last executing test programs: 10m34.653212073s ago: executing program 1 (id=867): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000005f000106"], 0x18}], 0x1}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002100df4c2abd70c6270000220000e900104e88cb7634ce58ea220000"], 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c800600f344562600000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(0xffffffffffffffff, 0x80286f4e, &(0x7f0000000180)) ioctl$FE_SET_FRONTEND(r9, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x2, 0x1c, 0xa}}) 10m33.010277369s ago: executing program 1 (id=873): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RXATTRWALK(r1, &(0x7f0000000000)={0xa, 0x1f, 0x1, 0x4}, 0xca80) write$cgroup_subtree(r1, &(0x7f00000018c0)=ANY=[], 0xfe1b) write$UHID_INPUT(r1, &(0x7f0000000300)={0x8, {"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", 0x1000}}, 0x1006) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x3}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="8c158cab00579e194b4f374c364dac5161dd586b3e8d19ad59707f20e1a8df1895b0d67bae16055b889c586abdbe2a6b21aa8554d296982f03df3b5eb2375c8681e312af6c26ed3e911341954216180c28ab86b7b301cb57ba4c821d0ec4b0ef5058af08a710f25ebd9769720389c2533edf875ab8f8677417c4c47358dce80f060707b291817bdc7c1f385b16654d226cdb7b65e01d11deafdaa613f636660ea74ed7848dbc5fecb325e8d0960759faca952b7ff16fd8f1e898f0d70502c10d155851d3731183c2c1efb0f84ce03b21c771367de4199d8536200e3e42ef", 0xde}, {&(0x7f0000000300)="25ab7500ab03338108fb0bae45dc3f225e490f66ce5e43ba09e0ea56e948a1a4bb4929b137bb4138af61ed919ccd4daa681e71d4469aec21d5aa2e75ac70e15acd6c2bd4c19a31018ce28f8093a90c16c0993c378c9fd8abd1255c37341dd686c8f995d43d1f8a2e8f9e36b58cb277857cce3674fae6ed3a01b23daa97e975b8290bbf0aee85df015ed157d8d32c8d4b7ccb48085e59eb779f720fc3fd7bec1a5ba843912e", 0xa5}, {&(0x7f0000000f00)="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", 0xff8}, {&(0x7f0000000000)="2c0fd4c1e609c52028f9b0dcde1e54a5eb727489a864b64635", 0x19}, {&(0x7f0000000040)="06ad83250f35e812edc70372431bf56f", 0x10}, {&(0x7f00000000c0)="8f5c24dd10d765ad8c4e23fd3a8c32442206b1ab50544db8c6bfd8e4049041293a9bfed31744ae0ef2db113b", 0x2c}, {0x0}, {&(0x7f0000000440)="717c9f786bcb19df48fa969ca60b3e4f9960201e29cd1d1e1f10d01cd6f15843372cf8aad1c24f429c1cd9c0ef2bd98d0dca63e5b06b6b2d4d6dc0b9c2781bf9da46e1ecc2ffcb91a39a9af8d56d1260ca420371ef57473b6ccb016d3c4de6066b32c1c02052bdcb9b1ef43e20d74681e09a81ed12d825b0faa9db03c6c684d0006d63c8d502afee8cf1279515a1235cd20ec2ace69b64e97aa924a15d926bf717c845", 0xa3}], 0x8, &(0x7f0000000580)=[@iv={0x60, 0x117, 0x2, 0x46, "835aee1cc9f9a6d5f4cfb7c920d863ce13d37ff8fe4dd21ec31da65f5acb33905f84786b0a7f605ba68801c6229c1d7367c2a251163ac926fa08698b04cef1b26f7a5d261611"}, @assoc={0x18, 0x117, 0x4, 0x81}], 0x78, 0x40}], 0x1, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ec0)={@cgroup, 0xffffffffffffffff, 0x8}, 0x20) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000640)) 10m32.897875463s ago: executing program 1 (id=874): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[], 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x6f0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48}) chroot(&(0x7f00000001c0)='./file0\x00') r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x4170010, r2, 0x0) setxattr$security_capability(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)=@v2={0x2000000, [{0xffffffff, 0x7}, {0x101, 0x3}]}, 0x14, 0x3) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) lstat(&(0x7f0000000300)='./file0\x00', 0x0) getpid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x80000001, 0x5, 0x0, 0x100, 0x25, 0x21100e6, r8}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000640)={'veth1_to_bond\x00', &(0x7f0000000180)=@ethtool_test={0x1a, 0xc, 0x1, 0x5, [0x2, 0x8, 0x3, 0xaf0, 0x2]}}) 10m31.026834864s ago: executing program 1 (id=883): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x0, {0x8}}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRES8=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x9, &(0x7f00000001c0)=[{0xdc61, 0x8, 0x2, 0x28e9}, {0x7ff, 0x1, 0x5, 0x5}, {0x3, 0x4, 0x5, 0x10000}, {0xa, 0x5, 0x8, 0xffffff87}, {0x7, 0x54, 0xd, 0x1dfc}, {0xa317, 0x2, 0x7, 0xbe}, {0xe, 0x4, 0x3, 0x4}, {0xffa5, 0x3, 0xb, 0xb6d7}, {0xff, 0x1, 0x1, 0x6}]}) 10m30.067313271s ago: executing program 1 (id=888): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x9, 0x7ffc0002}]}) creat(&(0x7f0000000240)='./file0\x00', 0x122) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x1714, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000004180)={0x8, 0x20000000}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) futex(&(0x7f0000002200)=0x2, 0x5, 0x0, 0x0, &(0x7f0000002240)=0x3, 0xab02000d) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1802020, &(0x7f0000000340)=ANY=[]) 10m29.706887584s ago: executing program 1 (id=892): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x16, 0x633, 0x21000000, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@remote, 0x4e23, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0xfffffffffffff11c, 0x81, 0x9, 0x7}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x2) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10m28.129602776s ago: executing program 32 (id=892): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x16, 0x633, 0x21000000, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@remote, 0x4e23, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0xfffffffffffff11c, 0x81, 0x9, 0x7}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x2) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20.962936002s ago: executing program 5 (id=3833): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) 20.689887382s ago: executing program 5 (id=3834): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000027c0)={0x2c, &(0x7f0000002600)=ANY=[@ANYBLOB="201814"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="af524c9e8969585570cfd1ee97145642664e94e63c1367bc94794306188326be173e1d011313653d84d12f3f5828ce88d775964b23b738fa661cde19d1bbfa085c3ac66ae798406a7f589e8cc8634ac8e86dbd8a3f7ce73918653b1b6aec4e6b5016712b44c31674f7bd95069427d2b80f", @ANYRES32, @ANYBLOB="100000000000000002000000000000000000000000000000000000000b172efb7803872168d04b430c8ce2c62f14fb3f880ce8c279d5dc8afef5ca770326a15248fbf42912601057296600fa88f583fca7"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0xcf, 0x6, 0xfffffff9, 0x10, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x8, 0x8, 0x8}}) sendmmsg$inet(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="63911811a523003be2427789d19fc4e55fc86cff15e48f884822b5df966b32ab6c4dd1c100df5475b3d13341d4bf35071a0ae5cf65b8e1bebafd587c1fd152f7e02017d4323793efaa9d0c95651ea566162f4c2134fdfbef447322a9c72fe216de4f67934e3e76ee9a8e1b65fa65364f17", 0x71}, {&(0x7f0000000200)="c57a0ab690baf506590f056c29acb384a5a6e5d899429b296ed4f9f52126a8a2f7ff965a2dc13f0b607cac38f465ca488167868e8909c6fe66fad45283267a0af9627e1b1d7abfd40c66a561868655bd8508a06a57101bb6ebc7bfa722ce3b61c956fa", 0x63}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="c7574b3ab4acfbd02ecaa79b5ec66834cec3f0", 0x13}], 0x4, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x18}}, @ip_retopts={{0x50, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x40, 0x0, 0x2, [0x5, 0x3, 0x3, 0x7, 0x4, 0xae88]}, @rr={0x7, 0x3, 0xf}, @timestamp={0x44, 0xc, 0x94, 0x0, 0x6, [0xbf, 0x4]}, @rr={0x7, 0xb, 0xc7, [@broadcast, @dev={0xac, 0x14, 0x14, 0x15}]}, @timestamp_addr={0x44, 0x4, 0x97, 0x1, 0x1}, @ra={0x94, 0x4}]}}}, @ip_retopts={{0x78, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x69, 0x1, 0x4, [{@rand_addr=0x64010102, 0xcb}, {@multicast2, 0x101}]}, @rr={0x7, 0x13, 0xca, [@loopback, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x37}, @empty]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x73, 0x1, 0xa, [{@loopback, 0x1}, {@loopback, 0x9}, {@rand_addr=0x64010102, 0x5}, {@empty, 0x278}, {@multicast2, 0x8}, {@broadcast, 0x37a4}]}, @lsrr={0x83, 0x7, 0x24, [@rand_addr=0x64010100]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @private=0xa010101}}}], 0x170}}], 0x1, 0xc0) 17.260143026s ago: executing program 5 (id=3844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}}, 0x0) 17.171293617s ago: executing program 5 (id=3845): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4", @ANYBLOB="40a9384824eabf84d308"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffb}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x5c}}, 0x0) 16.606173694s ago: executing program 5 (id=3846): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$isdn(0x22, 0x3, 0x26) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r4 = syz_io_uring_setup(0x1327, &(0x7f0000000300)={0x0, 0x7303, 0x10100, 0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000100)=0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r7, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xfffffffe}, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x15) ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x3, 0x0, 0x0, 0x5, 0x1}}) write$uinput_user_dev(r8, 0x0, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r8, 0x5501) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x10c723ea3b7f50b4, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r10, 0x4038ae7a, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c42, 0x0) r12 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x84823, 0x0) preadv(r12, &(0x7f0000000480)=[{&(0x7f0000001540)=""/4096, 0x1000}], 0x1, 0x6, 0x9) ioctl$TIOCPKT(r11, 0x5420, &(0x7f0000000180)=0x3db) ioctl$TCSETSF(r11, 0x5404, &(0x7f0000000000)={0xfff, 0x7, 0x10, 0xfff7fff5, 0xe, "262176cf2c9b385e6c136b700c94d8c036e0ff"}) 11.059439147s ago: executing program 2 (id=3866): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1a3807, 0x0, 0x5, 0x7fffffff, 0x0, 0x0, 0x0, 0x4f2a7b1674a2054a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r3 = gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x6, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f00000003c0)={0xe, @capture={0x0, 0x0, {0x8, 0x1}, 0x81, 0x800007}}) r7 = io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x80, 0x0, 0xffffffff}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$pppoe(0x18, 0x1, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES16, @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 9.694557806s ago: executing program 0 (id=3870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0xd0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x3c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0xff51, 0x1, 0x21}}]}]}, 0xd0}}, 0x0) r1 = syz_clone(0x800000, &(0x7f0000000040)="3b482220c72dccffbe2780ad7ca70b22381a39c8d74f69bfbc5597ba3999099c0515e9bf3e13654050ab85", 0x2b, &(0x7f0000000100), &(0x7f00000002c0), &(0x7f0000000300)="bea61ed97846b051f553daf4e01dfc6a814d64d00cd802662ca3cf9c67534f7e86c7491286c506d5616e84301cd649f8e47b65a0f26304b3b24cbaac0f146e91f6cd434b355bec1fbf7b193fdd83801d674179ecf8177a8055056950c48985eee87ad96c6f44e14be1c43cfdb700f9fb903b004ff8557f1795128a5de8aa31118ffd5b78d1741767230c316ffc47c803b911e14318ec2dc6b716cc8816043569e75e7c665c4d874bba808305fa98230bce7032c51978fff6f7856febd266cf95807176680ffb3519fd5ccdad3bf65544db525016736defcd2fed59dd81d8d9b428afcc5b5d62082f3c18a478d3b7509e6125c18b92ed306984ab870450dee86a3ae4a1582c23bc4b89f24e11cd539df9d9dff1e169b8d69b21ffd2160b9ecd7bb1da11a84076852ec803245fa82d12c194ad604e0cc0ffa5e52121de4238ddd93cb44d908086f052be60ff66a700fc07070eeec806235bb4ad514aec2b5c0ed53a7765d694fa519ef96eeaf87332f7f3c1ba10fdfb4cecd3e0a71d03abe5b786361784ac88b04a25672051417b198c9b57fe1ffbfe997ec10b8fb8c05129b5e709766300b707080616785f10724d8769a35ddf6f4131b47ad52086bcb7595b7e2207f887c4a9ab909a53fbf6c68a80dbf7ae11235dafede4ffa34541d4f58da4561e1c5297e7a4d49517a4fb2613f3d789bb743a13fa5752c7f64f5bb482b9c6b27f8515e0b401d7233756b5d87b54c4636142dfb3ee00bb6494d3acac1a0b11fb507eb04f504ddd6a80628d4ebad91e7ddd165acb603eb3fbc8c14bdf55a9b9cdb7e57b87d4974e0ea4de7775fc7176e2d8ba637940c503b7feb1abec9dcdbbad26e7670eb675500788452b0a28c68f229f4871ae97617d41c80b524bc3b07ebb0acc97c301214e4264d83ad9f5dd9b029bb8770f8c63fc7122cd6156e9aa83699b4a5557ebb93e3c24cf9543d2461c2883635b1732885e0b7fc92399f83b70e47cc94eb4237c953f121e3ebcb154ebb92257f1dd44c140a225b0e4a1f79c0fd85226e298741711f1301341899cf846b63861343ec4ad5bea619fbb005b7cdb350621d1889a4611d24afc49f4d78d8736e5459f8de0aaf85c9222281ba810d536d9c952dae908fe1832410fa3025fe6634b66f21e3e1e7dcbc35de366276e02cd4a3973bcd48f7acb9f4095022ff30bdf8f427868b73e1cf996a82e565e67ab5b8331e687368b4ff606107eff8996a69b9f085020e5519750da9f51c9d7a37869344888e834c52a806628b37f5e85442c1c58d857c2a7066f64421b72b6ce1950502b38feffde225d7189746253f0b29258635079b29f668f8711fbf152a781948d59f75669d181cdf5783d5591ebfc2af57ac59aa0f65c3d5c15c92373378b033ecedfa128692861f4662bfd2d93f30ef84d257c163623a1a9f0646b3e8402bd1a38193c47cac3d44971120888c52038147662023c151b325907b3a34f55af8e2f6c09493971444b5888e8b39b83078348fc2701c8cd07a25d73150431a7b504809efdd9c212b3956fbf83f759fef8bd42844c6e132757701afaf517bcf6a58b65a4232c698e6153504b81aaaa23ca0d9d63e5d588f2efe3cab2bc990a9a91f6195057a16ec2bc17b267ee0ba3f62155808e14e926e7c0f242b10708291853fb1297dfadef11b5ab4ddbb818e32db1f20bb4a579c40395210e1c75122f0e9ed979bf7206ee03a7efd5b21b23b8e2c921dcff078eb7e7134ad847c300060fa606f78d3dc6bcee39c11597efbf000f3926bbb5de6b0525db4a2f55bd15a8b1fd8e584ea41035547348703f3436b15bac852076504bc5a5d6439d6c0b0a44f8aa9d02632a857fd2542e5097c364f83a0ed2e5214a4d0a791369fc3d29e050ab5c5aaa2b959c19d9bf38b59efdb2fd775ded66b5dcc2861efd15352bc0df743434fedf130ce7b425f9a16d64efcca5432d8ad0043203d762ebf375786729bb8059a4d7ef3dcedd870a2225da56bff8f1fedd5d0c6e96c0eb8e807596cd157aa6c46b8ff34be879a0b35f32d8b437fc34f7e23e8bff96eb0b0b4c537c31167f8f883524f23bdc0413fa9b318d1bffa9d5a93de1cae057588553818e267cf3c6304bfe6965e73b54e16779728cc722864b3cc35ed0e4006ec35e9d04310aa68e1a608952f4b4de4927834cd4a4b710055b4355f2a8c757b09be4fa596c3086dd33ef3ade18ccb91c4773ccbbdac29cf640239f17c7feca7cdc10b1431aba379c833d4ca1c5c273b733db08d0273a577343b955a7cfa7abd33d7a692919093c37003578257ff1238c4af24687473449a4946d4874411649fcd05852a820083e2155d25cf7d94d6b751bae437c5e2c03adc203a1a1fef1069ce52968953bdf8766adf57f7b5be631a97380fe3ff98e2614736406f0db615f10d011cd5a27f0702ea1bf5c8762b769254c5f5b98d427dc394a9c25980ac7c4cef4f6c44eee2626993bccc38e396c4e19149d06e87c3220e9e885cb8d7d4e0e2314d3aa2a7a95f03ad9474e5a3d7dd411236eac79bc49eed33f0d6b3df76e78e1df49916949b6e71fa334bc1564afb65a578ab9ad758fe868a754cc3ae6a784a030924b147edbc8ac9d471a2d558ebab9b59d264833d9bb46d5a9f9027f30c798927e0b5e8d3ce30970d211a44ce0dcff4685eba85d50bb97e48555ee76cab7c9628d90b3925278414e316fac9fc7951c50fea8ea6c8500793027b87d412758e58985aa80a63e7cae0a1dadcc369b0bdf5c1dde0693eedcffc49b5b34581d6c50a689b629ffd8025b4972431afcc2158409727e324af496b35b2c9061ba668fcb1040d5d4fffee25c93ef7314d6d8a44bd8161c9ea4ad1f1798182ad0fdcf2c39a794129db692adc6ae5314bfd866c8aed6740682deb1912532bc85d95ad468df1c70c228abd3c87d5b74325d79d4728bdb7b7a1f84485fbdc8e11587f5bb083baed919e02a695618b4a6be322221fb6608a904d8dba16113e860a5eb1155fc7e1753a15753da68d6a75ffceeb75d7aef1bde52af169e423e4cc6c4ba6ba39078e341df58d9e42eef871e646ebb2fe7fe3c2f486b762e48b865ee4937aa6a44722c0242c3a4a32184b67dc87d40b5de8bc19156d2bbfeb2c0685fc47d73e16e485ac546f810cf25dd343cc1db257baab742ed10fd5d487c96c992e7853145bfe5dd5c1b9f3a8816eb86b7236aae25dbab7954bd330003aba56034907205dc758a7540ac577d2b14cc0d179485b62f78a0baa6d40b2bdda7202bb443f020377798c0a4cf2e734ee033e58e43e891c3fab53f77089750880d131a810c3c243ea267829fc96946abe29a8a8c704ef343d51dd9b4c296124a533f9e80333c8030450f39b2d37e6dccdb3b5a36bbe368e56720edc3cd5ea041ada7e4129df35c2f3f5938ad479b65fdbde67209db286a22fee8039def55e7c24dd54354594a153fd017908843c7463edae5ff801b9ec66523fa0f524a759d60eaf72eb08048ad084d7009ccefe40f9f0723937903115d50e1b5ce456ea448cc6609638a2a37a6dd450d44d3a0a250d68acbc8393e864cc76210e4854687243a0146133e356591070b643024d564727db1b6c20e01c60e11bcd1a754473f455a2ad867694beca2237f1e2971cfd4e32e39f0926ecf40b336bc800a3fd6192209023b5f75effd4e208f0af6144b089532e5a0028e95e315c9897b7e9e3e6e1765c27ab3b45c6d1e1f7d7cb2eb527828c0110192b3400ba348df1b834035b230fef10df7e01015b8d1c58391afec793269be091b167017c7cfba1ad4b3cccce4c5ba86c88890d1e4725eacc11c7e19be3edb027c02867b6c10a5d8c195601e68a852c345a56b2df4c3e33b4db1aa9e4f053691572a9f37a527f7694f5c7b058251dd54e958346fb5edc8c5f7ae9e488976bcee28c7f8e5668ddb813c8d3e17d1988ef0b91170e9f090398e122649eb2a46bfb8c4dbbb751a6f93ccf587f69063243e1a15878b75a87d591696ee4c580e6b375f15284471684cdac20b3a6f2d1d60c502827af30086721c99dd25de10a138f588f383df9e2329cb085fb4484c0c41d845d593019bbf8a53ffbc2bf5bb9a2b31cf924839129c96bf382386f77e56cfe13cb6d6a460431ae19fc0536ea8001031d69c3bc8a1d9b28705fb99473d01407dd98a285295556a373dba9e1d1277c660441238d78415b98f376184b29164117d7a83af3e07abb120df8b9414cdea44e4adf90089d3135be3d0ff1b104adffdac1aa4f41efb66e580301696f7e1034038505ec5819e91b3d6cb63e603850ad64c004381120e2537a56c097f548556ac7e8e70d4b0374e138a48e15d9be64b143eed694423687e68e09c98e56c052f6b48d1941998e9c58a33285c0592952575749be93f5fea4ead5a1e95acdcbf03a82b8d3bc1003fc7e883001f24ad034ba37f08c628e871a62e8efc2c3419bac9bdf79a53d7590fac7b5bfb53036a3b16c4049938de34dc351bb5e9a9f25adbac8fc074aa85165797ff9becdf966c91b2024c904b8c3917c269bc7d1947a2dc6fe6e17f67200b675edfe5b5dbf90c34773a4113f96fa5f5a392364122b3fddb517513102dc3bae1508acda41fc04745ccdb52db8e0a1641a5d9df7480ec9442b39d06c831140be6ca210055e4e363dca6bec600d8ef966510ef6098e8e100c2c4e5d9c802c9fc7e1eca1066026a9dbd2ea86fc334dc02a4fa324fd8fa8bfbebeb82a69517087bc99075d12ff814eaee570dc0322ac8894ed78e4f2ad6fa4d1b0ce1649d62e125c6782a2f96abd4c4ae589298e59facaaf0d0007795266810d7490a5c43e4819e03e039fb848423c57cdf08d80d21df4c028c0691f2e9a05c79a64e2319c27c4f9d2910ddc1231820783c719143ee9e869dcab3997812bda70ecaa78a3f132b2a5c418e721c326193ae1e472bb61368bbcaf1b2dea1e0d1b5a65fa909d45b3382418c63cb59c81a3153ab32b2c9e7d124fefb312a8df78e694756fdb1ee1756acf0f32cdedb0ec7299682317791f083a96050025ebbf301f5dba30603d938b073ab1ea027c11c9b7264d4425f5c7840d0a8303eaa9bfb16388801125669c4bdaf1500de024ef40ad6dae8989d4a8a3603e1af11a6e7c6f0f5ee2f8f5e1ef7ab671b02ad5ab210d98057f259e1a71f75f04bfe1d96391500591a5ad62009ba50e3f9045a4958f3c24f5cec88f7c58708ea1c6bc1d69469f028f5e727da6c27bac8128cbf2eeef77c3582ef1be90d5922679d4b832e736e00d8232067ffcc05eedd4e854db3b89dbfc1f2b149af5067fc9cd18bcf8a9f504b1b5d6c16e27f8e6d7868464dad32a54b0ccb6b644342b2900fb75d414c754b23f5dee26ba65d4ffe29bbfd961d0a2463201c4aa28efd7b506e6e59b0a9f822b1a4997c63b0deb1fceb084036b739b400356d15e51afc49dda5173e54e14a741a76c3dae7538d1f32212133fde3ca5c425b046454eee473dbff54eee053833a884d8978ef61ce5e961cce02af668aca29cd9cacf68f360e8e10780b62454294119c453dcb22e3711bf30e150e8499a4b3be88c3c99a55e5bcf5dd2b533343e4eead3bdf921d0fce02d27a923cf0cea854df7f03a7590435b0099fa1dcea04e84598426353b94cef7ee9dfc77b19da4732ae30b5b94d9e78b0deae4ffce3da21ae970afc0e8d94d206ff7d0a86530fc216c7fb654424035fda6f056ed84097d202c5b3198f7d05bf012e39c83b026f8e6b9b314f74af94fbd59bf36f970f30c7cb71eac3d4e1a228a6") prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCFLSH(r2, 0x540b, 0x1) r3 = syz_usb_connect(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESOCT=r0], 0x0) syz_usb_ep_write(r3, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") 8.699183806s ago: executing program 0 (id=3873): connect$unix(0xffffffffffffffff, 0x0, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6(0xa, 0x6, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 8.149929892s ago: executing program 0 (id=3874): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x40, 0x2, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xb}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) unshare(0x20000400) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(r3, 0x10001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x4000000, 0xffdffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$admmidi(0x0, 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup2(r6, r6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x528, 0x188, 0xe0, 0xffffffff, 0x2a0, 0x0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast, @gre_key=0x72c9, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, r5, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000000180)=""/112, 0x70}, {&(0x7f0000000680)=""/220, 0xdc}, {&(0x7f0000000780)=""/173, 0xad}], 0x6}, 0x12101) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 7.631850511s ago: executing program 2 (id=3875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x3c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x86}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}]}]}]}}]}, 0x6c}, 0x1, 0xc00000000000000, 0x0, 0x1}, 0x0) 7.162608888s ago: executing program 2 (id=3876): socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000}) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x27f0, &(0x7f0000000340)={0x0, 0x400000, 0x10100, 0x400001, 0x28c}, &(0x7f0000000080), &(0x7f0000000000)=0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) io_uring_register$IORING_REGISTER_FILES2(r4, 0xd, &(0x7f0000000880)={0x7, 0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000000c0)=""/166, 0xa6}, {&(0x7f0000000440)=""/138, 0x8a}, {&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000200)=""/32, 0x20}, {&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000000600)=""/197, 0xc5}, {&(0x7f0000000700)=""/232, 0xe8}], &(0x7f0000000300)=[0x6, 0x7ff, 0x7, 0x8, 0x3, 0x8]}, 0x20) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x8aae, 0x100, 0x0, 0x20000131, 0x0, r2}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}) io_uring_enter(r2, 0x8184c, 0x0, 0x9, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r7, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800002, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x2, 0xd, 0x1, 0x4, 0x8001000, 0x80000002, 0x51, 0x200008, 0x800, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x80000005, 0x12, 0x7fc, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x7fff, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x5e1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x3, 0x6, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0x5, 0x7fff, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x210003, 0x79c], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x1, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x81, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x4, 0x80000004, 0xffff, 0xd, 0x40, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7fc, 0x27c, 0x4, 0xfffffffb, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x4b) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/key-users\x00', 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000900)={0x4, r8, 0x2}) write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb) 6.969445925s ago: executing program 2 (id=3877): openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x902) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x800, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x3, 0x6, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0xb639, 0x2, 0x1000000c, 0x0, 0x6, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x1ff, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x6000000, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 6.944036078s ago: executing program 3 (id=3878): r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x110}}, 0x0) r2 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r7 = socket(0x200000000000011, 0x4000000000080002, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r7, &(0x7f0000001100)={0x11, 0x8, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = dup2(r7, r7) sendmmsg$unix(r10, &(0x7f0000008380), 0x400000000000174, 0x4008890) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r2, 0x0, 0x0, 0xffffffa5, 0x1, 0x1}) io_uring_enter(r2, 0x8022d0, 0x20, 0x0, 0x0, 0x0) msync(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000055}, 0x24008041) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) 6.446432669s ago: executing program 0 (id=3880): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7c, 0xb, 0xc000, 0xec8f, 0x6, 0x84, 0xffffffbf, 0x1, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r2, 0x81}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000100)="7800000019001f05b9409b0dffff000d0207be040205060506144007430005000f000000fac8388827a685a168d9a446040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e22, 0x8, @mcast2, 0xf}}, 0x0, 0x0, 0x3, 0x0, "bbd6140100190000000080735e5b95aab8940000000000000040079f3c7ec0682e000034c688d5f3fcb74e706d0cfb1bca8814edc42596e918a802afa9b2c1b314badac22000"}, 0xd8) setuid(0xee01) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}]}, 0x48}}, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x5, 0xed, 0xa, 0x0, 0x2, 0x0, 0xd46e, 0x5f, r2}, 0x20) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000050000000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 5.339122702s ago: executing program 3 (id=3881): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009880)={0x8c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 4.474619903s ago: executing program 2 (id=3882): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) pselect6(0x40, &(0x7f0000004600)={0x2, 0x0, 0x8, 0x7, 0xffffffffffffffe8, 0x401, 0xffffffff}, 0x0, &(0x7f0000004680)={0x9, 0xfff, 0xd3, 0x5, 0x7, 0x400, 0x9, 0xa1}, &(0x7f00000046c0)={0x0, 0x989680}, 0x0) syz_usb_connect(0x4, 0x44, &(0x7f0000001fc0)={{0x12, 0x1, 0x40, 0xeb, 0x3d, 0x7d, 0x8, 0x4e2, 0x1420, 0x30ad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x6, 0xfa, 0x90, 0x8, [{{0x9, 0x4, 0x0, 0x77, 0x0, 0x0, 0x51, 0xa5, 0x9}}, {{0x9, 0x4, 0x33, 0x7, 0x0, 0x2, 0xd, 0x0, 0x6, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0xb7c8, 0x1, 0x7, 0x4}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x4, 0x44, &(0x7f0000001fc0)={{0x12, 0x1, 0x40, 0xeb, 0x3d, 0x7d, 0x8, 0x4e2, 0x1420, 0x30ad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x6, 0xfa, 0x90, 0x8, [{{0x9, 0x4, 0x0, 0x77, 0x0, 0x0, 0x51, 0xa5, 0x9}}, {{0x9, 0x4, 0x33, 0x7, 0x0, 0x2, 0xd, 0x0, 0x6, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0xb7c8, 0x1, 0x7, 0x4}}]}}]}}]}}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0x8c) (async) truncate(&(0x7f0000000000)='./file1\x00', 0x8c) close(r2) syz_usb_connect$cdc_ecm(0x3, 0x147, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x135, 0x1, 0x1, 0x5, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xa, 0x24, 0x6, 0x0, 0x0, "63a2e896b4"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xad1, 0x9, 0x0, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0x3, 0x7f, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x5, 0x3, 0x80, 0x9, 0x3}, @mdlm_detail={0xcb, 0x24, 0x13, 0x6, "fa221a1eb6dc882e131c6b89860ef2743b98a25129fb4af2cc1bec897fff71f526db4ac7555117e40e9f482515c164b6f31d18db155233a6e56973fa51b7473c515568dbd4c2f827368883653859a72dad1fce28dbb904e59dbdc531cc968ad078ae38a6c3dca242236192d3860ba7fc5d7fdf826fe7d5b409bc03bc96fa47711892cdd92f2bc225916f6455f4e2a319b7929839e1c76d435e1c3d4279b14255c446d18eb321558b16844750936904aed5ebbe5594c469b5027fde54c26aa8db1b1e2a64c68240"}, @ncm={0x6, 0x24, 0x1a, 0x1, 0x20}, @acm={0x4, 0x24, 0x2, 0xb}, @acm={0x4, 0x24, 0x2, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xc1, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x0, 0xc}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x2, 0xff, 0x5, 0x40, 0x8}, 0x22, &(0x7f00000001c0)={0x5, 0xf, 0x22, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x3, 0x4, 0x3, 0x62}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x9, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x5, 0x6, 0x800, 0x5}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2c09}}, {0x83, &(0x7f0000000240)=@string={0x83, 0x3, "8428146a8ffceabf3cbe21eafd9ef6b81a1cf849913675fc4945de3259ef4e70a7f761e39a986ac6ddb81bd8a627a074c36606e2086b4926bc7b3eb49797832b15a959e46ad2bd9ac0f0f6f67a2f1a3da1f2b55b0cdba7ae9f27ae002a5b5dd25554c6faf540f8fe79d0af5a464e932f75d8431fdc8b4095d50b3fe88ccaa00af6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40b}}]}) 3.993872771s ago: executing program 3 (id=3884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x20, 0x0, 0xffffffff}}, 0x50}}, 0x4000800) 3.654706372s ago: executing program 3 (id=3885): ftruncate(0xffffffffffffffff, 0x81ff) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/file4/file6\x00', 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001640)="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"/1504, 0x5e0}, {&(0x7f00000005c0)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb30000000000000000f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafc07000000000000006232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b003a9498097e7ceeef3dd32fa7f095961e0fd177ade538b8e296688cb9dd0a4164af7d281fac82e8c814960b3ac0812363760fdbbca96983b6b02bdf37ef6d8f29c24777afb60fd7ce7304eaa5cde059d4ec63c18ad9a76d0864c5c0d04cf0d7928", 0xd4}, {&(0x7f0000001280)="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", 0x21d}, {&(0x7f0000000cc0)="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", 0x148}, {&(0x7f0000000b00)="15c84609b06c6d85a5ca6f3a9a242f214aee93161b717090c0c852a05393abd8992d91576f57bbd3", 0x28}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 3.654368237s ago: executing program 2 (id=3886): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x3, r2, 0x0, 0x3ff, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf6d0e000) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea2, 0x80009) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82) write$UHID_INPUT(r5, &(0x7f00000030c0)={0x18, {"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", 0x1000}}, 0x1006) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 3.451287452s ago: executing program 3 (id=3887): syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x18, &(0x7f0000000280)=@req3={0x0, 0x8, 0x1, 0x101, 0x9, 0x9, 0x2}, 0x1c) read$char_usb(r1, 0x0, 0xb3) pipe2(0x0, 0x4080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x2, @value=0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f00000002c0), &(0x7f0000000580)=0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48000, 0x0) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000000280)) connect$tipc(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket(0x10, 0x2, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r7, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) ioctl$SIOCGSTAMP(r7, 0x8906, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 3.316511569s ago: executing program 4 (id=3888): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x38d682) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) openat$cgroup_ro(r1, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000180000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800821300007baaf0ff00000000bf87000000000000b5070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7040000080000004602010076001e00bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 3.002623983s ago: executing program 4 (id=3889): r0 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f00000001c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000007400"], 0x5000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b160000000000000000020000082801007470706f7879000014000280080001400000000a08000340000000130900010073797a30000000000900020073797a320000000014e2d60a000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x850}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x5) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x2, 0x9, 0x801, 0x0, 0x0, {0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa7c}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x81}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x58}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x20004081) 2.632048775s ago: executing program 4 (id=3890): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x10) close(0xffffffffffffffff) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x2c}, 0x8) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newtfilter={0x2c, 0x2c, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xffff}, {0xc, 0x9}, {0x3, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r5 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r5, &(0x7f0000007d80)=[{{0x0, 0x0, 0x0}, 0xfffe}], 0x1, 0x2, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x0) 2.593793241s ago: executing program 0 (id=3891): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x68241) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0x8000000000000000, 0x6, 0x1c, @buffer={0x0, 0xd00, 0x0}, &(0x7f0000000300)="47c10c000000", 0x0, 0x80000001, 0x0, 0xffffffffffffffff, 0x0}) 1.966555614s ago: executing program 0 (id=3892): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="2c958249f5", 0x5}], 0x1}}], 0x1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[], 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r11, @ANYRES32=r7], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000840)={r8, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000001c0)={0xffff, 0x1ff, 0x94c, 0x2, 0xf800, 0xfed}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r12 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r12, 0xc0105512, &(0x7f0000000200)) 1.83229034s ago: executing program 4 (id=3893): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ioprio_get$pid(0x0, r2) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="88000000000000002900000036000000880d00000000000001030000000001000502547e050208c2c20400000004c2040000004b04010701060000000000000740000000010e03c0ff07000000000000000000000000000080000001000000000004000000000000000b0000000000000004000000000000007fffffffffffffff00000000001000"], 0x88}}], 0x1, 0x20000015) connect$qrtr(0xffffffffffffffff, &(0x7f0000000180)={0x2a, 0x1, 0x4000}, 0xc) 1.451510559s ago: executing program 4 (id=3894): r0 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000304000340000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) read(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'rose0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$I2C_SMBUS(r8, 0x720, 0x0) 421.203302ms ago: executing program 5 (id=3853): syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 263.572967ms ago: executing program 3 (id=3895): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000200)="ac0c775772090000000000000061266339ab5c3d2d74627245ba39e20ad20ca53e83e21f5bc3b802a7cbb25c5cc253bede2a7c57f070af1db90d9a601c241860e0222d5f1a00ef2028b41859cd12c43095ed5949c53e3b2fad7fdd1378d7df1efe3dc710d6d279ebc6976dfa1435d22c4177f0831cb5308cd3766dcc1578f94fca9574a7be424a34e1c4b33a2d6cd263996095294f1b99d2e57120e134b41a82c1d3038f83e8ac8cbff754383ec7a50ce1bd519af6b9da20", 0xfea0}) close(r4) request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', r3) add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)="79cf", 0x2, r3) syz_open_dev$I2C(0x0, 0x1, 0x402) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10) r5 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0xffffbfff, '\x00', @string=&(0x7f0000000180)=0xa3}}) fstatfs(r1, &(0x7f0000000480)=""/113) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000100)={0x14, &(0x7f0000000600)={0x0, 0x11, 0xd3, {0xd3, 0x23, "4ea02b9e6029865cd333ccdf6047998e7b9815ffaa9048359bf24e03604332b3fad5dfeb9b534951a541f96c68e95034d8e35a62c9756c39e5276148ec930137562c239c7ce08eb0a84c463aecd6543ebc455adf9e5aaa85a7941a31c6756a025fb99da7815c876edafd39423924e917abe7754c38a834444a8e605feceb11fa9a75a5bb041c366619f10e83949c54f23677bc8eae36fd60525567fb010e4fb6bc01e725467ba068e65e447825a1c48a95ba732c1b1dec5d6a360aabe101bef0eb305049ae94398bbd2dee60e4d99ca4c1"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000800)={0x20, 0x15, 0xc8, "9d739c90794253a2266dada6f8736a0c6e2ff58bf8da08c371b80c4fd3c2667b1a2e4279df213d1b818436b72699d389cee6f71f5d5794a04336a258a37c966ba348dd419d5d43a3068a7ad037d2278732ac6abde925a70776af5e4518f0214890eff37384ebc150304053f872b909a3b783d6c1d63c6a3b3dcf7b6fbcb3e0cad66d2559b0e16a72481d757496ce555aff76149191a642674623029fe3b599640bc8a738cb4826395b0e1cc6a86c96078cd60937863d7397bce1ab663a82395f3e718d6e4a7c57f9"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x0, 0x1, 0x1, "1c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=3896): syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x2a440) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) semctl$SETALL(0x0, 0x0, 0x11, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_usb_connect(0x4, 0x64c, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xd2, 0x10, 0x91, 0xbf9e561f31bb4d1e, 0xbda, 0xffef, 0x591b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63a, 0x2, 0x1, 0x81, 0xd0, 0x32, [{{0x9, 0x4, 0xea, 0x7, 0x4, 0xff, 0xff, 0xff, 0xf2, [], [{{0x9, 0x5, 0xd, 0x10, 0x400, 0x81, 0x4, 0xe0, [@generic={0xb7, 0x9, "782ca06ac7a034ca249a669084eb7861835a1cf9e6baad291e1b2a6823bd5df004355fe775edded7e383b41bfbac7fdb601dc32b9b45c872b733328643a872d4e719294005eeb143b4cb8bac8fc2a7b66fa4b9e70cae03ca86d9893c0bdf4874e32dc2966c22b96c39cb0a1965965ee5ac655d2cf2cb23e9abe20145daeb3d64f6485ea4331c6de814eb277081ad14c639ce760de385ee3d19835f2cf73328392654c8263eca40d6da4a0ddb897fe9994087fee2fa"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xfffb}]}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0x3, 0x5, 0x1, [@generic={0x6, 0x1, "4877a230"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x9c, 0x5, 0x9b}}, {{0x9, 0x5, 0x1, 0xc, 0x20, 0x4, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x1}]}}]}}, {{0x9, 0x4, 0xc9, 0x7, 0xc, 0x2, 0x6, 0x0, 0x9, [@generic={0x2, 0x21}], [{{0x9, 0x5, 0x7, 0x10, 0x40, 0x4, 0x9, 0x1}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0x2, 0x2, 0x5, [@generic={0x59, 0x4, "da35d4e729459dd411091d13bfa5d6c811dacf3ef0f72a6477c3408cff30812e9e9db42771da9f9af5eabaccf62cb01115cfa9259c35a97481e833957ec40e75517f8ecf5df77c9d92d9250743558c3da283b21ea36203"}, @generic={0xdc, 0xf, "913c98e464641888e51145bfbb5f066c84337e298dc7bbba3f00730c6fa04f7791f1eb6e50487a7014ed5dc6e9bc59b6645fa0fda975aade74fcf0152d03aec65fe359b2040b1abda7a94b995bc0b0108a06c1a2906932b0ff8ca9dedeca943a8894cf74fbfe39e31499fcd729dd030157f239dfe2146a933cea0054b8a5e58efc648b03f1db92863af3e6e0032b0cad6305659e5fbc8348b97c079a1ee250b64d6097907ad7c8f301a1ed82786d401da5446b595d245f59f32931fca8e6deb601bf596bd2ce86f60e21343ad91a6cc3978cf0d8ae695a71c285"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x6, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2c, 0x5}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x3, 0x5, 0x4}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0x7, 0x6, 0xf, [@generic={0xf0, 0x30, "776675ea37dd73ab36fc78d90e577f9e4fe56bb3ff54ccde0f31795c48f665b77755512622597f47924b989d4d849d9cc2be154e405efeb43cbb646ee03b38ee22287c8a056482fdc1a570c836a8a0f41895b71476d0393cbb9394e4d5bceee5f72a9468efacb589203df8655fbb896878dc0b322fc189abc08764b8e1eb562c2f590730523e80ad19d5a41a6c3118f382c73ced2d1fbe61c35cd74b366ebf36f7867a02476f13de781d0fe41b24a4616192e0d742e32c7ca8e5b81a4ead895f2ba9f0c8dda851578f54b79c547236e6944bccde290c4ae09b2542877bffeb610da738e690af13e28328c76da416"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0xca, 0x80, 0x10, [@generic={0x87, 0x2, "ba55e0eb54a1bd4468b4a4fea8d894e4fcfdb3bdc53239b6b3c8333d6e63725a5c3299b355e3258d263307f733819aef0d10ec2d2ab9e808c8366c04f66d01d979478e62c07ff260abb2e88bbb8beece953a93ed0600bb0b9b3c19d2a688ad5c370e7ff31eecc8db8ba3a9e3d233af64ecd295ff1998f6cb34d8d5343976371dd13b17a890"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x5, 0x64, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x3ff}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xff, 0x76, 0xe1, [@generic={0x67, 0x2a, "39796f5eb79fb238d534c9f53ccad5ec6eb72a989c37dc5279cb8196c1c6920bc9a0fa3932f02199977dc6de4504a22d162e5d1a0a1f1773b64c51b2e00659d5143ba6512537127dcbdd5c81bb7431e5aed379e1a5de4c247e8adb9a8d49e04901cdf76e8b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x4d7}]}}, {{0x9, 0x5, 0x2, 0x3a1a5264062d6f26, 0x200, 0x1, 0x8, 0xcb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x3}, @generic={0xbc, 0x7, "20e9f0943d0745a29288fcd591b4aba42f3b5dcfc0e72a6439e052822d8dda605a978b850fd243ac7df2fb554a804945712f3b4d2bd4f1215d72431ae1164602df49f189a168065db15bbe23e0110d6211ca276ace500cce2517c0e26a383b60f009c72aeb6649ae01bc80ba8408c2a981bcee9f0e0912c1b2f31871d8e1c9e104031cc04434825bc16939ea6471ac91d0ff95e762f5747c48e2083f29d27762f3173e3b1cec6f4d7931cb193a91ba60342c10d22c98def5fe85"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x2, 0x54, 0xa, [@generic={0xc2, 0x21, "821f4ece390a4c8f41687026f16bb29df6e32e30bc3b0cb96d1a75842751b3e670f3eb50475807f51fda232fa2991201f5c19fdc0f8105e3d0463b6cce0841199876c43a7667b6b25e3c0e158bf865aaab9b71401c12cebe4700ae00ffb932a06fcb36e741fb0def692544427fe9e681a7d2378f936e887126e1a9e2419fc3b79dff592655b24733bff04d3d1d6a8d1225d2a0747f0166cb48278fcb14d6a9bb90217110765ac1a74e0d455b2c706bad345a6f96a1ab7d417db9526a73b5e356"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x4}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0xf8, 0x4, 0x6}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x8, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x5}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x46, 0x0, 0x62, 0x10, 0x4}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x92, &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, {0xa7, &(0x7f0000000ec0)=@string={0xa7, 0x3, "ab4e47676b48fa8709d8874632b6ab33bdc9fa6c05412aa46f80e81b95dafd88f3861214b1483133d10311bcabd69e0925d97d1ee4819b04058a1b63bfb0d17086a6bb1e867b1e3ed19f69220b57f00c895bcb806c003a31322e61c6f0dbc93af4347c299eaaf5f1bc64ee0390d9791cec80889b1b30af60762239a2ebd4c94ed6bb1186d4ec9a134230bb72282b3439b181fe512ce3649807e5c5fe7b9f61f3ab488a0eb7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc0f6}}]}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) unshare(0x20060400) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000000)=0x488, 0x4) sendto$inet(r10, 0x0, 0x0, 0x44800, &(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$sock_timeval(r9, 0x1, 0x15, &(0x7f0000000340)={0x0, 0xea60}, 0x10) kernel console output (not intermixed with test programs): .177140][ T60] pim6reg (unregistering): left allmulticast mode [ 771.183804][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.206889][ T5898] usb 6-1: Manufacturer: ᤫ欫ᐐ猶뱄荅Ἅﴮ蠕ओ阠鯦肂菘ﵷ￉똿嚝띴윻༏켐州熃ࡸ✂䙂釥趴醝ࣺ﵋䶴h夾砜剅ꯚ覠Ʇ颦듞蔕詴魿܊⋓喌곺塲풵ந⁡졳ꖳ肩舲㒷᩿撯櫜îⰆ쒒奼陱䛀ฌ䀰뻻諰멨昌⮙셥鈁검塄隈⽘呪꽅፹⩉፪口ﲈ薬䅠೙﹈魂퀏칙괋ᾂ溌猻悛阠Ċ [ 771.257154][ T60] team0 (unregistering): Port device batadv2 removed [ 771.274536][ T5898] usb 6-1: SerialNumber: 쏄ᚣ둡䦒滙秨灵㌘鸻煀쯦ꍨ̍敞⴨鮃䜏텧๶渙靆蝱᫲商暟柫諨Ⱒ֭鐦⡘ᔜ㒁蕩쐒ｚ튧݂偺忢訓ဗ窆ꓦ塞乑푒瀙읂䆌፭ꯝ煵㬕烌ᓿ∢̙뎉穲졁ﴎ㈫尟諎Г㞠롅၆袓跈嘟⴯㌮팦閝罈᰼⧌槶ןͱ駔넂ꪭ絰紫ꇷ㥇殭㧜꯶맦⡚ቴấ鋎留禲㖵 [ 771.308097][ T60] team0 (unregistering): Port device batadv1 removed [ 771.377881][T17146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3420'. [ 771.469358][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 771.500099][ T30] audit: type=1326 audit(1771417938.988:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.3.3420" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6c739c629 code=0x0 [ 771.525707][ T9] em28xx 3-1:0.132: board has no eeprom [ 771.600350][ T9] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 771.609497][ T9] em28xx 3-1:0.132: analog set to bulk mode. [ 771.615984][T15847] em28xx 3-1:0.132: Registering V4L2 extension [ 771.705417][T17149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3417'. [ 771.722993][T15847] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 771.771777][T15847] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 771.795947][T15847] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 771.860475][T15847] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 771.949839][ T60] team0 (unregistering): Port device team_slave_1 removed [ 771.975289][ T60] team0 (unregistering): Port device team_slave_0 removed [ 772.013287][T15847] em28xx 3-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 772.092873][ T5832] usb 3-1: USB disconnect, device number 94 [ 772.119117][T15847] em28xx 3-1:0.132: failed to trigger read from i2c address 0x86 (error=-19) [ 772.120187][ T5832] em28xx 3-1:0.132: Disconnecting em28xx [ 772.307399][T15847] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 772.321634][T15847] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 772.358633][T15847] em28xx 3-1:0.132: No AC97 audio processor [ 772.384121][T15847] usb 3-1: Decoder not found [ 772.409309][T15847] em28xx 3-1:0.132: failed to create media graph [ 772.415932][T15847] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 772.460234][T15847] em28xx 3-1:0.132: Remote control support is not available for this card. [ 772.489940][ T5832] em28xx 3-1:0.132: Closing input extension [ 772.532783][ T5832] em28xx 3-1:0.132: Freeing device [ 772.613964][T17144] geneve2: entered promiscuous mode [ 772.651328][T17144] geneve2: entered allmulticast mode [ 772.964313][ T5898] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 773.018638][ T5898] usb 6-1: USB disconnect, device number 57 [ 773.073142][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3425'. [ 773.302762][T17166] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 773.313860][T17166] team0: Port device batadv5 added [ 773.947670][T17179] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 774.745361][T17198] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3433'. [ 774.985891][T17196] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 774.986096][T17196] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 774.986277][T17196] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 775.005365][T17196] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 775.021104][T17196] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 775.546268][ T5913] IPVS: starting estimator thread 0... [ 775.576215][T17207] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3438'. [ 775.593611][T17209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3437'. [ 775.697066][T17208] IPVS: using max 29 ests per chain, 69600 per kthread [ 775.825619][ T30] audit: type=1326 audit(1771417943.298:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17202 comm="syz.0.3437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a38d9c629 code=0x0 [ 775.935289][T17218] fuse: Bad value for 'fd' [ 776.249369][ T5913] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 776.428858][T17225] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 776.449088][T17225] team0: Port device batadv1 added [ 776.821233][ T5913] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 776.851363][ T5913] usb 3-1: config 1 interface 0 has no altsetting 0 [ 776.875126][ T5913] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 776.896728][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.922570][ T5913] usb 3-1: Manufacturer: ᤫ欫ᐐ猶뱄荅Ἅﴮ蠕ओ阠鯦肂菘ﵷ￉똿嚝띴윻༏켐州熃ࡸ✂䙂釥趴醝ࣺ﵋䶴h夾砜剅ꯚ覠Ʇ颦듞蔕詴魿܊⋓喌곺塲풵ந⁡졳ꖳ肩舲㒷᩿撯櫜îⰆ쒒奼陱䛀ฌ䀰뻻諰멨昌⮙셥鈁검塄隈⽘呪꽅፹⩉፪口ﲈ薬䅠೙﹈魂퀏칙괋ᾂ溌猻悛阠Ċ [ 777.085025][T13832] Bluetooth: hci3: command 0x0c1a tx timeout [ 777.085180][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 777.091493][T13831] Bluetooth: hci2: command 0x0c1a tx timeout [ 777.097801][ T5834] Bluetooth: hci5: command 0x0c1a tx timeout [ 777.103500][T13831] Bluetooth: hci1: command 0x0406 tx timeout [ 777.126554][ T5913] usb 3-1: SerialNumber: 쏄ᚣ둡䦒滙秨灵㌘鸻煀쯦ꍨ̍敞⴨鮃䜏텧๶渙靆蝱᫲商暟柫諨Ⱒ֭鐦⡘ᔜ㒁蕩쐒ｚ튧݂偺忢訓ဗ窆ꓦ塞乑푒瀙읂䆌፭ꯝ煵㬕烌ᓿ∢̙뎉穲졁ﴎ㈫尟諎Г㞠롅၆袓跈嘟⴯㌮팦閝罈᰼⧌槶ןͱ駔넂ꪭ絰紫ꇷ㥇殭㧜꯶맦⡚ቴấ鋎留禲㖵 [ 777.630670][T17235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3440'. [ 777.921342][T17239] netlink: 'syz.5.3448': attribute type 49 has an invalid length. [ 777.941871][T17241] FAULT_INJECTION: forcing a failure. [ 777.941871][T17241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.988562][T17241] CPU: 1 UID: 0 PID: 17241 Comm: syz.4.3447 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.988597][T17241] Tainted: [L]=SOFTLOCKUP [ 777.988605][T17241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 777.988617][T17241] Call Trace: [ 777.988625][T17241] [ 777.988633][T17241] dump_stack_lvl+0xe8/0x150 [ 777.988666][T17241] should_fail_ex+0x412/0x560 [ 777.988694][T17241] _copy_to_user+0x31/0xb0 [ 777.988720][T17241] simple_read_from_buffer+0xe1/0x170 [ 777.988760][T17241] proc_fail_nth_read+0x1bb/0x230 [ 777.988786][T17241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 777.988813][T17241] ? rw_verify_area+0x2a6/0x4d0 [ 777.988841][T17241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 777.988866][T17241] vfs_read+0x20c/0xa70 [ 777.988891][T17241] ? fdget_pos+0x246/0x320 [ 777.988921][T17241] ? __pfx___mutex_lock+0x10/0x10 [ 777.988949][T17241] ? __pfx_vfs_read+0x10/0x10 [ 777.988978][T17241] ? __fget_files+0x2a/0x420 [ 777.989006][T17241] ? __fget_files+0x3a0/0x420 [ 777.989029][T17241] ? __fget_files+0x2a/0x420 [ 777.989061][T17241] ksys_read+0x150/0x270 [ 777.989091][T17241] ? __pfx_ksys_read+0x10/0x10 [ 777.989131][T17241] do_syscall_64+0x14d/0xf80 [ 777.989157][T17241] ? trace_irq_disable+0x3b/0x150 [ 777.989181][T17241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.989200][T17241] ? clear_bhb_loop+0x40/0x90 [ 777.989223][T17241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.989241][T17241] RIP: 0033:0x7f9a3dd5cece [ 777.989260][T17241] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 777.989276][T17241] RSP: 002b:00007f9a3ec93fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 777.989298][T17241] RAX: ffffffffffffffda RBX: 00007f9a3ec946c0 RCX: 00007f9a3dd5cece [ 777.989312][T17241] RDX: 000000000000000f RSI: 00007f9a3ec940a0 RDI: 0000000000000004 [ 777.989325][T17241] RBP: 00007f9a3ec94090 R08: 0000000000000000 R09: 0000000000000000 [ 777.989337][T17241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.989346][T17241] R13: 00007f9a3e016038 R14: 00007f9a3e015fa0 R15: 00007f9a3e13fa48 [ 777.989379][T17241] [ 778.586091][T17254] fuse: Bad value for 'fd' [ 779.003215][T17259] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 779.014633][T17259] team0: Port device batadv2 added [ 779.138807][T17262] FAULT_INJECTION: forcing a failure. [ 779.138807][T17262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.158083][T17262] CPU: 1 UID: 0 PID: 17262 Comm: syz.4.3453 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.158118][T17262] Tainted: [L]=SOFTLOCKUP [ 779.158125][T17262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 779.158137][T17262] Call Trace: [ 779.158145][T17262] [ 779.158154][T17262] dump_stack_lvl+0xe8/0x150 [ 779.158186][T17262] should_fail_ex+0x412/0x560 [ 779.158210][T17262] _copy_from_iter+0x1d3/0x1670 [ 779.158237][T17262] ? rcu_is_watching+0x15/0xb0 [ 779.158269][T17262] ? __pfx__copy_from_iter+0x10/0x10 [ 779.158299][T17262] ? netlink_sendmsg+0x650/0xb40 [ 779.158317][T17262] ? skb_put+0x11b/0x210 [ 779.158342][T17262] netlink_sendmsg+0x6c0/0xb40 [ 779.158372][T17262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.158396][T17262] ? aa_sock_msg_perm+0xf1/0x1b0 [ 779.158420][T17262] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 779.158441][T17262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.158458][T17262] ____sys_sendmsg+0xa68/0xad0 [ 779.158491][T17262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 779.158522][T17262] ? import_iovec+0x73/0xa0 [ 779.158548][T17262] ___sys_sendmsg+0x2a5/0x360 [ 779.158579][T17262] ? __pfx____sys_sendmsg+0x10/0x10 [ 779.158635][T17262] ? __fget_files+0x2a/0x420 [ 779.158659][T17262] ? __fget_files+0x3a0/0x420 [ 779.158692][T17262] __x64_sys_sendmsg+0x1bd/0x2a0 [ 779.158720][T17262] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 779.158754][T17262] ? __pfx_ksys_write+0x10/0x10 [ 779.158784][T17262] do_syscall_64+0x14d/0xf80 [ 779.158809][T17262] ? trace_irq_disable+0x3b/0x150 [ 779.158845][T17262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.158864][T17262] ? clear_bhb_loop+0x40/0x90 [ 779.158888][T17262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.158906][T17262] RIP: 0033:0x7f9a3dd9c629 [ 779.158925][T17262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.158942][T17262] RSP: 002b:00007f9a3ec94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.158964][T17262] RAX: ffffffffffffffda RBX: 00007f9a3e015fa0 RCX: 00007f9a3dd9c629 [ 779.158978][T17262] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 779.158991][T17262] RBP: 00007f9a3ec94090 R08: 0000000000000000 R09: 0000000000000000 [ 779.159002][T17262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.159014][T17262] R13: 00007f9a3e016038 R14: 00007f9a3e015fa0 R15: 00007f9a3e13fa48 [ 779.159044][T17262] [ 779.184134][T17257] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 779.568609][ T5913] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 779.582670][ T5913] usb 3-1: USB disconnect, device number 95 [ 779.604392][T17257] team0: Port device batadv4 added [ 780.002467][T17268] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3454'. [ 780.228254][T17273] netlink: 'syz.2.3454': attribute type 25 has an invalid length. [ 780.236144][T17273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3454'. [ 780.278542][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.293816][T17273] netlink: 'syz.2.3454': attribute type 25 has an invalid length. [ 780.306978][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.330402][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.356591][T17273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3454'. [ 780.367443][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.681282][T17286] FAULT_INJECTION: forcing a failure. [ 781.681282][T17286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.701985][T17286] CPU: 1 UID: 0 PID: 17286 Comm: syz.0.3458 Tainted: G L syzkaller #0 PREEMPT(full) [ 781.702021][T17286] Tainted: [L]=SOFTLOCKUP [ 781.702029][T17286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 781.702041][T17286] Call Trace: [ 781.702051][T17286] [ 781.702060][T17286] dump_stack_lvl+0xe8/0x150 [ 781.702093][T17286] should_fail_ex+0x412/0x560 [ 781.702120][T17286] strncpy_from_user+0x36/0x2b0 [ 781.702145][T17286] path_setxattrat+0x191/0x440 [ 781.702173][T17286] ? __pfx_path_setxattrat+0x10/0x10 [ 781.702189][T17286] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 781.702241][T17286] ? ksys_write+0x242/0x270 [ 781.702263][T17286] ? __pfx_ksys_write+0x10/0x10 [ 781.702288][T17286] __x64_sys_fsetxattr+0xbc/0xe0 [ 781.702318][T17286] do_syscall_64+0x14d/0xf80 [ 781.702343][T17286] ? trace_irq_disable+0x3b/0x150 [ 781.702369][T17286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.702389][T17286] ? clear_bhb_loop+0x40/0x90 [ 781.702413][T17286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.702433][T17286] RIP: 0033:0x7f2a38d9c629 [ 781.702451][T17286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.702468][T17286] RSP: 002b:00007f2a39ba0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 781.702490][T17286] RAX: ffffffffffffffda RBX: 00007f2a39015fa0 RCX: 00007f2a38d9c629 [ 781.702505][T17286] RDX: 0000000000000000 RSI: 0000200000002480 RDI: 0000000000000003 [ 781.702517][T17286] RBP: 00007f2a39ba0090 R08: 0000000000000002 R09: 0000000000000000 [ 781.702530][T17286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.702541][T17286] R13: 00007f2a39016038 R14: 00007f2a39015fa0 R15: 00007f2a3913fa48 [ 781.702573][T17286] [ 782.030241][T17292] netlink: 'syz.3.3461': attribute type 49 has an invalid length. [ 782.039271][T17293] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3459'. [ 782.179914][T17296] fuse: Bad value for 'fd' [ 782.258878][T17298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3460'. [ 782.426743][ T30] audit: type=1326 audit(1771417949.908:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.0.3460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a38d9c629 code=0x0 [ 782.502098][T17301] netlink: 'syz.3.3464': attribute type 5 has an invalid length. [ 782.659966][T17303] loop2: detected capacity change from 0 to 7 [ 782.718788][T17303] Dev loop2: unable to read RDB block 7 [ 782.819420][T17303] loop2: unable to read partition table [ 782.835582][T17303] loop2: partition table beyond EOD, truncated [ 782.855728][T17303] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 784.056788][ T5890] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 784.489049][ T5890] usb 6-1: Using ep0 maxpacket: 32 [ 784.610293][T15847] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 784.675144][T17310] tipc: Failed to remove unknown binding: 66,1,1/0:512309761/512309763 [ 784.804668][T17310] tipc: Failed to remove unknown binding: 66,1,1/0:512309761/512309763 [ 784.813206][T15847] usb 5-1: Using ep0 maxpacket: 32 [ 784.822460][T15847] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 784.856212][ T5890] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 784.874041][ T5890] usb 6-1: config 0 has no interface number 0 [ 784.891277][T15847] usb 5-1: config 0 has no interface number 0 [ 784.891803][ T5890] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 785.040033][T17333] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 785.049516][T17333] team0: Port device batadv3 added [ 785.164369][T15847] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 785.164377][ T5890] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 785.164404][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.232596][T15847] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 785.244381][T15847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.262869][T15847] usb 5-1: Product: syz [ 785.277287][T15847] usb 5-1: Manufacturer: syz [ 785.286782][T15847] usb 5-1: SerialNumber: syz [ 785.294686][T15847] usb 5-1: config 0 descriptor?? [ 785.309273][T15847] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 785.323491][T15847] em28xx 5-1:0.132: Video interface 132 found: [ 785.461623][ T5890] usb 6-1: Product: syz [ 785.465862][ T5890] usb 6-1: Manufacturer: syz [ 785.496471][ T5890] usb 6-1: SerialNumber: syz [ 785.534232][ T5890] usb 6-1: config 0 descriptor?? [ 785.601550][ T5890] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 785.655978][ T5890] em28xx 6-1:0.132: Video interface 132 found: [ 785.725883][T15847] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 786.126162][ T5890] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 786.821623][T17338] netlink: 'syz.0.3473': attribute type 49 has an invalid length. [ 786.909621][T15847] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 786.937337][T15847] em28xx 5-1:0.132: board has no eeprom [ 787.026531][T15847] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 787.039822][T15847] em28xx 5-1:0.132: analog set to bulk mode. [ 787.056161][ T5913] em28xx 5-1:0.132: Registering V4L2 extension [ 787.211923][T15847] usb 5-1: USB disconnect, device number 84 [ 787.264209][T15847] em28xx 5-1:0.132: Disconnecting em28xx [ 787.308489][T17347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3476'. [ 787.339470][T17348] loop4: detected capacity change from 0 to 7 [ 787.387674][T17348] buffer_io_error: 2133 callbacks suppressed [ 787.387695][T17348] Buffer I/O error on dev loop4, logical block 0, async page read [ 787.389099][ T5890] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 787.448670][ T5890] em28xx 6-1:0.132: board has no eeprom [ 787.473883][T17351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3475'. [ 787.496548][T17348] Buffer I/O error on dev loop4, logical block 0, async page read [ 787.535089][T17348] Buffer I/O error on dev loop4, logical block 0, async page read [ 787.556796][T17348] Buffer I/O error on dev loop4, logical block 0, async page read [ 787.628474][ T5890] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 787.639039][ T5890] em28xx 6-1:0.132: analog set to bulk mode. [ 787.658009][T17348] Buffer I/O error on dev loop4, logical block 0, async page read [ 787.675131][T17348] Buffer I/O error on dev loop4, logical block 0, async page read [ 787.719664][T17348] Buffer I/O error on dev loop4, logical block 0, async page read [ 787.819513][T17348] ldm_validate_partition_table(): Disk read failed. [ 787.826688][T17348] Buffer I/O error on dev loop4, logical block 0, async page read [ 787.836907][T17348] Buffer I/O error on dev loop4, logical block 0, async page read [ 787.852379][ T5913] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 787.874005][ T5913] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 787.888687][T17348] Buffer I/O error on dev loop4, logical block 0, async page read [ 787.897031][ T5913] em28xx 5-1:0.132: No AC97 audio processor [ 787.909134][ T5913] usb 5-1: Decoder not found [ 787.914042][ T5913] em28xx 5-1:0.132: failed to create media graph [ 787.972300][ T5919] usb 6-1: USB disconnect, device number 58 [ 787.995860][ T5919] em28xx 6-1:0.132: Disconnecting em28xx [ 788.028707][T17348] Dev loop4: unable to read RDB block 0 [ 788.053018][ T5913] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 788.123848][T17370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3479'. [ 788.199171][ T5913] em28xx 5-1:0.132: Remote control support is not available for this card. [ 788.206645][T17369] netlink: 'syz.5.3480': attribute type 5 has an invalid length. [ 788.215791][T17348] loop4: unable to read partition table [ 788.224888][T17348] loop4: partition table beyond EOD, truncated [ 788.226527][T13547] em28xx 6-1:0.132: Registering V4L2 extension [ 788.237284][T17348] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 788.302590][T17372] sctp: [Deprecated]: syz.4.3477 (pid 17372) Use of int in max_burst socket option. [ 788.302590][T17372] Use struct sctp_assoc_value instead [ 788.413602][ T30] audit: type=1326 audit(1771417955.898:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17363 comm="syz.3.3479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6c739c629 code=0x0 [ 788.977379][T13547] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 789.007488][T13547] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 789.036503][T13547] em28xx 6-1:0.132: No AC97 audio processor [ 789.071189][T13547] usb 6-1: Decoder not found [ 789.087917][T13547] em28xx 6-1:0.132: failed to create media graph [ 789.117826][T13547] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 789.180012][T17388] netlink: 'syz.4.3484': attribute type 49 has an invalid length. [ 789.298546][T13547] em28xx 6-1:0.132: Remote control support is not available for this card. [ 789.307969][T15847] em28xx 5-1:0.132: Closing input extension [ 789.315963][ T5919] em28xx 6-1:0.132: Closing input extension [ 789.367360][T15847] em28xx 5-1:0.132: Freeing device [ 789.374556][ T5919] em28xx 6-1:0.132: Freeing device [ 790.335888][T17412] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 790.348086][T17412] team0: Port device batadv5 added [ 790.370825][ T30] audit: type=1326 audit(1771417957.848:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17413 comm="syz.3.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c739c629 code=0x7ffc0000 [ 790.461183][ T30] audit: type=1326 audit(1771417957.858:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17413 comm="syz.3.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c739c629 code=0x7ffc0000 [ 790.524437][ T30] audit: type=1326 audit(1771417957.858:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17413 comm="syz.3.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6c739c629 code=0x7ffc0000 [ 790.557539][ T30] audit: type=1326 audit(1771417957.858:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17413 comm="syz.3.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c739c629 code=0x7ffc0000 [ 790.693125][ T30] audit: type=1326 audit(1771417957.858:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17413 comm="syz.3.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6c739c629 code=0x7ffc0000 [ 790.743728][ T30] audit: type=1326 audit(1771417957.858:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17413 comm="syz.3.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c739c629 code=0x7ffc0000 [ 790.862998][ T30] audit: type=1326 audit(1771417957.858:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17413 comm="syz.3.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6c739c629 code=0x7ffc0000 [ 790.889434][ T30] audit: type=1326 audit(1771417957.858:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17413 comm="syz.3.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c739c629 code=0x7ffc0000 [ 790.993565][ T30] audit: type=1326 audit(1771417957.858:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17413 comm="syz.3.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6c739c629 code=0x7ffc0000 [ 791.902426][T17438] netlink: 'syz.2.3496': attribute type 49 has an invalid length. [ 792.204921][T17441] netlink: 'syz.2.3498': attribute type 5 has an invalid length. [ 792.991810][T17460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3501'. [ 793.460867][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 793.460884][ T30] audit: type=1326 audit(1771417960.938:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.3.3501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6c739c629 code=0x0 [ 794.103207][T17468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3506'. [ 794.312885][T17473] netlink: 'syz.2.3508': attribute type 49 has an invalid length. [ 794.682627][T17483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3513'. [ 795.404547][T17495] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3517'. [ 795.421884][T17495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3517'. [ 795.507541][T17495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3517'. [ 795.643573][T17504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3519'. [ 796.136794][T15847] usb 5-1: new low-speed USB device number 85 using dummy_hcd [ 796.276675][T15847] usb 5-1: device descriptor read/64, error -71 [ 796.516674][T15847] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 796.600786][T17527] ip6tnl2: entered allmulticast mode [ 796.677164][T15847] usb 5-1: device descriptor read/64, error -71 [ 796.789998][T17533] netlink: 'syz.3.3529': attribute type 12 has an invalid length. [ 796.796884][T15847] usb usb5-port1: attempt power cycle [ 797.166609][T15847] usb 5-1: new low-speed USB device number 87 using dummy_hcd [ 797.187405][T15847] usb 5-1: device descriptor read/8, error -71 [ 797.396337][T17547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3534'. [ 797.426662][T15847] usb 5-1: new low-speed USB device number 88 using dummy_hcd [ 797.457438][T15847] usb 5-1: device descriptor read/8, error -71 [ 797.546752][ T5890] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 797.568599][T15847] usb usb5-port1: unable to enumerate USB device [ 797.721804][ T5890] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 797.734705][ T5890] usb 3-1: config 0 interface 0 has no altsetting 0 [ 797.745787][ T5890] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 797.755394][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 797.764691][ T5890] usb 3-1: Product: syz [ 797.770388][ T5890] usb 3-1: Manufacturer: syz [ 797.775317][ T5890] usb 3-1: SerialNumber: syz [ 797.823005][ T5890] usb 3-1: config 0 descriptor?? [ 797.846909][ T5890] usb 3-1: selecting invalid altsetting 0 [ 798.058870][ T10] usb 3-1: USB disconnect, device number 96 [ 798.301711][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 798.386483][ T5890] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 798.546853][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 798.558417][ T5890] usb 4-1: config 8 has an invalid interface number: 188 but max is 0 [ 798.571877][ T5890] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 798.586150][ T5890] usb 4-1: config 8 has no interface number 0 [ 798.611453][ T5890] usb 4-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 798.623213][ T5890] usb 4-1: config 8 interface 188 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 798.636150][ T5890] usb 4-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 798.652341][ T5890] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 798.663007][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.674774][ T5890] usb 4-1: Product: syz [ 798.679596][ T5890] usb 4-1: Manufacturer: syz [ 798.684232][ T5890] usb 4-1: SerialNumber: syz [ 798.943368][ T5890] vmk80xx 4-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 799.009450][T17571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 799.036816][ T5890] usb 4-1: USB disconnect, device number 98 [ 799.083478][T17579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3548'. [ 799.101508][T17579] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3548'. [ 799.120210][T17574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 799.300578][ T10] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 799.329080][T17586] netlink: 'syz.4.3551': attribute type 4 has an invalid length. [ 799.351612][T17589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3552'. [ 799.371499][T17589] tc_dump_action: action bad kind [ 799.477074][ T10] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 799.491054][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 799.519514][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 799.549853][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.561304][ T10] usb 3-1: Manufacturer: ᤫ欫ᐐ猶뱄荅Ἅﴮ蠕ओ阠鯦肂菘ﵷ￉똿嚝띴윻༏켐州熃ࡸ✂䙂釥趴醝ࣺ﵋䶴h夾砜剅ꯚ覠Ʇ颦듞蔕詴魿܊⋓喌곺塲풵ந⁡졳ꖳ肩舲㒷᩿撯櫜îⰆ쒒奼陱䛀ฌ䀰뻻諰멨昌⮙셥鈁검塄隈⽘呪꽅፹⩉፪口ﲈ薬䅠೙﹈魂퀏칙괋ᾂ溌猻悛阠Ċ [ 799.654452][T17599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 799.798387][ T10] usb 3-1: SerialNumber: 쏄ᚣ둡䦒滙秨灵㌘鸻煀쯦ꍨ̍敞⴨鮃䜏텧๶渙靆蝱᫲商暟柫諨Ⱒ֭鐦⡘ᔜ㒁蕩쐒ｚ튧݂偺忢訓ဗ窆ꓦ塞乑푒瀙읂䆌፭ꯝ煵㬕烌ᓿ∢̙뎉穲졁ﴎ㈫尟諎Г㞠롅၆袓跈嘟⴯㌮팦閝罈᰼⧌槶ןͱ駔넂ꪭ絰紫ꇷ㥇殭㧜꯶맦⡚ቴấ鋎留禲㖵 [ 799.989473][ T5890] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 800.102374][T17607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3558'. [ 800.159108][ T5890] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 800.196030][ T5890] usb 5-1: config 0 has no interface number 0 [ 800.224902][ T5890] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 800.247765][T17613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3546'. [ 800.276708][ T5890] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 800.418245][ T5890] usb 5-1: config 0 interface 113 has no altsetting 0 [ 800.454821][ T5890] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 800.465567][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.485192][ T5890] usb 5-1: Product: syz [ 800.495575][ T5890] usb 5-1: Manufacturer: syz [ 800.505667][ T5890] usb 5-1: SerialNumber: syz [ 800.569785][ T5890] usb 5-1: config 0 descriptor?? [ 800.604373][ C1] usb 5-1: NFC: Urb failure (status -71) [ 800.619886][ T5890] usb 5-1: NFC: Unable to get FW version [ 800.788767][ T5890] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -90 [ 800.882400][T15847] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 801.059564][T15847] usb 6-1: Using ep0 maxpacket: 16 [ 801.080134][T15847] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 801.094308][T15847] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 801.135013][T15847] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 801.163536][T15847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.178626][T15847] usb 6-1: Product: syz [ 801.187732][T15847] usb 6-1: Manufacturer: syz [ 801.195923][T15847] usb 6-1: SerialNumber: syz [ 801.851792][T17634] FAULT_INJECTION: forcing a failure. [ 801.851792][T17634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.866161][T17634] CPU: 0 UID: 0 PID: 17634 Comm: syz.3.3566 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.866193][T17634] Tainted: [L]=SOFTLOCKUP [ 801.866206][T17634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 801.866217][T17634] Call Trace: [ 801.866225][T17634] [ 801.866234][T17634] dump_stack_lvl+0xe8/0x150 [ 801.866266][T17634] should_fail_ex+0x412/0x560 [ 801.866294][T17634] _copy_to_user+0x31/0xb0 [ 801.866322][T17634] simple_read_from_buffer+0xe1/0x170 [ 801.866352][T17634] proc_fail_nth_read+0x1bb/0x230 [ 801.866380][T17634] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 801.866404][T17634] ? rw_verify_area+0x2a6/0x4d0 [ 801.866430][T17634] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 801.866455][T17634] vfs_read+0x20c/0xa70 [ 801.866481][T17634] ? fdget_pos+0x246/0x320 [ 801.866510][T17634] ? __pfx___mutex_lock+0x10/0x10 [ 801.866539][T17634] ? __pfx_vfs_read+0x10/0x10 [ 801.866568][T17634] ? __fget_files+0x2a/0x420 [ 801.866619][T17634] ? __fget_files+0x3a0/0x420 [ 801.866642][T17634] ? __fget_files+0x2a/0x420 [ 801.866674][T17634] ksys_read+0x150/0x270 [ 801.866704][T17634] ? __pfx_ksys_read+0x10/0x10 [ 801.866743][T17634] do_syscall_64+0x14d/0xf80 [ 801.866767][T17634] ? trace_irq_disable+0x3b/0x150 [ 801.866792][T17634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.866812][T17634] ? clear_bhb_loop+0x40/0x90 [ 801.866836][T17634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.866855][T17634] RIP: 0033:0x7fe6c735cece [ 801.866874][T17634] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 801.866890][T17634] RSP: 002b:00007fe6c81d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 801.866911][T17634] RAX: ffffffffffffffda RBX: 00007fe6c81d56c0 RCX: 00007fe6c735cece [ 801.866926][T17634] RDX: 000000000000000f RSI: 00007fe6c81d50a0 RDI: 0000000000000004 [ 801.866938][T17634] RBP: 00007fe6c81d5090 R08: 0000000000000000 R09: 0000000000000000 [ 801.866950][T17634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.866962][T17634] R13: 00007fe6c7616038 R14: 00007fe6c7615fa0 R15: 00007fe6c773fa48 [ 801.866995][T17634] [ 802.276162][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 802.291845][ T10] usb 3-1: USB disconnect, device number 97 [ 802.687582][ T10] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 802.850249][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 802.875109][T17653] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 802.884334][T17653] team0: Port device batadv4 added [ 802.923274][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 802.947771][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 802.972238][ T10] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x42, changing to 0x2 [ 802.992192][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 803.004142][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 803.097803][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 803.107443][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 803.115796][ T10] usb 3-1: Product: syz [ 803.134555][ T10] usb 3-1: Manufacturer: syz [ 803.161883][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 803.170542][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 803.187610][ T10] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 803.236165][ T9] usb 5-1: USB disconnect, device number 89 [ 803.434595][T17639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.590330][T17639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.692289][T15847] usb 6-1: 0:2 : does not exist [ 803.785797][T15847] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 803.870726][ T5890] usb 3-1: USB disconnect, device number 98 [ 804.009580][T15847] usb 6-1: USB disconnect, device number 59 [ 804.145340][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 804.186801][T17667] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 804.198098][T17667] team0: Port device batadv9 added [ 804.498236][T17671] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3578'. [ 804.688143][T15847] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 804.921323][T17690] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3581'. [ 805.145121][T15847] usb 6-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 805.166747][T15847] usb 6-1: config 1 interface 0 has no altsetting 0 [ 805.252779][T17688] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 805.288039][T15847] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 805.297324][T17688] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 805.315950][T17689] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 805.340072][T17689] team0: Port device batadv6 added [ 805.348157][T15847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.376757][T15847] usb 6-1: Manufacturer: ᤫ欫ᐐ猶뱄荅Ἅﴮ蠕ओ阠鯦肂菘ﵷ￉똿嚝띴윻༏켐州熃ࡸ✂䙂釥趴醝ࣺ﵋䶴h夾砜剅ꯚ覠Ʇ颦듞蔕詴魿܊⋓喌곺塲풵ந⁡졳ꖳ肩舲㒷᩿撯櫜îⰆ쒒奼陱䛀ฌ䀰뻻諰멨昌⮙셥鈁검塄隈⽘呪꽅፹⩉፪口ﲈ薬䅠೙﹈魂퀏칙괋ᾂ溌猻悛阠Ċ [ 805.475906][T17688] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 805.487330][T17688] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 805.495690][T15847] usb 6-1: SerialNumber: 쏄ᚣ둡䦒滙秨灵㌘鸻煀쯦ꍨ̍敞⴨鮃䜏텧๶渙靆蝱᫲商暟柫諨Ⱒ֭鐦⡘ᔜ㒁蕩쐒ｚ튧݂偺忢訓ဗ窆ꓦ塞乑푒瀙읂䆌፭ꯝ煵㬕烌ᓿ∢̙뎉穲졁ﴎ㈫尟諎Г㞠롅၆袓跈嘟⴯㌮팦閝罈᰼⧌槶ןͱ駔넂ꪭ絰紫ꇷ㥇殭㧜꯶맦⡚ቴấ鋎留禲㖵 [ 805.653504][T17688] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 805.954863][T17696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3579'. [ 806.816703][T13547] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 806.988421][T13832] Bluetooth: hci1: command 0x0406 tx timeout [ 807.020529][T13547] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.031688][T13547] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 807.044570][T13547] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 807.054918][T13547] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 807.118424][T13547] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 807.136095][T13547] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.145715][T13547] usb 5-1: Product: syz [ 807.151445][T13547] usb 5-1: Manufacturer: syz [ 807.157747][T13547] usb 5-1: SerialNumber: syz [ 807.179886][T13547] usb 5-1: config 0 descriptor?? [ 807.214004][T13547] xbox_remote_probe: Unexpected endpoint_in [ 807.307007][T13832] Bluetooth: hci5: command 0x0c1a tx timeout [ 807.477077][T17704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3587'. [ 807.496846][T15847] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 807.597832][T15847] usb 6-1: USB disconnect, device number 60 [ 807.628912][T13832] Bluetooth: hci4: command 0x0c1a tx timeout [ 807.628953][T13831] Bluetooth: hci2: command 0x0c1a tx timeout [ 807.709217][T13831] Bluetooth: hci3: command 0x0c1a tx timeout [ 807.732695][T17707] lo: Caught tx_queue_len zero misconfig [ 807.743276][T13547] usb 5-1: USB disconnect, device number 90 [ 808.115810][T15847] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 808.455420][T15847] usb 6-1: Using ep0 maxpacket: 16 [ 808.462108][T17729] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 808.495813][T17729] team0: Port device batadv6 added [ 808.519008][T13547] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 808.709933][T15847] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 808.720278][T15847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.730034][T15847] usb 6-1: Product: syz [ 808.755964][T15847] usb 6-1: Manufacturer: syz [ 808.770145][T15847] usb 6-1: SerialNumber: syz [ 808.817344][T15847] r8152-cfgselector 6-1: Unknown version 0x0000 [ 808.824968][T15847] r8152-cfgselector 6-1: config 0 descriptor?? [ 808.852510][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.859551][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.871292][T13547] usb 4-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 808.886044][T13547] usb 4-1: config 1 interface 0 has no altsetting 0 [ 808.899319][T13547] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 808.909698][T13547] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.041601][T13547] usb 4-1: Manufacturer: ᤫ欫ᐐ猶뱄荅Ἅﴮ蠕ओ阠鯦肂菘ﵷ￉똿嚝띴윻༏켐州熃ࡸ✂䙂釥趴醝ࣺ﵋䶴h夾砜剅ꯚ覠Ʇ颦듞蔕詴魿܊⋓喌곺塲풵ந⁡졳ꖳ肩舲㒷᩿撯櫜îⰆ쒒奼陱䛀ฌ䀰뻻諰멨昌⮙셥鈁검塄隈⽘呪꽅፹⩉፪口ﲈ薬䅠೙﹈魂퀏칙괋ᾂ溌猻悛阠Ċ [ 809.075986][T17707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.317328][T17707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.436152][T17707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.455939][T13547] usb 4-1: SerialNumber: 쏄ᚣ둡䦒滙秨灵㌘鸻煀쯦ꍨ̍敞⴨鮃䜏텧๶渙靆蝱᫲商暟柫諨Ⱒ֭鐦⡘ᔜ㒁蕩쐒ｚ튧݂偺忢訓ဗ窆ꓦ塞乑푒瀙읂䆌፭ꯝ煵㬕烌ᓿ∢̙뎉穲졁ﴎ㈫尟諎Г㞠롅၆袓跈嘟⴯㌮팦閝罈᰼⧌槶ןͱ駔넂ꪭ絰紫ꇷ㥇殭㧜꯶맦⡚ቴấ鋎留禲㖵 [ 809.500691][T17707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.787154][ T5898] r8152-cfgselector 6-1: USB disconnect, device number 61 [ 809.968199][T17740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3594'. [ 811.219852][T17764] loop5: detected capacity change from 0 to 7 [ 811.256897][T17764] Dev loop5: unable to read RDB block 7 [ 811.272294][T17764] loop5: AHDI p1 [ 811.279625][T17764] loop5: partition table partially beyond EOD, truncated [ 812.065283][T13547] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 812.094053][T13547] usb 4-1: USB disconnect, device number 99 [ 812.170547][T17773] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3609'. [ 813.361087][T17795] Invalid logical block size (144) [ 814.404454][T17826] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3625'. [ 814.576928][T13547] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 814.771414][T13547] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 814.804109][T13547] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.834908][T13547] usb 4-1: Product: syz [ 814.839310][T13547] usb 4-1: Manufacturer: syz [ 814.843999][T13547] usb 4-1: SerialNumber: syz [ 814.853084][T13547] usb 4-1: config 0 descriptor?? [ 814.875548][T13547] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 814.884670][T13547] usb 4-1: setting power ON [ 814.887497][ T9] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 814.889625][T13547] dvb-usb: bulk message failed: -22 (2/0) [ 814.904619][T13547] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 814.964803][T13547] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 814.976713][T13547] dvb_usb_cxusb 4-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 815.129389][ T9] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 815.150270][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 815.177269][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 815.186496][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.195418][ T9] usb 3-1: Manufacturer: ᤫ欫ᐐ猶뱄荅Ἅﴮ蠕ओ阠鯦肂菘ﵷ￉똿嚝띴윻༏켐州熃ࡸ✂䙂釥趴醝ࣺ﵋䶴h夾砜剅ꯚ覠Ʇ颦듞蔕詴魿܊⋓喌곺塲풵ந⁡졳ꖳ肩舲㒷᩿撯櫜îⰆ쒒奼陱䛀ฌ䀰뻻諰멨昌⮙셥鈁검塄隈⽘呪꽅፹⩉፪口ﲈ薬䅠೙﹈魂퀏칙괋ᾂ溌猻悛阠Ċ [ 815.239146][ T9] usb 3-1: SerialNumber: 쏄ᚣ둡䦒滙秨灵㌘鸻煀쯦ꍨ̍敞⴨鮃䜏텧๶渙靆蝱᫲商暟柫諨Ⱒ֭鐦⡘ᔜ㒁蕩쐒ｚ튧݂偺忢訓ဗ窆ꓦ塞乑푒瀙읂䆌፭ꯝ煵㬕烌ᓿ∢̙뎉穲졁ﴎ㈫尟諎Г㞠롅၆袓跈嘟⴯㌮팦閝罈᰼⧌槶ןͱ駔넂ꪭ絰紫ꇷ㥇殭㧜꯶맦⡚ቴấ鋎留禲㖵 [ 815.795224][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3626'. [ 816.100542][ T5898] usb 4-1: USB disconnect, device number 100 [ 816.541452][T17853] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3634'. [ 817.301728][T17868] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3638'. [ 817.417245][T17867] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 817.435465][T17867] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 817.443204][T17867] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 817.452553][T17867] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 817.459996][T17867] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 817.540896][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 817.613505][ T9] usb 3-1: USB disconnect, device number 99 [ 817.869413][T17875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3640'. [ 817.984477][ T30] audit: type=1326 audit(1771417985.468:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.2.3640" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7485f9c629 code=0x0 [ 818.673779][ T10] usb 4-1: new low-speed USB device number 101 using dummy_hcd [ 818.810910][ T10] usb 4-1: device descriptor read/64, error -71 [ 819.179627][ T10] usb 4-1: new low-speed USB device number 102 using dummy_hcd [ 819.317705][ T10] usb 4-1: device descriptor read/64, error -71 [ 819.437768][ T10] usb usb4-port1: attempt power cycle [ 819.469633][T13831] Bluetooth: hci3: command 0x0c1a tx timeout [ 819.477059][T13831] Bluetooth: hci4: command 0x0c1a tx timeout [ 819.485499][T13832] Bluetooth: hci2: command 0x0c1a tx timeout [ 819.485518][T17230] Bluetooth: hci5: command 0x0c1a tx timeout [ 819.485556][T17230] Bluetooth: hci1: command 0x0406 tx timeout [ 819.876667][ T10] usb 4-1: new low-speed USB device number 103 using dummy_hcd [ 819.905548][ T30] audit: type=1326 audit(1771417987.388:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17901 comm="syz.0.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a38d9c629 code=0x7ffc0000 [ 819.985349][ T10] usb 4-1: device descriptor read/8, error -71 [ 820.003311][ T30] audit: type=1326 audit(1771417987.388:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17901 comm="syz.0.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a38d9c629 code=0x7ffc0000 [ 820.177944][ T30] audit: type=1326 audit(1771417987.388:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17901 comm="syz.0.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2a38d9c629 code=0x7ffc0000 [ 820.231409][ T30] audit: type=1326 audit(1771417987.388:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17901 comm="syz.0.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a38d9c629 code=0x7ffc0000 [ 820.276518][ T10] usb 4-1: new low-speed USB device number 104 using dummy_hcd [ 820.284350][ T5913] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 820.303901][ T30] audit: type=1326 audit(1771417987.388:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17901 comm="syz.0.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a38d9c629 code=0x7ffc0000 [ 820.347653][ T10] usb 4-1: device descriptor read/8, error -71 [ 820.356241][ T30] audit: type=1326 audit(1771417987.388:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17901 comm="syz.0.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2a38d9c629 code=0x7ffc0000 [ 820.356293][ T30] audit: type=1326 audit(1771417987.388:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17901 comm="syz.0.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a38d9c629 code=0x7ffc0000 [ 820.416988][ T30] audit: type=1326 audit(1771417987.388:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17901 comm="syz.0.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a38d9c629 code=0x7ffc0000 [ 820.480549][ T10] usb usb4-port1: unable to enumerate USB device [ 820.509106][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 820.526888][ T30] audit: type=1326 audit(1771417987.388:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17901 comm="syz.0.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2a38d9c629 code=0x7ffc0000 [ 820.568742][ T5913] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 820.594649][ T5913] usb 3-1: config 0 has no interface number 0 [ 820.638335][ T5913] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 820.940191][ T5913] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 820.949850][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.958113][ T5913] usb 3-1: Product: syz [ 820.962622][ T5913] usb 3-1: Manufacturer: syz [ 820.972650][ T5913] usb 3-1: SerialNumber: syz [ 820.996292][ T5913] usb 3-1: config 0 descriptor?? [ 821.026823][ T5913] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 821.051762][ T5913] em28xx 3-1:0.132: Video interface 132 found: [ 821.225220][T17906] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 821.522814][ T5913] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 821.885034][T17931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 821.972848][ T9] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 822.123516][T17932] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 822.179418][ T9] usb 4-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 822.236805][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 822.266191][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 822.276123][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.289240][T17929] syzkaller0: entered promiscuous mode [ 822.292324][ T9] usb 4-1: Manufacturer: ᤫ欫ᐐ猶뱄荅Ἅﴮ蠕ओ阠鯦肂菘ﵷ￉똿嚝띴윻༏켐州熃ࡸ✂䙂釥趴醝ࣺ﵋䶴h夾砜剅ꯚ覠Ʇ颦듞蔕詴魿܊⋓喌곺塲풵ந⁡졳ꖳ肩舲㒷᩿撯櫜îⰆ쒒奼陱䛀ฌ䀰뻻諰멨昌⮙셥鈁검塄隈⽘呪꽅፹⩉፪口ﲈ薬䅠೙﹈魂퀏칙괋ᾂ溌猻悛阠Ċ [ 822.376897][ T9] usb 4-1: SerialNumber: 쏄ᚣ둡䦒滙秨灵㌘鸻煀쯦ꍨ̍敞⴨鮃䜏텧๶渙靆蝱᫲商暟柫諨Ⱒ֭鐦⡘ᔜ㒁蕩쐒ｚ튧݂偺忢訓ဗ窆ꓦ塞乑푒瀙읂䆌፭ꯝ煵㬕烌ᓿ∢̙뎉穲졁ﴎ㈫尟諎Г㞠롅၆袓跈嘟⴯㌮팦閝罈᰼⧌槶ןͱ駔넂ꪭ絰紫ꇷ㥇殭㧜꯶맦⡚ቴấ鋎留禲㖵 [ 822.408205][T17929] syzkaller0: entered allmulticast mode [ 822.837327][ T5913] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 822.856120][ T5913] em28xx 3-1:0.132: board has no eeprom [ 822.921499][T17941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3655'. [ 822.946717][ T5913] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 822.974695][ T5913] em28xx 3-1:0.132: analog set to bulk mode. [ 823.001307][ T10] em28xx 3-1:0.132: Registering V4L2 extension [ 823.165257][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 823.192427][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 823.224963][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 823.256645][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 823.424717][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 823.467220][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 823.502319][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 823.538128][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 823.726263][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 823.740447][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 823.901796][ T5832] usb 3-1: USB disconnect, device number 100 [ 823.927951][ T5832] em28xx 3-1:0.132: Disconnecting em28xx [ 823.928744][ T10] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 823.941657][ T10] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 823.949834][ T10] em28xx 3-1:0.132: No AC97 audio processor [ 823.967131][ T10] usb 3-1: Decoder not found [ 823.971852][ T10] em28xx 3-1:0.132: failed to create media graph [ 823.978713][ T10] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 824.025547][ T10] em28xx 3-1:0.132: Remote control support is not available for this card. [ 824.171253][ T5832] em28xx 3-1:0.132: Closing input extension [ 824.242225][ T5832] em28xx 3-1:0.132: Freeing device [ 824.756758][ T5832] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 824.936668][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 824.943602][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.967913][ T5832] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 824.997148][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.060011][ T5832] usb 3-1: config 0 descriptor?? [ 825.885418][ T5832] usbhid 3-1:0.0: can't add hid device: -71 [ 825.895058][ T5832] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 825.915163][ T5832] usb 3-1: USB disconnect, device number 101 [ 826.650151][T17965] Invalid logical block size (65023) [ 826.995474][T17949] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 827.022139][T17949] team0: Port device batadv7 added [ 827.093073][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 827.140566][ T9] usb 4-1: USB disconnect, device number 105 [ 827.280198][T17972] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3666'. [ 827.506157][T17979] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3668'. [ 828.130851][T18001] netlink: 'syz.4.3672': attribute type 4 has an invalid length. [ 829.506867][ T5890] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 829.557781][T18015] sctp: [Deprecated]: syz.3.3677 (pid 18015) Use of int in max_burst socket option. [ 829.557781][T18015] Use struct sctp_assoc_value instead [ 829.702010][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 829.708539][ T5890] usb 3-1: too many configurations: 60, using maximum allowed: 8 [ 829.750866][ T5890] usb 3-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 829.765623][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 829.784481][ T5890] usb 3-1: Product: syz [ 829.794405][ T5890] usb 3-1: Manufacturer: syz [ 829.836774][ T5890] usb 3-1: SerialNumber: syz [ 829.857429][ T5890] usb 3-1: config 0 descriptor?? [ 829.903908][ T5890] pwc: Philips SPC 880NC USB webcam detected. [ 830.038291][ T60] wlan0: Trigger new scan to find an IBSS to join [ 830.419694][ T5832] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 830.576906][ T5832] usb 5-1: device descriptor read/64, error -71 [ 830.599824][ T30] audit: type=1326 audit(1771417998.088:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18026 comm="syz.5.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12b6d3da19 code=0x7ffc0000 [ 830.694705][ T30] audit: type=1326 audit(1771417998.108:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18026 comm="syz.5.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12b6d3da19 code=0x7ffc0000 [ 830.784121][ T30] audit: type=1326 audit(1771417998.108:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18026 comm="syz.5.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b6d9c629 code=0x7ffc0000 [ 830.807529][T15847] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 830.822811][ T5832] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 830.889079][ T30] audit: type=1326 audit(1771417998.108:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18026 comm="syz.5.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b6d9c629 code=0x7ffc0000 [ 830.966783][ T30] audit: type=1326 audit(1771417998.118:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18026 comm="syz.5.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b6d9c629 code=0x7ffc0000 [ 831.000309][ T5832] usb 5-1: device descriptor read/64, error -71 [ 831.039012][T15847] usb 4-1: config 0 has an invalid interface number: 40 but max is 0 [ 831.048320][T15847] usb 4-1: config 0 has no interface number 0 [ 831.052905][ T30] audit: type=1326 audit(1771417998.118:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18026 comm="syz.5.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b6d9c629 code=0x7ffc0000 [ 831.054574][T15847] usb 4-1: config 0 interface 40 altsetting 81 bulk endpoint 0x7 has invalid maxpacket 1024 [ 831.054605][T15847] usb 4-1: config 0 interface 40 has no altsetting 0 [ 831.054643][T15847] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 831.054668][T15847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.120903][ T5832] usb usb5-port1: attempt power cycle [ 831.133318][ T30] audit: type=1326 audit(1771417998.118:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18026 comm="syz.5.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12b6d3da19 code=0x7ffc0000 [ 831.168205][T15847] usb 4-1: config 0 descriptor?? [ 831.174987][T18022] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 831.187373][ T30] audit: type=1326 audit(1771417998.118:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18026 comm="syz.5.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b6d9c629 code=0x7ffc0000 [ 831.215158][ T30] audit: type=1326 audit(1771417998.118:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18026 comm="syz.5.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12b6d3da19 code=0x7ffc0000 [ 831.339130][ T9] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 831.374681][T18035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3683'. [ 831.421837][T18022] binder: 18021:18022 ioctl 400c620e 200000000100 returned -22 [ 831.504364][T15847] usb 4-1: string descriptor 0 read error: -71 [ 831.507185][ T5832] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 831.520441][T15847] keyspan 4-1:0.40: Keyspan 2 port adapter converter detected [ 831.531063][T15847] keyspan 4-1:0.40: found no endpoint descriptor for endpoint 87 [ 831.541187][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 831.550242][ T30] audit: type=1326 audit(1771417998.118:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18026 comm="syz.5.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b6d9c629 code=0x7ffc0000 [ 831.556517][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 831.585621][T15847] keyspan 4-1:0.40: found no endpoint descriptor for endpoint 81 [ 831.595815][ T5832] usb 5-1: device descriptor read/8, error -71 [ 831.596552][T15847] keyspan 4-1:0.40: found no endpoint descriptor for endpoint 82 [ 831.611748][T15847] keyspan 4-1:0.40: found no endpoint descriptor for endpoint 1 [ 831.620639][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 831.653243][T15847] keyspan 4-1:0.40: found no endpoint descriptor for endpoint 2 [ 831.665606][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.677352][T15847] keyspan 4-1:0.40: found no endpoint descriptor for endpoint 85 [ 831.707977][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 831.723434][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 831.736613][T15847] keyspan 4-1:0.40: found no endpoint descriptor for endpoint 5 [ 831.745578][ T9] usb 6-1: Product: syz [ 831.757540][T15847] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 831.769137][ T9] usb 6-1: Manufacturer: syz [ 831.803626][T15847] keyspan 4-1:0.40: found no endpoint descriptor for endpoint 83 [ 831.814837][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 831.829373][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 831.834833][T15847] keyspan 4-1:0.40: found no endpoint descriptor for endpoint 84 [ 831.847711][ T5832] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 831.905487][T15847] keyspan 4-1:0.40: found no endpoint descriptor for endpoint 3 [ 831.932538][ T5832] usb 5-1: device descriptor read/8, error -71 [ 831.932603][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 831.980173][T15847] keyspan 4-1:0.40: found no endpoint descriptor for endpoint 4 [ 831.990415][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 832.014057][T15847] keyspan 4-1:0.40: found no endpoint descriptor for endpoint 86 [ 832.047134][ T5832] usb usb5-port1: unable to enumerate USB device [ 832.048563][T15847] keyspan 4-1:0.40: found no endpoint descriptor for endpoint 6 [ 832.131457][ T5890] pwc: Warning: more than 1 configuration available. [ 832.176931][ T5890] pwc: Failed to set LED on/off time (-71) [ 832.193385][ T5890] pwc: send_video_command error -71 [ 832.213441][T15847] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 832.240554][ T5890] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 832.268622][T18030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.280994][ T5890] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 832.310510][T15847] usb 4-1: USB disconnect, device number 106 [ 832.328110][T18030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.370320][ T5890] usb 3-1: USB disconnect, device number 102 [ 832.391187][T15847] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 832.453993][T15847] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 832.490263][T15847] keyspan 4-1:0.40: device disconnected [ 832.816574][ T5890] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 832.866172][ T5832] usb 6-1: USB disconnect, device number 62 [ 833.001654][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 833.006544][T15847] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 833.045855][ T5890] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 833.066765][ T60] wlan0: Trigger new scan to find an IBSS to join [ 833.083796][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.152062][ T5890] usb 3-1: Product: syz [ 833.156314][ T5890] usb 3-1: Manufacturer: syz [ 833.187220][ T5890] usb 3-1: SerialNumber: syz [ 833.207630][ T5890] usb 3-1: config 0 descriptor?? [ 833.322254][T15847] usb 4-1: Using ep0 maxpacket: 8 [ 833.476605][ T5890] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 833.627567][ T5832] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 833.839262][ T5832] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 833.871751][ T5832] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 833.927032][ T5832] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 833.946603][T15847] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 833.954952][T15847] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 833.965094][T15847] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 833.965400][ T5832] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 833.986474][T15847] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 834.026223][T15847] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 834.058943][ T5832] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 834.066539][T15847] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 834.076442][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 834.095851][ T5832] usb 5-1: Product: syz [ 834.105982][ T5832] usb 5-1: Manufacturer: syz [ 834.106925][T15847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.141040][ T5832] cdc_wdm 5-1:1.0: skipping garbage [ 834.146333][ T5832] cdc_wdm 5-1:1.0: skipping garbage [ 834.162558][ T5832] cdc_wdm 5-1:1.0: skipping garbage [ 834.169164][ T5832] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 834.293595][T18040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3685'. [ 834.363900][T15847] usb 4-1: usb_control_msg returned -32 [ 834.376545][T15847] usbtmc 4-1:16.0: can't read capabilities [ 834.743886][T18055] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 835.302995][ T5890] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 835.332396][ T5890] usb 3-1: USB disconnect, device number 103 [ 835.382447][ T5832] usb 4-1: USB disconnect, device number 107 [ 836.027561][ T587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.157195][T18102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3697'. [ 836.201200][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 836.201220][ T30] audit: type=1326 audit(1771418003.688:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18091 comm="syz.2.3697" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7485f9c629 code=0x0 [ 836.448970][ T5919] usb 5-1: USB disconnect, device number 95 [ 837.806816][T18119] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 838.470696][T18128] netlink: 'syz.4.3707': attribute type 49 has an invalid length. [ 838.685354][T18141] netlink: 'syz.5.3712': attribute type 1 has an invalid length. [ 838.719126][T18141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.799752][T18146] bond0: entered allmulticast mode [ 838.880161][T18146] macvlan2: entered promiscuous mode [ 838.886503][ T5919] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 838.893410][T18146] macvlan2: entered allmulticast mode [ 838.907241][ T5890] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 838.928162][T18146] bond0: entered promiscuous mode [ 838.935051][T18146] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 839.027008][T18146] bond0: left promiscuous mode [ 839.090433][ T5890] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 839.100911][ T5890] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 839.138429][ T5919] usb 3-1: unable to get BOS descriptor or descriptor too short [ 839.150035][ T5919] usb 3-1: not running at top speed; connect to a high speed hub [ 839.157882][ T5890] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 839.157941][ T5890] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 839.157968][ T5890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 839.157994][ T5890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 839.159735][ T5890] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 839.183711][ T5919] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 839.225564][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 839.273899][ T5890] usb 5-1: Product: syz [ 839.283415][ T5890] usb 5-1: Manufacturer: syz [ 839.478890][ T5890] cdc_wdm 5-1:1.0: skipping garbage [ 839.498431][ T5919] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 839.502511][ T5890] cdc_wdm 5-1:1.0: skipping garbage [ 839.509585][ T5919] usb 3-1: config 1 interface 0 has no altsetting 0 [ 839.524010][ T5919] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 839.533791][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.542004][ T5919] usb 3-1: Product: ࠬ [ 839.549858][ T5919] usb 3-1: Manufacturer: Щ [ 839.554423][ T5919] usb 3-1: SerialNumber: Ў [ 839.564716][ T5890] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 839.628454][T18136] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 839.635895][T18136] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 839.803675][T18151] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3714'. [ 840.001991][ T5919] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 840.042821][ T5919] usb 3-1: USB disconnect, device number 104 [ 840.328986][T18164] netlink: 'syz.3.3714': attribute type 25 has an invalid length. [ 840.347416][T18164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3714'. [ 840.387612][T18164] netlink: 'syz.3.3714': attribute type 25 has an invalid length. [ 840.396225][T18165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3716'. [ 840.416062][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.433665][T18164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3714'. [ 840.445735][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.463952][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.488603][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.779113][ T5919] usb 5-1: USB disconnect, device number 96 [ 842.214847][T18181] netlink: 'syz.0.3721': attribute type 49 has an invalid length. [ 842.223127][T13547] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 842.265466][T18183] kAFS: unable to lookup cell '({^@' [ 842.442401][T13547] usb 6-1: too many configurations: 53, using maximum allowed: 8 [ 842.627086][T13547] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 842.643673][T13547] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.698671][T13547] usb 6-1: Product: syz [ 842.715836][T13547] usb 6-1: Manufacturer: syz [ 842.762277][T13547] usb 6-1: SerialNumber: syz [ 843.528552][T13547] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 843.577080][T13547] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 843.607687][T13547] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 843.659246][T13547] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 843.711626][T13547] usb 6-1: USB disconnect, device number 63 [ 844.058530][ T9] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 844.344199][T18213] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3729'. [ 844.363153][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.384788][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.396284][ T9] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 844.406053][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.598600][ T9] usb 3-1: config 0 descriptor?? [ 844.827573][T18210] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 844.867786][T18210] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 844.875242][T18210] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 844.899996][T18210] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 844.916945][T18210] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 844.929224][T18203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.938922][T18203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.088382][T18222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3731'. [ 845.170768][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 845.187007][ T5919] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 845.242497][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 845.320984][ T9] usb 3-1: USB disconnect, device number 105 [ 845.458362][ T5919] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 845.497735][ T5919] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 845.518630][ T5919] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 845.534408][ T5919] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 845.554134][ T5919] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 845.573408][ T5919] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 845.602289][ T5919] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 845.612750][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 845.626225][ T5919] usb 6-1: Product: syz [ 845.644804][ T5919] usb 6-1: Manufacturer: syz [ 845.661146][ T5919] cdc_wdm 6-1:1.0: skipping garbage [ 845.668579][ T5919] cdc_wdm 6-1:1.0: skipping garbage [ 845.674028][ T5919] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 845.878321][T18226] netlink: 'syz.2.3733': attribute type 49 has an invalid length. [ 846.489738][T18243] kvm: pic: non byte write [ 846.536502][ T5919] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 846.699163][ T5919] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 846.715912][ T5919] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 846.727837][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.747434][ T5919] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 846.906599][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 846.912789][T17230] Bluetooth: hci2: command 0x0c1a tx timeout [ 846.916802][T13832] Bluetooth: hci1: command 0x0406 tx timeout [ 846.925960][T13831] Bluetooth: hci5: command 0x0c1a tx timeout [ 846.987153][T13831] Bluetooth: hci3: command 0x0c1a tx timeout [ 847.198249][T18257] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 847.208011][T18257] team0: Port device batadv5 added [ 847.318302][ T5832] usb 6-1: USB disconnect, device number 64 [ 847.702214][T18268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3745'. [ 847.811154][ T5919] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 847.847158][T18266] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 847.860900][T18266] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 847.877204][ T5919] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 847.900827][ T5919] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 847.926850][T18266] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 847.975594][T18266] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 848.001736][T18266] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 848.129982][T18279] geneve2: entered promiscuous mode [ 849.086735][T18291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3750'. [ 849.323114][ T5919] usb 5-1: USB disconnect, device number 97 [ 849.696524][ T10] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 849.791498][T13831] Bluetooth: hci1: command 0x0406 tx timeout [ 849.866732][T13831] Bluetooth: hci5: command 0x0c1a tx timeout [ 849.871540][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 849.882099][ T10] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 849.908261][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 849.931813][ T10] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 849.946832][T13831] Bluetooth: hci2: command 0x0c1a tx timeout [ 849.965474][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 849.991850][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 850.025300][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 850.026837][T13831] Bluetooth: hci3: command 0x0c1a tx timeout [ 850.040755][T13831] Bluetooth: hci4: command 0x0c1a tx timeout [ 850.047080][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 850.047110][ T10] usb 6-1: Product: syz [ 850.047127][ T10] usb 6-1: Manufacturer: syz [ 850.090215][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 850.104739][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 850.121285][ T10] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 850.816891][ T5890] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 850.989139][ T5890] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 851.032616][ T5890] usb 3-1: config 1 interface 0 has no altsetting 0 [ 851.043170][T18316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 851.063624][ T5890] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 851.073474][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.181106][ T5890] usb 3-1: Manufacturer: ᤫ欫ᐐ猶뱄荅Ἅﴮ蠕ओ阠鯦肂菘ﵷ￉똿嚝띴윻༏켐州熃ࡸ✂䙂釥趴醝ࣺ﵋䶴h夾砜剅ꯚ覠Ʇ颦듞蔕詴魿܊⋓喌곺塲풵ந⁡졳ꖳ肩舲㒷᩿撯櫜îⰆ쒒奼陱䛀ฌ䀰뻻諰멨昌⮙셥鈁검塄隈⽘呪꽅፹⩉፪口ﲈ薬䅠೙﹈魂퀏칙괋ᾂ溌猻悛阠Ċ [ 851.243482][T18321] ip6gre1: entered promiscuous mode [ 851.310728][ T5890] usb 3-1: SerialNumber: 쏄ᚣ둡䦒滙秨灵㌘鸻煀쯦ꍨ̍敞⴨鮃䜏텧๶渙靆蝱᫲商暟柫諨Ⱒ֭鐦⡘ᔜ㒁蕩쐒ｚ튧݂偺忢訓ဗ窆ꓦ塞乑푒瀙읂䆌፭ꯝ煵㬕烌ᓿ∢̙뎉穲졁ﴎ㈫尟諎Г㞠롅၆袓跈嘟⴯㌮팦閝罈᰼⧌槶ןͱ駔넂ꪭ絰紫ꇷ㥇殭㧜꯶맦⡚ቴấ鋎留禲㖵 [ 851.655223][T18328] FAULT_INJECTION: forcing a failure. [ 851.655223][T18328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 851.682668][T18328] CPU: 1 UID: 0 PID: 18328 Comm: syz.4.3764 Tainted: G L syzkaller #0 PREEMPT(full) [ 851.682703][T18328] Tainted: [L]=SOFTLOCKUP [ 851.682711][T18328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 851.682723][T18328] Call Trace: [ 851.682732][T18328] [ 851.682742][T18328] dump_stack_lvl+0xe8/0x150 [ 851.682781][T18328] should_fail_ex+0x412/0x560 [ 851.682816][T18328] _copy_from_user+0x2d/0xb0 [ 851.682844][T18328] sctp_getsockopt_default_sndinfo+0xc3/0x650 [ 851.682874][T18328] ? __pfx_sctp_getsockopt_default_sndinfo+0x10/0x10 [ 851.682896][T18328] ? sctp_getsockopt+0x12f/0xb90 [ 851.682925][T18328] ? __local_bh_enable_ip+0xd0/0x130 [ 851.682956][T18328] sctp_getsockopt+0x360/0xb90 [ 851.682980][T18328] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 851.683004][T18328] do_sock_getsockopt+0x2d3/0x3f0 [ 851.683034][T18328] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 851.683059][T18328] ? __fget_files+0x3a0/0x420 [ 851.683083][T18328] ? __fget_files+0x2a/0x420 [ 851.683117][T18328] __x64_sys_getsockopt+0x1a4/0x240 [ 851.683152][T18328] do_syscall_64+0x14d/0xf80 [ 851.683178][T18328] ? trace_irq_disable+0x3b/0x150 [ 851.683203][T18328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.683223][T18328] ? clear_bhb_loop+0x40/0x90 [ 851.683246][T18328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.683265][T18328] RIP: 0033:0x7f9a3dd9c629 [ 851.683285][T18328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.683302][T18328] RSP: 002b:00007f9a3ec94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 851.683325][T18328] RAX: ffffffffffffffda RBX: 00007f9a3e015fa0 RCX: 00007f9a3dd9c629 [ 851.683339][T18328] RDX: 0000000000000022 RSI: 0000000000000084 RDI: 0000000000000003 [ 851.683351][T18328] RBP: 00007f9a3ec94090 R08: 0000200000000040 R09: 0000000000000000 [ 851.683365][T18328] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.683377][T18328] R13: 00007f9a3e016038 R14: 00007f9a3e015fa0 R15: 00007f9a3e13fa48 [ 851.683410][T18328] [ 852.077657][T18321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.345468][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3756'. [ 852.363646][ T5919] usb 6-1: USB disconnect, device number 65 [ 852.868443][T18345] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3766'. [ 852.947917][T18343] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3768'. [ 853.086897][T18342] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 853.115381][T18342] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 853.155858][T18342] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 853.166111][T18342] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 853.172725][T18343] netlink: 'syz.4.3768': attribute type 25 has an invalid length. [ 853.181668][T18342] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 853.320217][T18343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3768'. [ 853.538509][T18343] netlink: 'syz.4.3768': attribute type 25 has an invalid length. [ 853.547768][ T60] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.590249][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.610987][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.628678][T18343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3768'. [ 853.647521][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.152753][ T5890] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 854.217738][ T5890] usb 3-1: USB disconnect, device number 106 [ 854.377711][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3772'. [ 854.908238][T13831] Bluetooth: hci1: command 0x0406 tx timeout [ 855.149010][T13831] Bluetooth: hci5: command 0x0c1a tx timeout [ 855.227268][T13831] Bluetooth: hci3: command 0x0c1a tx timeout [ 855.233345][T13831] Bluetooth: hci4: command 0x0c1a tx timeout [ 855.239684][T13832] Bluetooth: hci2: command 0x0c1a tx timeout [ 855.538839][ T5890] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 855.768823][ T5890] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 855.913795][ T5890] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 856.015661][ T5890] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 856.092148][ T5890] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 856.104766][ T5890] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 856.131562][ T5890] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 856.151562][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 856.180428][ T5890] usb 6-1: Product: syz [ 856.190847][ T5890] usb 6-1: Manufacturer: syz [ 856.204182][ T5890] cdc_wdm 6-1:1.0: skipping garbage [ 856.212099][ T5890] cdc_wdm 6-1:1.0: skipping garbage [ 856.221912][ T5890] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 856.233691][ T5890] cdc_wdm 6-1:1.0: Unknown control protocol [ 857.817379][T18403] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3788'. [ 857.826673][T18403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3788'. [ 858.009438][ T30] audit: type=1400 audit(1771418025.498:1176): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 40 bytes leftover after parsing attributes in process `syz.0.3790'. [ 858.494297][T18419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 858.578825][T15847] usb 6-1: USB disconnect, device number 66 [ 858.607972][T18416] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 858.659981][T18424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 858.688258][T18416] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 858.715067][T18416] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 858.747098][T18416] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 858.793667][T18416] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 859.086241][T18435] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3797'. [ 859.779459][T18442] fuse: Bad value for 'group_id' [ 859.813651][T18442] fuse: Bad value for 'group_id' [ 860.316496][ T5919] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 860.499187][ T5919] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 860.542938][ T5919] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 860.632155][ T5919] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 860.669170][T17230] Bluetooth: hci1: command 0x0406 tx timeout [ 860.688811][ T5919] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 860.698291][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 860.734087][ T5919] usb 5-1: Product: syz [ 860.756646][T17230] Bluetooth: hci2: command 0x0c1a tx timeout [ 860.756655][T13831] Bluetooth: hci5: command 0x0c1a tx timeout [ 860.785922][ T5919] usb 5-1: Manufacturer: syz [ 860.817974][ T5919] usb 5-1: SerialNumber: syz [ 860.826490][T17230] Bluetooth: hci3: command 0x0c1a tx timeout [ 860.828224][T13831] Bluetooth: hci4: command 0x0c1a tx timeout [ 861.027470][ T10] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 861.129473][ T5919] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 98 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 861.211061][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 861.218954][ T10] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 861.229494][T18467] FAULT_INJECTION: forcing a failure. [ 861.229494][T18467] name failslab, interval 1, probability 0, space 0, times 0 [ 861.255868][T18467] CPU: 1 UID: 0 PID: 18467 Comm: syz.2.3807 Tainted: G L syzkaller #0 PREEMPT(full) [ 861.255896][ T10] usb 4-1: config 0 has no interface number 0 [ 861.255903][T18467] Tainted: [L]=SOFTLOCKUP [ 861.255911][T18467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 861.255924][T18467] Call Trace: [ 861.255933][T18467] [ 861.255940][T18467] dump_stack_lvl+0xe8/0x150 [ 861.255970][T18467] should_fail_ex+0x412/0x560 [ 861.255995][T18467] should_failslab+0xa8/0x100 [ 861.256014][T18467] ? sctp_chunkify+0x5a/0x260 [ 861.256037][T18467] kmem_cache_alloc_noprof+0x87/0x650 [ 861.256070][T18467] sctp_chunkify+0x5a/0x260 [ 861.256093][T18467] _sctp_make_chunk+0x122/0x290 [ 861.256117][T18467] sctp_make_datafrag_empty+0x12a/0x240 [ 861.256140][T18467] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 861.256163][T18467] ? sctp_datamsg_from_user+0x88/0xef0 [ 861.256180][T18467] ? sctp_auth_send_cid+0x69/0x250 [ 861.256205][T18467] sctp_datamsg_from_user+0x729/0xef0 [ 861.256237][T18467] ? __genradix_ptr+0x1e1/0x220 [ 861.256262][T18467] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 861.256304][T18467] ? do_raw_spin_lock+0x12b/0x2f0 [ 861.256326][T18467] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 861.256352][T18467] ? sctp_sendmsg+0xbac/0x2c10 [ 861.256382][T18467] ? sctp_sendmsg_check_sflags+0x18a/0x330 [ 861.256410][T18467] sctp_sendmsg+0x1b3d/0x2c10 [ 861.256434][T18467] ? __lock_acquire+0x6b5/0x2cf0 [ 861.256466][T18467] ? __pfx_sctp_sendmsg+0x10/0x10 [ 861.256486][T18467] ? tomoyo_check_open_permission+0x38e/0x470 [ 861.256510][T18467] ? aa_sk_perm+0x15a/0x960 [ 861.256529][T18467] ? aa_sk_perm+0x82d/0x960 [ 861.256554][T18467] ? __pfx_aa_sk_perm+0x10/0x10 [ 861.256575][T18467] ? sock_rps_record_flow+0x19/0x400 [ 861.256602][T18467] ? inet_sendmsg+0x2f4/0x370 [ 861.256623][T18467] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 861.256644][T18467] sock_sendmsg+0x3b5/0x500 [ 861.256668][T18467] ? __pfx_sock_sendmsg+0x10/0x10 [ 861.256698][T18467] ? __asan_memset+0x22/0x50 [ 861.256721][T18467] ? iov_iter_bvec+0xb8/0x180 [ 861.256745][T18467] splice_to_socket+0xae2/0x11f0 [ 861.256789][T18467] ? __pfx_splice_to_socket+0x10/0x10 [ 861.256841][T18467] ? get_pid_task+0x20/0x1f0 [ 861.256881][T18467] ? bpf_lsm_file_permission+0x9/0x20 [ 861.256899][T18467] ? security_file_permission+0x75/0x260 [ 861.256924][T18467] ? rw_verify_area+0x255/0x4d0 [ 861.256950][T18467] ? __pfx_splice_to_socket+0x10/0x10 [ 861.256971][T18467] do_splice+0xee3/0x1910 [ 861.257018][T18467] ? __pfx_do_splice+0x10/0x10 [ 861.257049][T18467] __se_sys_splice+0x353/0x490 [ 861.257078][T18467] ? __pfx___se_sys_splice+0x10/0x10 [ 861.257105][T18467] ? __x64_sys_splice+0x21/0xf0 [ 861.257131][T18467] do_syscall_64+0x14d/0xf80 [ 861.257153][T18467] ? trace_irq_disable+0x3b/0x150 [ 861.257174][T18467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.257191][T18467] ? clear_bhb_loop+0x40/0x90 [ 861.257213][T18467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.257230][T18467] RIP: 0033:0x7f7485f9c629 [ 861.257247][T18467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.257262][T18467] RSP: 002b:00007f7486ebf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 861.257281][T18467] RAX: ffffffffffffffda RBX: 00007f7486216090 RCX: 00007f7485f9c629 [ 861.257294][T18467] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000005 [ 861.257305][T18467] RBP: 00007f7486ebf090 R08: 000000000000ffff R09: 0000000000000002 [ 861.257316][T18467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.257326][T18467] R13: 00007f7486216128 R14: 00007f7486216090 R15: 00007f748633fa48 [ 861.257356][T18467] [ 861.535899][T13547] usb 5-1: USB disconnect, device number 98 [ 861.538325][ T5919] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 861.545649][T13547] usblp0: removed [ 861.552070][ T10] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 861.660309][ T10] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 861.702516][ T10] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 861.745579][ T10] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 861.779540][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 861.790005][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.798445][ T10] usb 4-1: Product: syz [ 861.802836][ T10] usb 4-1: Manufacturer: syz [ 861.809584][ T5919] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 861.820104][ T5919] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 861.832764][ T10] usb 4-1: SerialNumber: syz [ 861.855609][ T5919] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 861.866282][ T10] usb 4-1: config 0 descriptor?? [ 861.893963][ T5919] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 861.914921][ T5919] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 861.932183][ T5919] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 861.942967][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 861.951345][ T5919] usb 6-1: Product: syz [ 862.087372][ T5919] usb 6-1: Manufacturer: syz [ 862.121556][ T5919] cdc_wdm 6-1:1.0: skipping garbage [ 862.146477][ T5919] cdc_wdm 6-1:1.0: skipping garbage [ 862.164434][ T10] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 862.188706][ T5919] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 862.206805][ T5919] cdc_wdm 6-1:1.0: Unknown control protocol [ 862.418139][T18488] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 862.468879][T18488] team0: Port device batadv7 added [ 862.594322][ C1] iowarrior 4-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 862.613526][ T10] usb 4-1: USB disconnect, device number 108 [ 862.966906][T13547] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 863.162883][T13547] usb 5-1: Using ep0 maxpacket: 32 [ 863.178225][T13547] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 863.201430][T13547] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.225789][T13547] usb 5-1: config 0 descriptor?? [ 863.254863][T13547] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 863.583289][T18503] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3816'. [ 863.746724][T18502] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 863.763720][T18502] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 863.783872][T18502] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 863.806751][T18502] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 863.822456][T18502] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 863.950759][T13547] gspca_nw80x: reg_w err -71 [ 863.971949][T13547] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 864.000738][T13547] usb 5-1: USB disconnect, device number 99 [ 864.022659][ T5898] usb 6-1: USB disconnect, device number 67 [ 864.161625][T18512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3820'. [ 864.558472][T18528] ip6tnl1: entered allmulticast mode [ 865.176626][T15847] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 865.356931][T15847] usb 5-1: Using ep0 maxpacket: 32 [ 865.449461][T18547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 865.496426][T15847] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 865.504714][T15847] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.526123][T15847] usb 5-1: config 0 has no interface number 0 [ 865.533362][T15847] usb 5-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 865.549002][T15847] usb 5-1: config 0 interface 1 has no altsetting 0 [ 865.650143][T13831] Bluetooth: hci1: command 0x0406 tx timeout [ 865.674419][T15847] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 865.703192][T15847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.801969][T15847] usb 5-1: Product: syz [ 865.812171][T15847] usb 5-1: Manufacturer: syz [ 865.832427][T15847] usb 5-1: SerialNumber: syz [ 865.846740][T13831] Bluetooth: hci2: command 0x0c1a tx timeout [ 865.852887][T13831] Bluetooth: hci5: command 0x0c1a tx timeout [ 865.906778][T13831] Bluetooth: hci4: command 0x0c1a tx timeout [ 865.906777][T17230] Bluetooth: hci3: command 0x0c1a tx timeout [ 865.928556][T15847] usb 5-1: config 0 descriptor?? [ 866.216494][ T5832] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 866.218445][T15847] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 866.272775][T15847] cx231xx 5-1:0.1: Not found matching IAD interface [ 866.305049][T15847] usb 5-1: USB disconnect, device number 100 [ 866.370952][ T5832] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 866.381580][ T5832] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 866.411574][ T5832] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 866.441273][ T5832] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 866.463315][ T5832] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 866.551295][ T5832] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 866.585769][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 866.627242][T17230] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 866.636289][ T5832] usb 3-1: Product: syz [ 866.649985][ T5832] usb 3-1: Manufacturer: syz [ 866.688297][ T5832] cdc_wdm 3-1:1.0: skipping garbage [ 866.699424][ T5832] cdc_wdm 3-1:1.0: skipping garbage [ 866.749431][ T5832] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 866.756180][ T5832] cdc_wdm 3-1:1.0: Unknown control protocol [ 866.832316][T15847] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 866.927112][T18565] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3831'. [ 867.086520][T15847] usb 5-1: Using ep0 maxpacket: 32 [ 867.109259][T15847] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 867.117569][T15847] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.130959][T15847] usb 5-1: config 0 has no interface number 0 [ 867.138678][T15847] usb 5-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 867.152079][T15847] usb 5-1: config 0 interface 1 has no altsetting 0 [ 867.166839][T15847] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 867.180390][T15847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.188818][T15847] usb 5-1: Product: syz [ 867.193560][T15847] usb 5-1: Manufacturer: syz [ 867.198717][T15847] usb 5-1: SerialNumber: syz [ 867.205342][T15847] usb 5-1: config 0 descriptor?? [ 867.347009][ T10] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 867.567609][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 867.575578][ T10] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 867.586935][ T10] usb 6-1: config 0 has no interface number 0 [ 867.593427][ T10] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 867.608872][ T10] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 867.635344][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.661731][ T10] usb 6-1: Product: syz [ 867.829173][ T10] usb 6-1: Manufacturer: syz [ 867.856694][ T10] usb 6-1: SerialNumber: syz [ 867.868456][ T10] usb 6-1: config 0 descriptor?? [ 867.893353][T18569] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 868.131982][T18569] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 868.347112][ T587] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 869.085849][T15847] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 869.167359][T15847] cx231xx 5-1:0.1: Not found matching IAD interface [ 869.177497][ T5919] usb 3-1: USB disconnect, device number 107 [ 869.216172][T15847] usb 5-1: USB disconnect, device number 101 [ 869.623585][T18589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 869.811868][ T10] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 869.824567][ T10] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 869.865879][ T10] asix 6-1:0.188: probe with driver asix failed with error -71 [ 869.909450][ T10] usb 6-1: USB disconnect, device number 68 [ 870.051933][T18597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3840'. [ 870.062118][T18597] openvswitch: netlink: Flow key attr not present in new flow. [ 870.079236][T18597] netdevsim netdevsim2: Direct firmware load for / [ 870.079236][T18597] failed with error -2 [ 870.091609][T18597] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 870.091609][T18597] [ 870.135064][T18600] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3841'. [ 870.204086][T18596] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 870.210379][T18596] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 870.216776][T18596] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 870.223068][T18596] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 870.229403][T18596] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 870.270708][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.277739][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.684412][T18609] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 870.770826][T18611] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 870.854601][T18611] team0: Port device batadv10 added [ 871.670764][T18625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 871.936493][ T10] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 872.094024][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 872.115290][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 872.146786][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 872.177227][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 872.199967][T17230] Bluetooth: hci1: command 0x0406 tx timeout [ 872.236581][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 872.250315][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 872.260535][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 872.270109][T17230] Bluetooth: hci3: command 0x0c1a tx timeout [ 872.276267][T13831] Bluetooth: hci4: command 0x0c1a tx timeout [ 872.276294][T13832] Bluetooth: hci2: command 0x0c1a tx timeout [ 872.282465][T13831] Bluetooth: hci5: command 0x0c1a tx timeout [ 872.295055][ T10] usb 3-1: Product: syz [ 872.299542][ T10] usb 3-1: Manufacturer: syz [ 872.352859][T17230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 872.364808][T17230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 872.375133][T17230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 872.383698][T17230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 872.391674][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 872.391755][T17230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 872.404994][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 872.414275][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 872.421677][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 873.044483][T18639] chnl_net:caif_netlink_parms(): no params data found [ 873.448275][T18476] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.459697][T18476] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.653329][T18476] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.691449][T18476] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.964599][T18476] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.977143][T18476] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.046763][T13547] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 874.058997][T18639] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.097381][T18639] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.135613][T18639] bridge_slave_0: entered allmulticast mode [ 874.154800][T18639] bridge_slave_0: entered promiscuous mode [ 874.206665][T18476] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.217617][T18476] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.235163][T13547] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 874.247151][T13547] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49152, setting to 1024 [ 874.278546][T18639] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.286934][T18639] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.294466][T18639] bridge_slave_1: entered allmulticast mode [ 874.303110][T13547] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 874.312748][T13547] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.323122][T18639] bridge_slave_1: entered promiscuous mode [ 874.330637][T13547] usb 5-1: Product: syz [ 874.335625][T13547] usb 5-1: Manufacturer: syz [ 874.356513][T13547] usb 5-1: SerialNumber: syz [ 874.381793][T13547] usb 5-1: config 0 descriptor?? [ 874.399724][T13547] uvcvideo 5-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 874.409623][T13547] uvcvideo 5-1:0.0: No valid video chain found. [ 874.416910][ T10] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 874.422021][T18639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.435901][T13831] Bluetooth: hci0: command tx timeout [ 874.453469][T18639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.537404][T18639] team0: Port device team_slave_0 added [ 874.579102][T18639] team0: Port device team_slave_1 added [ 874.589720][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 874.601730][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.613889][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.647190][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 874.658357][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.673219][ T5919] usb 5-1: USB disconnect, device number 102 [ 874.690684][ T10] usb 4-1: config 0 descriptor?? [ 874.710067][ T10] hub 4-1:0.0: USB hub found [ 874.762171][ T5913] usb 3-1: USB disconnect, device number 108 [ 875.128999][T18476] bond1 (unregistering): (slave veth3): Releasing active interface [ 875.259769][T18476] bond1 (unregistering): Released all slaves [ 875.331649][T18476] bond0 (unregistering): Released all slaves [ 875.668645][T18672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 875.751512][T18476] : left promiscuous mode [ 875.790596][T18639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.813484][T18639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.876816][T18639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.919578][T18476] tipc: Left network mode [ 875.938846][T18639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.945848][T18639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.065558][T18639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.300618][T18685] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 876.313519][T18685] team0: Port device batadv9 added [ 876.521356][T13831] Bluetooth: hci0: command tx timeout [ 876.771818][T18639] hsr_slave_0: entered promiscuous mode [ 876.866162][T18639] hsr_slave_1: entered promiscuous mode [ 876.933167][T18639] debugfs: 'hsr0' already exists in 'hsr' [ 876.950688][T18639] Cannot create hsr debugfs directory [ 876.964313][T18696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3866'. [ 877.239437][T18695] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 877.288860][T18695] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 877.316736][T18695] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 877.451673][ T10] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 877.501005][T18703] netlink: 'syz.4.3868': attribute type 5 has an invalid length. [ 877.511158][T18695] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 877.526237][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 877.536544][T18695] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 877.556328][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 877.557167][T18695] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 877.639064][ T10] usb 4-1: USB disconnect, device number 109 [ 877.951632][T18695] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 878.057079][T18715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3870'. [ 878.436519][ T5898] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 878.606284][ T5898] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 878.646590][ T5898] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 878.678836][ T5898] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 878.688456][ T5898] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 878.700088][ T5898] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 878.722665][ T5898] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 878.741802][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 878.768899][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3871'. [ 878.769678][ T5898] usb 4-1: Product: syz [ 878.789816][ T5898] usb 4-1: Manufacturer: syz [ 878.830079][ T5898] cdc_wdm 4-1:1.0: skipping garbage [ 878.843841][ T5898] cdc_wdm 4-1:1.0: skipping garbage [ 878.861411][ T5898] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 878.911366][ T5898] cdc_wdm 4-1:1.0: Unknown control protocol [ 879.257495][ T5898] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 879.269722][T18734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 879.309368][T13831] Bluetooth: hci2: command 0x0c1a tx timeout [ 879.318268][T13831] Bluetooth: hci5: command 0x0c1a tx timeout [ 879.387832][T13831] Bluetooth: hci4: command 0x0c1a tx timeout [ 879.452951][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.469536][ T5898] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 879.496641][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.535152][ T5898] usb 5-1: config 0 descriptor?? [ 879.546907][T13831] Bluetooth: hci0: command 0x0419 tx timeout [ 879.547266][T17230] Bluetooth: hci3: command 0x0c1a tx timeout [ 879.577346][ T5898] pwc: Askey VC010 type 2 USB webcam detected. [ 879.813000][T18639] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 880.004472][T18639] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 880.014432][ T5898] pwc: recv_control_msg error -32 req 02 val 2b00 [ 880.032486][ T5898] pwc: recv_control_msg error -32 req 02 val 2700 [ 880.053740][ T5898] pwc: recv_control_msg error -32 req 02 val 2c00 [ 880.070657][ T5898] pwc: recv_control_msg error -32 req 04 val 1000 [ 880.072822][T18639] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 880.101766][ T5898] pwc: recv_control_msg error -32 req 04 val 1300 [ 880.123276][ T5898] pwc: recv_control_msg error -32 req 04 val 1400 [ 880.135397][T18639] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 880.144151][ T5898] pwc: recv_control_msg error -32 req 02 val 2000 [ 880.154070][ T5898] pwc: recv_control_msg error -32 req 02 val 2100 [ 880.209944][ T5898] pwc: recv_control_msg error -32 req 04 val 1500 [ 880.219852][ T5898] pwc: recv_control_msg error -32 req 02 val 2500 [ 880.228851][ T5898] pwc: recv_control_msg error -32 req 02 val 2400 [ 880.241658][ T5898] pwc: recv_control_msg error -32 req 02 val 2600 [ 880.252519][ T5898] pwc: recv_control_msg error -32 req 02 val 2900 [ 880.303378][ T5898] pwc: recv_control_msg error -32 req 02 val 2800 [ 880.313767][ T5898] pwc: recv_control_msg error -32 req 04 val 1100 [ 880.602418][ T5898] pwc: recv_control_msg error -71 req 04 val 1200 [ 880.662122][ T5898] pwc: Registered as video103. [ 880.690818][ T5898] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input39 [ 880.724301][ T5832] usb 4-1: USB disconnect, device number 110 [ 880.850733][ T5898] usb 5-1: USB disconnect, device number 103 [ 881.218445][T18476] hsr_slave_0: left promiscuous mode [ 881.245288][T18476] hsr_slave_1: left promiscuous mode [ 881.418615][T18476] veth1_macvtap: left promiscuous mode [ 881.433288][T18476] veth0_macvtap: left promiscuous mode [ 881.449148][T18476] veth1_vlan: left promiscuous mode [ 881.461541][T18476] veth0_vlan: left promiscuous mode [ 881.629001][T13831] Bluetooth: hci0: command 0x0419 tx timeout [ 881.768509][T18786] netlink: 'syz.0.3880': attribute type 5 has an invalid length. [ 883.520519][T18785] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 883.543121][T18785] team0: Port device batadv11 added [ 883.704990][T18639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.712240][T13831] Bluetooth: hci0: command 0x0419 tx timeout [ 883.798699][T18639] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.862335][ T587] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.869752][ T587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.967154][ T587] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.974512][ T587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.095280][T18818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 884.238412][T18827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 884.247689][T18639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 884.509204][T18639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.606543][ T5832] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 884.708230][T18639] veth0_vlan: entered promiscuous mode [ 884.726495][T13547] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 884.752933][T18639] veth1_vlan: entered promiscuous mode [ 884.829376][T18841] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3889'. [ 884.839132][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 884.855735][ T5832] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 884.870248][T18639] veth0_macvtap: entered promiscuous mode [ 884.876607][ T5832] usb 3-1: config 0 has no interface number 0 [ 884.888677][ T5832] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 884.891670][T13547] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 884.901308][T18639] veth1_macvtap: entered promiscuous mode [ 884.940420][T13547] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 884.989493][T13547] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 885.014053][ T5832] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 885.037384][T13547] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 885.055044][T18476] IPVS: stop unused estimator thread 0... [ 885.061509][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 885.073674][ T5832] usb 3-1: Product: syz [ 885.091260][T18639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.106453][T13547] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 885.126044][ T5832] usb 3-1: SerialNumber: syz [ 885.128549][T18639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.143366][ T5832] usb 3-1: config 0 descriptor?? [ 885.155929][T13547] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 885.176600][T13547] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 885.197283][ T5832] cm109 3-1:0.8: invalid payload size 208, expected 4 [ 885.206429][T13547] usb 4-1: Product: syz [ 885.210672][T13547] usb 4-1: Manufacturer: syz [ 885.232059][ T5832] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input40 [ 885.232126][T18474] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.255538][T13547] cdc_wdm 4-1:1.0: skipping garbage [ 885.265385][T18846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3890'. [ 885.267632][T13547] cdc_wdm 4-1:1.0: skipping garbage [ 885.359642][T13547] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 885.376096][T13547] cdc_wdm 4-1:1.0: Unknown control protocol [ 885.489053][T18846] veth0_macvtap: left promiscuous mode [ 885.596245][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.608309][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.786644][T17230] Bluetooth: hci0: command 0x0419 tx timeout [ 886.045872][ T30] audit: type=1326 audit(1771418053.528:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.4.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3dd9c629 code=0x7ffc0000 [ 886.045934][ T30] audit: type=1326 audit(1771418053.528:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.4.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3dd9c629 code=0x7ffc0000 [ 886.049814][ T30] audit: type=1326 audit(1771418053.538:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.4.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f9a3dd9c629 code=0x7ffc0000 [ 886.049868][ T30] audit: type=1326 audit(1771418053.538:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.4.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3dd9c629 code=0x7ffc0000 [ 886.086646][ T30] audit: type=1326 audit(1771418053.538:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.4.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3dd9c629 code=0x7ffc0000 [ 886.086713][ T30] audit: type=1326 audit(1771418053.538:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.4.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9a3dd9c629 code=0x7ffc0000 [ 886.086798][ T30] audit: type=1326 audit(1771418053.538:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.4.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3dd9c629 code=0x7ffc0000 [ 886.086843][ T30] audit: type=1326 audit(1771418053.538:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.4.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f9a3dd9c629 code=0x7ffc0000 [ 886.086917][ T30] audit: type=1326 audit(1771418053.538:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.4.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3dd9c629 code=0x7ffc0000 [ 886.086962][ T30] audit: type=1326 audit(1771418053.538:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.4.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9a3dd9c629 code=0x7ffc0000 [ 886.271733][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.471370][T18868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3894'. [ 886.550981][T18474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.551006][T18474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.090527][T18476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.090555][T18476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.418443][T13547] usb 4-1: USB disconnect, device number 111 [ 887.776626][T13547] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 887.871242][ C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 887.878264][ C1] ------------[ cut here ]------------ [ 887.884017][ C1] URB ffff88802ab3ee00 submitted while active [ 887.890089][ C1] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0x7b/0x18b0, CPU#1: swapper/1/0 [ 887.899919][ C1] Modules linked in: [ 887.904128][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 887.910496][ T10] usb 3-1: USB disconnect, device number 109 [ 887.914713][ C1] Tainted: [L]=SOFTLOCKUP [ 887.925483][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 887.936308][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 887.941824][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 d7 e2 f9 fa 49 83 3e 00 74 40 e8 1c d7 8f fa 48 8d 3d 05 fc e8 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 01 d7 8f fa eb 05 e8 fa d6 [ 887.961734][ C1] RSP: 0018:ffffc90000a08960 EFLAGS: 00010083 [ 887.968016][ C1] RAX: ffffffff8735b0c4 RBX: ffff88802ab3ee00 RCX: 0000000000040000 [ 887.976012][ C1] RDX: ffffc90002362000 RSI: ffff88802ab3ee00 RDI: ffffffff901eacd0 [ 887.984027][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 887.992019][ C1] R10: dffffc0000000000 R11: fffff5200014112c R12: 0000000000000820 [ 888.000033][ C1] R13: ffff8880284b8030 R14: ffff88802ab3ee08 R15: dffffc0000000000 [ 888.008099][ C1] FS: 0000000000000000(0000) GS:ffff888125566000(0000) knlGS:0000000000000000 [ 888.017136][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 888.023811][ C1] CR2: 000020000064a000 CR3: 0000000077b26000 CR4: 00000000003526f0 [ 888.031883][ C1] Call Trace: [ 888.035191][ C1] [ 888.038065][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 888.044000][ C1] ? ___ratelimit+0x58c/0x8d0 [ 888.048728][ C1] cm109_urb_irq_callback+0x6e2/0xcb0 [ 888.054203][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 888.059585][ C1] dummy_timer+0xbbd/0x45d0 [ 888.064108][ C1] ? __resched_curr+0x106/0x3f0 [ 888.068971][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 888.073960][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 888.079373][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 888.084324][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 888.090144][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 888.095091][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 888.100031][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 888.105257][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 888.110982][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 888.117067][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 888.122627][ C1] handle_softirqs+0x22a/0x870 [ 888.127402][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 888.132178][ C1] __irq_exit_rcu+0x5f/0x150 [ 888.136781][ C1] irq_exit_rcu+0x9/0x30 [ 888.141031][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 888.146674][ C1] [ 888.149610][ C1] [ 888.152545][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 888.158531][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 888.164170][ C1] Code: ae 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 6d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 888.183788][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 888.189881][ C1] RAX: 0000000000cdfcaf RBX: ffffffff819a77ad RCX: 0000000080000001 [ 888.197947][ C1] RDX: 0000000000000001 RSI: ffffffff8def122b RDI: ffffffff8c27a500 [ 888.206009][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 888.214072][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901170b0 [ 888.222317][ C1] R13: 1ffff11003b5c000 R14: 0000000000000001 R15: 0000000000000001 [ 888.230393][ C1] ? do_idle+0x1bd/0x500 [ 888.234655][ C1] default_idle+0x9/0x20 [ 888.238899][ C1] default_idle_call+0x72/0xb0 [ 888.243676][ C1] do_idle+0x1bd/0x500 [ 888.247760][ C1] ? __pfx_do_idle+0x10/0x10 [ 888.252365][ C1] ? do_idle+0x15/0x500 [ 888.256541][ C1] cpu_startup_entry+0x43/0x60 [ 888.261314][ C1] start_secondary+0x101/0x110 [ 888.266090][ C1] common_startup_64+0x13e/0x147 [ 888.271138][ C1] [ 888.274175][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 888.281458][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 888.291965][ C1] Tainted: [L]=SOFTLOCKUP [ 888.296298][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 888.306364][ C1] Call Trace: [ 888.309654][ C1] [ 888.312501][ C1] vpanic+0x56c/0xa60 [ 888.316495][ C1] ? __pfx__printk+0x10/0x10 [ 888.321091][ C1] ? __pfx_vpanic+0x10/0x10 [ 888.325598][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 888.330895][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 888.336129][ C1] panic+0xc5/0xd0 [ 888.339949][ C1] ? __pfx_panic+0x10/0x10 [ 888.344383][ C1] ? common_startup_64+0x13e/0x147 [ 888.349593][ C1] __warn+0x315/0x4f0 [ 888.353586][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 888.358446][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 888.363311][ C1] __report_bug+0x29a/0x540 [ 888.367917][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 888.373396][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 888.378255][ C1] ? __pfx___report_bug+0x10/0x10 [ 888.383291][ C1] ? dev_printk_emit+0xee/0x140 [ 888.388156][ C1] report_bug_entry+0x19a/0x290 [ 888.393018][ C1] ? usb_submit_urb+0x7e/0x18b0 [ 888.397965][ C1] ? usb_submit_urb+0x83/0x18b0 [ 888.402820][ C1] handle_bug+0xca/0x200 [ 888.407064][ C1] exc_invalid_op+0x1a/0x50 [ 888.411570][ C1] asm_exc_invalid_op+0x1a/0x20 [ 888.416424][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 888.421892][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 d7 e2 f9 fa 49 83 3e 00 74 40 e8 1c d7 8f fa 48 8d 3d 05 fc e8 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 01 d7 8f fa eb 05 e8 fa d6 [ 888.441514][ C1] RSP: 0018:ffffc90000a08960 EFLAGS: 00010083 [ 888.447783][ C1] RAX: ffffffff8735b0c4 RBX: ffff88802ab3ee00 RCX: 0000000000040000 [ 888.455858][ C1] RDX: ffffc90002362000 RSI: ffff88802ab3ee00 RDI: ffffffff901eacd0 [ 888.463922][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 888.471986][ C1] R10: dffffc0000000000 R11: fffff5200014112c R12: 0000000000000820 [ 888.479978][ C1] R13: ffff8880284b8030 R14: ffff88802ab3ee08 R15: dffffc0000000000 [ 888.487982][ C1] ? usb_submit_urb+0x74/0x18b0 [ 888.492862][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 888.498698][ C1] ? ___ratelimit+0x58c/0x8d0 [ 888.503607][ C1] cm109_urb_irq_callback+0x6e2/0xcb0 [ 888.509017][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 888.514409][ C1] dummy_timer+0xbbd/0x45d0 [ 888.518929][ C1] ? __resched_curr+0x106/0x3f0 [ 888.523803][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 888.528778][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 888.534174][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 888.539123][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 888.544965][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 888.550872][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 888.555814][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 888.561125][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 888.566850][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 888.572949][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 888.578165][ C1] handle_softirqs+0x22a/0x870 [ 888.582958][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 888.587738][ C1] __irq_exit_rcu+0x5f/0x150 [ 888.592358][ C1] irq_exit_rcu+0x9/0x30 [ 888.596654][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 888.602335][ C1] [ 888.605276][ C1] [ 888.608214][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 888.614205][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 888.619851][ C1] Code: ae 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 6d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 888.639473][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 888.645573][ C1] RAX: 0000000000cdfcaf RBX: ffffffff819a77ad RCX: 0000000080000001 [ 888.653985][ C1] RDX: 0000000000000001 RSI: ffffffff8def122b RDI: ffffffff8c27a500 [ 888.661970][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 888.670045][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901170b0 [ 888.678463][ C1] R13: 1ffff11003b5c000 R14: 0000000000000001 R15: 0000000000000001 [ 888.686443][ C1] ? do_idle+0x1bd/0x500 [ 888.690718][ C1] default_idle+0x9/0x20 [ 888.694972][ C1] default_idle_call+0x72/0xb0 [ 888.699743][ C1] do_idle+0x1bd/0x500 [ 888.703919][ C1] ? __pfx_do_idle+0x10/0x10 [ 888.708521][ C1] ? do_idle+0x15/0x500 [ 888.712808][ C1] cpu_startup_entry+0x43/0x60 [ 888.717607][ C1] start_secondary+0x101/0x110 [ 888.722394][ C1] common_startup_64+0x13e/0x147 [ 888.727371][ C1] [ 888.730572][ C1] Kernel Offset: disabled [ 888.735000][ C1] Rebooting in 86400 seconds..