.064209][ T37] audit: type=1804 audit(1773737873.082:351): pid=17821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.3658" name="/newroot/37/file0" dev="fuse" ino=1 res=1 errno=0 [ 1028.565114][ T5871] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 1028.727877][ T5871] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1028.727914][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.727937][ T5871] usb 2-1: Product: syz [ 1028.727952][ T5871] usb 2-1: Manufacturer: syz [ 1028.727966][ T5871] usb 2-1: SerialNumber: syz [ 1028.766010][ T5871] usb 2-1: config 0 descriptor?? [ 1032.564445][ T5872] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1032.745697][ T5872] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1032.746506][ T5872] usb 4-1: not running at top speed; connect to a high speed hub [ 1032.771759][ T5872] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.771812][ T5872] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1032.771883][ T5872] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1032.771912][ T5872] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1032.776402][ T5872] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1032.776434][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.776455][ T5872] usb 4-1: Product: syz [ 1032.776471][ T5872] usb 4-1: Manufacturer: syz [ 1032.776487][ T5872] usb 4-1: SerialNumber: syz [ 1033.522560][ T5872] usb 4-1: 0:2 : does not exist [ 1033.620960][ T31] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1033.639661][ T5872] usb 4-1: USB disconnect, device number 63 [ 1033.980879][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 1033.984536][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1033.986397][ T31] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 107, changing to 7 [ 1033.989861][ T31] usb 6-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40 [ 1033.989894][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.989915][ T31] usb 6-1: Product: syz [ 1033.989930][ T31] usb 6-1: Manufacturer: syz [ 1033.989946][ T31] usb 6-1: SerialNumber: syz [ 1034.399528][T15758] udevd[15758]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1034.819423][ T31] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1034.819929][ T31] usb 6-1: 2:1 : sample bitwidth 6 in over sample bytes 0 [ 1034.819956][ T31] usb 6-1: 2:1 : unsupported sample bitwidth 6 in 0 bytes [ 1034.961648][ T31] usb 6-1: USB disconnect, device number 120 [ 1035.439511][T15758] udevd[15758]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1036.067777][T16697] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1036.220864][T16697] usb 4-1: Using ep0 maxpacket: 8 [ 1036.223663][T16697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1036.223696][T16697] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1036.226781][T16697] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1036.226812][T16697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.226834][T16697] usb 4-1: Product: syz [ 1036.226849][T16697] usb 4-1: Manufacturer: syz [ 1036.226865][T16697] usb 4-1: SerialNumber: syz [ 1036.323642][T16697] usb 4-1: config 0 descriptor?? [ 1036.409918][T17938] FAULT_INJECTION: forcing a failure. [ 1036.409918][T17938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1036.410242][T17938] CPU: 0 UID: 0 PID: 17938 Comm: syz.5.3682 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1036.410288][T17938] Tainted: [L]=SOFTLOCKUP [ 1036.410296][T17938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1036.410320][T17938] Call Trace: [ 1036.410331][T17938] [ 1036.410341][T17938] dump_stack_lvl+0xe8/0x150 [ 1036.410380][T17938] should_fail_ex+0x46b/0x600 [ 1036.410414][T17938] _copy_to_user+0x31/0xb0 [ 1036.410448][T17938] simple_read_from_buffer+0xe1/0x170 [ 1036.410481][T17938] proc_fail_nth_read+0x1be/0x230 [ 1036.410512][T17938] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1036.410543][T17938] ? rw_verify_area+0x2ac/0x4e0 [ 1036.410573][T17938] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1036.410601][T17938] vfs_read+0x212/0xa80 [ 1036.410641][T17938] ? __pfx_vfs_read+0x10/0x10 [ 1036.410676][T17938] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1036.410709][T17938] ? lockdep_hardirqs_on+0x7a/0x110 [ 1036.410737][T17938] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1036.410766][T17938] ? mutex_lock_nested+0x152/0x1d0 [ 1036.410789][T17938] ? fdget_pos+0x252/0x320 [ 1036.410823][T17938] ksys_read+0x156/0x270 [ 1036.410854][T17938] ? __pfx_ksys_read+0x10/0x10 [ 1036.410896][T17938] do_syscall_64+0x14d/0xf80 [ 1036.410924][T17938] ? trace_irq_disable+0x3b/0x150 [ 1036.410945][T17938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.410967][T17938] ? clear_bhb_loop+0x40/0x90 [ 1036.410994][T17938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.411015][T17938] RIP: 0033:0x7f79a6d3cfce [ 1036.411046][T17938] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1036.411065][T17938] RSP: 002b:00007f79a4fcdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1036.411090][T17938] RAX: ffffffffffffffda RBX: 00007f79a4fce6c0 RCX: 00007f79a6d3cfce [ 1036.411107][T17938] RDX: 000000000000000f RSI: 00007f79a4fce0a0 RDI: 0000000000000004 [ 1036.411122][T17938] RBP: 00007f79a4fce090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.411136][T17938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.411149][T17938] R13: 00007f79a6ff6038 R14: 00007f79a6ff5fa0 R15: 00007ffec91b37e8 [ 1036.411186][T17938] [ 1036.739136][T17942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3683'. [ 1037.234184][T17951] libceph: resolve '0..' (ret=-3): failed [ 1037.277919][ T31] usb 4-1: USB disconnect, device number 64 [ 1037.491191][ T809] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1037.655293][ T809] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1037.658024][ T809] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1037.672358][ T809] usb 6-1: string descriptor 0 read error: -22 [ 1037.672533][ T809] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 1037.672555][ T809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.858814][ T809] usbhid 6-1:1.0: can't add hid device: -71 [ 1038.858949][ T809] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1038.889368][ T809] usb 6-1: USB disconnect, device number 121 [ 1038.909725][T17976] net_ratelimit: 106 callbacks suppressed [ 1038.909749][T17976] openvswitch: netlink: Message has 16 unknown bytes. [ 1039.553840][T17987] FAULT_INJECTION: forcing a failure. [ 1039.553840][T17987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1039.553902][T17987] CPU: 0 UID: 0 PID: 17987 Comm: syz.5.3692 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1039.553931][T17987] Tainted: [L]=SOFTLOCKUP [ 1039.553939][T17987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1039.553953][T17987] Call Trace: [ 1039.553962][T17987] [ 1039.553972][T17987] dump_stack_lvl+0xe8/0x150 [ 1039.554008][T17987] should_fail_ex+0x46b/0x600 [ 1039.554040][T17987] _copy_from_user+0x2d/0xb0 [ 1039.554070][T17987] __se_sys_mount+0x18b/0x420 [ 1039.554104][T17987] ? __pfx___se_sys_mount+0x10/0x10 [ 1039.554137][T17987] ? __x64_sys_mount+0x20/0xc0 [ 1039.554167][T17987] do_syscall_64+0x14d/0xf80 [ 1039.554202][T17987] ? trace_irq_disable+0x3b/0x150 [ 1039.554227][T17987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.554271][T17987] ? clear_bhb_loop+0x40/0x90 [ 1039.554296][T17987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.554316][T17987] RIP: 0033:0x7f79a6d7c799 [ 1039.554337][T17987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.554355][T17987] RSP: 002b:00007f79a4fce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1039.554380][T17987] RAX: ffffffffffffffda RBX: 00007f79a6ff5fa0 RCX: 00007f79a6d7c799 [ 1039.554395][T17987] RDX: 00002000000000c0 RSI: 0000200000000240 RDI: 0000000000000000 [ 1039.554409][T17987] RBP: 00007f79a4fce090 R08: 0000200000000000 R09: 0000000000000000 [ 1039.554423][T17987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.554436][T17987] R13: 00007f79a6ff6038 R14: 00007f79a6ff5fa0 R15: 00007ffec91b37e8 [ 1039.554470][T17987] [ 1039.952052][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805d91fc00: rx timeout, send abort [ 1039.952442][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805d91fc00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1040.071776][ T36] usb 2-1: USB disconnect, device number 99 [ 1042.666197][T16697] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1042.942715][T16697] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1042.942749][T16697] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1042.942767][T16697] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.942789][T16697] usb 2-1: config 220 has no interface number 2 [ 1042.942866][T16697] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1042.942897][T16697] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1042.942917][T16697] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1042.942936][T16697] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1043.047066][T16697] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1043.047103][T16697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.047124][T16697] usb 2-1: Product: syz [ 1043.047140][T16697] usb 2-1: Manufacturer: syz [ 1043.047156][T16697] usb 2-1: SerialNumber: syz [ 1043.472812][T16697] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1043.472851][T16697] uvcvideo 2-1:220.0: No valid video chain found. [ 1043.472920][T16697] usb 2-1: selecting invalid altsetting 0 [ 1043.546917][T16697] usb 2-1: selecting invalid altsetting 0 [ 1043.546963][T16697] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1043.578114][T16697] usb 2-1: USB disconnect, device number 100 [ 1043.719939][T18045] FAULT_INJECTION: forcing a failure. [ 1043.719939][T18045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1043.719980][T18045] CPU: 1 UID: 0 PID: 18045 Comm: syz.0.3708 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1043.720009][T18045] Tainted: [L]=SOFTLOCKUP [ 1043.720018][T18045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1043.720031][T18045] Call Trace: [ 1043.720039][T18045] [ 1043.720048][T18045] dump_stack_lvl+0xe8/0x150 [ 1043.720087][T18045] should_fail_ex+0x46b/0x600 [ 1043.720121][T18045] _copy_from_iter+0x1d3/0x1670 [ 1043.720159][T18045] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1043.720190][T18045] ? __alloc_skb+0x27d/0x7d0 [ 1043.720217][T18045] ? __pfx__copy_from_iter+0x10/0x10 [ 1043.720240][T18045] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1043.720266][T18045] ? __alloc_skb+0x27d/0x7d0 [ 1043.720311][T18045] ? netlink_sendmsg+0x650/0xb40 [ 1043.720337][T18045] ? skb_put+0x11b/0x210 [ 1043.720369][T18045] netlink_sendmsg+0x6c0/0xb40 [ 1043.720406][T18045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1043.720436][T18045] ? unwind_get_return_address+0x4d/0x90 [ 1043.720460][T18045] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1043.720495][T18045] ____sys_sendmsg+0x94c/0x9c0 [ 1043.720520][T18045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1043.720548][T18045] ? import_iovec+0x73/0xa0 [ 1043.720580][T18045] ___sys_sendmsg+0x2a5/0x360 [ 1043.720607][T18045] ? __pfx____sys_sendmsg+0x10/0x10 [ 1043.720668][T18045] ? __fget_files+0x2a/0x420 [ 1043.720693][T18045] ? __fget_files+0x3a6/0x420 [ 1043.720734][T18045] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1043.720759][T18045] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1043.720790][T18045] ? __pfx_ksys_write+0x10/0x10 [ 1043.720831][T18045] do_syscall_64+0x14d/0xf80 [ 1043.720861][T18045] ? trace_irq_disable+0x3b/0x150 [ 1043.720884][T18045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.720906][T18045] ? clear_bhb_loop+0x40/0x90 [ 1043.720931][T18045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.720953][T18045] RIP: 0033:0x7f8a00e6c799 [ 1043.720973][T18045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.720993][T18045] RSP: 002b:00007f89ff0c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1043.721017][T18045] RAX: ffffffffffffffda RBX: 00007f8a010e5fa0 RCX: 00007f8a00e6c799 [ 1043.721033][T18045] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1043.721046][T18045] RBP: 00007f89ff0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1043.721060][T18045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1043.721072][T18045] R13: 00007f8a010e6038 R14: 00007f8a010e5fa0 R15: 00007ffffb075348 [ 1043.721105][T18045] [ 1044.470644][ T36] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1044.648249][T18059] netlink: 'syz.0.3709': attribute type 1 has an invalid length. [ 1045.578072][ T36] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1045.579375][ T36] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1045.579415][ T36] usb 6-1: can't read configurations, error -71 [ 1049.441710][T18120] openvswitch: netlink: ufid size 260 bytes exceeds the range (1, 16) [ 1049.441739][T18120] openvswitch: netlink: Message has 16 unknown bytes. [ 1049.634854][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805f8b2c00: rx timeout, send abort [ 1049.635235][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805f8b2c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1050.024442][ T5871] usb 6-1: new full-speed USB device number 124 using dummy_hcd [ 1050.173407][ T5871] usb 6-1: config 0 has no interfaces? [ 1050.178288][ T5871] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1050.178321][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.178342][ T5871] usb 6-1: Product: syz [ 1050.178357][ T5871] usb 6-1: Manufacturer: syz [ 1050.178372][ T5871] usb 6-1: SerialNumber: syz [ 1050.219258][ T5871] usb 6-1: config 0 descriptor?? [ 1050.281628][T18150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3731'. [ 1050.510331][T18134] 8021q: VLANs not supported on nlmon0 [ 1050.586637][ T5871] usb 6-1: USB disconnect, device number 124 [ 1050.640849][ T6881] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1050.798897][ T6881] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1050.798932][ T6881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.798952][ T6881] usb 1-1: Product: syz [ 1050.798968][ T6881] usb 1-1: Manufacturer: syz [ 1050.798983][ T6881] usb 1-1: SerialNumber: syz [ 1050.800689][T18161] tipc: Started in network mode [ 1050.801740][T18161] tipc: Node identity 7eaa2d32d8e3, cluster identity 4711 [ 1050.801930][T18161] tipc: Enabled bearer , priority 0 [ 1050.805952][T18161] syzkaller0: entered promiscuous mode [ 1050.805976][T18161] syzkaller0: entered allmulticast mode [ 1050.984229][ T6881] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1051.062642][ T36] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1051.274544][T18168] syzkaller0: mtu less than device minimum [ 1051.281006][ T5871] usb 1-1: USB disconnect, device number 65 [ 1051.373173][T18159] tipc: Resetting bearer [ 1051.665213][T18159] tipc: Disabling bearer [ 1051.865678][T15724] Bluetooth: hci3: command 0x0406 tx timeout [ 1051.981546][ T809] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1052.100854][ T36] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1052.101073][ T36] ath9k_htc: Failed to initialize the device [ 1052.109425][ T5871] usb 1-1: ath9k_htc: USB layer deinitialized [ 1052.130903][ T809] usb 4-1: Using ep0 maxpacket: 32 [ 1052.137742][ T809] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 1052.137775][ T809] usb 4-1: config 0 has no interface number 0 [ 1052.137822][ T809] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1052.137850][ T809] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1052.137872][ T809] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1052.137895][ T809] usb 4-1: config 0 interface 196 has no altsetting 0 [ 1052.161728][ T809] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1052.161758][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.161778][ T809] usb 4-1: Product: syz [ 1052.161791][ T809] usb 4-1: Manufacturer: syz [ 1052.161804][ T809] usb 4-1: SerialNumber: syz [ 1052.267286][ T809] usb 4-1: config 0 descriptor?? [ 1052.268536][T18187] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1052.672930][ T809] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 1052.673300][ T809] ipheth 4-1:0.196: probe with driver ipheth failed with error -22 [ 1052.904136][T18207] openvswitch: netlink: Message has 16 unknown bytes. [ 1053.148344][T18215] random: crng reseeded on system resumption [ 1053.160020][T18216] FAULT_INJECTION: forcing a failure. [ 1053.160020][T18216] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.160060][T18216] CPU: 0 UID: 0 PID: 18216 Comm: syz.5.3746 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1053.160090][T18216] Tainted: [L]=SOFTLOCKUP [ 1053.160098][T18216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1053.160111][T18216] Call Trace: [ 1053.160120][T18216] [ 1053.160129][T18216] dump_stack_lvl+0xe8/0x150 [ 1053.160168][T18216] should_fail_ex+0x46b/0x600 [ 1053.160198][T18216] should_failslab+0xa8/0x100 [ 1053.160232][T18216] __kmalloc_noprof+0xdf/0x7b0 [ 1053.160263][T18216] ? sk_prot_alloc+0xe7/0x210 [ 1053.160300][T18216] sk_prot_alloc+0xe7/0x210 [ 1053.160328][T18216] ? sk_alloc+0x27/0x390 [ 1053.160359][T18216] sk_alloc+0x3a/0x390 [ 1053.160395][T18216] bpf_prog_test_run_skb+0x3ed/0x1c90 [ 1053.160435][T18216] ? __fget_files+0x2a/0x420 [ 1053.160461][T18216] ? __fget_files+0x3a6/0x420 [ 1053.160485][T18216] ? __fget_files+0x2a/0x420 [ 1053.160516][T18216] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1053.160544][T18216] bpf_prog_test_run+0x2cd/0x340 [ 1053.160577][T18216] __sys_bpf+0x643/0x950 [ 1053.160603][T18216] ? __pfx___sys_bpf+0x10/0x10 [ 1053.160626][T18216] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1053.160670][T18216] ? ksys_write+0x248/0x270 [ 1053.160704][T18216] ? __pfx_ksys_write+0x10/0x10 [ 1053.160746][T18216] __x64_sys_bpf+0x7c/0x90 [ 1053.160770][T18216] do_syscall_64+0x14d/0xf80 [ 1053.160800][T18216] ? trace_irq_disable+0x3b/0x150 [ 1053.160822][T18216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.160844][T18216] ? clear_bhb_loop+0x40/0x90 [ 1053.160870][T18216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.160891][T18216] RIP: 0033:0x7f79a6d7c799 [ 1053.160913][T18216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.160951][T18216] RSP: 002b:00007f79a4fce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1053.160975][T18216] RAX: ffffffffffffffda RBX: 00007f79a6ff5fa0 RCX: 00007f79a6d7c799 [ 1053.160992][T18216] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 1053.161006][T18216] RBP: 00007f79a4fce090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.161020][T18216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.161033][T18216] R13: 00007f79a6ff6038 R14: 00007f79a6ff5fa0 R15: 00007ffec91b37e8 [ 1053.161066][T18216] [ 1054.086028][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888030976400: rx timeout, send abort [ 1054.086421][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888030976400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1054.849236][ T5880] usb 4-1: USB disconnect, device number 65 [ 1054.909224][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.909306][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.761277][T18291] FAULT_INJECTION: forcing a failure. [ 1057.761277][T18291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1057.761320][T18291] CPU: 1 UID: 0 PID: 18291 Comm: syz.3.3768 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1057.761350][T18291] Tainted: [L]=SOFTLOCKUP [ 1057.761359][T18291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1057.761372][T18291] Call Trace: [ 1057.761381][T18291] [ 1057.761391][T18291] dump_stack_lvl+0xe8/0x150 [ 1057.761430][T18291] should_fail_ex+0x46b/0x600 [ 1057.761464][T18291] _copy_from_iter+0x1d3/0x1670 [ 1057.761501][T18291] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1057.761532][T18291] ? __alloc_skb+0x27d/0x7d0 [ 1057.761563][T18291] ? __pfx__copy_from_iter+0x10/0x10 [ 1057.761588][T18291] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1057.761620][T18291] ? __alloc_skb+0x27d/0x7d0 [ 1057.761656][T18291] ? netlink_sendmsg+0x650/0xb40 [ 1057.761683][T18291] ? skb_put+0x11b/0x210 [ 1057.761718][T18291] netlink_sendmsg+0x6c0/0xb40 [ 1057.761758][T18291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1057.761789][T18291] ? unwind_get_return_address+0x4d/0x90 [ 1057.761817][T18291] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1057.761853][T18291] ____sys_sendmsg+0x94c/0x9c0 [ 1057.761882][T18291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1057.761915][T18291] ? import_iovec+0x73/0xa0 [ 1057.761950][T18291] ___sys_sendmsg+0x2a5/0x360 [ 1057.761978][T18291] ? __pfx____sys_sendmsg+0x10/0x10 [ 1057.762040][T18291] ? __fget_files+0x2a/0x420 [ 1057.762068][T18291] ? __fget_files+0x3a6/0x420 [ 1057.762106][T18291] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1057.762133][T18291] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1057.762166][T18291] ? __pfx_ksys_write+0x10/0x10 [ 1057.762212][T18291] do_syscall_64+0x14d/0xf80 [ 1057.762252][T18291] ? trace_irq_disable+0x3b/0x150 [ 1057.762277][T18291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.762300][T18291] ? clear_bhb_loop+0x40/0x90 [ 1057.762327][T18291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.762348][T18291] RIP: 0033:0x7fba12c6c799 [ 1057.762369][T18291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.762389][T18291] RSP: 002b:00007fba10ebe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1057.762413][T18291] RAX: ffffffffffffffda RBX: 00007fba12ee5fa0 RCX: 00007fba12c6c799 [ 1057.762430][T18291] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1057.762443][T18291] RBP: 00007fba10ebe090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.762457][T18291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1057.762470][T18291] R13: 00007fba12ee6038 R14: 00007fba12ee5fa0 R15: 00007ffc6a1aaf08 [ 1057.762507][T18291] [ 1058.126582][T18293] FAULT_INJECTION: forcing a failure. [ 1058.126582][T18293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1058.126651][T18293] CPU: 1 UID: 0 PID: 18293 Comm: syz.1.3767 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1058.126682][T18293] Tainted: [L]=SOFTLOCKUP [ 1058.126691][T18293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1058.126704][T18293] Call Trace: [ 1058.126713][T18293] [ 1058.126723][T18293] dump_stack_lvl+0xe8/0x150 [ 1058.126763][T18293] should_fail_ex+0x46b/0x600 [ 1058.126796][T18293] _copy_from_iter+0x1d3/0x1670 [ 1058.126835][T18293] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1058.126866][T18293] ? __alloc_skb+0x27d/0x7d0 [ 1058.126896][T18293] ? __pfx__copy_from_iter+0x10/0x10 [ 1058.126923][T18293] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1058.126954][T18293] ? __alloc_skb+0x27d/0x7d0 [ 1058.126989][T18293] ? netlink_sendmsg+0x650/0xb40 [ 1058.127018][T18293] ? skb_put+0x11b/0x210 [ 1058.127053][T18293] netlink_sendmsg+0x6c0/0xb40 [ 1058.127092][T18293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1058.127131][T18293] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1058.127166][T18293] ____sys_sendmsg+0x94c/0x9c0 [ 1058.127196][T18293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1058.127237][T18293] ? import_iovec+0x73/0xa0 [ 1058.127272][T18293] ___sys_sendmsg+0x2a5/0x360 [ 1058.127301][T18293] ? __pfx____sys_sendmsg+0x10/0x10 [ 1058.127328][T18293] ? __schedule+0x1569/0x5240 [ 1058.127391][T18293] ? __fget_files+0x2a/0x420 [ 1058.127417][T18293] ? __fget_files+0x3a6/0x420 [ 1058.127455][T18293] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1058.127475][T18293] ? irqentry_exit+0x59e/0x620 [ 1058.127510][T18293] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1058.127530][T18293] ? rcu_is_watching+0x15/0xb0 [ 1058.127582][T18293] do_syscall_64+0x14d/0xf80 [ 1058.127613][T18293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.127637][T18293] ? clear_bhb_loop+0x40/0x90 [ 1058.127664][T18293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.127686][T18293] RIP: 0033:0x7f5cca82c799 [ 1058.127707][T18293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.127726][T18293] RSP: 002b:00007f5cc8a3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1058.127750][T18293] RAX: ffffffffffffffda RBX: 00007f5ccaaa6180 RCX: 00007f5cca82c799 [ 1058.127766][T18293] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 1058.127780][T18293] RBP: 00007f5cc8a3c090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.127794][T18293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.127807][T18293] R13: 00007f5ccaaa6218 R14: 00007f5ccaaa6180 R15: 00007ffe6080ef68 [ 1058.127843][T18293] [ 1060.312054][ T36] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1061.300912][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 1061.303761][ T36] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.303791][ T36] usb 1-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 1061.303832][ T36] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1061.303857][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.647656][T18350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.648424][T18350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.666400][T18349] openvswitch: netlink: Message has 16 unknown bytes. [ 1062.807251][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888038e8a400: rx timeout, send abort [ 1062.807639][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888038e8a400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1062.847650][ T5864] usb 1-1: USB disconnect, device number 66 [ 1063.363589][T18379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3787'. [ 1066.067799][T18417] 9p: Bad value for 'rfdno' [ 1066.790956][ T5872] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1066.960852][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 1066.963514][ T5872] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.963543][ T5872] usb 2-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 1066.963584][ T5872] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1066.963609][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.270520][T18428] openvswitch: netlink: Message has 16 unknown bytes. [ 1067.284273][T18431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.284883][T18431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.117251][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804fe57400: rx timeout, send abort [ 1069.118260][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88804fe57400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1069.535138][T16690] usb 2-1: USB disconnect, device number 101 [ 1069.540893][ T5872] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1069.700001][ T5872] usb 1-1: not running at top speed; connect to a high speed hub [ 1069.704495][ T5872] usb 1-1: config 3 has an invalid interface number: 63 but max is 1 [ 1069.704523][ T5872] usb 1-1: config 3 has an invalid interface number: 222 but max is 1 [ 1069.704545][ T5872] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1069.704563][ T5872] usb 1-1: config 3 has no interface number 0 [ 1069.704578][ T5872] usb 1-1: config 3 has no interface number 1 [ 1069.704655][ T5872] usb 1-1: config 3 interface 63 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1069.704677][ T5872] usb 1-1: config 3 interface 63 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1069.704696][ T5872] usb 1-1: config 3 interface 63 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 1069.704719][ T5872] usb 1-1: config 3 interface 63 altsetting 127 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1069.704759][ T5872] usb 1-1: config 3 interface 222 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1069.704783][ T5872] usb 1-1: config 3 interface 222 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1069.704809][ T5872] usb 1-1: config 3 interface 222 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1069.704830][ T5872] usb 1-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 1069.704851][ T5872] usb 1-1: config 3 interface 222 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1069.704874][ T5872] usb 1-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 1069.704896][ T5872] usb 1-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1069.704917][ T5872] usb 1-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1069.704938][ T5872] usb 1-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1069.704957][ T5872] usb 1-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1069.704978][ T5872] usb 1-1: config 3 interface 222 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1069.704997][ T5872] usb 1-1: config 3 interface 63 has no altsetting 0 [ 1069.705014][ T5872] usb 1-1: config 3 interface 222 has no altsetting 0 [ 1069.722435][ T5872] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0020, bcdDevice=c7.ff [ 1069.722466][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.722486][ T5872] usb 1-1: Product: syz [ 1069.722499][ T5872] usb 1-1: Manufacturer: syz [ 1069.722513][ T5872] usb 1-1: SerialNumber: syz [ 1069.746824][T18456] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1069.751727][T18456] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1070.083173][ T5872] dvb-usb: found a 'Elgato EyeTV Dtt Dlx PD378S' in cold state, will try to load a firmware [ 1070.085531][ T5872] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1070.085656][ T5872] dib0700: firmware download failed at 7 with -8 [ 1070.477890][ T5872] dvb-usb: found a 'Elgato EyeTV Dtt Dlx PD378S' in cold state, will try to load a firmware [ 1070.480206][ T5872] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1070.480331][ T5872] dib0700: firmware download failed at 7 with -8 [ 1070.578752][ T5872] usb 1-1: USB disconnect, device number 67 [ 1071.600663][T18491] netlink: 'syz.0.3810': attribute type 1 has an invalid length. [ 1073.213434][T18509] openvswitch: netlink: Message has 16 unknown bytes. [ 1073.281070][ T5872] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1073.430888][ T5872] usb 6-1: Using ep0 maxpacket: 32 [ 1073.433723][ T5872] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.433754][ T5872] usb 6-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 1073.433810][ T5872] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1073.433835][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.745642][T18518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.760471][T18518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.364769][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805f8c7c00: rx timeout, send abort [ 1074.365148][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805f8c7c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1075.581013][ T5880] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 1075.751259][ T5880] usb 1-1: not running at top speed; connect to a high speed hub [ 1075.755160][ T5880] usb 1-1: config 3 has an invalid interface number: 63 but max is 1 [ 1075.755191][ T5880] usb 1-1: config 3 has an invalid interface number: 222 but max is 1 [ 1075.755212][ T5880] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1075.755231][ T5880] usb 1-1: config 3 has no interface number 0 [ 1075.755247][ T5880] usb 1-1: config 3 has no interface number 1 [ 1075.755322][ T5880] usb 1-1: config 3 interface 63 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1075.755346][ T5880] usb 1-1: config 3 interface 63 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1075.755369][ T5880] usb 1-1: config 3 interface 63 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 1075.755394][ T5880] usb 1-1: config 3 interface 63 altsetting 127 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1075.755459][ T5880] usb 1-1: config 3 interface 222 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1075.755488][ T5880] usb 1-1: config 3 interface 222 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1075.755518][ T5880] usb 1-1: config 3 interface 222 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1075.755543][ T5880] usb 1-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 1075.755569][ T5880] usb 1-1: config 3 interface 222 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1075.755598][ T5880] usb 1-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 1075.755622][ T5880] usb 1-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1075.755645][ T5880] usb 1-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1075.755669][ T5880] usb 1-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1075.755693][ T5880] usb 1-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1075.755716][ T5880] usb 1-1: config 3 interface 222 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1075.755739][ T5880] usb 1-1: config 3 interface 63 has no altsetting 0 [ 1075.755758][ T5880] usb 1-1: config 3 interface 222 has no altsetting 0 [ 1075.778850][ T5880] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0020, bcdDevice=c7.ff [ 1075.778882][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.778901][ T5880] usb 1-1: Product: syz [ 1075.778915][ T5880] usb 1-1: Manufacturer: syz [ 1075.778929][ T5880] usb 1-1: SerialNumber: syz [ 1075.820420][T18549] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1075.823798][T18549] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1076.223110][ T5880] dvb-usb: found a 'Elgato EyeTV Dtt Dlx PD378S' in cold state, will try to load a firmware [ 1076.225268][ T5880] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1076.225393][ T5880] dib0700: firmware download failed at 7 with -8 [ 1076.278410][ T809] usb 6-1: USB disconnect, device number 125 [ 1076.382905][ T5880] dvb-usb: found a 'Elgato EyeTV Dtt Dlx PD378S' in cold state, will try to load a firmware [ 1076.385087][ T5880] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1076.385219][ T5880] dib0700: firmware download failed at 7 with -8 [ 1076.520218][ T5880] usb 1-1: USB disconnect, device number 68 [ 1077.167176][T18581] FAULT_INJECTION: forcing a failure. [ 1077.167176][T18581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1077.167220][T18581] CPU: 0 UID: 0 PID: 18581 Comm: syz.3.3828 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1077.167251][T18581] Tainted: [L]=SOFTLOCKUP [ 1077.167259][T18581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1077.167272][T18581] Call Trace: [ 1077.167282][T18581] [ 1077.167292][T18581] dump_stack_lvl+0xe8/0x150 [ 1077.167331][T18581] should_fail_ex+0x46b/0x600 [ 1077.167364][T18581] _copy_to_user+0x31/0xb0 [ 1077.167399][T18581] bpf_test_finish+0x1db/0x6b0 [ 1077.167435][T18581] ? __pfx____migrate_enable+0x10/0x10 [ 1077.167469][T18581] ? __pfx_bpf_test_finish+0x10/0x10 [ 1077.167514][T18581] bpf_prog_test_run_flow_dissector+0x478/0x610 [ 1077.167560][T18581] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1077.167594][T18581] ? __fget_files+0x2a/0x420 [ 1077.167628][T18581] ? __fget_files+0x2a/0x420 [ 1077.167661][T18581] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1077.167692][T18581] bpf_prog_test_run+0x2cd/0x340 [ 1077.167726][T18581] __sys_bpf+0x643/0x950 [ 1077.167756][T18581] ? __pfx___sys_bpf+0x10/0x10 [ 1077.167779][T18581] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1077.167826][T18581] ? ksys_write+0x248/0x270 [ 1077.167860][T18581] ? __pfx_ksys_write+0x10/0x10 [ 1077.167901][T18581] __x64_sys_bpf+0x7c/0x90 [ 1077.167935][T18581] do_syscall_64+0x14d/0xf80 [ 1077.167966][T18581] ? trace_irq_disable+0x3b/0x150 [ 1077.167992][T18581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.168015][T18581] ? clear_bhb_loop+0x40/0x90 [ 1077.168043][T18581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.168065][T18581] RIP: 0033:0x7fba12c6c799 [ 1077.168086][T18581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.168106][T18581] RSP: 002b:00007fba10ebe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1077.168130][T18581] RAX: ffffffffffffffda RBX: 00007fba12ee5fa0 RCX: 00007fba12c6c799 [ 1077.168152][T18581] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1077.168166][T18581] RBP: 00007fba10ebe090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.168180][T18581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1077.168193][T18581] R13: 00007fba12ee6038 R14: 00007fba12ee5fa0 R15: 00007ffc6a1aaf08 [ 1077.168229][T18581] [ 1077.677868][T18588] openvswitch: netlink: Message has 16 unknown bytes. [ 1079.301244][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801ab14400: rx timeout, send abort [ 1079.301766][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801ab14400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1079.720855][ T5864] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1079.872316][ T5864] usb 6-1: Using ep0 maxpacket: 32 [ 1079.874642][ T5864] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.874672][ T5864] usb 6-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 1079.874713][ T5864] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1079.874737][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.202495][T18627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.202831][T18627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.602418][ T809] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 1080.853697][ T809] usb 4-1: not running at top speed; connect to a high speed hub [ 1080.884943][ T809] usb 4-1: config 3 has an invalid interface number: 63 but max is 1 [ 1080.884977][ T809] usb 4-1: config 3 has an invalid interface number: 222 but max is 1 [ 1080.885000][ T809] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1080.885019][ T809] usb 4-1: config 3 has no interface number 0 [ 1080.885036][ T809] usb 4-1: config 3 has no interface number 1 [ 1080.885106][ T809] usb 4-1: config 3 interface 63 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1080.885130][ T809] usb 4-1: config 3 interface 63 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1080.885154][ T809] usb 4-1: config 3 interface 63 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 1080.885180][ T809] usb 4-1: config 3 interface 63 altsetting 127 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1080.885239][ T809] usb 4-1: config 3 interface 222 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1080.885277][ T809] usb 4-1: config 3 interface 222 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1080.885301][ T809] usb 4-1: config 3 interface 222 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1080.885330][ T809] usb 4-1: config 3 interface 222 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1080.885354][ T809] usb 4-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 1080.885378][ T809] usb 4-1: config 3 interface 222 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1080.885405][ T809] usb 4-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 1080.885428][ T809] usb 4-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1080.885451][ T809] usb 4-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1080.885474][ T809] usb 4-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1080.885499][ T809] usb 4-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1080.885664][ T809] usb 4-1: config 3 interface 222 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1080.885689][ T809] usb 4-1: config 3 interface 63 has no altsetting 0 [ 1080.885710][ T809] usb 4-1: config 3 interface 222 has no altsetting 0 [ 1080.941114][ T809] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0020, bcdDevice=c7.ff [ 1080.941149][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.941172][ T809] usb 4-1: Product: syz [ 1080.941188][ T809] usb 4-1: Manufacturer: syz [ 1080.941204][ T809] usb 4-1: SerialNumber: syz [ 1081.349405][T18626] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1081.350311][T18626] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1081.606050][ T809] dvb-usb: found a 'Elgato EyeTV Dtt Dlx PD378S' in cold state, will try to load a firmware [ 1081.610182][ T809] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1081.610323][ T809] dib0700: firmware download failed at 7 with -8 [ 1081.676190][ T809] dvb-usb: found a 'Elgato EyeTV Dtt Dlx PD378S' in cold state, will try to load a firmware [ 1081.692650][ T809] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1081.692740][ T809] dib0700: firmware download failed at 7 with -8 [ 1081.750461][ T809] usb 4-1: USB disconnect, device number 66 [ 1082.467923][ T809] usb 6-1: USB disconnect, device number 126 [ 1082.790316][T18650] netlink: 'syz.3.3843': attribute type 1 has an invalid length. [ 1084.215434][T18670] openvswitch: netlink: Message has 16 unknown bytes. [ 1085.351349][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805fda0400: rx timeout, send abort [ 1085.351763][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805fda0400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1085.683335][ T5880] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 1085.834028][ T5880] usb 4-1: not running at top speed; connect to a high speed hub [ 1085.840406][ T5880] usb 4-1: config 3 has an invalid interface number: 63 but max is 1 [ 1085.840438][ T5880] usb 4-1: config 3 has an invalid interface number: 222 but max is 1 [ 1085.840462][ T5880] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1085.840482][ T5880] usb 4-1: config 3 has no interface number 0 [ 1085.840499][ T5880] usb 4-1: config 3 has no interface number 1 [ 1085.840564][ T5880] usb 4-1: config 3 interface 63 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1085.840587][ T5880] usb 4-1: config 3 interface 63 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1085.840609][ T5880] usb 4-1: config 3 interface 63 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 1085.840634][ T5880] usb 4-1: config 3 interface 63 altsetting 127 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1085.840679][ T5880] usb 4-1: config 3 interface 222 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1085.841244][ T5880] usb 4-1: config 3 interface 222 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1085.841270][ T5880] usb 4-1: config 3 interface 222 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1085.841297][ T5880] usb 4-1: config 3 interface 222 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1085.841319][ T5880] usb 4-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 1085.841341][ T5880] usb 4-1: config 3 interface 222 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1085.841366][ T5880] usb 4-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 1085.841388][ T5880] usb 4-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1085.841410][ T5880] usb 4-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1085.841430][ T5880] usb 4-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1085.841451][ T5880] usb 4-1: config 3 interface 222 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1085.841471][ T5880] usb 4-1: config 3 interface 222 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1085.841490][ T5880] usb 4-1: config 3 interface 63 has no altsetting 0 [ 1085.841508][ T5880] usb 4-1: config 3 interface 222 has no altsetting 0 [ 1085.850271][ T5880] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0020, bcdDevice=c7.ff [ 1085.850301][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.850320][ T5880] usb 4-1: Product: syz [ 1085.850334][ T5880] usb 4-1: Manufacturer: syz [ 1085.850348][ T5880] usb 4-1: SerialNumber: syz [ 1085.890451][T18687] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1085.890691][T18687] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1086.212412][ T5880] dvb-usb: found a 'Elgato EyeTV Dtt Dlx PD378S' in cold state, will try to load a firmware [ 1086.215641][ T5880] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1086.215767][ T5880] dib0700: firmware download failed at 7 with -8 [ 1086.273212][T16697] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1086.274138][ T5880] dvb-usb: found a 'Elgato EyeTV Dtt Dlx PD378S' in cold state, will try to load a firmware [ 1086.276594][ T5880] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1086.276740][ T5880] dib0700: firmware download failed at 7 with -8 [ 1086.401451][ T5880] usb 4-1: USB disconnect, device number 67 [ 1086.441507][T16697] usb 2-1: Using ep0 maxpacket: 32 [ 1086.444335][T16697] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.444365][T16697] usb 2-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 1086.444406][T16697] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1086.444431][T16697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.910307][T18722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.913930][T18722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.034226][ T5880] usb 2-1: USB disconnect, device number 102 [ 1090.461116][T13531] usb 6-1: new full-speed USB device number 127 using dummy_hcd [ 1090.620950][T13531] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1090.636073][T13531] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1090.636106][T13531] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.636128][T13531] usb 6-1: Product: syz [ 1090.636144][T13531] usb 6-1: Manufacturer: syz [ 1090.636158][T13531] usb 6-1: SerialNumber: syz [ 1091.162261][T13531] usb 6-1: USB disconnect, device number 127 [ 1093.310987][T13531] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1093.470865][T13531] usb 4-1: Using ep0 maxpacket: 32 [ 1093.502525][T13531] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.502545][T13531] usb 4-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 1093.502568][T13531] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1093.502582][T13531] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.866643][T18809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.867429][T18809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.240853][T13531] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1094.393604][T13531] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1094.393641][T13531] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.435088][T13531] usb 2-1: config 0 descriptor?? [ 1094.469737][T13531] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1095.093066][T18813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.096526][T18813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.124149][T13531] gspca_sunplus: reg_w_riv err -71 [ 1095.124276][T13531] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1095.147277][T13531] usb 2-1: USB disconnect, device number 103 [ 1095.881935][T13531] usb 4-1: USB disconnect, device number 68 [ 1097.846237][ T5880] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1098.031509][T18861] comedi: No check for data length of config insn id 3 is implemented [ 1098.031531][T18861] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1098.031546][T18861] comedi: Assuming n=15 is correct [ 1098.083977][T16697] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1099.187119][ T5880] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1099.187152][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.187174][ T5880] usb 6-1: Product: syz [ 1099.187189][ T5880] usb 6-1: Manufacturer: syz [ 1099.187205][ T5880] usb 6-1: SerialNumber: syz [ 1099.282878][ T5880] usb 6-1: config 0 descriptor?? [ 1099.352810][T16697] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.352841][T16697] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1099.352968][T16697] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1099.352994][T16697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.403146][ T5880] usb 6-1: can't set config #0, error -71 [ 1099.407318][T16697] usb 2-1: config 0 descriptor?? [ 1099.410413][ T5880] usb 6-1: USB disconnect, device number 2 [ 1099.992829][T16697] Bluetooth: Can't get state to change to load configuration err [ 1099.992851][T16697] Bluetooth: Loading sysconfig file failed [ 1099.992896][T16697] ath3k 2-1:0.0: probe with driver ath3k failed with error -16 [ 1100.024734][T16697] usb 2-1: USB disconnect, device number 104 [ 1102.227215][T18892] binder: 18891:18892 ioctl c0306201 2000000003c0 returned -14 [ 1102.227614][T18892] binder: 18891:18892 unknown command 100663296 [ 1102.227634][T18892] binder: 18891:18892 ioctl c0306201 2000000001c0 returned -22 [ 1105.729836][T18926] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1105.729914][T18926] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1106.860988][ T5880] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1107.023353][ T5880] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1107.023396][ T5880] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1107.023441][ T5880] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1107.023465][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.169293][T18930] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1107.192030][ T5880] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1107.206339][ T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1108.270909][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 1108.273346][ T31] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.273375][ T31] usb 6-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 1108.273417][ T31] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1108.273442][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.041988][T18950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.043530][T18950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.524040][ T5880] usb 2-1: USB disconnect, device number 105 [ 1110.160789][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1110.259897][ T5872] usb 6-1: USB disconnect, device number 3 [ 1110.312767][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1110.314867][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1110.314897][ T9] usb 1-1: config 0 has no interface number 0 [ 1110.324866][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1110.324909][ T9] usb 1-1: [ 1110.324909][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.324929][ T9] usb 1-1: Product: syz [ 1110.324942][ T9] usb 1-1: Manufacturer: syz [ 1110.324956][ T9] usb 1-1: SerialNumber: syz [ 1110.345606][ T9] usb 1-1: config 0 descriptor?? [ 1110.354466][ T1113] ------------[ cut here ]------------ [ 1110.354481][ T1113] in_task() && kcov_mode_enabled(mode) [ 1110.354489][ T1113] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5d8/0x710, CPU#0: kworker/u8:8/1113 [ 1110.354533][ T1113] Modules linked in: [ 1110.354555][ T1113] CPU: 0 UID: 0 PID: 1113 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1110.354584][ T1113] Tainted: [L]=SOFTLOCKUP [ 1110.354593][ T1113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1110.354606][ T1113] Workqueue: events_unbound cfg80211_wiphy_work [ 1110.354631][ T1113] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 1110.354654][ T1113] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a2 7b d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 fa 65 5e 09 89 c0 48 c7 c7 20 d4 4e [ 1110.354671][ T1113] RSP: 0018:ffffc90005bd79d8 EFLAGS: 00010202 [ 1110.354688][ T1113] RAX: 0000000000000002 RBX: ffff888028071e80 RCX: 0000000000000000 [ 1110.354702][ T1113] RDX: 0000000000000000 RSI: ffffffff8ba666e0 RDI: ffffffff8ba666a0 [ 1110.354717][ T1113] RBP: ffff88802b0aa140 R08: ffffffff8b2521d0 R09: ffffffff8ddcb980 [ 1110.354731][ T1113] R10: dffffc0000000000 R11: fffffbfff1ed4797 R12: ffff8880845d9d08 [ 1110.354747][ T1113] R13: ffff8880621707c0 R14: 0000000000000000 R15: ffff8880845d9d20 [ 1110.354762][ T1113] FS: 0000000000000000(0000) GS:ffff88812633c000(0000) knlGS:0000000000000000 [ 1110.354778][ T1113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1110.354792][ T1113] CR2: 00007f8a00eb9e80 CR3: 00000000282dc000 CR4: 00000000003526f0 [ 1110.354811][ T1113] Call Trace: [ 1110.354820][ T1113] [ 1110.354835][ T1113] ieee80211_iface_work+0x211/0x1340 [ 1110.354871][ T1113] cfg80211_wiphy_work+0x2ab/0x4a0 [ 1110.354895][ T1113] ? process_scheduled_works+0xa8d/0x18c0 [ 1110.354926][ T1113] process_scheduled_works+0xb6e/0x18c0 [ 1110.354989][ T1113] ? __pfx_process_scheduled_works+0x10/0x10 [ 1110.355025][ T1113] ? assign_work+0x3d5/0x5e0 [ 1110.355059][ T1113] worker_thread+0xa53/0xfc0 [ 1110.355126][ T1113] kthread+0x388/0x470 [ 1110.355148][ T1113] ? __pfx_worker_thread+0x10/0x10 [ 1110.355173][ T1113] ? __pfx_kthread+0x10/0x10 [ 1110.355198][ T1113] ret_from_fork+0x51e/0xb90 [ 1110.355232][ T1113] ? __pfx_ret_from_fork+0x10/0x10 [ 1110.355258][ T1113] ? __switch_to+0xc7d/0x1450 [ 1110.355287][ T1113] ? __pfx_kthread+0x10/0x10 [ 1110.355310][ T1113] ret_from_fork_asm+0x1a/0x30 [ 1110.355349][ T1113] [ 1110.355360][ T1113] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1110.355377][ T1113] CPU: 0 UID: 0 PID: 1113 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1110.355402][ T1113] Tainted: [L]=SOFTLOCKUP [ 1110.355410][ T1113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1110.355422][ T1113] Workqueue: events_unbound cfg80211_wiphy_work [ 1110.355444][ T1113] Call Trace: [ 1110.355452][ T1113] [ 1110.355460][ T1113] vpanic+0x56c/0xa60 [ 1110.355489][ T1113] ? __pfx__printk+0x10/0x10 [ 1110.355511][ T1113] ? __pfx_vpanic+0x10/0x10 [ 1110.355536][ T1113] ? is_bpf_text_address+0x292/0x2b0 [ 1110.355562][ T1113] ? is_bpf_text_address+0x26/0x2b0 [ 1110.355597][ T1113] panic+0xc5/0xd0 [ 1110.355624][ T1113] ? __pfx_panic+0x10/0x10 [ 1110.355662][ T1113] ? ret_from_fork_asm+0x1a/0x30 [ 1110.355688][ T1113] __warn+0x315/0x4f0 [ 1110.355715][ T1113] ? kcov_remote_start+0x5d8/0x710 [ 1110.355739][ T1113] ? kcov_remote_start+0x5d8/0x710 [ 1110.355764][ T1113] __report_bug+0x29a/0x540 [ 1110.355798][ T1113] ? kcov_remote_start+0x5d8/0x710 [ 1110.355821][ T1113] ? __pfx___report_bug+0x10/0x10 [ 1110.355850][ T1113] ? do_raw_spin_lock+0x12b/0x2f0 [ 1110.355876][ T1113] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1110.355905][ T1113] ? do_raw_spin_lock+0x12b/0x2f0 [ 1110.355938][ T1113] ? kcov_remote_start+0x5d8/0x710 [ 1110.355961][ T1113] report_bug+0x16a/0x220 [ 1110.355988][ T1113] ? kcov_remote_start+0x5d8/0x710 [ 1110.356009][ T1113] ? kcov_remote_start+0x5da/0x710 [ 1110.356030][ T1113] handle_bug+0x9c/0x200 [ 1110.356052][ T1113] exc_invalid_op+0x1a/0x50 [ 1110.356073][ T1113] asm_exc_invalid_op+0x1a/0x20 [ 1110.356093][ T1113] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 1110.356124][ T1113] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a2 7b d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 fa 65 5e 09 89 c0 48 c7 c7 20 d4 4e [ 1110.356140][ T1113] RSP: 0018:ffffc90005bd79d8 EFLAGS: 00010202 [ 1110.356157][ T1113] RAX: 0000000000000002 RBX: ffff888028071e80 RCX: 0000000000000000 [ 1110.356170][ T1113] RDX: 0000000000000000 RSI: ffffffff8ba666e0 RDI: ffffffff8ba666a0 [ 1110.356184][ T1113] RBP: ffff88802b0aa140 R08: ffffffff8b2521d0 R09: ffffffff8ddcb980 [ 1110.356199][ T1113] R10: dffffc0000000000 R11: fffffbfff1ed4797 R12: ffff8880845d9d08 [ 1110.356214][ T1113] R13: ffff8880621707c0 R14: 0000000000000000 R15: ffff8880845d9d20 [ 1110.356236][ T1113] ? rt_spin_lock+0x1e0/0x400 [ 1110.356267][ T1113] ? kcov_remote_start+0xe0/0x710 [ 1110.356293][ T1113] ieee80211_iface_work+0x211/0x1340 [ 1110.356328][ T1113] cfg80211_wiphy_work+0x2ab/0x4a0 [ 1110.356351][ T1113] ? process_scheduled_works+0xa8d/0x18c0 [ 1110.356381][ T1113] process_scheduled_works+0xb6e/0x18c0 [ 1110.356444][ T1113] ? __pfx_process_scheduled_works+0x10/0x10 [ 1110.356478][ T1113] ? assign_work+0x3d5/0x5e0 [ 1110.356512][ T1113] worker_thread+0xa53/0xfc0 [ 1110.356571][ T1113] kthread+0x388/0x470 [ 1110.356592][ T1113] ? __pfx_worker_thread+0x10/0x10 [ 1110.356617][ T1113] ? __pfx_kthread+0x10/0x10 [ 1110.356640][ T1113] ret_from_fork+0x51e/0xb90 [ 1110.356670][ T1113] ? __pfx_ret_from_fork+0x10/0x10 [ 1110.356696][ T1113] ? __switch_to+0xc7d/0x1450 [ 1110.356724][ T1113] ? __pfx_kthread+0x10/0x10 [ 1110.356747][ T1113] ret_from_fork_asm+0x1a/0x30 [ 1110.356785][ T1113] [ 1110.357332][ T1113] Kernel Offset: disabled