last executing test programs: 25m46.471756347s ago: executing program 1 (id=1042): prctl$PR_GET_THP_DISABLE(0x2a) syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r0, 0x6000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00'], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) 25m46.334721099s ago: executing program 1 (id=1044): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x50}}, 0x0) r1 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000500)={0x4, 0x80000, r0}) r2 = creat(&(0x7f0000000200)='./bus\x00', 0xea) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r4, @ANYBLOB="080003"], 0x80}}, 0x8000) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x20}, 0x1, 0x0, 0x0, 0x4004801}, 0x8000) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES64=r3], 0xfffffffffffffc8e) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x1, @vbi={0x8, 0xe, 0x3, 0x30383653, [0x8, 0x68c], [0x9, 0x7], 0x1}}) sendfile(r5, r2, 0x0, 0x4000000053d0) 25m46.004903608s ago: executing program 1 (id=1045): socket$unix(0x1, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 25m45.689879926s ago: executing program 1 (id=1049): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='.\x00', 0x0, 0x81e88c, 0x0) 25m45.61101646s ago: executing program 1 (id=1051): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000100000100000000000000", @ANYRES32, @ANYBLOB="2300f2ff00000000dd0000000000", @ANYRES32=0x0, @ANYRES32], 0x50) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000540)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 25m44.454202667s ago: executing program 1 (id=1069): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100146c00000001000000001b000014000000000000001001000002"], 0x30}, 0x0) 25m44.071218465s ago: executing program 32 (id=1069): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100146c00000001000000001b000014000000000000001001000002"], 0x30}, 0x0) 19m18.741431516s ago: executing program 4 (id=3195): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000000fffc0900020073797a30000000000500010006000000050005000a0000000500040000000000140007800800114000000000050015002800000011000300686173683a6e6574"], 0x60}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}]}, 0x2c}}, 0x0) 19m18.612119658s ago: executing program 4 (id=3196): syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x91, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x8, 0x6, @multicast}, 0x14) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) (async) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b9", 0x44}) (async) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b9", 0x44}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl(r3, 0x1, &(0x7f0000000080)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x20000000000000bb}) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x68) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x84080000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x3, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, &(0x7f00000002c0)={'IDLETIMER\x00'}, &(0x7f0000000300)=0x1e) 19m18.162511397s ago: executing program 4 (id=3197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xd, 0x1000000000, 0xb, 0x43, 0x9, 0x0, 0x2004cb, 0x0, 0x1000000, 0x7fffffff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19m15.581097144s ago: executing program 4 (id=3206): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2011011, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r0 = syz_io_uring_setup(0x5db6, &(0x7f0000000100)={0x0, 0xb765, 0x1, 0x1, 0x2db}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)={0x40000018}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0xc000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f00000010c0)) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) name_to_handle_at(r5, &(0x7f0000000040)='./file7/file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) io_uring_setup(0x12e0, &(0x7f0000000280)={0x0, 0xb1c9, 0x20, 0x2, 0x12f, 0x0, r0}) 19m15.09433423s ago: executing program 4 (id=3210): syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) syz_open_dev$evdev(0x0, 0x1, 0x2002) syz_open_dev$vim2m(&(0x7f0000000380), 0x7, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) 19m11.973664538s ago: executing program 4 (id=3226): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x3, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000000c0)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x4, 0x10000) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x80984120, &(0x7f0000000280)) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(0xffffffffffffffff, 0x7b3, &(0x7f0000000340)) syz_open_dev$sndctrl(&(0x7f0000000380), 0x7, 0x141000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4000001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000000600)={0x0}}, 0x20000010) timer_create(0x3, &(0x7f0000000680)={0x0, 0x22, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000006c0)=0x0) timer_settime(r5, 0x0, &(0x7f0000000700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000740)) timer_delete(r5) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x24008004}, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000a00)=0xe8) getgroups(0x5, &(0x7f0000000a40)=[0xee01, 0xee00, 0xffffffffffffffff, 0xee00, 0x0]) getgroups(0x5, &(0x7f0000000a80)=[0x0, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01]) setxattr$system_posix_acl(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='system.posix_acl_access\x00', &(0x7f0000000ac0)={{}, {0x1, 0x1}, [{0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x1, r6}], {0x4, 0x3}, [{0x8, 0x4, r7}, {0x8, 0x2, r8}], {0x10, 0x1}, {0x20, 0x2}}, 0x44, 0x1) fcntl$getownex(r2, 0x10, &(0x7f0000000d80)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000dc0)={0x0, 0x0}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000e40)={'\x00', 0x6, 0x7, 0x2, 0x81, 0x400, 0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000ec0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000f00)={0x7, 0x4, {0x0}, {r6}, 0x6121, 0x6e0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000f40)={0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000fc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_clone3(&(0x7f0000003080)={0x0, &(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0), {0x4}, &(0x7f0000000c00)=""/152, 0x98, &(0x7f0000000cc0)=""/138, &(0x7f0000003000)=[0xffffffffffffffff, r9, r10, r11, 0xffffffffffffffff, r12, r13, r14, r15], 0x9}, 0x58) 19m10.664608804s ago: executing program 33 (id=3226): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x3, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000000c0)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x4, 0x10000) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x80984120, &(0x7f0000000280)) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(0xffffffffffffffff, 0x7b3, &(0x7f0000000340)) syz_open_dev$sndctrl(&(0x7f0000000380), 0x7, 0x141000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4000001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000000600)={0x0}}, 0x20000010) timer_create(0x3, &(0x7f0000000680)={0x0, 0x22, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000006c0)=0x0) timer_settime(r5, 0x0, &(0x7f0000000700)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000740)) timer_delete(r5) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x24008004}, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000a00)=0xe8) getgroups(0x5, &(0x7f0000000a40)=[0xee01, 0xee00, 0xffffffffffffffff, 0xee00, 0x0]) getgroups(0x5, &(0x7f0000000a80)=[0x0, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01]) setxattr$system_posix_acl(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='system.posix_acl_access\x00', &(0x7f0000000ac0)={{}, {0x1, 0x1}, [{0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x1, r6}], {0x4, 0x3}, [{0x8, 0x4, r7}, {0x8, 0x2, r8}], {0x10, 0x1}, {0x20, 0x2}}, 0x44, 0x1) fcntl$getownex(r2, 0x10, &(0x7f0000000d80)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000dc0)={0x0, 0x0}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000e40)={'\x00', 0x6, 0x7, 0x2, 0x81, 0x400, 0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000ec0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000f00)={0x7, 0x4, {0x0}, {r6}, 0x6121, 0x6e0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000f40)={0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000fc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_clone3(&(0x7f0000003080)={0x0, &(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0), {0x4}, &(0x7f0000000c00)=""/152, 0x98, &(0x7f0000000cc0)=""/138, &(0x7f0000003000)=[0xffffffffffffffff, r9, r10, r11, 0xffffffffffffffff, r12, r13, r14, r15], 0x9}, 0x58) 18m42.112118683s ago: executing program 5 (id=3313): symlink(0x0, &(0x7f00000000c0)='./file0\x00') syz_open_dev$video4linux(&(0x7f0000001600), 0x5, 0xe0c61) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b00010065727370606e000008000280f2040012000a"], 0x44}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="ff0700"/20, @ANYRES32, @ANYBLOB="000000fb6fd3a019621ef3"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x14, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) 18m41.106788114s ago: executing program 5 (id=3318): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x194, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x158, 0x2, [@TCA_BPF_ACT={0xbc, 0x1, [@m_gact={0xb8, 0xb, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x0, 0xd, 0x6d4c}}]}, {0x71, 0x6, "3532565adeea82a6d355b04e82cf0d976e9e3d561f7832a2553c4393a1a4d9d755a3ca015b8308cae8430cb3ee720daf513b7d09d45af79089af4ca0f7ae568b98646f301384cfe6ba628a461810b458401b48d92b11c4b84c4fc318de1f6827de4e78cdbcf73ddf84c9950303"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file1\x00'}, @TCA_BPF_ACT={0x8c, 0x1, [@m_tunnel_key={0x88, 0x5, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 18m39.950889897s ago: executing program 5 (id=3321): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea443000905", @ANYRES64], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000180)=0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 18m37.71413212s ago: executing program 5 (id=3326): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x31}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) fcntl$setlease(r4, 0x400, 0x3) syz_usb_connect(0x2, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="120110012cae9308da040d39dffa0102030109022d0001c94080010904f90403c0da26ff0905f10f40"], 0x0) 18m34.346969447s ago: executing program 5 (id=3334): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000000c0)={0x0, 'veth1_virt_wifi\x00', {0x3}, 0x6}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_clone3(&(0x7f0000000380)={0x200000000, &(0x7f0000000340), &(0x7f0000000080), 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x17, 0x0, 0x1, 0x7, 0x6, @local}, 0x14) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r4}, 0x14) bind$packet(r3, &(0x7f0000000240)={0x11, 0xf5, r4, 0x1, 0xc1, 0x6, @random="9936ab584319"}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x40, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x40}}, 0x400c8a4) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r8 = eventfd2(0x1, 0x1) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000004600)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000080)={0x0, r8}) 18m32.328329095s ago: executing program 5 (id=3339): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff2}, 0x48) (async) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @hyper}, 0x10) (async) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) pipe(&(0x7f0000000140)) (async) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000240)={0x0, 0xffffffff, 0x0, 0x2, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r5, 0x742f, 0x77ae, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r9, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) (async) timer_getoverrun(r9) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r11, 0x4068aea3, &(0x7f0000000000)={0xb6, 0x0, 0xe}) socket$netlink(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) r12 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x141484, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r12, 0x8004500f, &(0x7f0000000080)) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[], 0xe) (async) r13 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x181040, 0x0) read(r13, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r13) 18m16.604820931s ago: executing program 34 (id=3339): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff2}, 0x48) (async) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @hyper}, 0x10) (async) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) pipe(&(0x7f0000000140)) (async) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000240)={0x0, 0xffffffff, 0x0, 0x2, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r5, 0x742f, 0x77ae, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r9, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) (async) timer_getoverrun(r9) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r11, 0x4068aea3, &(0x7f0000000000)={0xb6, 0x0, 0xe}) socket$netlink(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) r12 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x141484, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r12, 0x8004500f, &(0x7f0000000080)) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[], 0xe) (async) r13 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x181040, 0x0) read(r13, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r13) 8m47.179071987s ago: executing program 6 (id=6193): creat(&(0x7f0000000000)='./file0\x00', 0x14e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x1, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}}, 0x44080) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) dup2(r4, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x20, 0x25dfdbff, {0x60, 0x0, 0x0, r7, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5468dfdb}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000805}, 0x10) r8 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x7, 0xe8, 0x6}, 0x10) write(r8, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000040000d5e8"], 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r10) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r10, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000010003904000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0000c951c13100ef610012800b000100697036746e6c0000d0f9b3df8b725d6a5b7b56fd130e2c000280140003002001000000000000000000000000000114000200ff01000000000000bd00000000000001"], 0x5c}}, 0x0) 8m46.26459085s ago: executing program 6 (id=6198): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1a4, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x168, 0x2, [@TCA_BPF_ACT={0xa0, 0x1, [@m_gact={0x9c, 0xb, 0x0, 0x0, {{0x9}, {0x4}, {0x6d, 0x6, "3532565adeea82a6d355b04e82cf0d976e9e3d561f7832a2553c4393a1a4d9d755a3ca015b8308cae8430cb3ee720daf513b7d09d45af79089af4ca0f7ae568b98646f301384cfe6ba628a461810b458401b48d92b11c4b84c4fc318de1f6827de4e78cdbcf73ddf84"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file1\x00'}, @TCA_BPF_ACT={0xac, 0x1, [@m_tunnel_key={0x74, 0x5, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x34, 0xc05, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 8m46.063507485s ago: executing program 6 (id=6200): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x138, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xfc, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_gact={0x30, 0xb, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file1\x00'}, @TCA_BPF_ACT={0xac, 0x1, [@m_tunnel_key={0x74, 0x5, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x34, 0xc05, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 8m45.984139009s ago: executing program 6 (id=6201): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2a450ca, 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') (fail_nth: 1) 8m45.963695046s ago: executing program 6 (id=6202): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000500)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x83}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040eec9e2720"], 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x820056, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = socket(0x2d, 0x2, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x80}, 0xa, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4002011}, 0x20048041) chdir(0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000300)) open(&(0x7f0000000040)='./file2\x00', 0x84242, 0x1df2a23c5997fad6) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) 8m45.501412738s ago: executing program 6 (id=6204): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000440)={0x3, 0x2, 'client0\x00', 0x5, "9e42dfe14b826563", "0cdf699368f720ea1e06a9099746e0556d41ce48be062c9a1cb8ded15e7a5b32", 0x1}) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) fanotify_init(0xf00, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 8m45.298712119s ago: executing program 35 (id=6204): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000440)={0x3, 0x2, 'client0\x00', 0x5, "9e42dfe14b826563", "0cdf699368f720ea1e06a9099746e0556d41ce48be062c9a1cb8ded15e7a5b32", 0x1}) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) fanotify_init(0xf00, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 12.793938488s ago: executing program 3 (id=7631): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e040128000000000001090224000100000000090401000103000000092100000001220700090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000440)={0x3, 0x2, 'client0\x00', 0x5, "9e42dfe14b826563", "0cdf699368f720ea1e06a9099746e0556d41ce48be062c9a1cb8ded15e7a5b32", 0x1}) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00!\'\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 9.353197289s ago: executing program 2 (id=7640): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x3) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4ad, 0x3180, 0x8001, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f0000000180)='B', 0x1, 0x1, 0x9, 0x8000000000000000}}, 0x1) r2 = io_uring_setup(0x4346, &(0x7f0000000240)={0x0, 0x5cbd, 0x1000, 0x3, 0x7d, 0x0, r1}) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) syz_emit_ethernet(0x43, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0x0, 0x4, [0x714, 0x252, 0x65a, 0x111]}) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000300), &(0x7f0000000440)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = syz_io_uring_setup(0x5434, &(0x7f0000009600)={0x0, 0x98bd, 0x2000, 0x1, 0x1d7, 0x0, r1}, &(0x7f0000009680), &(0x7f00000096c0), &(0x7f0000009700)) io_uring_register$IORING_REGISTER_CLOCK(r7, 0x1d, &(0x7f0000009740)={0x2}, 0x0) recvmmsg(r5, &(0x7f0000009200)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000001700)=[{&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f00000005c0)=""/13, 0xd}, {&(0x7f0000000600)=""/155, 0x9b}, {&(0x7f00000006c0)=""/34, 0x22}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x5, &(0x7f0000001780)=""/194, 0xc2}, 0x4}, {{&(0x7f0000001880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001900)=""/195, 0xc3}, {&(0x7f0000001a00)=""/169, 0xa9}, {&(0x7f0000009780)=""/96, 0x60}, {&(0x7f0000001b40)=""/111, 0x6f}, {&(0x7f0000001bc0)=""/252, 0xfc}, {&(0x7f0000001cc0)=""/238, 0xee}, {&(0x7f0000001dc0)=""/53, 0x35}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x8, &(0x7f0000002e80)=""/24, 0x18}}, {{&(0x7f0000002ec0)=@ax25={{0x3, @rose}, [@bcast, @netrom, @default, @bcast, @netrom, @remote, @rose]}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002f40)=""/224, 0xe0}, {&(0x7f0000003040)=""/164, 0xa4}, {&(0x7f0000003100)=""/57, 0x39}, {&(0x7f0000003140)=""/16, 0x10}, {&(0x7f0000003180)=""/104, 0x68}, {&(0x7f0000003200)=""/125, 0x7d}], 0x6, &(0x7f0000003300)=""/179, 0xb3}, 0x8}, {{&(0x7f00000033c0)=@xdp, 0x80, &(0x7f0000004540)=[{&(0x7f0000003440)=""/206, 0xce}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x2, &(0x7f0000004580)=""/4096, 0x1000}, 0x18f14aa8}, {{0x0, 0x0, &(0x7f00000057c0)=[{&(0x7f0000005580)=""/145, 0x91}, {&(0x7f0000005640)=""/209, 0xd1}, {&(0x7f0000005740)=""/44, 0x2c}, {&(0x7f0000005780)=""/22, 0x16}], 0x4, &(0x7f0000005800)=""/45, 0x2d}, 0x10}, {{&(0x7f0000005840)=@x25, 0x80, &(0x7f0000005b00)=[{&(0x7f00000058c0)=""/69, 0x45}, {&(0x7f0000005940)=""/121, 0x79}, {&(0x7f00000059c0)=""/78, 0x4e}, {&(0x7f0000005a40)=""/187, 0xbb}], 0x4, &(0x7f0000005b40)=""/181, 0xb5}, 0x3}, {{&(0x7f0000005d80)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000006000)=[{&(0x7f0000005e00)=""/140, 0x8c}, {&(0x7f0000005ec0)=""/226, 0xe2}, {&(0x7f0000005fc0)=""/40, 0x28}], 0x3, &(0x7f0000006040)=""/195, 0xc3}, 0x100}, {{&(0x7f0000006140)=@sco, 0x80, &(0x7f0000007380)=[{&(0x7f00000061c0)=""/192, 0xc0}, {&(0x7f0000006280)=""/4096, 0x1000}, {&(0x7f0000007280)=""/221, 0xdd}], 0x3, &(0x7f00000073c0)=""/7, 0x7}, 0x6}, {{&(0x7f0000007400)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000075c0)=[{&(0x7f0000007480)=""/58, 0x3a}, {&(0x7f00000074c0)=""/56, 0x38}, {&(0x7f0000007500)=""/139, 0x8b}], 0x3, &(0x7f0000007600)=""/158, 0x9e}, 0xd}, {{&(0x7f00000076c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000098c0)=[{&(0x7f0000007740)=""/4096, 0x1000}, {&(0x7f0000009800)=""/81, 0x51}, {&(0x7f0000009880)=""/26, 0x1a}], 0x3, &(0x7f0000008780)=""/41, 0x29}, 0x3b}, {{&(0x7f00000087c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, 0x80, &(0x7f0000008880), 0x0, &(0x7f00000088c0)=""/34, 0x22}, 0xffffffff}, {{&(0x7f0000008900)=@can, 0x80, &(0x7f0000008f40)=[{&(0x7f0000008980)=""/205, 0xcd}, {&(0x7f0000008a80)=""/245, 0xf5}, {&(0x7f0000008b80)=""/185, 0xb9}, {0xfffffffffffffffe}, {&(0x7f0000008d00)=""/223, 0xdf}, {&(0x7f0000008e00)=""/5, 0x5}], 0x6, &(0x7f0000008fc0)=""/22, 0x16}, 0x9}, {{&(0x7f0000009000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000009100)=[{&(0x7f0000009080)=""/6, 0x6}, {&(0x7f00000090c0)=""/5, 0x5}], 0x2, &(0x7f0000009140)=""/189, 0xbd}, 0x3}], 0xd, 0x40002101, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) sendmsg$nl_route(r8, &(0x7f00000095c0)={&(0x7f0000005d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000009580)={&(0x7f0000009540)=ANY=[@ANYBLOB="300000006900000428bd7000250000000000000000080001000200000700000100000000000800010001000000"], 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './cgroup\x00'}) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="59cf27bd700001000000080000"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000001ac0)='pstore\x00', 0x8004, 0x0) 9.103331285s ago: executing program 2 (id=7642): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) r2 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40f, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, 0x0) 8.433113493s ago: executing program 3 (id=7643): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="071101000000f3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/igmp\x00') pread64(r7, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000ce5038ff0000000000000000bbfe8000000000000000000500000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x8, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) socket$phonet(0x23, 0x2, 0x1) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x6, &(0x7f00000000c0)={0x18, "d6c1f7b51020c4b7194bf28facb1ed3ee2df5452b3b94bce47509d000000000008"}}) 7.44449512s ago: executing program 8 (id=7644): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x4c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) 6.781540996s ago: executing program 8 (id=7647): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8083) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r7 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r7}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fda={0x66646185, 0x4, 0x1, 0x34}, @ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/255, 0xff, 0x1, 0x11}}, &(0x7f0000000680)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) pwritev2(r9, &(0x7f0000000700)=[{&(0x7f00000004c0)="d83b", 0x2}], 0x1, 0xc401, 0x4c19, 0x1) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 6.382514907s ago: executing program 7 (id=7648): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(&(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x1800002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r3, 0x407, 0x2) fcntl$setpipe(r3, 0x407, 0x2000000) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000019080)={0x1, 0x0, {0x1, 0x0, 0x300a, 0x8, 0x9, 0x8}}) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000000)='./bus\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x5760, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 5.468133138s ago: executing program 2 (id=7651): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r2 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x0) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f00000000c0)=[{0x9, '\x00', @st={0x4, [{0x2, @svalue=0x3}, {0x3, @uvalue=0x4e}, {0x0, @svalue=0x8}, {0x2, @svalue=0xcb1a}]}}]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, 0x0, 0x4040894) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[], 0x20) syz_usb_connect(0x0, 0x2d, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e000905", @ANYBLOB="620bbee78c9720adaa7deabc3e431a46a11bff6c454d1ac059fef23921caaeb05f93c60ae3d48a01436883afaaaf760b7546c24e17ffdf95be3c7e38cbd5"], 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) 5.385569698s ago: executing program 3 (id=7652): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x3) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4ad, 0x3180, 0x8001, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f0000000180)='B', 0x1, 0x1, 0x9, 0x8000000000000000}}, 0x1) r2 = io_uring_setup(0x4346, &(0x7f0000000240)={0x0, 0x5cbd, 0x1000, 0x3, 0x7d, 0x0, r1}) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) syz_emit_ethernet(0x43, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0x0, 0x4, [0x714, 0x252, 0x65a, 0x111]}) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000300), &(0x7f0000000440)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = syz_io_uring_setup(0x5434, &(0x7f0000009600)={0x0, 0x98bd, 0x2000, 0x1, 0x1d7, 0x0, r1}, &(0x7f0000009680), &(0x7f00000096c0), &(0x7f0000009700)) io_uring_register$IORING_REGISTER_CLOCK(r7, 0x1d, &(0x7f0000009740)={0x2}, 0x0) recvmmsg(r5, &(0x7f0000009200)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000001700)=[{&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f00000005c0)=""/13, 0xd}, {&(0x7f0000000600)=""/155, 0x9b}, {&(0x7f00000006c0)=""/34, 0x22}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x5, &(0x7f0000001780)=""/194, 0xc2}, 0x4}, {{&(0x7f0000001880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001900)=""/195, 0xc3}, {&(0x7f0000001a00)=""/169, 0xa9}, {&(0x7f0000009780)=""/96, 0x60}, {&(0x7f0000001b40)=""/111, 0x6f}, {&(0x7f0000001bc0)=""/252, 0xfc}, {&(0x7f0000001cc0)=""/238, 0xee}, {&(0x7f0000001dc0)=""/53, 0x35}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x8, &(0x7f0000002e80)=""/24, 0x18}}, {{&(0x7f0000002ec0)=@ax25={{0x3, @rose}, [@bcast, @netrom, @default, @bcast, @netrom, @remote, @rose]}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002f40)=""/224, 0xe0}, {&(0x7f0000003040)=""/164, 0xa4}, {&(0x7f0000003100)=""/57, 0x39}, {&(0x7f0000003140)=""/16, 0x10}, {&(0x7f0000003180)=""/104, 0x68}, {&(0x7f0000003200)=""/125, 0x7d}], 0x6, &(0x7f0000003300)=""/179, 0xb3}, 0x8}, {{&(0x7f00000033c0)=@xdp, 0x80, &(0x7f0000004540)=[{&(0x7f0000003440)=""/206, 0xce}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x2, &(0x7f0000004580)=""/4096, 0x1000}, 0x18f14aa8}, {{0x0, 0x0, &(0x7f00000057c0)=[{&(0x7f0000005580)=""/145, 0x91}, {&(0x7f0000005640)=""/209, 0xd1}, {&(0x7f0000005740)=""/44, 0x2c}, {&(0x7f0000005780)=""/22, 0x16}], 0x4, &(0x7f0000005800)=""/45, 0x2d}, 0x10}, {{&(0x7f0000005840)=@x25, 0x80, &(0x7f0000005b00)=[{&(0x7f00000058c0)=""/69, 0x45}, {&(0x7f0000005940)=""/121, 0x79}, {&(0x7f00000059c0)=""/78, 0x4e}, {&(0x7f0000005a40)=""/187, 0xbb}], 0x4, &(0x7f0000005b40)=""/181, 0xb5}, 0x3}, {{&(0x7f0000005d80)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000006000)=[{&(0x7f0000005e00)=""/140, 0x8c}, {&(0x7f0000005ec0)=""/226, 0xe2}, {&(0x7f0000005fc0)=""/40, 0x28}], 0x3, &(0x7f0000006040)=""/195, 0xc3}, 0x100}, {{&(0x7f0000006140)=@sco, 0x80, &(0x7f0000007380)=[{&(0x7f00000061c0)=""/192, 0xc0}, {&(0x7f0000006280)=""/4096, 0x1000}, {&(0x7f0000007280)=""/221, 0xdd}], 0x3, &(0x7f00000073c0)=""/7, 0x7}, 0x6}, {{&(0x7f0000007400)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000075c0)=[{&(0x7f0000007480)=""/58, 0x3a}, {&(0x7f00000074c0)=""/56, 0x38}, {&(0x7f0000007500)=""/139, 0x8b}], 0x3, &(0x7f0000007600)=""/158, 0x9e}, 0xd}, {{&(0x7f00000076c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000098c0)=[{&(0x7f0000007740)=""/4096, 0x1000}, {&(0x7f0000009800)=""/81, 0x51}, {&(0x7f0000009880)=""/26, 0x1a}], 0x3, &(0x7f0000008780)=""/41, 0x29}, 0x3b}, {{&(0x7f00000087c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, 0x80, &(0x7f0000008880), 0x0, &(0x7f00000088c0)=""/34, 0x22}, 0xffffffff}, {{&(0x7f0000008900)=@can, 0x80, &(0x7f0000008f40)=[{&(0x7f0000008980)=""/205, 0xcd}, {&(0x7f0000008a80)=""/245, 0xf5}, {&(0x7f0000008b80)=""/185, 0xb9}, {0xfffffffffffffffe}, {&(0x7f0000008d00)=""/223, 0xdf}, {&(0x7f0000008e00)=""/5, 0x5}], 0x6, &(0x7f0000008fc0)=""/22, 0x16}, 0x9}, {{&(0x7f0000009000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000009100)=[{&(0x7f0000009080)=""/6, 0x6}, {&(0x7f00000090c0)=""/5, 0x5}], 0x2, &(0x7f0000009140)=""/189, 0xbd}, 0x3}], 0xd, 0x40002101, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) sendmsg$nl_route(r8, &(0x7f00000095c0)={&(0x7f0000005d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000009580)={&(0x7f0000009540)=ANY=[@ANYBLOB="300000006900000428bd7000250000000000000000080001000200000700000100000000000800010001000000"], 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './cgroup\x00'}) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="59cf27bd700001000000080000"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000001ac0)='pstore\x00', 0x8004, 0x0) 4.923941038s ago: executing program 0 (id=7654): mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 4.898165438s ago: executing program 7 (id=7655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 4.87447738s ago: executing program 0 (id=7656): pipe(&(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = semget$private(0x0, 0x4, 0x5c3) semop(r2, &(0x7f0000000180)=[{0x2, 0x203}, {}], 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x250, 0x700001b, 0x148, 0x0, 0x148, 0x350, 0x206, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'macvlan1\x00', {0xff}, {}, 0xff84}, 0x1ea, 0x1e8, 0x250, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0\x00', {0xff}, 'vxcan1\x00', {0xff}, 0x9}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x4c144) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) clock_gettime(0x0, &(0x7f0000003e00)={0x0, 0x0}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x80800}, 0x28) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="0200000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r12}, 0x4) recvmmsg(r7, &(0x7f0000003c80), 0x0, 0x40010100, &(0x7f0000003e40)={r9, r10+60000000}) 4.659872656s ago: executing program 7 (id=7657): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x4c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) 3.705507942s ago: executing program 0 (id=7658): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) io_setup(0x2278, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 3.573254878s ago: executing program 3 (id=7659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r2 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x92, 0x4}, 0x18) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="c0020000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000740208809c000080500009804c000080060001000200000008000200ac1414aa0500030002000000060001000200000008000200e00000020500030001000000060001000200000008000200e0000001050003000100000024000100975c9d81c883c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000200eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db7174c00008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff24000200491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c8801008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922200004000a000009000000070000000000000000000000000000000003000000400109801c00008006000100020000000800020000000000050003000300000028000080060001000a00000014000200fe88000000000000000000000000000105000300000000001c000080060001000200000008000200ac1e0001050003000000000058000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200ac1e010105000300020000000600010002000000080002007f000001050003000300000058000080060001000200000008000200e00000010500030000000000060001000200000008000200ffffffff0500030003000000060001000a0000001c000200fe8000000000000000000000000000aa050003000100000028000080060001000a00000014000200ff01000000000077020000000000000105000300020000000400008024000300b08073e8d44e99e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e140002"], 0x2c0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) 3.434106641s ago: executing program 0 (id=7660): set_mempolicy(0x4005, 0x0, 0x8) r0 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 3.433573951s ago: executing program 7 (id=7661): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 3.360846805s ago: executing program 3 (id=7662): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="071101000000f3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/igmp\x00') pread64(r7, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000ce5038ff0000000000000000bbfe8000000000000000000500000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x8, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) socket$phonet(0x23, 0x2, 0x1) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x6, &(0x7f00000000c0)={0x18, "d6c1f7b51020c4b7194bf28facb1ed3ee2df5452b3b94bce47509d000000000008"}}) 3.359795342s ago: executing program 0 (id=7663): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r0, 0x4068aea3, &(0x7f0000000400)={0xdb, 0x0, 0x6}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, 0x0, 0x3, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x7f) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x200082) pipe(&(0x7f0000000500)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES16=r4], 0x28}}, 0x802) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000380)=0x1) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="402197fdc4bc693d7c852a3f8b40ca97bb831536546dc3ee21d29b5517c05b589b91c29b7496247792f9709dfcda7ce5a3def5560f8be9578c"], &(0x7f00000000c0)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "43e42cec384990335f0f8dd0924493450d42a05f1e64a1c814f46b886fa8ec071d7606a1dd99ec89a0705fb32db7f732c2a26e91a94df9c6dedcdcbc97d6cb0b7577838e9e0d0281ab007a7ab6dbc9eba2ddc1d7b83bca04d319b9ba73cc53bb74877c5bacd921707101c6a751c0f0444b1efcc457130d776b7ba4bf43d08ad9deffc54aa82d2bf09dd0b58b397144cd11142811772740ecbd370b8b9baced150f67961b4c0b5bcf51886a66a6a09f66e72a813ac441bdf459478f2d2d935a782889680479abc72080bd74cfe1b805f0b6a27060322ebda47aeb5a8f13704a9ad7"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="9952aa4f0022070000000080ab0b30691f46cbc0d81ee6f3709dce5a4ecac7c2f173"], &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd, 0x4, 0x1, {0x22, 0x658}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000280)={0x40, 0x0, 0x79, "c45c988e79a598c5161a309fc9b12186ffb790d2590ea55f35d9a90bd2b253f1108c87c7091539b925b6d160511b4bcd76f513127196c66910f89d1b3b361e6f88b137e51fcc0a65e0346b48abe83afd4f41b0f3e19c277d276673b7b78849864199cf5519779bcfae97ca6a6e1aff114715b2b24d42c3fcc5"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000600)=ANY=[@ANYBLOB="20f1c1a59a00e67c095d221abf1e854c3eefaabc18ca01d5cc9e322902e90233055e91450661a5213c73de49de4fd6725ce323ed9e68980fbc8eeab3fc90316f0ae48e3bea63b00c082ca4b921dc782f5b9fa3a39d97c0d305149cde18561a265d11fa418e6c3edc5db3455bf816c03a89e6474a66a3a5b69e2047c0798be103b4dc79b869999cbce6d56126ef3eff2ea146d09920b534203c410d5b3b92c2993a4e1d607c9c33b14f65b4ea1f3036c5a73376615371b3b3415ec9ec84c55e30e45fdf128437b47190fb673225ec09a4abde0a76a5283e87fc65f6ef80a5cafcd8a0313011e41e858be92044064250734fdd27415ab15808f49744e425f5c9fdeaf200000000"], &(0x7f0000000500)={0x20, 0x3, 0x1, 0xb}}) socket$nl_route(0x10, 0x3, 0x0) 3.335294423s ago: executing program 7 (id=7664): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000340)={0x2, 0x10000005, 0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) (async) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000080)={0xa, 0x2000002, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000280)={0x6, 0x403, 0x8001}) (async) r9 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x6, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r5, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000040)={0x4, 0x2, 0xffff}) 3.224203802s ago: executing program 8 (id=7665): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) io_setup(0x2278, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 3.035767305s ago: executing program 8 (id=7666): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(&(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x1800002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r3, 0x407, 0x2) fcntl$setpipe(r3, 0x407, 0x2000000) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000019080)={0x1, 0x0, {0x1, 0x0, 0x300a, 0x8, 0x9, 0x8}}) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000000)='./bus\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x5760, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 2.896078705s ago: executing program 7 (id=7667): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="071101000000f3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000ce5038ff0000000000000000bbfe8000000000000000000500000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x8, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) socket$phonet(0x23, 0x2, 0x1) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 2.845697512s ago: executing program 2 (id=7668): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x8001) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r4, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x4c944}], 0x1, 0x40840) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000100)) (fail_nth: 3) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r5 = socket$inet_sctp(0x2, 0x5, 0x84) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0) 2.744870882s ago: executing program 2 (id=7669): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x3) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4ad, 0x3180, 0x8001, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f0000000180)='B', 0x1, 0x1, 0x9, 0x8000000000000000}}, 0x1) r2 = io_uring_setup(0x4346, &(0x7f0000000240)={0x0, 0x5cbd, 0x1000, 0x3, 0x7d, 0x0, r1}) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) syz_emit_ethernet(0x43, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0x0, 0x4, [0x714, 0x252, 0x65a, 0x111]}) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000300), &(0x7f0000000440)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = syz_io_uring_setup(0x5434, &(0x7f0000009600)={0x0, 0x98bd, 0x2000, 0x1, 0x1d7, 0x0, r1}, &(0x7f0000009680), &(0x7f00000096c0), &(0x7f0000009700)) io_uring_register$IORING_REGISTER_CLOCK(r7, 0x1d, &(0x7f0000009740)={0x2}, 0x0) recvmmsg(r5, &(0x7f0000009200)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000001700)=[{&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f00000005c0)=""/13, 0xd}, {&(0x7f0000000600)=""/155, 0x9b}, {&(0x7f00000006c0)=""/34, 0x22}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x5, &(0x7f0000001780)=""/194, 0xc2}, 0x4}, {{&(0x7f0000001880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001900)=""/195, 0xc3}, {&(0x7f0000001a00)=""/169, 0xa9}, {&(0x7f0000009780)=""/96, 0x60}, {&(0x7f0000001b40)=""/111, 0x6f}, {&(0x7f0000001bc0)=""/252, 0xfc}, {&(0x7f0000001cc0)=""/238, 0xee}, {&(0x7f0000001dc0)=""/53, 0x35}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x8, &(0x7f0000002e80)=""/24, 0x18}}, {{&(0x7f0000002ec0)=@ax25={{0x3, @rose}, [@bcast, @netrom, @default, @bcast, @netrom, @remote, @rose]}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002f40)=""/224, 0xe0}, {&(0x7f0000003040)=""/164, 0xa4}, {&(0x7f0000003100)=""/57, 0x39}, {&(0x7f0000003140)=""/16, 0x10}, {&(0x7f0000003180)=""/104, 0x68}, {&(0x7f0000003200)=""/125, 0x7d}], 0x6, &(0x7f0000003300)=""/179, 0xb3}, 0x8}, {{&(0x7f00000033c0)=@xdp, 0x80, &(0x7f0000004540)=[{&(0x7f0000003440)=""/206, 0xce}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x2, &(0x7f0000004580)=""/4096, 0x1000}, 0x18f14aa8}, {{0x0, 0x0, &(0x7f00000057c0)=[{&(0x7f0000005580)=""/145, 0x91}, {&(0x7f0000005640)=""/209, 0xd1}, {&(0x7f0000005740)=""/44, 0x2c}, {&(0x7f0000005780)=""/22, 0x16}], 0x4, &(0x7f0000005800)=""/45, 0x2d}, 0x10}, {{&(0x7f0000005840)=@x25, 0x80, &(0x7f0000005b00)=[{&(0x7f00000058c0)=""/69, 0x45}, {&(0x7f0000005940)=""/121, 0x79}, {&(0x7f00000059c0)=""/78, 0x4e}, {&(0x7f0000005a40)=""/187, 0xbb}], 0x4, &(0x7f0000005b40)=""/181, 0xb5}, 0x3}, {{&(0x7f0000005d80)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000006000)=[{&(0x7f0000005e00)=""/140, 0x8c}, {&(0x7f0000005ec0)=""/226, 0xe2}, {&(0x7f0000005fc0)=""/40, 0x28}], 0x3, &(0x7f0000006040)=""/195, 0xc3}, 0x100}, {{&(0x7f0000006140)=@sco, 0x80, &(0x7f0000007380)=[{&(0x7f00000061c0)=""/192, 0xc0}, {&(0x7f0000006280)=""/4096, 0x1000}, {&(0x7f0000007280)=""/221, 0xdd}], 0x3, &(0x7f00000073c0)=""/7, 0x7}, 0x6}, {{&(0x7f0000007400)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000075c0)=[{&(0x7f0000007480)=""/58, 0x3a}, {&(0x7f00000074c0)=""/56, 0x38}, {&(0x7f0000007500)=""/139, 0x8b}], 0x3, &(0x7f0000007600)=""/158, 0x9e}, 0xd}, {{&(0x7f00000076c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000098c0)=[{&(0x7f0000007740)=""/4096, 0x1000}, {&(0x7f0000009800)=""/81, 0x51}, {&(0x7f0000009880)=""/26, 0x1a}], 0x3, &(0x7f0000008780)=""/41, 0x29}, 0x3b}, {{&(0x7f00000087c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, 0x80, &(0x7f0000008880)=[{0x0}], 0x1, &(0x7f00000088c0)=""/34, 0x22}, 0xffffffff}, {{&(0x7f0000008900)=@can, 0x80, &(0x7f0000008f40)=[{&(0x7f0000008980)=""/205, 0xcd}, {&(0x7f0000008a80)=""/245, 0xf5}, {&(0x7f0000008b80)=""/185, 0xb9}, {0xfffffffffffffffe}, {&(0x7f0000008d00)=""/223, 0xdf}, {&(0x7f0000008e00)=""/5, 0x5}], 0x6, &(0x7f0000008fc0)=""/22, 0x16}, 0x9}, {{&(0x7f0000009000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000009100)=[{&(0x7f0000009080)=""/6, 0x6}, {&(0x7f00000090c0)=""/5, 0x5}], 0x2, &(0x7f0000009140)=""/189, 0xbd}, 0x3}], 0xd, 0x40002101, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) sendmsg$nl_route(r8, &(0x7f00000095c0)={&(0x7f0000005d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000009580)={&(0x7f0000009540)=ANY=[@ANYBLOB="300000006900000428bd7000250000000000000000080001000200000700000100000000000800010001000000"], 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './cgroup\x00'}) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="59cf27bd700001000000080000"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000001ac0)='pstore\x00', 0x8004, 0x0) 2.437789084s ago: executing program 2 (id=7670): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="071101000000f3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000ce5038ff0000000000000000bbfe8000000000000000000500000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x8, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) socket$phonet(0x23, 0x2, 0x1) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 896.178046ms ago: executing program 8 (id=7671): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) io_setup(0x2278, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 802.721419ms ago: executing program 8 (id=7672): syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000000)="01fe000200373a4541062000a59ea940d2cb0b3692f5020000a00000050000000000eb000000a5e5be21c44e", 0x2c, 0xffffffffffffffff) write$UHID_INPUT(r1, &(0x7f0000002140)={0xf, {"a2e3ad214fc752f91b500e0f30f70e06d038e7ff7fc6e5539b3275078b089b3b08385d090890e0878f0e1ac6e7049b3d6d959bffe8d178708c523c921b1b5b31300d3b5d0736cd3b78130baa61d8e809fc889b0709b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b906000000783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51015f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ff33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f761f13a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a99cc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000029566e78000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebbd633500", 0x1000}}, 0x1006) 578.22603ms ago: executing program 3 (id=7673): symlink(0x0, &(0x7f00000000c0)='./file0\x00') syz_open_dev$video4linux(&(0x7f0000001600), 0x5, 0xe0c61) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b00010065727370606e000008000280f2040012000a"], 0x44}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e0000000400000008", @ANYRES32, @ANYBLOB="ff0700"/20, @ANYRES32, @ANYBLOB="000000fb6fd3a019621ef3"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x14, &(0x7f0000000600)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 0s ago: executing program 0 (id=7674): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x8, 0x98, {0x98, 0x28, "258057f5966e80a13742bd28cc843df3b9c689b315974ef4c304a46a0287a2fb3e73b890e87766297a6346d549cb67f78b08fe8fa03c302b905c5433fba7478ab031fff902c5fee0e30e4404f244bca88e2c4fa444859b1a913b473a5735c203992f38d507f7f2ea90cb924b6957a68c6d2a35fd69b3dc70657a4dfde68ed68a63ac7062666f2f407ceb3be9c799693fc8e90cd13c73"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x20, 0xe, 0x97, "c0aa68ba30bf5b26ffcde0ee4563e8712bd80cffd4ed1c197e0889e0da0438690188ef341354bae99b63d99eb8d1d77c92a5a1e1e83d5402eb7ad305082fe7c9611e24d916a0cab9cd0a6022dbe153332e90abb05cbb8f1f6db527d8355888baeaf265f92cb7e52ed0f4f996b4bc39410abf3fb062fb30c025b4bab552688c6be456232eda236f75aa364ffe9e1c092f5f87aa3eed7b97"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xdf}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0xc0, 0x5, 0x3, "18d59d"}, &(0x7f00000003c0)={0x40, 0x5, 0x3, "622bb7"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000200)={0x0, 0x18, 0x3, "ea9824"}, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000180)={0x34, &(0x7f00000004c0)={0x40, 0xe, 0x6b, "77d4c9cf0f09f6ff0fe3c10aacf0f67c477370cfb8de4812ff839f79db6fa0c6c25869af8e3752bbfbcd9f9c38ae78d75c9295600103be060bbb874e9b182eddd018ade8c47424a2f941fa8c16c1719a4295e0008d21954e1a9e6dd76b8cfe8c0a9e35be25d54ec27b56ee"}, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 63] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1714.397298][ T63] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1714.397507][ T63] usb 8-1: can't read configurations, error -71 [ 1714.774582][T27346] team0: Port device team_slave_1 added [ 1714.950691][T27346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1714.950709][T27346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1714.950733][T27346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1714.952963][T27346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1714.952976][T27346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1714.953002][T27346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1715.119741][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1715.189242][T27505] netlink: 'syz.8.7308': attribute type 2 has an invalid length. [ 1715.214476][T21642] Bluetooth: hci5: command 0x0419 tx timeout [ 1715.262140][T27487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7292'. [ 1715.320430][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1715.517207][T27346] hsr_slave_0: entered promiscuous mode [ 1715.518680][T27346] hsr_slave_1: entered promiscuous mode [ 1715.519685][T27346] debugfs: 'hsr0' already exists in 'hsr' [ 1715.519709][T27346] Cannot create hsr debugfs directory [ 1715.564814][ T63] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 1716.400296][ T63] usb 8-1: Using ep0 maxpacket: 8 [ 1716.479939][ T63] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1716.479970][ T63] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.540720][ T63] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1716.540732][ T63] pvrusb2: ********** [ 1716.540737][ T63] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1716.540743][ T63] pvrusb2: Important functionality might not be entirely working. [ 1716.540748][ T63] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1716.540754][ T63] pvrusb2: ********** [ 1716.562233][T27247] usb 4-1: USB disconnect, device number 38 [ 1716.644368][ T5926] usb 9-1: new high-speed USB device number 107 using dummy_hcd [ 1716.768999][ T2366] pvrusb2: Invalid write control endpoint [ 1716.775015][ T56] bridge_slave_1: left allmulticast mode [ 1716.775040][ T56] bridge_slave_1: left promiscuous mode [ 1716.775275][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1716.804327][ T5926] usb 9-1: Using ep0 maxpacket: 8 [ 1716.805206][ T5926] usb 9-1: too many configurations: 34, using maximum allowed: 8 [ 1716.806815][ T5926] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1716.806847][ T5926] usb 9-1: can't read configurations, error -61 [ 1716.995195][ T5926] usb 9-1: new high-speed USB device number 108 using dummy_hcd [ 1717.295737][T21642] Bluetooth: hci5: command 0x0419 tx timeout [ 1717.319645][ T56] bridge_slave_0: left allmulticast mode [ 1717.340029][ T56] bridge_slave_0: left promiscuous mode [ 1717.357556][ T5926] usb 9-1: Using ep0 maxpacket: 8 [ 1717.358237][ T5926] usb 9-1: too many configurations: 34, using maximum allowed: 8 [ 1717.359821][ T5926] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1717.359854][ T5926] usb 9-1: can't read configurations, error -61 [ 1717.360413][ T5926] usb usb9-port1: attempt power cycle [ 1717.413019][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1717.516243][ T2366] pvrusb2: Invalid write control endpoint [ 1717.516259][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1717.516269][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1717.516277][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1717.516288][ T2366] pvrusb2: Device being rendered inoperable [ 1717.526204][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1717.526271][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1717.527703][ T2366] pvrusb2: Attached sub-driver cx25840 [ 1717.527715][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1717.527724][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1717.734445][ T5926] usb 9-1: new high-speed USB device number 109 using dummy_hcd [ 1717.754896][ T5926] usb 9-1: Using ep0 maxpacket: 8 [ 1717.755586][ T5926] usb 9-1: too many configurations: 34, using maximum allowed: 8 [ 1717.757130][ T5926] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1717.757163][ T5926] usb 9-1: can't read configurations, error -61 [ 1717.914369][ T5926] usb 9-1: new high-speed USB device number 110 using dummy_hcd [ 1717.967480][ T5926] usb 9-1: Using ep0 maxpacket: 8 [ 1717.968668][ T5926] usb 9-1: too many configurations: 34, using maximum allowed: 8 [ 1717.970281][ T5926] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1717.970316][ T5926] usb 9-1: can't read configurations, error -61 [ 1717.970819][ T5926] usb usb9-port1: unable to enumerate USB device [ 1718.546945][T18875] usb 8-1: USB disconnect, device number 97 [ 1718.589910][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1718.662550][T27538] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7321'. [ 1719.375459][T21642] Bluetooth: hci5: command 0x0419 tx timeout [ 1719.777000][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1719.865061][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1719.916191][ T56] bond0 (unregistering): Released all slaves [ 1719.921143][ T56] bond1 (unregistering): Released all slaves [ 1719.975088][T27536] bond0: option arp_validate: invalid value (55553) [ 1720.143278][ T56] tipc: Disabling bearer [ 1720.143451][ T56] tipc: Left network mode [ 1720.168955][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1721.424351][ T5809] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 1721.585830][ T5809] usb 8-1: Using ep0 maxpacket: 8 [ 1721.589481][ T5809] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1721.589517][ T5809] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.624491][T14511] usb 9-1: new high-speed USB device number 111 using dummy_hcd [ 1721.683276][ T5809] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1721.683294][ T5809] pvrusb2: ********** [ 1721.683302][ T5809] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1721.683314][ T5809] pvrusb2: Important functionality might not be entirely working. [ 1721.683324][ T5809] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1721.683336][ T5809] pvrusb2: ********** [ 1721.814372][T14511] usb 9-1: Using ep0 maxpacket: 8 [ 1721.816523][T14511] usb 9-1: too many configurations: 34, using maximum allowed: 8 [ 1721.820590][T14511] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1721.820625][T14511] usb 9-1: can't read configurations, error -61 [ 1721.986969][ T2366] pvrusb2: Invalid write control endpoint [ 1722.004509][T14511] usb 9-1: new high-speed USB device number 112 using dummy_hcd [ 1722.110755][ T2366] pvrusb2: Invalid write control endpoint [ 1722.110771][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1722.110781][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1722.110789][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1722.110799][ T2366] pvrusb2: Device being rendered inoperable [ 1722.110870][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1722.110916][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1722.113634][ T2366] pvrusb2: Attached sub-driver cx25840 [ 1722.113647][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1722.113658][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1722.164365][T14511] usb 9-1: Using ep0 maxpacket: 8 [ 1722.165026][T14511] usb 9-1: too many configurations: 34, using maximum allowed: 8 [ 1722.166579][T14511] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1722.166610][T14511] usb 9-1: can't read configurations, error -61 [ 1722.169392][T14511] usb usb9-port1: attempt power cycle [ 1722.374360][T27247] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1722.526979][T27247] usb 4-1: config 248 has an invalid interface number: 20 but max is 1 [ 1722.527009][T27247] usb 4-1: config 248 has an invalid interface number: 76 but max is 1 [ 1722.527033][T27247] usb 4-1: config 248 has no interface number 0 [ 1722.527050][T27247] usb 4-1: config 248 has no interface number 1 [ 1722.527108][T27247] usb 4-1: config 248 interface 20 altsetting 112 has an invalid descriptor for endpoint zero, skipping [ 1722.527140][T27247] usb 4-1: config 248 interface 20 altsetting 112 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1722.527168][T27247] usb 4-1: config 248 interface 20 altsetting 112 has a duplicate endpoint with address 0x2, skipping [ 1722.527192][T27247] usb 4-1: config 248 interface 20 altsetting 112 has an invalid descriptor for endpoint zero, skipping [ 1722.527215][T27247] usb 4-1: config 248 interface 20 altsetting 112 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1722.527256][T27247] usb 4-1: config 248 interface 76 altsetting 201 has an invalid descriptor for endpoint zero, skipping [ 1722.527278][T27247] usb 4-1: config 248 interface 76 altsetting 201 has a duplicate endpoint with address 0x2, skipping [ 1722.527302][T27247] usb 4-1: config 248 interface 76 altsetting 201 endpoint 0xF has invalid maxpacket 544, setting to 64 [ 1722.527330][T27247] usb 4-1: config 248 interface 76 altsetting 201 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1722.527357][T27247] usb 4-1: config 248 interface 76 altsetting 201 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1722.527384][T27247] usb 4-1: config 248 interface 76 altsetting 201 has a duplicate endpoint with address 0xF, skipping [ 1722.527407][T27247] usb 4-1: config 248 interface 76 altsetting 201 has a duplicate endpoint with address 0x4, skipping [ 1722.527430][T27247] usb 4-1: config 248 interface 76 altsetting 201 has a duplicate endpoint with address 0x3, skipping [ 1722.527453][T27247] usb 4-1: config 248 interface 76 altsetting 201 has a duplicate endpoint with address 0xA, skipping [ 1722.527476][T27247] usb 4-1: config 248 interface 76 altsetting 201 endpoint 0xE has invalid maxpacket 528, setting to 64 [ 1722.527504][T27247] usb 4-1: config 248 interface 76 altsetting 201 endpoint 0xC has an invalid bInterval 133, changing to 4 [ 1722.527530][T27247] usb 4-1: config 248 interface 76 altsetting 201 endpoint 0xC has invalid maxpacket 1024, setting to 1023 [ 1722.527557][T27247] usb 4-1: config 248 interface 76 altsetting 201 has a duplicate endpoint with address 0xE, skipping [ 1722.527580][T27247] usb 4-1: config 248 interface 20 has no altsetting 0 [ 1722.527599][T27247] usb 4-1: config 248 interface 76 has no altsetting 0 [ 1722.530926][T27247] usb 4-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=4d.8b [ 1722.530954][T27247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.530975][T27247] usb 4-1: Product: 崎᩷痢脝ࠝ︤⭘쌺隣翷੹ﳜጳ樓牕㪏蒅敋묐鵾퓴骕䐝简窦슲뵵߯᯺哱얬縹ᘙö矫ፘ子쇿⳩ᙑ尥ꠡ쾮穖茳髩典㌉仌ꌔ曓䣃䥟Ꟑ튭♥즱壼妁黩藒슪 [ 1722.531003][T27247] usb 4-1: Manufacturer: 範਴鼍峞⬰ꡓ儗飻喩켭踠￀ [ 1722.531019][T27247] usb 4-1: SerialNumber: Ч [ 1722.781903][T14511] usb 9-1: new high-speed USB device number 113 using dummy_hcd [ 1722.841379][T14511] usb 9-1: Using ep0 maxpacket: 8 [ 1722.925555][T14511] usb 9-1: too many configurations: 34, using maximum allowed: 8 [ 1722.937618][T14511] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1722.937654][T14511] usb 9-1: can't read configurations, error -61 [ 1723.064541][T14511] usb 9-1: new high-speed USB device number 114 using dummy_hcd [ 1723.084993][T14511] usb 9-1: Using ep0 maxpacket: 8 [ 1723.085749][T14511] usb 9-1: too many configurations: 34, using maximum allowed: 8 [ 1723.087505][T14511] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1723.087536][T14511] usb 9-1: can't read configurations, error -61 [ 1723.089409][T14511] usb usb9-port1: unable to enumerate USB device [ 1723.431042][T27247] keyspan 4-1:248.20: Keyspan - (without firmware) converter detected [ 1723.531177][T25412] udevd[25412]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1723.562369][ T5926] usb 8-1: USB disconnect, device number 98 [ 1723.746368][T27247] keyspan 4-1:248.76: Keyspan - (without firmware) converter detected [ 1723.975516][T14511] usb 9-1: new high-speed USB device number 115 using dummy_hcd [ 1724.008212][T27247] usb 4-1: USB disconnect, device number 39 [ 1724.363832][T14511] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1724.363907][T14511] usb 9-1: config 0 has no interface number 0 [ 1724.367042][T14511] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1724.367115][T14511] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1724.367282][T14511] usb 9-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1724.367349][T14511] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.850312][T27247] keyspan 4-1:248.20: device disconnected [ 1724.925949][ T5926] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 1725.029589][T14511] usb 9-1: config 0 descriptor?? [ 1725.079219][ T5926] usb 8-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1725.079250][ T5926] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.079270][ T5926] usb 8-1: Product: syz [ 1725.079284][ T5926] usb 8-1: Manufacturer: syz [ 1725.079299][ T5926] usb 8-1: SerialNumber: syz [ 1725.227689][ T5926] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1725.227715][ T5926] r8152-cfgselector 8-1: config 0 descriptor?? [ 1725.299037][T27247] keyspan 4-1:248.76: device disconnected [ 1725.496081][T27631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1725.496608][T27631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1726.060512][T27631] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7354'. [ 1726.106484][T27247] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1726.110216][T14511] prodikeys 0003:041E:2801.005F: unknown main item tag 0x0 [ 1726.110251][T14511] prodikeys 0003:041E:2801.005F: unknown main item tag 0x0 [ 1726.110279][T14511] prodikeys 0003:041E:2801.005F: unknown main item tag 0x0 [ 1726.110307][T14511] prodikeys 0003:041E:2801.005F: unknown main item tag 0x0 [ 1726.110335][T14511] prodikeys 0003:041E:2801.005F: unknown main item tag 0x0 [ 1726.110362][T14511] prodikeys 0003:041E:2801.005F: unknown main item tag 0x0 [ 1726.110388][T14511] prodikeys 0003:041E:2801.005F: unknown main item tag 0x0 [ 1726.175123][T14511] prodikeys 0003:041E:2801.005F: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.8-1/input1 [ 1726.177030][T14511] hid_prodikeys: hid-prodikeys: failed to find output report [ 1726.177030][T14511] [ 1726.263054][T27247] usb 4-1: Using ep0 maxpacket: 32 [ 1726.269105][T27247] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1726.269134][T27247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.291668][T27247] usb 4-1: config 0 descriptor?? [ 1726.428650][ T5871] usb 9-1: USB disconnect, device number 115 [ 1726.504592][T27247] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1726.508559][T27247] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1726.509508][T27247] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1726.509562][T27247] usb 4-1: media controller created [ 1726.551695][T27247] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1726.609035][T18875] r8152-cfgselector 8-1: USB disconnect, device number 99 [ 1726.631191][T27667] fido_id[27667]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1727.524017][T27247] az6027: usb out operation failed. (-71) [ 1727.525228][T27247] az6027: usb out operation failed. (-71) [ 1727.525244][T27247] stb0899_attach: Driver disabled by Kconfig [ 1727.525254][T27247] az6027: no front-end attached [ 1727.525254][T27247] [ 1727.528029][T27247] az6027: usb out operation failed. (-71) [ 1727.528044][T27247] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1727.532192][T27247] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input129 [ 1727.742852][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1727.821747][T27247] dvb-usb: schedule remote query interval to 400 msecs. [ 1727.821852][T27247] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1728.194585][T27247] usb 4-1: USB disconnect, device number 40 [ 1729.241842][T27247] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1729.283766][T27691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7370'. [ 1729.360720][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1729.375843][ T56] hsr_slave_0: left promiscuous mode [ 1729.440757][ T56] hsr_slave_1: left promiscuous mode [ 1729.441724][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1729.441747][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1729.517399][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1729.517424][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1729.755208][T27705] binder: 27692:27705 ioctl c0306201 0 returned -14 [ 1729.801235][ T56] veth1_macvtap: left promiscuous mode [ 1729.801302][ T56] veth0_macvtap: left promiscuous mode [ 1729.884352][T27247] usb 9-1: new high-speed USB device number 116 using dummy_hcd [ 1730.054307][T27247] usb 9-1: Using ep0 maxpacket: 32 [ 1730.056133][T27247] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1730.056150][T27247] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.065837][T27247] usb 9-1: config 0 descriptor?? [ 1730.183482][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.183550][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.273406][T27247] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1730.313801][T27247] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1730.316372][T27247] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1730.316404][T27247] usb 9-1: media controller created [ 1730.417374][T27247] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1732.567092][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1732.574704][T27247] az6027: usb out operation failed. (-110) [ 1732.575008][T27247] az6027: usb out operation failed. (-32) [ 1732.575016][T27247] stb0899_attach: Driver disabled by Kconfig [ 1732.575022][T27247] az6027: no front-end attached [ 1732.575022][T27247] [ 1732.575303][T27247] az6027: usb out operation failed. (-32) [ 1732.575311][T27247] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1732.590262][T27247] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input130 [ 1732.600819][T27247] dvb-usb: schedule remote query interval to 400 msecs. [ 1732.600841][T27247] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1732.677657][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1733.344790][T14511] usb 9-1: USB disconnect, device number 116 [ 1733.447173][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1733.636976][T14511] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1733.792895][T25961] udevd[25961]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1733.821067][T27346] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1733.905696][T27346] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1733.995875][T27346] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1734.007045][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1734.139504][T27346] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1734.529431][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1734.863373][T27346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1734.892716][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1734.946237][T27346] 8021q: adding VLAN 0 to HW filter on device team0 [ 1735.038145][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state [ 1735.046587][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1735.174991][T24125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1735.175139][T24125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1735.230322][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1736.379248][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1736.495959][T27868] afs: Bad value for 'source' [ 1737.449871][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1737.828401][T27346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1737.989708][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1738.035157][T27346] veth0_vlan: entered promiscuous mode [ 1738.068165][T27346] veth1_vlan: entered promiscuous mode [ 1738.123078][T27346] veth0_macvtap: entered promiscuous mode [ 1738.137620][T27346] veth1_macvtap: entered promiscuous mode [ 1738.161827][T27346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1738.178132][T27346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1738.195122][T18996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1738.218565][ T2934] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1738.219460][ T2934] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1738.220147][ T2934] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1738.284327][T24854] usb 9-1: new high-speed USB device number 117 using dummy_hcd [ 1738.369552][T18875] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 1738.831788][T24854] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1738.831813][T24854] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1738.831849][T24854] usb 9-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1738.831873][T24854] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.837816][T18875] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1738.837840][T18875] usb 8-1: config 0 has no interface number 0 [ 1738.837883][T18875] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1738.837908][T18875] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1738.837943][T18875] usb 8-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1738.837964][T18875] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.842479][T24854] usb 9-1: config 0 descriptor?? [ 1738.847654][T18875] usb 8-1: config 0 descriptor?? [ 1739.320529][ T6904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.320550][ T6904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.219428][T18875] prodikeys 0003:041E:2801.0060: unknown main item tag 0x0 [ 1740.219483][T18875] prodikeys 0003:041E:2801.0060: unknown main item tag 0x0 [ 1740.219512][T18875] prodikeys 0003:041E:2801.0060: unknown main item tag 0x0 [ 1740.219540][T18875] prodikeys 0003:041E:2801.0060: unknown main item tag 0x0 [ 1740.219579][T18875] prodikeys 0003:041E:2801.0060: unknown main item tag 0x0 [ 1740.219607][T18875] prodikeys 0003:041E:2801.0060: unknown main item tag 0x0 [ 1740.219640][T18875] prodikeys 0003:041E:2801.0060: unknown main item tag 0x0 [ 1740.244800][T18875] prodikeys 0003:041E:2801.0060: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.7-1/input1 [ 1740.245890][T18875] hid_prodikeys: hid-prodikeys: failed to find output report [ 1740.245890][T18875] [ 1740.383024][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.383038][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.439742][T18874] usb 8-1: USB disconnect, device number 100 [ 1741.021861][T27926] fido_id[27926]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1741.230696][T25961] udevd[25961]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1741.421435][T25422] udevd[25422]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1741.977734][T27942] netlink: 'syz.2.7460': attribute type 2 has an invalid length. [ 1741.980595][T27946] netlink: 'syz.7.7461': attribute type 8 has an invalid length. [ 1742.164031][T25951] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1742.199778][T25951] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1742.202554][T25951] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1742.207918][T25951] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1742.215984][T25951] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1742.221413][T14511] usb 9-1: USB disconnect, device number 117 [ 1742.464019][T25412] udevd[25412]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1742.680162][T25961] udevd[25961]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1742.942394][T27958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7465'. [ 1743.009575][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1743.131575][T25422] udevd[25422]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1743.570977][T14511] usb 9-1: new high-speed USB device number 118 using dummy_hcd [ 1744.294612][T14511] usb 9-1: Using ep0 maxpacket: 32 [ 1744.299143][T14511] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1744.299172][T14511] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.334816][T21642] Bluetooth: hci6: command tx timeout [ 1744.352903][T14511] usb 9-1: config 0 descriptor?? [ 1744.418952][T27947] chnl_net:caif_netlink_parms(): no params data found [ 1744.625740][T14511] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1744.663996][T14511] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1744.675492][T14511] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1744.675547][T14511] usb 9-1: media controller created [ 1744.735100][T14511] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1745.558453][T27986] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1745.599926][T27986] FAULT_INJECTION: forcing a failure. [ 1745.599926][T27986] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.599988][T27986] CPU: 1 UID: 0 PID: 27986 Comm: syz.7.7471 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1745.600016][T27986] Tainted: [L]=SOFTLOCKUP [ 1745.600023][T27986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1745.600036][T27986] Call Trace: [ 1745.600044][T27986] [ 1745.600054][T27986] dump_stack_lvl+0xe8/0x150 [ 1745.600086][T27986] should_fail_ex+0x46b/0x600 [ 1745.600119][T27986] should_failslab+0xa8/0x100 [ 1745.600142][T27986] kmem_cache_alloc_noprof+0x87/0x680 [ 1745.600169][T27986] ? rcu_is_watching+0x15/0xb0 [ 1745.600189][T27986] ? security_file_alloc+0x34/0x310 [ 1745.600215][T27986] security_file_alloc+0x34/0x310 [ 1745.600238][T27986] init_file+0x96/0x2d0 [ 1745.600264][T27986] alloc_empty_file+0x6e/0x1d0 [ 1745.600288][T27986] dentry_open+0x44/0xa0 [ 1745.600311][T27986] ovl_dir_read+0x85/0x4a0 [ 1745.600340][T27986] ? __pfx_ovl_dir_read+0x10/0x10 [ 1745.600359][T27986] ? ovl_path_upper+0x105/0x170 [ 1745.600381][T27986] ? ovl_path_next+0x23c/0x470 [ 1745.600412][T27986] ovl_dir_read_merged+0x2fb/0x520 [ 1745.600438][T27986] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 1745.600463][T27986] ? __pfx_ovl_fill_merge+0x10/0x10 [ 1745.600502][T27986] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 1745.600521][T27986] ? ovl_iterate+0xffe/0x21b0 [ 1745.600548][T27986] ovl_iterate+0x10c9/0x21b0 [ 1745.600589][T27986] ? __pfx_ovl_iterate+0x10/0x10 [ 1745.600609][T27986] ? register_lock_class+0x31/0x2e0 [ 1745.600633][T27986] ? __lock_acquire+0x6b5/0x2cf0 [ 1745.600665][T27986] ? irqentry_exit+0x59e/0x620 [ 1745.600687][T27986] ? lockdep_hardirqs_on+0x7a/0x110 [ 1745.600708][T27986] ? irqentry_exit+0x59e/0x620 [ 1745.600732][T27986] ? do_raw_spin_lock+0x12b/0x2f0 [ 1745.600770][T27986] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1745.600793][T27986] ? lockdep_hardirqs_on+0x7a/0x110 [ 1745.600817][T27986] ? rwbase_write_lock+0x568/0x730 [ 1745.600854][T27986] ? __pfx_ovl_iterate+0x10/0x10 [ 1745.600877][T27986] wrap_directory_iterator+0x99/0xe0 [ 1745.600901][T27986] iterate_dir+0x3a5/0x580 [ 1745.600927][T27986] __se_sys_getdents64+0xf1/0x280 [ 1745.600952][T27986] ? __pfx___se_sys_getdents64+0x10/0x10 [ 1745.600970][T27986] ? ksys_write+0x248/0x270 [ 1745.600994][T27986] ? __pfx_filldir64+0x10/0x10 [ 1745.601032][T27986] do_syscall_64+0x14d/0xf80 [ 1745.601054][T27986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.601074][T27986] ? clear_bhb_loop+0x40/0x90 [ 1745.601097][T27986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.601117][T27986] RIP: 0033:0x7f577fe3c819 [ 1745.601137][T27986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1745.601153][T27986] RSP: 002b:00007f577e04c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1745.601174][T27986] RAX: ffffffffffffffda RBX: 00007f57800b6180 RCX: 00007f577fe3c819 [ 1745.601189][T27986] RDX: 0000000000000c00 RSI: 0000200000000400 RDI: 0000000000000005 [ 1745.601202][T27986] RBP: 00007f577e04c090 R08: 0000000000000000 R09: 0000000000000000 [ 1745.601214][T27986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1745.601226][T27986] R13: 00007f57800b6218 R14: 00007f57800b6180 R15: 00007fffff6c3038 [ 1745.601260][T27986] [ 1746.379887][T27947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.380247][T27947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.380847][T27947] bridge_slave_0: entered allmulticast mode [ 1746.396822][T27947] bridge_slave_0: entered promiscuous mode [ 1746.400090][T27947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1746.408402][T27947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.408624][T27947] bridge_slave_1: entered allmulticast mode [ 1746.414442][T21642] Bluetooth: hci6: command tx timeout [ 1746.415111][T27947] bridge_slave_1: entered promiscuous mode [ 1746.471750][T14511] az6027: usb out operation failed. (-71) [ 1746.472104][T14511] az6027: usb out operation failed. (-71) [ 1746.472113][T14511] stb0899_attach: Driver disabled by Kconfig [ 1746.472119][T14511] az6027: no front-end attached [ 1746.472119][T14511] [ 1746.472393][T14511] az6027: usb out operation failed. (-71) [ 1746.472401][T14511] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1746.522375][T14511] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input131 [ 1746.536553][T14511] dvb-usb: schedule remote query interval to 400 msecs. [ 1746.536567][T14511] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1746.562033][T14511] usb 9-1: USB disconnect, device number 118 [ 1746.796655][T27947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1746.830476][T27947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1746.902283][T27991] binder: 27987:27991 ioctl c0306201 0 returned -14 [ 1746.945238][T14511] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1747.017560][T27947] team0: Port device team_slave_0 added [ 1747.031526][T27947] team0: Port device team_slave_1 added [ 1747.103234][T27947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1747.103245][T27947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1747.103259][T27947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1747.133067][T27947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1747.133082][T27947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1747.133110][T27947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1747.410208][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1747.895994][T27947] hsr_slave_0: entered promiscuous mode [ 1747.897495][T27947] hsr_slave_1: entered promiscuous mode [ 1747.898380][T27947] debugfs: 'hsr0' already exists in 'hsr' [ 1747.902574][T27947] Cannot create hsr debugfs directory [ 1747.980094][T25422] udevd[25422]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1747.999824][T25961] udevd[25961]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1748.067443][T27996] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7476'. [ 1748.583217][T21642] Bluetooth: hci6: command tx timeout [ 1748.800499][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1749.312287][T25422] udevd[25422]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1749.503683][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1749.532808][T28010] afs: Bad value for 'source' [ 1750.657079][T21642] Bluetooth: hci6: command tx timeout [ 1750.718387][T25961] udevd[25961]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1750.742237][T25422] udevd[25422]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1751.984532][ T1175] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1752.006502][T25422] udevd[25422]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1752.378027][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1753.148654][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1753.556639][ T1175] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.542303][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1754.561714][T28055] afs: Bad value for 'source' [ 1755.689501][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1755.780879][ T1175] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.913276][T25422] udevd[25422]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1755.975009][T28072] overlayfs: missing 'lowerdir' [ 1756.181576][ T1175] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.264565][ T5809] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1756.425119][ T5809] usb 3-1: Using ep0 maxpacket: 32 [ 1756.435769][ T5809] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1756.435798][ T5809] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1756.435820][ T5809] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1756.438354][ T5809] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1756.438380][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.438400][ T5809] usb 3-1: Product: syz [ 1756.438413][ T5809] usb 3-1: Manufacturer: syz [ 1756.438427][ T5809] usb 3-1: SerialNumber: syz [ 1756.443357][ T5809] usb 3-1: config 0 descriptor?? [ 1756.753518][T25961] udevd[25961]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1756.856156][ T5809] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 1756.856200][ T5809] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 1756.928363][T28080] exFAT-fs (nullb0): invalid boot record signature [ 1756.928376][T28080] exFAT-fs (nullb0): failed to read boot sector [ 1756.928382][T28080] exFAT-fs (nullb0): failed to recognize exfat type [ 1756.941320][T25961] udevd[25961]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1757.340303][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1757.644858][ T1175] bridge_slave_1: left allmulticast mode [ 1757.644884][ T1175] bridge_slave_1: left promiscuous mode [ 1757.645083][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.728267][ T1175] bridge_slave_0: left allmulticast mode [ 1757.728297][ T1175] bridge_slave_0: left promiscuous mode [ 1757.728567][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.970266][T28088] afs: Bad value for 'source' [ 1758.988208][T14511] usb 3-1: USB disconnect, device number 103 [ 1759.153255][T25961] udevd[25961]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1759.678264][T28096] afs: Bad value for 'source' [ 1760.665307][ T1175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1760.865068][ T1175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1760.932460][ T1175] bond0 (unregistering): Released all slaves [ 1761.248594][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1761.289551][T25961] udevd[25961]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1761.658676][T25412] udevd[25412]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1761.710110][ T1175] tipc: Left network mode [ 1762.592372][T28116] FAULT_INJECTION: forcing a failure. [ 1762.592372][T28116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1762.592409][T28116] CPU: 1 UID: 0 PID: 28116 Comm: syz.2.7508 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1762.592437][T28116] Tainted: [L]=SOFTLOCKUP [ 1762.592445][T28116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1762.592457][T28116] Call Trace: [ 1762.592465][T28116] [ 1762.592474][T28116] dump_stack_lvl+0xe8/0x150 [ 1762.592506][T28116] should_fail_ex+0x46b/0x600 [ 1762.592538][T28116] _copy_to_user+0x31/0xb0 [ 1762.592560][T28116] simple_read_from_buffer+0xe1/0x170 [ 1762.592589][T28116] proc_fail_nth_read+0x1be/0x230 [ 1762.592616][T28116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1762.592643][T28116] ? rw_verify_area+0x2ac/0x4e0 [ 1762.592669][T28116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1762.592695][T28116] vfs_read+0x212/0xa80 [ 1762.592729][T28116] ? __pfx_vfs_read+0x10/0x10 [ 1762.592756][T28116] ? __asan_memset+0x22/0x50 [ 1762.592781][T28116] ? smack_file_ioctl+0x263/0x360 [ 1762.592819][T28116] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1762.592857][T28116] ksys_read+0x156/0x270 [ 1762.592886][T28116] ? __pfx_ksys_read+0x10/0x10 [ 1762.592923][T28116] do_syscall_64+0x14d/0xf80 [ 1762.592945][T28116] ? trace_irq_disable+0x3b/0x150 [ 1762.592966][T28116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.592987][T28116] ? clear_bhb_loop+0x40/0x90 [ 1762.593010][T28116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.593029][T28116] RIP: 0033:0x7fd1f78cd04e [ 1762.593048][T28116] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1762.593065][T28116] RSP: 002b:00007fd1f5b65fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1762.593087][T28116] RAX: ffffffffffffffda RBX: 00007fd1f5b666c0 RCX: 00007fd1f78cd04e [ 1762.593102][T28116] RDX: 000000000000000f RSI: 00007fd1f5b660a0 RDI: 0000000000000006 [ 1762.593116][T28116] RBP: 00007fd1f5b66090 R08: 0000000000000000 R09: 0000000000000000 [ 1762.593128][T28116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1762.593140][T28116] R13: 00007fd1f7b86038 R14: 00007fd1f7b85fa0 R15: 00007ffc47ea8e98 [ 1762.593173][T28116] [ 1762.654700][T27247] usb 9-1: new high-speed USB device number 119 using dummy_hcd [ 1762.884398][T27247] usb 9-1: Using ep0 maxpacket: 8 [ 1762.885064][T27247] usb 9-1: too many configurations: 34, using maximum allowed: 8 [ 1762.889612][T27247] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1762.889647][T27247] usb 9-1: can't read configurations, error -61 [ 1763.016080][T27247] usb 9-1: new high-speed USB device number 120 using dummy_hcd [ 1763.130275][ T1175] IPVS: stopping master sync thread 26082 ... [ 1763.194212][T27247] usb 9-1: Using ep0 maxpacket: 8 [ 1763.194891][T27247] usb 9-1: too many configurations: 34, using maximum allowed: 8 [ 1763.196492][T27247] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1763.196523][T27247] usb 9-1: can't read configurations, error -61 [ 1763.196885][T27247] usb usb9-port1: attempt power cycle [ 1763.594822][T27247] usb 9-1: new high-speed USB device number 121 using dummy_hcd [ 1763.624312][T27247] usb 9-1: Using ep0 maxpacket: 8 [ 1763.625122][T27247] usb 9-1: too many configurations: 34, using maximum allowed: 8 [ 1763.626730][T27247] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1763.626763][T27247] usb 9-1: can't read configurations, error -61 [ 1763.629153][T25422] udevd[25422]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1763.775517][T27247] usb 9-1: new high-speed USB device number 122 using dummy_hcd [ 1763.794800][T27247] usb 9-1: Using ep0 maxpacket: 8 [ 1763.795434][T27247] usb 9-1: too many configurations: 34, using maximum allowed: 8 [ 1763.797003][T27247] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1763.797036][T27247] usb 9-1: can't read configurations, error -61 [ 1763.797441][T27247] usb usb9-port1: unable to enumerate USB device [ 1764.064374][T28141] afs: Bad value for 'source' [ 1764.355749][T18874] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1765.070712][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1765.114262][T18874] usb 3-1: Using ep0 maxpacket: 32 [ 1765.116482][T18874] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1765.116510][T18874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.156592][T18874] usb 3-1: config 0 descriptor?? [ 1765.233737][ T1175] batman_adv: batadv0: Removing interface: macvtap1 [ 1765.392731][T18874] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1765.687754][T18874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1765.718194][T18874] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1765.718231][T18874] usb 3-1: media controller created [ 1765.742485][ T1175] batman_adv: batadv0: Removing interface: macvtap2 [ 1765.761551][T18874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1765.825892][ T1175] batman_adv: batadv0: Removing interface: macvtap3 [ 1765.969760][ T1175] batman_adv: batadv0: Removing interface: macvtap4 [ 1766.081190][ T1175] batman_adv: batadv0: Removing interface: macvtap5 [ 1766.085515][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1766.177334][ T1175] batman_adv: batadv0: Removing interface: macvtap6 [ 1766.249294][ T1175] batman_adv: batadv0: Removing interface: macvtap7 [ 1766.424677][ T1175] batman_adv: batadv0: Removing interface: macvtap8 [ 1766.427845][T28151] binder: 28150:28151 ioctl c0306201 0 returned -14 [ 1766.494693][ T5809] usb 9-1: new high-speed USB device number 123 using dummy_hcd [ 1766.745241][ T5809] usb 9-1: Using ep0 maxpacket: 16 [ 1766.757168][ T5809] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1766.757256][ T5809] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1766.757304][ T5809] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1766.757328][ T5809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.765945][ T5809] usb 9-1: config 0 descriptor?? [ 1767.538324][T28159] afs: Bad value for 'source' [ 1767.854534][T18874] az6027: usb out operation failed. (-110) [ 1767.855020][T18874] az6027: usb out operation failed. (-32) [ 1767.856658][T18874] stb0899_attach: Driver disabled by Kconfig [ 1767.856667][T18874] az6027: no front-end attached [ 1767.856667][T18874] [ 1767.857913][T18874] az6027: usb out operation failed. (-32) [ 1767.857930][T18874] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1767.933172][T18874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input132 [ 1767.944444][T18874] dvb-usb: schedule remote query interval to 400 msecs. [ 1767.944466][T18874] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1768.150823][T24189] usb 3-1: USB disconnect, device number 104 [ 1768.203095][T25422] udevd[25422]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1768.211250][ T5809] corsair 0003:1B1C:1B02.0061: unknown main item tag 0x0 [ 1768.211289][ T5809] corsair 0003:1B1C:1B02.0061: unknown main item tag 0x0 [ 1768.211317][ T5809] corsair 0003:1B1C:1B02.0061: unknown main item tag 0x0 [ 1768.211343][ T5809] corsair 0003:1B1C:1B02.0061: unknown main item tag 0x0 [ 1768.211370][ T5809] corsair 0003:1B1C:1B02.0061: unknown main item tag 0x0 [ 1768.224898][ T5809] corsair 0003:1B1C:1B02.0061: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.8-1/input0 [ 1768.322870][T24189] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1768.384484][T18874] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 1768.398310][ T5809] corsair 0003:1B1C:1B02.0061: Read invalid backlight brightness: 79. [ 1768.454762][T25412] udevd[25412]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1768.534328][T18874] usb 8-1: Using ep0 maxpacket: 32 [ 1768.536498][T18874] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1768.536525][T18874] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.541579][T18874] usb 8-1: config 0 descriptor?? [ 1768.751974][T18874] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1768.759458][T18874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1768.762134][T18874] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1768.762185][T18874] usb 8-1: media controller created [ 1768.797899][T24189] usb 9-1: USB disconnect, device number 123 [ 1768.805361][T18874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1768.991177][T18874] az6027: usb out operation failed. (-71) [ 1768.991510][T18874] az6027: usb out operation failed. (-71) [ 1768.991518][T18874] stb0899_attach: Driver disabled by Kconfig [ 1768.991525][T18874] az6027: no front-end attached [ 1768.991525][T18874] [ 1768.991794][T18874] az6027: usb out operation failed. (-71) [ 1768.991804][T18874] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1768.998017][T18874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input133 [ 1769.002849][T18874] dvb-usb: schedule remote query interval to 400 msecs. [ 1769.002871][T18874] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1769.017645][T18874] usb 8-1: USB disconnect, device number 101 [ 1769.034538][ T1175] hsr_slave_0: left promiscuous mode [ 1769.074687][ T1175] hsr_slave_1: left promiscuous mode [ 1769.075954][ T1175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1769.075983][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1769.123575][T18874] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1769.125524][ T1175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1769.125548][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1769.224257][ T1175] veth1_macvtap: left promiscuous mode [ 1769.224358][ T1175] veth0_macvtap: left promiscuous mode [ 1769.224598][ T1175] veth1_vlan: left promiscuous mode [ 1769.224771][ T1175] veth0_vlan: left promiscuous mode [ 1769.428353][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1769.569889][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1771.401325][ T1175] team0 (unregistering): Port device team_slave_1 removed [ 1771.460872][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1771.476783][ T1175] team0 (unregistering): Port device team_slave_0 removed [ 1771.664456][T24189] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1771.816511][T24189] usb 4-1: config 248 has an invalid interface number: 20 but max is 1 [ 1771.816542][T24189] usb 4-1: config 248 has an invalid interface number: 76 but max is 1 [ 1771.816564][T24189] usb 4-1: config 248 has no interface number 0 [ 1771.816580][T24189] usb 4-1: config 248 has no interface number 1 [ 1771.816614][T24189] usb 4-1: config 248 interface 20 altsetting 112 has an invalid descriptor for endpoint zero, skipping [ 1771.816626][T24189] usb 4-1: config 248 interface 20 altsetting 112 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1771.816641][T24189] usb 4-1: config 248 interface 20 altsetting 112 has a duplicate endpoint with address 0x2, skipping [ 1771.816654][T24189] usb 4-1: config 248 interface 20 altsetting 112 has an invalid descriptor for endpoint zero, skipping [ 1771.816666][T24189] usb 4-1: config 248 interface 20 altsetting 112 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1771.816687][T24189] usb 4-1: config 248 interface 76 altsetting 201 has an invalid descriptor for endpoint zero, skipping [ 1771.816698][T24189] usb 4-1: config 248 interface 76 altsetting 201 has a duplicate endpoint with address 0x2, skipping [ 1771.816711][T24189] usb 4-1: config 248 interface 76 altsetting 201 endpoint 0xF has invalid maxpacket 544, setting to 64 [ 1771.816724][T24189] usb 4-1: config 248 interface 76 altsetting 201 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1771.816738][T24189] usb 4-1: config 248 interface 76 altsetting 201 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1771.816871][T24189] usb 4-1: config 248 interface 76 altsetting 201 has a duplicate endpoint with address 0xF, skipping [ 1771.816885][T24189] usb 4-1: config 248 interface 76 altsetting 201 has a duplicate endpoint with address 0x4, skipping [ 1771.816898][T24189] usb 4-1: config 248 interface 76 altsetting 201 has a duplicate endpoint with address 0x3, skipping [ 1771.816924][T24189] usb 4-1: config 248 interface 76 altsetting 201 has a duplicate endpoint with address 0xA, skipping [ 1771.816946][T24189] usb 4-1: config 248 interface 76 altsetting 201 endpoint 0xE has invalid maxpacket 528, setting to 64 [ 1771.816970][T24189] usb 4-1: config 248 interface 76 altsetting 201 endpoint 0xC has an invalid bInterval 133, changing to 4 [ 1771.816993][T24189] usb 4-1: config 248 interface 76 altsetting 201 endpoint 0xC has invalid maxpacket 1024, setting to 1023 [ 1771.817018][T24189] usb 4-1: config 248 interface 76 altsetting 201 has a duplicate endpoint with address 0xE, skipping [ 1771.817040][T24189] usb 4-1: config 248 interface 20 has no altsetting 0 [ 1771.817056][T24189] usb 4-1: config 248 interface 76 has no altsetting 0 [ 1771.819895][T24189] usb 4-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=4d.8b [ 1771.819924][T24189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.819944][T24189] usb 4-1: Product: 崎᩷痢脝ࠝ︤⭘쌺隣翷੹ﳜጳ樓牕㪏蒅敋묐鵾퓴骕䐝简窦슲뵵߯᯺哱얬縹ᘙö矫ፘ子쇿⳩ᙑ尥ꠡ쾮穖茳髩典㌉仌ꌔ曓䣃䥟Ꟑ튭♥즱壼妁黩藒슪 [ 1771.819962][T24189] usb 4-1: Manufacturer: 範਴鼍峞⬰ꡓ儗飻喩켭踠￀ [ 1771.819971][T24189] usb 4-1: SerialNumber: Ч [ 1771.909353][T27247] usb 9-1: new high-speed USB device number 124 using dummy_hcd [ 1772.185346][T27247] usb 9-1: Using ep0 maxpacket: 32 [ 1772.191646][T27247] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1772.191675][T27247] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.368181][T27247] usb 9-1: config 0 descriptor?? [ 1772.424671][T25961] udevd[25961]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1772.452016][T24189] keyspan 4-1:248.20: Keyspan - (without firmware) converter detected [ 1772.517396][T24189] keyspan 4-1:248.76: Keyspan - (without firmware) converter detected [ 1772.634552][T27247] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1772.652639][T24189] usb 4-1: USB disconnect, device number 41 [ 1772.661591][T27247] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1772.688852][T27247] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1772.688911][T27247] usb 9-1: media controller created [ 1772.719028][T27247] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1772.785159][T25412] udevd[25412]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1772.788458][T24189] keyspan 4-1:248.20: device disconnected [ 1772.838072][T24189] keyspan 4-1:248.76: device disconnected [ 1773.846839][T27247] az6027: usb out operation failed. (-71) [ 1773.847227][T27247] az6027: usb out operation failed. (-71) [ 1773.847242][T27247] stb0899_attach: Driver disabled by Kconfig [ 1773.847251][T27247] az6027: no front-end attached [ 1773.847251][T27247] [ 1773.847634][T27247] az6027: usb out operation failed. (-71) [ 1773.847649][T27247] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1773.849653][T27247] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input134 [ 1773.931852][T27247] dvb-usb: schedule remote query interval to 400 msecs. [ 1773.931875][T27247] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1774.013162][T27247] usb 9-1: USB disconnect, device number 124 [ 1774.042681][T27947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1774.089724][T27947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1774.149633][T27947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1774.244968][T27247] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1774.252439][T28223] afs: Bad value for 'source' [ 1774.268084][T28217] binder: BINDER_SET_CONTEXT_MGR already set [ 1774.268094][T28217] binder: 28216:28217 ioctl 4018620d 200000004a80 returned -16 [ 1774.404294][T28219] binder: 28216:28219 ioctl c0306201 0 returned -14 [ 1774.404302][T28217] binder: 28216:28217 ioctl c0306201 2000000004c0 returned -22 [ 1774.406096][T27947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1775.433018][T25422] udevd[25422]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1775.510348][T25961] udevd[25961]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1776.403486][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1776.525465][T27947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1776.582336][T27947] 8021q: adding VLAN 0 to HW filter on device team0 [ 1776.603050][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.605786][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1776.659740][ T4108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.671626][ T4108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1777.132074][T27947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1777.307544][T25422] udevd[25422]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1777.546072][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1777.572004][ T36] kauditd_printk_skb: 90 callbacks suppressed [ 1777.572023][ T36] audit: type=1326 audit(1776102871.156:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28260 comm="syz.8.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354c04c819 code=0x7ffc0000 [ 1777.572064][ T36] audit: type=1326 audit(1776102871.176:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28260 comm="syz.8.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354c04c819 code=0x7ffc0000 [ 1777.603068][ T36] audit: type=1326 audit(1776102871.186:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28260 comm="syz.8.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354c04c819 code=0x7ffc0000 [ 1777.603175][ T36] audit: type=1326 audit(1776102871.186:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28260 comm="syz.8.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354c04c819 code=0x7ffc0000 [ 1777.603216][ T36] audit: type=1326 audit(1776102871.186:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28260 comm="syz.8.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f354c04c819 code=0x7ffc0000 [ 1777.603254][ T36] audit: type=1326 audit(1776102871.186:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28260 comm="syz.8.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354c04c819 code=0x7ffc0000 [ 1777.603294][ T36] audit: type=1326 audit(1776102871.186:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28260 comm="syz.8.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354c04c819 code=0x7ffc0000 [ 1777.603334][ T36] audit: type=1326 audit(1776102871.186:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28260 comm="syz.8.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354c04c819 code=0x7ffc0000 [ 1777.603372][ T36] audit: type=1326 audit(1776102871.186:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28260 comm="syz.8.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354c04c819 code=0x7ffc0000 [ 1777.603408][ T36] audit: type=1326 audit(1776102871.186:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28260 comm="syz.8.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f354c00d04e code=0x7ffc0000 [ 1777.764371][T27947] veth0_vlan: entered promiscuous mode [ 1777.821514][T27947] veth1_vlan: entered promiscuous mode [ 1777.834275][T27917] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1777.874468][ T5809] usb 9-1: new high-speed USB device number 125 using dummy_hcd [ 1777.878406][ T1175] IPVS: stop unused estimator thread 0... [ 1777.908757][T27947] veth0_macvtap: entered promiscuous mode [ 1777.914053][T27947] veth1_macvtap: entered promiscuous mode [ 1777.962838][T27947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1777.980361][T27947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1777.994320][T27917] usb 3-1: Using ep0 maxpacket: 32 [ 1777.996430][T27917] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1777.996458][T27917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.999284][ T171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.999489][ T171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.999540][ T171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.999572][ T171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.001757][T27917] usb 3-1: config 0 descriptor?? [ 1778.034362][ T5809] usb 9-1: Using ep0 maxpacket: 8 [ 1778.046201][ T5809] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1778.046232][ T5809] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1778.046305][ T5809] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1778.046328][ T5809] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1778.046372][ T5809] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1778.046394][ T5809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.084294][ T5808] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1778.604754][T27917] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1778.617250][ T5809] usb 9-1: usb_control_msg returned -32 [ 1778.617297][ T5809] usbtmc 9-1:16.0: can't read capabilities [ 1778.626971][T27917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1778.630082][T27917] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1778.630133][T27917] usb 3-1: media controller created [ 1778.674220][ T5808] usb 4-1: Using ep0 maxpacket: 16 [ 1778.679666][ T5808] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1778.679685][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.679696][ T5808] usb 4-1: Product: syz [ 1778.679703][ T5808] usb 4-1: Manufacturer: syz [ 1778.679711][ T5808] usb 4-1: SerialNumber: syz [ 1778.682484][ T5808] usb 4-1: config 0 descriptor?? [ 1778.740439][ T5808] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 1778.749370][T27917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1779.122517][T28270] afs: Bad value for 'source' [ 1780.363278][ T5808] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 1780.363484][ T5808] visor 4-1:0.0: probe with driver visor failed with error -71 [ 1780.484699][ T5808] usb 4-1: USB disconnect, device number 42 [ 1780.567321][T27917] az6027: usb out operation failed. (-71) [ 1780.567753][T27917] az6027: usb out operation failed. (-71) [ 1780.567766][T27917] stb0899_attach: Driver disabled by Kconfig [ 1780.567776][T27917] az6027: no front-end attached [ 1780.567776][T27917] [ 1780.568116][T27917] az6027: usb out operation failed. (-71) [ 1780.568125][T27917] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1781.140501][T27917] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input135 [ 1781.156293][T27917] dvb-usb: schedule remote query interval to 400 msecs. [ 1781.156316][T27917] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1781.180327][T27917] usb 3-1: USB disconnect, device number 105 [ 1781.195239][ T5926] usb 9-1: USB disconnect, device number 125 [ 1781.198160][T25414] udevd[25414]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1781.423566][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1781.423587][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1781.438902][T27917] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1781.462150][T25412] udevd[25412]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1781.970296][ T4108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1781.970310][ T4108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1782.059264][T28292] binder: 28288:28292 ioctl c0306201 0 returned -14 [ 1782.194240][T27917] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1782.354347][T27917] usb 3-1: Using ep0 maxpacket: 8 [ 1782.474808][T27917] usb 3-1: config 6 has an invalid interface number: 220 but max is 0 [ 1782.474837][T27917] usb 3-1: config 6 has no interface number 0 [ 1782.474917][T27917] usb 3-1: config 6 interface 220 has no altsetting 0 [ 1782.484062][T27917] usb 3-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 1782.484092][T27917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.484262][T27917] usb 3-1: Product: syz [ 1782.484276][T27917] usb 3-1: Manufacturer: syz [ 1782.484289][T27917] usb 3-1: SerialNumber: syz [ 1783.108678][T28308] afs: Bad value for 'source' [ 1783.689258][T27917] uvcvideo 3-1:6.220: Found multiple Units with ID 4 [ 1783.690765][T27917] uvcvideo 3-1:6.220: Found Unit with invalid ID 0 [ 1783.691705][T27917] uvcvideo 3-1:6.220: Found UVC 7.ff device syz (174f:5212) [ 1783.691827][T27917] uvcvideo 3-1:6.220: Entity type for entity Output 4 was not initialized! [ 1783.692563][T27917] uvcvideo 3-1:6.220: Failed to create links for entity 4 [ 1783.692582][T27917] uvcvideo 3-1:6.220: Failed to register entities (-22). [ 1783.778257][T27917] usb 3-1: USB disconnect, device number 106 [ 1785.054740][T25961] udevd[25961]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1785.906644][T25961] udevd[25961]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1786.032946][T28328] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1786.196524][T28341] afs: Bad value for 'source' [ 1786.202383][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1786.684247][T24189] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 1786.834288][T24189] usb 8-1: Using ep0 maxpacket: 32 [ 1786.836091][T24189] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1786.836118][T24189] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.839672][T24189] usb 8-1: config 0 descriptor?? [ 1787.047595][T24189] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1787.074598][T24189] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1787.078358][T24189] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1787.078410][T24189] usb 8-1: media controller created [ 1787.129641][T24189] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1787.279735][T25422] udevd[25422]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1787.838626][T28349] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7565'. [ 1789.214509][T24189] az6027: usb out operation failed. (-110) [ 1789.214854][T24189] az6027: usb out operation failed. (-32) [ 1789.214863][T24189] stb0899_attach: Driver disabled by Kconfig [ 1789.214869][T24189] az6027: no front-end attached [ 1789.214869][T24189] [ 1789.215190][T24189] az6027: usb out operation failed. (-32) [ 1789.215199][T24189] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1789.218619][T24189] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input136 [ 1789.240255][T24189] dvb-usb: schedule remote query interval to 400 msecs. [ 1789.240276][T24189] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1791.618515][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.618599][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1795.114954][T28349] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7565'. [ 1795.121559][T28364] udevd[28364]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1795.185900][T24854] usb 8-1: USB disconnect, device number 102 [ 1795.321381][T28369] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7570'. [ 1795.374526][T24854] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1795.424233][T27917] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1795.439332][T28372] udevd[28372]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1795.526180][T28375] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7573'. [ 1795.541738][T28364] udevd[28364]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1795.584476][T27917] usb 4-1: Using ep0 maxpacket: 16 [ 1795.930116][T27917] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 1795.930145][T27917] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 1795.930166][T27917] usb 4-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 1795.930186][T27917] usb 4-1: config 166 has no interface number 0 [ 1795.930203][T27917] usb 4-1: config 166 has no interface number 1 [ 1795.930256][T27917] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1795.930279][T27917] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1795.930315][T27917] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1795.930336][T27917] usb 4-1: config 166 interface 34 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1795.930364][T27917] usb 4-1: config 166 interface 177 has no altsetting 0 [ 1795.930382][T27917] usb 4-1: config 166 interface 34 has no altsetting 0 [ 1795.937439][T27917] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1795.937469][T27917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.937490][T27917] usb 4-1: Product: syz [ 1795.937504][T27917] usb 4-1: Manufacturer: syz [ 1795.937518][T27917] usb 4-1: SerialNumber: syz [ 1796.032846][T28382] afs: Bad value for 'source' [ 1796.552759][T28386] binder: 28377:28386 ioctl c0306201 0 returned -14 [ 1796.609653][T27917] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 1796.672711][T28372] udevd[28372]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1796.739075][T27917] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 1796.774370][T28391] FAULT_INJECTION: forcing a failure. [ 1796.774370][T28391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1796.774407][T28391] CPU: 0 UID: 0 PID: 28391 Comm: syz.8.7576 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1796.774434][T28391] Tainted: [L]=SOFTLOCKUP [ 1796.774441][T28391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1796.774452][T28391] Call Trace: [ 1796.774460][T28391] [ 1796.774469][T28391] dump_stack_lvl+0xe8/0x150 [ 1796.774501][T28391] should_fail_ex+0x46b/0x600 [ 1796.774532][T28391] _copy_from_user+0x2d/0xb0 [ 1796.774552][T28391] ___sys_recvmsg+0x175/0x590 [ 1796.774573][T28391] ? __lock_acquire+0x6b5/0x2cf0 [ 1796.774598][T28391] ? __pfx____sys_recvmsg+0x10/0x10 [ 1796.774657][T28391] do_recvmmsg+0x33a/0x800 [ 1796.774698][T28391] ? __pfx_do_recvmmsg+0x10/0x10 [ 1796.774733][T28391] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1796.774776][T28391] __x64_sys_recvmmsg+0x198/0x250 [ 1796.774802][T28391] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1796.774836][T28391] do_syscall_64+0x14d/0xf80 [ 1796.774858][T28391] ? trace_irq_disable+0x3b/0x150 [ 1796.774878][T28391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.774897][T28391] ? clear_bhb_loop+0x40/0x90 [ 1796.774920][T28391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.774938][T28391] RIP: 0033:0x7f354c04c819 [ 1796.774957][T28391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1796.774974][T28391] RSP: 002b:00007f354a27d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1796.774994][T28391] RAX: ffffffffffffffda RBX: 00007f354c2c6090 RCX: 00007f354c04c819 [ 1796.775008][T28391] RDX: 0000000000000012 RSI: 0000200000000400 RDI: 0000000000000003 [ 1796.775021][T28391] RBP: 00007f354a27d090 R08: 0000000000000000 R09: 0000000000000000 [ 1796.775033][T28391] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000001 [ 1796.775045][T28391] R13: 00007f354c2c6128 R14: 00007f354c2c6090 R15: 00007ffe6eb873d8 [ 1796.775077][T28391] [ 1797.286439][T28397] afs: Bad value for 'source' [ 1798.477794][T27917] uvcvideo 4-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1798.477830][T27917] uvcvideo 4-1:166.34: No valid video chain found. [ 1798.505353][T27917] usb 4-1: USB disconnect, device number 43 [ 1798.858481][T28372] udevd[28372]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1799.146690][T24854] usb 9-1: new high-speed USB device number 126 using dummy_hcd [ 1799.354653][T24854] usb 9-1: Using ep0 maxpacket: 32 [ 1799.665986][T24854] usb 9-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1799.666007][T24854] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1799.666027][T24854] usb 9-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1799.666040][T24854] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.716250][T24854] usb 9-1: config 0 descriptor?? [ 1799.800191][T28418] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1799.948294][T28421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1799.948807][T28421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.138878][T28409] tipc: Enabling of bearer rejected, already enabled [ 1800.139354][T28409] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7581'. [ 1800.139368][T28409] tipc: Disabling bearer [ 1800.173406][T28409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1800.187008][T28409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.230004][T24854] usbhid 9-1:0.0: can't add hid device: -71 [ 1800.230130][T24854] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1800.270489][T24854] usb 9-1: USB disconnect, device number 126 [ 1800.295574][ T5909] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1800.583846][ T5909] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1800.583871][ T5909] usb 4-1: config 0 has no interface number 0 [ 1800.583905][ T5909] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1800.583939][ T5909] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1800.583959][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.759534][ T5909] usb 4-1: config 0 descriptor?? [ 1800.776739][ T5909] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 1800.913073][T28431] afs: Bad value for 'source' [ 1801.213841][T28364] udevd[28364]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1801.318299][T28439] afs: Bad value for 'source' [ 1801.319674][T28364] udevd[28364]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1801.513389][T28364] udevd[28364]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1802.996556][T28414] udevd[28414]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1803.048047][T28364] udevd[28364]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1803.151053][T28364] udevd[28364]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1803.399345][T28364] udevd[28364]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1803.496495][T28364] udevd[28364]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1803.524336][ T5909] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 1803.913614][T28364] udevd[28364]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1803.928056][ T5909] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1803.928090][ T5909] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1803.928114][ T5909] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1803.928156][ T5909] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1803.928179][ T5909] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.996635][ T5909] usb 8-1: config 0 descriptor?? [ 1804.058513][T28364] udevd[28364]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1804.174367][ T5808] usb 9-1: new high-speed USB device number 127 using dummy_hcd [ 1804.270208][T24854] usb 4-1: USB disconnect, device number 44 [ 1804.334891][ T5808] usb 9-1: Using ep0 maxpacket: 32 [ 1804.342136][ T5808] usb 9-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1804.342170][ T5808] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1804.342206][ T5808] usb 9-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1804.342229][ T5808] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.372789][ T5808] usb 9-1: config 0 descriptor?? [ 1804.495201][ T5909] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0 [ 1804.541192][ T5909] plantronics 0003:047F:FFFF.0062: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1804.641313][T28481] binder: BINDER_SET_CONTEXT_MGR already set [ 1804.642955][T28481] binder: 28478:28481 ioctl 4018620d 200000004a80 returned -16 [ 1804.643591][T28481] binder: 28478:28481 ioctl c0306201 0 returned -14 [ 1804.700268][T24854] usb 8-1: USB disconnect, device number 103 [ 1804.703885][ T36] kauditd_printk_skb: 253 callbacks suppressed [ 1804.703902][ T36] audit: type=1326 audit(1776102898.256:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28460 comm="syz.7.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577fe3c819 code=0x7ffc0000 [ 1804.703947][ T36] audit: type=1326 audit(1776102898.256:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28460 comm="syz.7.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577fe3c819 code=0x7ffc0000 [ 1804.703989][ T36] audit: type=1326 audit(1776102898.256:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28460 comm="syz.7.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577fe3c819 code=0x7ffc0000 [ 1804.704029][ T36] audit: type=1326 audit(1776102898.256:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28460 comm="syz.7.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577fe3c819 code=0x7ffc0000 [ 1804.704077][ T36] audit: type=1326 audit(1776102898.256:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28460 comm="syz.7.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f577fe3c819 code=0x7ffc0000 [ 1804.704194][ T36] audit: type=1326 audit(1776102898.256:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28460 comm="syz.7.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577fe3c819 code=0x7ffc0000 [ 1804.704232][ T36] audit: type=1326 audit(1776102898.256:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28460 comm="syz.7.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577fe3c819 code=0x7ffc0000 [ 1804.704272][ T36] audit: type=1326 audit(1776102898.256:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28460 comm="syz.7.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577fe3c819 code=0x7ffc0000 [ 1804.704312][ T36] audit: type=1326 audit(1776102898.256:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28460 comm="syz.7.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577fe3c819 code=0x7ffc0000 [ 1804.704350][ T36] audit: type=1326 audit(1776102898.256:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28460 comm="syz.7.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f577fdfd04e code=0x7ffc0000 [ 1804.990749][T28474] tipc: New replicast peer: 255.255.255.255 [ 1805.022888][T28474] tipc: Enabled bearer , priority 10 [ 1805.023913][T28474] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7599'. [ 1805.023927][T28474] tipc: Disabling bearer [ 1805.046389][T28474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1805.046800][T28474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1805.059390][ T5808] usbhid 9-1:0.0: can't add hid device: -71 [ 1805.059464][ T5808] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1805.076060][ T5808] usb 9-1: USB disconnect, device number 127 [ 1805.150634][T28482] fido_id[28482]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1805.399045][T28485] afs: Bad value for 'source' [ 1806.637072][T28364] udevd[28364]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1806.700022][T28495] netlink: 'syz.0.7604': attribute type 39 has an invalid length. [ 1806.769190][T28364] udevd[28364]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1806.798161][T28501] afs: Bad value for 'source' [ 1807.495366][T28508] vlan2: entered promiscuous mode [ 1807.495590][T28508] vlan2: entered allmulticast mode [ 1807.495599][T28508] hsr_slave_1: entered allmulticast mode [ 1807.580748][T28508] FAULT_INJECTION: forcing a failure. [ 1807.580748][T28508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1807.580772][T28508] CPU: 0 UID: 0 PID: 28508 Comm: syz.7.7607 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1807.580787][T28508] Tainted: [L]=SOFTLOCKUP [ 1807.580791][T28508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1807.580797][T28508] Call Trace: [ 1807.580802][T28508] [ 1807.580806][T28508] dump_stack_lvl+0xe8/0x150 [ 1807.580826][T28508] should_fail_ex+0x46b/0x600 [ 1807.580844][T28508] _copy_from_iter+0x1d3/0x1670 [ 1807.580864][T28508] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1807.580880][T28508] ? __alloc_skb+0x27d/0x7d0 [ 1807.580891][T28508] ? __pfx__copy_from_iter+0x10/0x10 [ 1807.580905][T28508] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1807.580920][T28508] ? __alloc_skb+0x27d/0x7d0 [ 1807.580933][T28508] ? netlink_sendmsg+0x650/0xb40 [ 1807.580948][T28508] ? skb_put+0x11b/0x210 [ 1807.580961][T28508] netlink_sendmsg+0x6c0/0xb40 [ 1807.580981][T28508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1807.580998][T28508] ? unwind_get_return_address+0x4d/0x90 [ 1807.581011][T28508] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1807.581029][T28508] ____sys_sendmsg+0x94c/0x9c0 [ 1807.581044][T28508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1807.581061][T28508] ? import_iovec+0x73/0xa0 [ 1807.581072][T28508] ___sys_sendmsg+0x2a5/0x360 [ 1807.581088][T28508] ? __pfx____sys_sendmsg+0x10/0x10 [ 1807.581117][T28508] ? __fget_files+0x2a/0x420 [ 1807.581131][T28508] ? __fget_files+0x3a6/0x420 [ 1807.581149][T28508] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1807.581162][T28508] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1807.581179][T28508] ? __pfx_ksys_write+0x10/0x10 [ 1807.581201][T28508] do_syscall_64+0x14d/0xf80 [ 1807.581213][T28508] ? trace_irq_disable+0x3b/0x150 [ 1807.581229][T28508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.581239][T28508] ? clear_bhb_loop+0x40/0x90 [ 1807.581252][T28508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.581262][T28508] RIP: 0033:0x7f577fe3c819 [ 1807.581273][T28508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1807.581282][T28508] RSP: 002b:00007f577e08e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1807.581297][T28508] RAX: ffffffffffffffda RBX: 00007f57800b5fa0 RCX: 00007f577fe3c819 [ 1807.581310][T28508] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1807.581322][T28508] RBP: 00007f577e08e090 R08: 0000000000000000 R09: 0000000000000000 [ 1807.581334][T28508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1807.581344][T28508] R13: 00007f57800b6038 R14: 00007f57800b5fa0 R15: 00007fffff6c3038 [ 1807.581374][T28508] [ 1807.789178][T28364] udevd[28364]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1808.424261][T28275] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 1808.566661][T28364] udevd[28364]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1808.572918][T28518] FAULT_INJECTION: forcing a failure. [ 1808.572918][T28518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1808.572952][T28518] CPU: 0 UID: 0 PID: 28518 Comm: syz.8.7611 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1808.572979][T28518] Tainted: [L]=SOFTLOCKUP [ 1808.572986][T28518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1808.572997][T28518] Call Trace: [ 1808.573005][T28518] [ 1808.573014][T28518] dump_stack_lvl+0xe8/0x150 [ 1808.573045][T28518] should_fail_ex+0x46b/0x600 [ 1808.573075][T28518] _copy_from_user+0x2d/0xb0 [ 1808.573094][T28518] ? __pfx_drm_mode_getresources+0x10/0x10 [ 1808.573115][T28518] drm_ioctl+0x5d0/0xb80 [ 1808.573138][T28518] ? smk_tskacc+0x311/0x3a0 [ 1808.573167][T28518] ? __pfx_drm_mode_getresources+0x10/0x10 [ 1808.573193][T28518] ? __pfx_drm_ioctl+0x10/0x10 [ 1808.573232][T28518] ? __fget_files+0x2a/0x420 [ 1808.573259][T28518] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1808.573279][T28518] ? __pfx_drm_ioctl+0x10/0x10 [ 1808.573305][T28518] __se_sys_ioctl+0xff/0x170 [ 1808.573326][T28518] do_syscall_64+0x14d/0xf80 [ 1808.573347][T28518] ? trace_irq_disable+0x3b/0x150 [ 1808.573368][T28518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.573388][T28518] ? clear_bhb_loop+0x40/0x90 [ 1808.573411][T28518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.573430][T28518] RIP: 0033:0x7f354c04c819 [ 1808.573447][T28518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1808.573464][T28518] RSP: 002b:00007f354a29e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1808.573485][T28518] RAX: ffffffffffffffda RBX: 00007f354c2c5fa0 RCX: 00007f354c04c819 [ 1808.573499][T28518] RDX: 0000200000000280 RSI: 00000000c04064a0 RDI: 0000000000000003 [ 1808.573511][T28518] RBP: 00007f354a29e090 R08: 0000000000000000 R09: 0000000000000000 [ 1808.573524][T28518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1808.573536][T28518] R13: 00007f354c2c6038 R14: 00007f354c2c5fa0 R15: 00007ffe6eb873d8 [ 1808.573567][T28518] [ 1808.579086][T28275] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1808.579112][T28275] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1808.579132][T28275] usb 3-1: config 1 has no interface number 0 [ 1808.579174][T28275] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1808.579200][T28275] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1808.579226][T28275] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1808.579257][T28275] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1808.579278][T28275] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1808.581511][T28275] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1808.581539][T28275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.581558][T28275] usb 3-1: Product: syz [ 1808.581571][T28275] usb 3-1: Manufacturer: syz [ 1808.581592][T28275] usb 3-1: SerialNumber: syz [ 1808.640498][T28510] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1808.744225][T24189] usb 8-1: new high-speed USB device number 104 using dummy_hcd [ 1808.761459][T28520] afs: Bad value for 'source' [ 1808.945941][T24189] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1808.945964][T24189] usb 8-1: config 0 has no interface number 0 [ 1808.945989][T24189] usb 8-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1808.946024][T24189] usb 8-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1808.946048][T24189] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.004064][T24189] usb 8-1: config 0 descriptor?? [ 1809.026576][T24189] usbhid 8-1:0.1: couldn't find an input interrupt endpoint [ 1809.841515][T28275] cdc_ncm 3-1:1.1: bind() failure [ 1809.860342][T28275] usb 3-1: USB disconnect, device number 107 [ 1809.980865][T28483] udevd[28483]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1809.991225][T28372] udevd[28372]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1810.032699][T28529] FAULT_INJECTION: forcing a failure. [ 1810.032699][T28529] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.032722][T28529] CPU: 0 UID: 0 PID: 28529 Comm: syz.2.7615 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1810.032737][T28529] Tainted: [L]=SOFTLOCKUP [ 1810.032741][T28529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1810.032748][T28529] Call Trace: [ 1810.032752][T28529] [ 1810.032757][T28529] dump_stack_lvl+0xe8/0x150 [ 1810.032777][T28529] should_fail_ex+0x46b/0x600 [ 1810.032796][T28529] should_failslab+0xa8/0x100 [ 1810.032808][T28529] __kmalloc_cache_noprof+0x84/0x690 [ 1810.032820][T28529] ? ucma_alloc_ctx+0x4e/0x340 [ 1810.032839][T28529] ucma_alloc_ctx+0x4e/0x340 [ 1810.032860][T28529] ucma_create_id+0x1e3/0x380 [ 1810.032884][T28529] ? __pfx_ucma_create_id+0x10/0x10 [ 1810.032920][T28529] ucma_write+0x257/0x2f0 [ 1810.032944][T28529] ? __pfx_ucma_write+0x10/0x10 [ 1810.032968][T28529] ? rw_verify_area+0x25b/0x4e0 [ 1810.032995][T28529] vfs_writev+0x4c6/0x9a0 [ 1810.033016][T28529] ? __pfx_ucma_write+0x10/0x10 [ 1810.033035][T28529] ? __pfx_vfs_writev+0x10/0x10 [ 1810.033054][T28529] ? __fget_files+0x2a/0x420 [ 1810.033070][T28529] ? __fget_files+0x3a6/0x420 [ 1810.033083][T28529] ? __fget_files+0x2a/0x420 [ 1810.033100][T28529] do_writev+0x15a/0x2e0 [ 1810.033114][T28529] ? __pfx_do_writev+0x10/0x10 [ 1810.033132][T28529] do_syscall_64+0x14d/0xf80 [ 1810.033144][T28529] ? trace_irq_disable+0x3b/0x150 [ 1810.033161][T28529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1810.033175][T28529] ? clear_bhb_loop+0x40/0x90 [ 1810.033188][T28529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1810.033198][T28529] RIP: 0033:0x7fd1f790c819 [ 1810.033210][T28529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1810.033219][T28529] RSP: 002b:00007fd1f5b66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1810.033231][T28529] RAX: ffffffffffffffda RBX: 00007fd1f7b85fa0 RCX: 00007fd1f790c819 [ 1810.033239][T28529] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000a [ 1810.033246][T28529] RBP: 00007fd1f5b66090 R08: 0000000000000000 R09: 0000000000000000 [ 1810.033252][T28529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1810.033259][T28529] R13: 00007fd1f7b86038 R14: 00007fd1f7b85fa0 R15: 00007ffc47ea8e98 [ 1810.033275][T28529] [ 1810.688521][T28364] udevd[28364]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1811.937887][T28364] udevd[28364]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1813.251536][ T5808] usb 8-1: USB disconnect, device number 104 [ 1813.320956][T28554] afs: Bad value for 'source' [ 1813.475560][T24189] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1813.651910][T24189] usb 9-1: Using ep0 maxpacket: 8 [ 1813.653480][T24189] usb 9-1: too many configurations: 34, using maximum allowed: 8 [ 1813.655845][T24189] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1813.655878][T24189] usb 9-1: can't read configurations, error -61 [ 1813.804451][T24189] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1813.954235][T24189] usb 9-1: Using ep0 maxpacket: 8 [ 1813.955412][T24189] usb 9-1: too many configurations: 34, using maximum allowed: 8 [ 1813.957626][T24189] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1813.957661][T24189] usb 9-1: can't read configurations, error -61 [ 1813.958322][T24189] usb usb9-port1: attempt power cycle [ 1814.294816][T24189] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1814.321201][T24189] usb 9-1: Using ep0 maxpacket: 8 [ 1814.321854][T24189] usb 9-1: too many configurations: 34, using maximum allowed: 8 [ 1814.323506][T24189] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1814.323541][T24189] usb 9-1: can't read configurations, error -61 [ 1814.457476][T24189] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1814.479671][T24189] usb 9-1: Using ep0 maxpacket: 8 [ 1814.480327][T24189] usb 9-1: too many configurations: 34, using maximum allowed: 8 [ 1814.486008][T24189] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1814.486042][T24189] usb 9-1: can't read configurations, error -61 [ 1814.486391][T24189] usb usb9-port1: unable to enumerate USB device [ 1814.519309][T28560] afs: Bad value for 'source' [ 1815.723467][T28364] udevd[28364]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1815.739765][T28567] netlink: 'syz.8.7625': attribute type 10 has an invalid length. [ 1815.762088][T28568] FAULT_INJECTION: forcing a failure. [ 1815.762088][T28568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1815.762111][T28568] CPU: 0 UID: 0 PID: 28568 Comm: syz.7.7624 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1815.762126][T28568] Tainted: [L]=SOFTLOCKUP [ 1815.762129][T28568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1815.762136][T28568] Call Trace: [ 1815.762141][T28568] [ 1815.762146][T28568] dump_stack_lvl+0xe8/0x150 [ 1815.762166][T28568] should_fail_ex+0x46b/0x600 [ 1815.762184][T28568] _copy_from_user+0x2d/0xb0 [ 1815.762195][T28568] __sys_bpf+0x229/0x950 [ 1815.762210][T28568] ? __pfx___sys_bpf+0x10/0x10 [ 1815.762222][T28568] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1815.762250][T28568] ? __pfx_ksys_write+0x10/0x10 [ 1815.762271][T28568] __x64_sys_bpf+0x7c/0x90 [ 1815.762283][T28568] do_syscall_64+0x14d/0xf80 [ 1815.762295][T28568] ? trace_irq_disable+0x3b/0x150 [ 1815.762308][T28568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.762319][T28568] ? clear_bhb_loop+0x40/0x90 [ 1815.762332][T28568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.762342][T28568] RIP: 0033:0x7f577fe3c819 [ 1815.762352][T28568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.762362][T28568] RSP: 002b:00007f577e06d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1815.762375][T28568] RAX: ffffffffffffffda RBX: 00007f57800b6090 RCX: 00007f577fe3c819 [ 1815.762382][T28568] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1815.762389][T28568] RBP: 00007f577e06d090 R08: 0000000000000000 R09: 0000000000000000 [ 1815.762395][T28568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1815.762402][T28568] R13: 00007f57800b6128 R14: 00007f57800b6090 R15: 00007fffff6c3038 [ 1815.762418][T28568] [ 1820.978903][T28566] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1821.127286][T28578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7628'. [ 1821.144768][T28567] team0: Port device macvlan0 added [ 1821.160518][T28576] udevd[28576]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1821.187764][T28568] macvtap3: entered promiscuous mode [ 1821.187788][T28568] macvtap3: entered allmulticast mode [ 1821.188211][T28568] veth1: entered promiscuous mode [ 1821.188228][T28568] veth1: entered allmulticast mode [ 1821.191490][T28568] team0: Device macvtap3 failed to register rx_handler [ 1821.281267][T28568] veth1: left allmulticast mode [ 1821.281514][T28568] veth1: left promiscuous mode [ 1821.306551][T28576] udevd[28576]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1821.360881][T28580] binder: 28574:28580 ioctl c0306201 0 returned -14 [ 1821.377433][T28585] FAULT_INJECTION: forcing a failure. [ 1821.377433][T28585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1821.377455][T28585] CPU: 1 UID: 0 PID: 28585 Comm: syz.3.7630 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1821.377470][T28585] Tainted: [L]=SOFTLOCKUP [ 1821.377474][T28585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1821.377480][T28585] Call Trace: [ 1821.377485][T28585] [ 1821.377490][T28585] dump_stack_lvl+0xe8/0x150 [ 1821.377510][T28585] should_fail_ex+0x46b/0x600 [ 1821.377528][T28585] _copy_to_user+0x31/0xb0 [ 1821.377541][T28585] simple_read_from_buffer+0xe1/0x170 [ 1821.377557][T28585] proc_fail_nth_read+0x1be/0x230 [ 1821.377573][T28585] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1821.377587][T28585] ? rw_verify_area+0x2ac/0x4e0 [ 1821.377603][T28585] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1821.377617][T28585] vfs_read+0x212/0xa80 [ 1821.377636][T28585] ? __pfx_vfs_read+0x10/0x10 [ 1821.377653][T28585] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1821.377667][T28585] ? lockdep_hardirqs_on+0x7a/0x110 [ 1821.377679][T28585] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1821.377691][T28585] ? mutex_lock_nested+0x152/0x1d0 [ 1821.377705][T28585] ? fdget_pos+0x252/0x320 [ 1821.377724][T28585] ksys_read+0x156/0x270 [ 1821.377741][T28585] ? __pfx_ksys_read+0x10/0x10 [ 1821.377763][T28585] do_syscall_64+0x14d/0xf80 [ 1821.377774][T28585] ? trace_irq_disable+0x3b/0x150 [ 1821.377787][T28585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1821.377797][T28585] ? clear_bhb_loop+0x40/0x90 [ 1821.377811][T28585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1821.377821][T28585] RIP: 0033:0x7f9fb25dd04e [ 1821.377831][T28585] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1821.377840][T28585] RSP: 002b:00007f9fb086dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1821.377854][T28585] RAX: ffffffffffffffda RBX: 00007f9fb086e6c0 RCX: 00007f9fb25dd04e [ 1821.377865][T28585] RDX: 000000000000000f RSI: 00007f9fb086e0a0 RDI: 0000000000000007 [ 1821.377871][T28585] RBP: 00007f9fb086e090 R08: 0000000000000000 R09: 0000000000000000 [ 1821.377877][T28585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1821.377883][T28585] R13: 00007f9fb2896038 R14: 00007f9fb2895fa0 R15: 00007ffc88e20918 [ 1821.377900][T28585] [ 1821.905467][T28591] tmpfs: Bad value for 'mpol' [ 1822.004288][T24189] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1822.053551][T28589] udevd[28589]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1822.061801][T28594] afs: Bad value for 'source' [ 1823.024423][T24189] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1823.024453][T24189] usb 4-1: config 0 has no interface number 0 [ 1823.024500][T24189] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1823.024540][T24189] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1823.024564][T24189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.045199][T24189] usb 4-1: config 0 descriptor?? [ 1823.053057][T24189] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 1823.270294][T28589] udevd[28589]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1823.494304][T24189] usb 8-1: new high-speed USB device number 105 using dummy_hcd [ 1823.636930][ T5808] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1823.644192][T24189] usb 8-1: Using ep0 maxpacket: 32 [ 1823.660383][T24189] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1823.660414][T24189] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.767779][T24189] usb 8-1: config 0 descriptor?? [ 1824.202274][T28576] udevd[28576]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1824.244364][ T5808] usb 9-1: Using ep0 maxpacket: 32 [ 1824.246475][ T5808] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2 [ 1824.246506][ T5808] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 140, changing to 11 [ 1824.246533][ T5808] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59326, setting to 1024 [ 1824.249436][ T5808] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1824.249463][ T5808] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.249483][ T5808] usb 9-1: Product: syz [ 1824.249497][ T5808] usb 9-1: Manufacturer: syz [ 1824.249511][ T5808] usb 9-1: SerialNumber: syz [ 1824.259477][ T5808] usb 9-1: config 0 descriptor?? [ 1824.260528][T28604] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1824.339477][T24189] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1824.355232][T24189] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1824.356551][T24189] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1824.356605][T24189] usb 8-1: media controller created [ 1824.396452][T24189] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1824.414064][ T5808] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1824.466447][ T5926] usb 9-1: USB disconnect, device number 6 [ 1824.471376][ T6722] usb 9-1: Failed to submit usb control message: -71 [ 1824.471410][ T6722] usb 9-1: unable to send the bmi data to the device: -71 [ 1824.471427][ T6722] usb 9-1: unable to get target info from device [ 1824.471443][ T6722] usb 9-1: could not get target info (-71) [ 1824.471663][ T6722] usb 9-1: could not probe fw (-71) [ 1824.487282][T28617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7637'. [ 1824.531045][T28618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7638'. [ 1824.719562][T28617] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 1824.870848][T28618] bond1: up delay (4) is not a multiple of miimon (7), value rounded to 0 ms [ 1824.870960][T28618] bond1: down delay (8) is not a multiple of miimon (7), value rounded to 7 ms [ 1824.893381][T28618] bond1: entered allmulticast mode [ 1825.170329][T28616] udevd[28616]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1825.282111][T28625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7640'. [ 1825.491404][T28616] udevd[28616]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1825.646150][T28616] udevd[28616]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1825.764447][ T5808] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1825.924247][ T5808] usb 9-1: Using ep0 maxpacket: 16 [ 1825.928219][ T5808] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1825.928272][ T5808] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1825.928682][ T5808] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 1825.928711][ T5808] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 1825.928733][ T5808] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1825.931444][ T5808] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1825.931462][ T5808] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1825.931473][ T5808] usb 9-1: Manufacturer: syz [ 1825.958417][T28275] usb 4-1: USB disconnect, device number 45 [ 1825.963512][ T5808] usb 9-1: config 0 descriptor?? [ 1826.494520][T24189] az6027: usb out operation failed. (-110) [ 1826.494923][T24189] az6027: usb out operation failed. (-32) [ 1826.494939][T24189] stb0899_attach: Driver disabled by Kconfig [ 1826.494949][T24189] az6027: no front-end attached [ 1826.494949][T24189] [ 1826.495354][T24189] az6027: usb out operation failed. (-32) [ 1826.495369][T24189] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1826.498465][T24189] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input138 [ 1826.515853][T28275] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1826.534805][ T5808] rc_core: IR keymap rc-hauppauge not found [ 1826.534915][ T5808] Registered IR keymap rc-empty [ 1826.536531][ T5808] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1826.556060][ T5808] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1826.591357][ T5808] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1826.591511][T24189] dvb-usb: schedule remote query interval to 400 msecs. [ 1826.591530][T24189] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1826.608401][ T5808] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input137 [ 1826.642360][ T5808] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1826.657882][ T5808] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1826.675034][T28275] usb 4-1: Using ep0 maxpacket: 32 [ 1826.675206][ T5808] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1826.680608][T28275] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1826.680624][T28275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.687766][T28275] usb 4-1: config 0 descriptor?? [ 1826.694797][ T5808] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1826.714645][ T5808] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1826.744563][ T5808] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1826.776749][ T5808] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1826.804578][ T5808] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1826.825334][ T5808] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1826.844582][ T5808] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1826.868213][ T5808] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 1826.868229][ T5808] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1826.891449][ T5808] usb 9-1: USB disconnect, device number 7 [ 1826.901907][T28275] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1826.951526][T28275] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1826.955443][T28275] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1826.955494][T28275] usb 4-1: media controller created [ 1827.002862][T28576] udevd[28576]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1827.022106][ T5926] usb 8-1: USB disconnect, device number 105 [ 1827.085263][T28275] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1827.838967][ T5926] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1827.928919][T28576] udevd[28576]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1827.964541][T28275] az6027: usb out operation failed. (-71) [ 1827.964831][T28275] az6027: usb out operation failed. (-71) [ 1827.964840][T28275] stb0899_attach: Driver disabled by Kconfig [ 1827.964845][T28275] az6027: no front-end attached [ 1827.964845][T28275] [ 1827.965134][T28275] az6027: usb out operation failed. (-71) [ 1827.965142][T28275] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1827.976110][T28275] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input139 [ 1827.999663][T28275] dvb-usb: schedule remote query interval to 400 msecs. [ 1827.999685][T28275] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1828.023367][T28275] usb 4-1: USB disconnect, device number 46 [ 1828.221816][T28648] afs: Bad value for 'source' [ 1828.294355][T28275] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1828.720160][T28652] FAULT_INJECTION: forcing a failure. [ 1828.720160][T28652] name failslab, interval 1, probability 0, space 0, times 0 [ 1828.720185][T28652] CPU: 1 UID: 0 PID: 28652 Comm: syz.0.7650 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1828.720201][T28652] Tainted: [L]=SOFTLOCKUP [ 1828.720205][T28652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1828.720212][T28652] Call Trace: [ 1828.720216][T28652] [ 1828.720222][T28652] dump_stack_lvl+0xe8/0x150 [ 1828.720242][T28652] should_fail_ex+0x46b/0x600 [ 1828.720262][T28652] should_failslab+0xa8/0x100 [ 1828.720276][T28652] __kmalloc_noprof+0xdf/0x7b0 [ 1828.720286][T28652] ? kfree+0x4d/0x6c0 [ 1828.720300][T28652] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1828.720317][T28652] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1828.720337][T28652] ? tomoyo_path_number_perm+0x219/0x630 [ 1828.720348][T28652] tomoyo_path_number_perm+0x246/0x630 [ 1828.720361][T28652] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1828.720373][T28652] ? __lock_acquire+0x6b5/0x2cf0 [ 1828.720390][T28652] ? do_raw_spin_lock+0x12b/0x2f0 [ 1828.720416][T28652] ? rwbase_write_lock+0x568/0x730 [ 1828.720438][T28652] security_path_chmod+0x132/0x330 [ 1828.720455][T28652] chmod_common+0x1b2/0x4a0 [ 1828.720472][T28652] ? __pfx_chmod_common+0x10/0x10 [ 1828.720489][T28652] ? strncpy_from_user+0x150/0x2b0 [ 1828.720505][T28652] ? do_getname+0x151/0x250 [ 1828.720519][T28652] do_fchmodat+0x12d/0x230 [ 1828.720535][T28652] ? __pfx_do_fchmodat+0x10/0x10 [ 1828.720549][T28652] ? __pfx_ksys_write+0x10/0x10 [ 1828.720569][T28652] __x64_sys_fchmodat+0x7d/0x90 [ 1828.720582][T28652] do_syscall_64+0x14d/0xf80 [ 1828.720594][T28652] ? trace_irq_disable+0x3b/0x150 [ 1828.720606][T28652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.720617][T28652] ? clear_bhb_loop+0x40/0x90 [ 1828.720630][T28652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.720640][T28652] RIP: 0033:0x7f73c785c819 [ 1828.720651][T28652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1828.720661][T28652] RSP: 002b:00007f73c5aae028 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 1828.720672][T28652] RAX: ffffffffffffffda RBX: 00007f73c7ad5fa0 RCX: 00007f73c785c819 [ 1828.720680][T28652] RDX: 00000000000000e0 RSI: 0000200000000000 RDI: 0000000000000005 [ 1828.720687][T28652] RBP: 00007f73c5aae090 R08: 0000000000000000 R09: 0000000000000000 [ 1828.720693][T28652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1828.720699][T28652] R13: 00007f73c7ad6038 R14: 00007f73c7ad5fa0 R15: 00007fff3bc29e38 [ 1828.720716][T28652] [ 1828.720721][T28652] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1828.969744][T28645] binder: BINDER_SET_CONTEXT_MGR already set [ 1828.969760][T28645] binder: 28642:28645 ioctl 4018620d 200000004a80 returned -16 [ 1829.150989][T28654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7652'. [ 1829.413332][T28616] udevd[28616]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1829.754216][T28275] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1830.644240][T28275] usb 3-1: Using ep0 maxpacket: 32 [ 1830.647746][T28275] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2 [ 1830.647787][T28275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 140, changing to 11 [ 1830.647815][T28275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59326, setting to 1024 [ 1830.656364][T28275] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1830.656393][T28275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.656413][T28275] usb 3-1: Product: syz [ 1830.656428][T28275] usb 3-1: Manufacturer: syz [ 1830.656442][T28275] usb 3-1: SerialNumber: syz [ 1830.667691][T28275] usb 3-1: config 0 descriptor?? [ 1830.668679][T28658] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1830.828574][T28275] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1830.884421][ T1171] usb 3-1: Failed to submit usb control message: -71 [ 1830.884458][ T1171] usb 3-1: unable to send the bmi data to the device: -71 [ 1830.884476][ T1171] usb 3-1: unable to get target info from device [ 1830.884491][ T1171] usb 3-1: could not get target info (-71) [ 1830.884592][ T1171] usb 3-1: could not probe fw (-71) [ 1830.905863][T24854] usb 3-1: USB disconnect, device number 108 [ 1831.167153][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 1831.167170][ T36] audit: type=1326 audit(1776102924.776:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28688 comm="syz.7.7664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577fe3c819 code=0x7ffc0000 [ 1831.167410][ T36] audit: type=1326 audit(1776102924.776:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28688 comm="syz.7.7664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577fe3c819 code=0x7ffc0000 [ 1831.169210][ T36] audit: type=1326 audit(1776102924.776:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28688 comm="syz.7.7664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f577fdf8c6c code=0x7ffc0000 [ 1831.169318][ T36] audit: type=1326 audit(1776102924.776:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28688 comm="syz.7.7664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f577fdf8cce code=0x7ffc0000 [ 1831.169447][ T36] audit: type=1326 audit(1776102924.776:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28688 comm="syz.7.7664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f577fe3c819 code=0x7ffc0000 [ 1831.169754][ T36] audit: type=1326 audit(1776102924.776:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28688 comm="syz.7.7664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577fe3c819 code=0x7ffc0000 [ 1831.169904][ T36] audit: type=1326 audit(1776102924.776:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28688 comm="syz.7.7664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577fe3c819 code=0x7ffc0000 [ 1831.170273][ T36] audit: type=1326 audit(1776102924.776:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28688 comm="syz.7.7664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577fe3c819 code=0x7ffc0000 [ 1831.170297][ T36] audit: type=1326 audit(1776102924.776:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28688 comm="syz.7.7664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577fe3c819 code=0x7ffc0000 [ 1831.170584][ T36] audit: type=1326 audit(1776102924.776:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28688 comm="syz.7.7664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f577fe3c819 code=0x7ffc0000 [ 1831.354748][T28589] udevd[28589]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1831.482973][T28616] udevd[28616]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1831.510011][T28696] afs: Bad value for 'source' [ 1831.554266][T28275] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1831.640696][T28616] udevd[28616]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1831.670693][T28700] FAULT_INJECTION: forcing a failure. [ 1831.670693][T28700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1831.670728][T28700] CPU: 0 UID: 0 PID: 28700 Comm: syz.2.7668 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1831.670755][T28700] Tainted: [L]=SOFTLOCKUP [ 1831.670762][T28700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1831.670774][T28700] Call Trace: [ 1831.670782][T28700] [ 1831.670791][T28700] dump_stack_lvl+0xe8/0x150 [ 1831.670823][T28700] should_fail_ex+0x46b/0x600 [ 1831.670855][T28700] _copy_to_user+0x31/0xb0 [ 1831.670877][T28700] simple_read_from_buffer+0xe1/0x170 [ 1831.670906][T28700] proc_fail_nth_read+0x1be/0x230 [ 1831.670932][T28700] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1831.670959][T28700] ? rw_verify_area+0x2ac/0x4e0 [ 1831.670984][T28700] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1831.671009][T28700] vfs_read+0x212/0xa80 [ 1831.671044][T28700] ? __pfx_vfs_read+0x10/0x10 [ 1831.671073][T28700] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1831.671096][T28700] ? lockdep_hardirqs_on+0x7a/0x110 [ 1831.671117][T28700] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1831.671138][T28700] ? mutex_lock_nested+0x152/0x1d0 [ 1831.671162][T28700] ? fdget_pos+0x252/0x320 [ 1831.671194][T28700] ksys_read+0x156/0x270 [ 1831.671222][T28700] ? __pfx_ksys_read+0x10/0x10 [ 1831.671247][T28700] ? __pfx_sock_ioctl+0x10/0x10 [ 1831.671280][T28700] do_syscall_64+0x14d/0xf80 [ 1831.671301][T28700] ? trace_irq_disable+0x3b/0x150 [ 1831.671323][T28700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.671343][T28700] ? clear_bhb_loop+0x40/0x90 [ 1831.671367][T28700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.671385][T28700] RIP: 0033:0x7fd1f78cd04e [ 1831.671404][T28700] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1831.671421][T28700] RSP: 002b:00007fd1f5b65fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1831.671442][T28700] RAX: ffffffffffffffda RBX: 00007fd1f5b666c0 RCX: 00007fd1f78cd04e [ 1831.671456][T28700] RDX: 000000000000000f RSI: 00007fd1f5b660a0 RDI: 0000000000000008 [ 1831.671468][T28700] RBP: 00007fd1f5b66090 R08: 0000000000000000 R09: 0000000000000000 [ 1831.671480][T28700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1831.671492][T28700] R13: 00007fd1f7b86038 R14: 00007fd1f7b85fa0 R15: 00007ffc47ea8e98 [ 1831.671525][T28700] [ 1831.705316][T28275] usb 4-1: Using ep0 maxpacket: 32 [ 1831.729239][T28275] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1831.729267][T28275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.736042][T28275] usb 4-1: config 0 descriptor?? [ 1831.871522][T28589] udevd[28589]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1831.894911][T24854] usb 8-1: new high-speed USB device number 106 using dummy_hcd [ 1831.897576][T28702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7669'. [ 1831.942747][T28275] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1831.959718][T28275] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1831.965575][T28275] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1831.965626][T28275] usb 4-1: media controller created [ 1832.017782][T28275] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1832.049600][T24854] usb 8-1: Using ep0 maxpacket: 32 [ 1832.057306][T24854] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1832.057338][T24854] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.080459][T24854] usb 8-1: config 0 descriptor?? [ 1832.173627][T28589] udevd[28589]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 1832.681969][T24854] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1832.699103][T24854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1832.699855][T24854] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1832.699887][T24854] usb 8-1: media controller created [ 1832.759691][T24854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1833.174691][T28275] az6027: usb out operation failed. (-71) [ 1833.175164][T28275] az6027: usb out operation failed. (-71) [ 1833.175178][T28275] stb0899_attach: Driver disabled by Kconfig [ 1833.175187][T28275] az6027: no front-end attached [ 1833.175187][T28275] [ 1833.175631][T28275] az6027: usb out operation failed. (-71) [ 1833.175645][T28275] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1833.245988][T28275] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input140 [ 1833.252241][T28275] dvb-usb: schedule remote query interval to 400 msecs. [ 1833.252256][T28275] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1833.266942][T28275] usb 4-1: USB disconnect, device number 47 [ 1833.374243][ T5808] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1833.442272][T28275] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1833.534247][ T5808] usb 3-1: Using ep0 maxpacket: 32 [ 1833.537129][ T5808] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1833.537160][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.550725][ T5808] usb 3-1: config 0 descriptor?? [ 1833.601265][T28589] udevd[28589]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1833.698103][T28616] udevd[28616]: symlink '../../loop8' '/dev/disk/by-diskseq/98.tmp-b7:8' failed: Read-only file system [ 1833.755284][ T5808] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1833.758551][ T5808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1833.759260][ T5808] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1833.759291][ T5808] usb 3-1: media controller created [ 1833.836665][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1833.996206][T28275] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1834.077013][ T5808] az6027: usb out operation failed. (-71) [ 1834.077842][ T5808] az6027: usb out operation failed. (-71) [ 1834.077859][ T5808] stb0899_attach: Driver disabled by Kconfig [ 1834.077869][ T5808] az6027: no front-end attached [ 1834.077869][ T5808] [ 1834.078828][ T5808] az6027: usb out operation failed. (-71) [ 1834.078845][ T5808] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1834.092861][ T5808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input141 [ 1834.101075][ T5808] dvb-usb: schedule remote query interval to 400 msecs. [ 1834.101097][ T5808] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1834.113820][ T5808] usb 3-1: USB disconnect, device number 109 [ 1834.162665][T28275] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1834.162693][T28275] usb 9-1: config 0 has no interface number 0 [ 1834.163972][T28275] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1834.164004][T28275] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1834.165759][T28275] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1834.174508][T28275] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1834.174537][T28275] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1834.174558][T28275] usb 9-1: Product: syz [ 1834.174573][T28275] usb 9-1: SerialNumber: syz [ 1834.311750][T28275] usb 9-1: config 0 descriptor?? [ 1834.396693][T28275] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 1834.462669][T28275] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input142 [ 1834.482073][T28275] ------------[ cut here ]------------ [ 1834.482089][T28275] URB ffff888034a5f700 submitted while active [ 1834.482111][T28275] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18b0, CPU#0: kworker/0:8/28275 [ 1834.483336][T28275] Modules linked in: [ 1834.483364][T28275] CPU: 0 UID: 0 PID: 28275 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1834.483398][T28275] Tainted: [L]=SOFTLOCKUP [ 1834.483406][T28275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1834.483421][T28275] Workqueue: usb_hub_wq hub_event [ 1834.483450][T28275] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 1834.483473][T28275] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 17 22 7a fb 49 83 3e 00 74 40 e8 ac fd 13 fb 48 8d 3d 55 12 c6 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 91 fd 13 fb eb 05 e8 8a fd [ 1834.483495][T28275] RSP: 0018:ffffc9000e586b40 EFLAGS: 00010283 [ 1834.483513][T28275] RAX: ffffffff86b08814 RBX: ffff888034a5f700 RCX: 0000000000100000 [ 1834.483530][T28275] RDX: ffffc9001e861000 RSI: ffff888034a5f700 RDI: ffffffff8f769a70 [ 1834.483546][T28275] RBP: 000000000000000f R08: ffffffff8f6a78b7 R09: 1ffffffff1ed4f16 [ 1834.483562][T28275] R10: dffffc0000000000 R11: fffffbfff1ed4f17 R12: 0000000000000cc0 [ 1834.483579][T28275] R13: ffff888035c86048 R14: ffff888034a5f708 R15: dffffc0000000000 [ 1834.483596][T28275] FS: 0000000000000000(0000) GS:ffff888126332000(0000) knlGS:0000000000000000 [ 1834.483615][T28275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1834.483630][T28275] CR2: 00007fff3bc28fe8 CR3: 000000006e532000 CR4: 00000000003526f0 [ 1834.483649][T28275] Call Trace: [ 1834.483659][T28275] [ 1834.483675][T28275] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 1834.483705][T28275] ? mutex_lock_nested+0x152/0x1d0 [ 1834.483735][T28275] ? cm109_input_open+0x96/0x4b0 [ 1834.483770][T28275] cm109_input_open+0x1fe/0x4b0 [ 1834.483806][T28275] input_open_device+0x1f8/0x3b0 [ 1834.483838][T28275] kbd_connect+0xf6/0x150 [ 1834.483873][T28275] input_register_device+0xd00/0x1160 [ 1834.483911][T28275] cm109_usb_probe+0x11a2/0x16a0 [ 1834.483966][T28275] usb_probe_interface+0x668/0xc90 [ 1834.484007][T28275] ? __pfx_usb_probe_interface+0x10/0x10 [ 1834.484032][T28275] really_probe+0x267/0xaf0 [ 1834.484065][T28275] __driver_probe_device+0x18c/0x320 [ 1834.484137][T28275] driver_probe_device+0x4f/0x240 [ 1834.484170][T28275] __device_attach_driver+0x279/0x430 [ 1834.484204][T28275] bus_for_each_drv+0x25b/0x2f0 [ 1834.484228][T28275] ? __pfx___device_attach_driver+0x10/0x10 [ 1834.484258][T28275] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1834.484280][T28275] ? rt_spin_unlock+0x160/0x200 [ 1834.484319][T28275] __device_attach+0x2c8/0x450 [ 1834.484350][T28275] ? __pfx___device_attach+0x10/0x10 [ 1834.484379][T28275] ? rt_spin_unlock+0x160/0x200 [ 1834.484426][T28275] device_initial_probe+0xa1/0xd0 [ 1834.484457][T28275] bus_probe_device+0x12d/0x220 [ 1834.484479][T28275] ? device_add+0x726/0xb80 [ 1834.484508][T28275] device_add+0x7b6/0xb80 [ 1834.484537][T28275] usb_set_configuration+0x1a87/0x2110 [ 1834.484594][T28275] usb_generic_driver_probe+0x8d/0x150 [ 1834.484619][T28275] usb_probe_device+0x1c4/0x3b0 [ 1834.484652][T28275] ? __pfx_usb_probe_device+0x10/0x10 [ 1834.484678][T28275] really_probe+0x267/0xaf0 [ 1834.484713][T28275] __driver_probe_device+0x18c/0x320 [ 1834.484743][T28275] driver_probe_device+0x4f/0x240 [ 1834.484774][T28275] __device_attach_driver+0x279/0x430 [ 1834.484807][T28275] bus_for_each_drv+0x25b/0x2f0 [ 1834.484830][T28275] ? __pfx___device_attach_driver+0x10/0x10 [ 1834.484859][T28275] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1834.484881][T28275] ? rt_spin_unlock+0x160/0x200 [ 1834.484920][T28275] __device_attach+0x2c8/0x450 [ 1834.484951][T28275] ? __pfx___device_attach+0x10/0x10 [ 1834.484978][T28275] ? rt_spin_unlock+0x160/0x200 [ 1834.485015][T28275] device_initial_probe+0xa1/0xd0 [ 1834.485046][T28275] bus_probe_device+0x12d/0x220 [ 1834.485066][T28275] ? device_add+0x726/0xb80 [ 1834.485091][T28275] device_add+0x7b6/0xb80 [ 1834.485120][T28275] usb_new_device+0x9f8/0x16e0 [ 1834.485159][T28275] ? __pfx_usb_new_device+0x10/0x10 [ 1834.485190][T28275] hub_event+0x2a49/0x4f60 [ 1834.485213][T28275] ? __lock_acquire+0x6b5/0x2cf0 [ 1834.485282][T28275] ? __pfx_hub_event+0x10/0x10 [ 1834.485315][T28275] ? process_scheduled_works+0xa8d/0x18c0 [ 1834.485344][T28275] ? process_scheduled_works+0xa8d/0x18c0 [ 1834.485374][T28275] process_scheduled_works+0xb6e/0x18c0 [ 1834.485444][T28275] ? __pfx_process_scheduled_works+0x10/0x10 [ 1834.485478][T28275] ? assign_work+0x3d5/0x5e0 [ 1834.485513][T28275] worker_thread+0xa53/0xfc0 [ 1834.485573][T28275] kthread+0x388/0x470 [ 1834.485598][T28275] ? __pfx_worker_thread+0x10/0x10 [ 1834.485627][T28275] ? __pfx_kthread+0x10/0x10 [ 1834.485650][T28275] ret_from_fork+0x51e/0xb90 [ 1834.485683][T28275] ? __pfx_ret_from_fork+0x10/0x10 [ 1834.485711][T28275] ? __switch_to+0xc7d/0x1450 [ 1834.485741][T28275] ? __pfx_kthread+0x10/0x10 [ 1834.485764][T28275] ret_from_fork_asm+0x1a/0x30 [ 1834.485802][T28275] [ 1834.485822][T28275] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1834.485841][T28275] CPU: 0 UID: 0 PID: 28275 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1834.485870][T28275] Tainted: [L]=SOFTLOCKUP [ 1834.485878][T28275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1834.485893][T28275] Workqueue: usb_hub_wq hub_event [ 1834.485919][T28275] Call Trace: [ 1834.485927][T28275] [ 1834.485936][T28275] vpanic+0x56c/0xa60 [ 1834.485966][T28275] ? __pfx__printk+0x10/0x10 [ 1834.485989][T28275] ? __pfx_vpanic+0x10/0x10 [ 1834.486016][T28275] ? is_bpf_text_address+0x292/0x2b0 [ 1834.486046][T28275] ? is_bpf_text_address+0x26/0x2b0 [ 1834.486084][T28275] panic+0xc5/0xd0 [ 1834.486112][T28275] ? __pfx_panic+0x10/0x10 [ 1834.486152][T28275] ? ret_from_fork_asm+0x1a/0x30 [ 1834.486177][T28275] __warn+0x315/0x4f0 [ 1834.486208][T28275] ? usb_submit_urb+0x7b/0x18b0 [ 1834.486229][T28275] ? usb_submit_urb+0x7b/0x18b0 [ 1834.486249][T28275] __report_bug+0x29a/0x540 [ 1834.486272][T28275] ? trace_sched_exit_tp+0x3a/0x150 [ 1834.486297][T28275] ? usb_submit_urb+0x7b/0x18b0 [ 1834.486319][T28275] ? __pfx___report_bug+0x10/0x10 [ 1834.486363][T28275] report_bug_entry+0x19a/0x290 [ 1834.486393][T28275] ? usb_submit_urb+0x7e/0x18b0 [ 1834.486413][T28275] ? usb_submit_urb+0x83/0x18b0 [ 1834.486433][T28275] handle_bug+0xce/0x200 [ 1834.486461][T28275] exc_invalid_op+0x1a/0x50 [ 1834.486487][T28275] asm_exc_invalid_op+0x1a/0x20 [ 1834.486507][T28275] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 1834.486529][T28275] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 17 22 7a fb 49 83 3e 00 74 40 e8 ac fd 13 fb 48 8d 3d 55 12 c6 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 91 fd 13 fb eb 05 e8 8a fd [ 1834.486549][T28275] RSP: 0018:ffffc9000e586b40 EFLAGS: 00010283 [ 1834.486567][T28275] RAX: ffffffff86b08814 RBX: ffff888034a5f700 RCX: 0000000000100000 [ 1834.486583][T28275] RDX: ffffc9001e861000 RSI: ffff888034a5f700 RDI: ffffffff8f769a70 [ 1834.486601][T28275] RBP: 000000000000000f R08: ffffffff8f6a78b7 R09: 1ffffffff1ed4f16 [ 1834.486617][T28275] R10: dffffc0000000000 R11: fffffbfff1ed4f17 R12: 0000000000000cc0 [ 1834.486634][T28275] R13: ffff888035c86048 R14: ffff888034a5f708 R15: dffffc0000000000 [ 1834.486661][T28275] ? usb_submit_urb+0x74/0x18b0 [ 1834.486694][T28275] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 1834.486717][T28275] ? mutex_lock_nested+0x152/0x1d0 [ 1834.486742][T28275] ? cm109_input_open+0x96/0x4b0 [ 1834.486776][T28275] cm109_input_open+0x1fe/0x4b0 [ 1834.486811][T28275] input_open_device+0x1f8/0x3b0 [ 1834.486844][T28275] kbd_connect+0xf6/0x150 [ 1834.486877][T28275] input_register_device+0xd00/0x1160 [ 1834.486913][T28275] cm109_usb_probe+0x11a2/0x16a0 [ 1834.486965][T28275] usb_probe_interface+0x668/0xc90 [ 1834.487003][T28275] ? __pfx_usb_probe_interface+0x10/0x10 [ 1834.487028][T28275] really_probe+0x267/0xaf0 [ 1834.487062][T28275] __driver_probe_device+0x18c/0x320 [ 1834.487092][T28275] driver_probe_device+0x4f/0x240 [ 1834.487123][T28275] __device_attach_driver+0x279/0x430 [ 1834.487156][T28275] bus_for_each_drv+0x25b/0x2f0 [ 1834.487180][T28275] ? __pfx___device_attach_driver+0x10/0x10 [ 1834.487209][T28275] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1834.487231][T28275] ? rt_spin_unlock+0x160/0x200 [ 1834.487265][T28275] __device_attach+0x2c8/0x450 [ 1834.487291][T28275] ? __pfx___device_attach+0x10/0x10 [ 1834.487318][T28275] ? rt_spin_unlock+0x160/0x200 [ 1834.487355][T28275] device_initial_probe+0xa1/0xd0 [ 1834.487385][T28275] bus_probe_device+0x12d/0x220 [ 1834.487414][T28275] ? device_add+0x726/0xb80 [ 1834.487443][T28275] device_add+0x7b6/0xb80 [ 1834.487472][T28275] usb_set_configuration+0x1a87/0x2110 [ 1834.487525][T28275] usb_generic_driver_probe+0x8d/0x150 [ 1834.487555][T28275] usb_probe_device+0x1c4/0x3b0 [ 1834.487584][T28275] ? __pfx_usb_probe_device+0x10/0x10 [ 1834.487610][T28275] really_probe+0x267/0xaf0 [ 1834.487645][T28275] __driver_probe_device+0x18c/0x320 [ 1834.487676][T28275] driver_probe_device+0x4f/0x240 [ 1834.487710][T28275] __device_attach_driver+0x279/0x430 [ 1834.487744][T28275] bus_for_each_drv+0x25b/0x2f0 [ 1834.487767][T28275] ? __pfx___device_attach_driver+0x10/0x10 [ 1834.487797][T28275] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1834.487821][T28275] ? rt_spin_unlock+0x160/0x200 [ 1834.487860][T28275] __device_attach+0x2c8/0x450 [ 1834.487892][T28275] ? __pfx___device_attach+0x10/0x10 [ 1834.487921][T28275] ? rt_spin_unlock+0x160/0x200 [ 1834.487960][T28275] device_initial_probe+0xa1/0xd0 [ 1834.487986][T28275] bus_probe_device+0x12d/0x220 [ 1834.488004][T28275] ? device_add+0x726/0xb80 [ 1834.488028][T28275] device_add+0x7b6/0xb80 [ 1834.488057][T28275] usb_new_device+0x9f8/0x16e0 [ 1834.488091][T28275] ? __pfx_usb_new_device+0x10/0x10 [ 1834.488123][T28275] hub_event+0x2a49/0x4f60 [ 1834.488146][T28275] ? __lock_acquire+0x6b5/0x2cf0 [ 1834.488215][T28275] ? __pfx_hub_event+0x10/0x10 [ 1834.488249][T28275] ? process_scheduled_works+0xa8d/0x18c0 [ 1834.488277][T28275] ? process_scheduled_works+0xa8d/0x18c0 [ 1834.488307][T28275] process_scheduled_works+0xb6e/0x18c0 [ 1834.488366][T28275] ? __pfx_process_scheduled_works+0x10/0x10 [ 1834.488411][T28275] ? assign_work+0x3d5/0x5e0 [ 1834.488445][T28275] worker_thread+0xa53/0xfc0 [ 1834.488501][T28275] kthread+0x388/0x470 [ 1834.488522][T28275] ? __pfx_worker_thread+0x10/0x10 [ 1834.488546][T28275] ? __pfx_kthread+0x10/0x10 [ 1834.488569][T28275] ret_from_fork+0x51e/0xb90 [ 1834.488600][T28275] ? __pfx_ret_from_fork+0x10/0x10 [ 1834.488627][T28275] ? __switch_to+0xc7d/0x1450 [ 1834.488658][T28275] ? __pfx_kthread+0x10/0x10 [ 1834.488680][T28275] ret_from_fork_asm+0x1a/0x30 [ 1834.488717][T28275] [ 1834.489049][T28275] Kernel Offset: disabled