last executing test programs: 7.06357172s ago: executing program 4 (id=5074): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/84, 0x54}], 0x1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x9, 0x8, 0x4, 0xfffff43e, 0x97}, &(0x7f0000004480)=0x98) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x9, "8aa34c36e8db24c4e7"}, &(0x7f0000000280)=0x11) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000002c0)={r5, 0x9}, 0x8) unshare(0xc000000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)={0x324, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x2c0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc0, 0x2, "87e5ebd13f9cf3be124e9349855a4164bff4879d768572a9afee9eb422c2d8a1e3ebcafd4f34629662af48c9a8b5ccdcf5ae4edd97b86482a4b8db8eadc2a6d348691c4220bbda0f7d0872d0e640d29157b22146431f21798e0286e5ae3f8006da67138a33eb25ded82a04653bb10ca4fe32c2a141127fdfbe22fbeff6f8d68c41f350ec4fce3880340df95dc7cbed3c2edb94becd97e3a5aac0186c543d184dbcce1b962696c1b617ee6d871d266a5a8692ea5103c8566ff2204609"}, @NL80211_FTM_RESP_ATTR_LCI={0x77, 0x2, "eb2eeddd3ac645734a89c63f27437bf1acc1e29d828f4fee46be37bc7e8401d8e25456aa03be4d42d590fbd58d11b27327f13538c67127033aacdd77ed9d9aa293c9221fabbbea2dde39528d181e2253c1e2f525da7ccf5707bb57e006846d7ea33a13d91c906e12118ef7e6ffffd2bbc798a5"}, @NL80211_FTM_RESP_ATTR_LCI={0xa, 0x2, "331d95945f78"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbb, 0x3, "ba5cb27d38fe419e0081b5c7d9285653a48d5a73196c49a404d95c090ce5828d0f2c051db126c9160e720858bb42fe7d45376de42d9ec1dc6bf9f449ab2e6cd2074611dfbdd307131adfb21b75e97760d7cc4733677441021112d3ccbae4dbfe8a9af92d09454fa9c46f0f19a3ee9467ad6fa5a7d86a7e47d09bd67194c81a81f1f99f9d47131aeb7b2f7fb8becfe294c4c82c25a85c7e595b8e7cd8cc73ca9a195387fc3dc9146be6f5e811d198109ba412786a3b15e9"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x40, 0x3, "e7e2d00f175cc39479112cfdabb9c0ba96f99d6576be18091d068ce4f0ee3f541723ac9382d51f9303f6626ba3e0ad4737b951c054430e4284b17403"}, @NL80211_FTM_RESP_ATTR_LCI={0x4e, 0x2, "489bb07cad7407f559454558a01a55c3fd26e56d8606761c1466f221a3f973adad63f860f97f92582c3dfdcab94073fe6afafa3d06a7efa595e0f57f378de26a9dd11947d2e16393ef77"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1e, 0x3, "a846d25ac3331910d905558d8c20dfdb49c556842b839a4d8e14"}]}, @NL80211_ATTR_PROBE_RESP={0x5, 0x91, 'n'}]]}, 0x324}}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r7, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x40, 0x0, 0x3}}, 0x14) 6.1530494s ago: executing program 4 (id=5076): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.01263949s ago: executing program 4 (id=5077): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r5, 0x29, 0x35, 0x0, &(0x7f0000000140)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r3, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close_range(r2, r7, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r9 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="6368616e676568617420307830302c00800000000000303030303030", @ANYRES16=r9], 0x1d) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000000)) 5.777623912s ago: executing program 2 (id=5080): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0xaa7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc0585604, &(0x7f0000000000)={0x1}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x20a82, 0x1e) read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020}, 0x2020) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x14, 0x1, 0x3d, 0x892f}}], 0x14}, 0x4008800) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x14, 0x1, 0x3d, 0x892f}}], 0x14}, 0x4008800) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x2}, @ioring_restriction_register_op={0x0, 0x2}, @ioring_restriction_sqe_flags_required={0x3, 0x18}, @ioring_restriction_register_op={0x0, 0xa}, @ioring_restriction_sqe_op={0x1, 0x18}], 0x5) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, 0x0, 0x0, 0x0) (async) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100060f5010000000000000000000300000a58000000090a010400000000000000000a0000080900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc1c0011800b00000000007468247200000c0002800800064000000002140000001100e0ffffff0000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2040000}, 0x40) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r4, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r4, &(0x7f0000000500)=""/4087, 0xff7, 0x6, &(0x7f0000000240)={0x77359400}) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) inotify_init() rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') (async) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(r0, &(0x7f000000e280)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r5}, 0x50) (async) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r5}, 0x50) 4.796586844s ago: executing program 2 (id=5085): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r5, 0x29, 0x35, 0x0, &(0x7f0000000140)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='source', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r3, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close_range(r2, r7, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r9 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r9, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r9], 0x1d) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000000)) 4.247880162s ago: executing program 1 (id=5086): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)={0x2e0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x27c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc0, 0x2, "87e5ebd13f9cf3be124e9349855a4164bff4879d768572a9afee9eb422c2d8a1e3ebcafd4f34629662af48c9a8b5ccdcf5ae4edd97b86482a4b8db8eadc2a6d348691c4220bbda0f7d0872d0e640d29157b22146431f21798e0286e5ae3f8006da67138a33eb25ded82a04653bb10ca4fe32c2a141127fdfbe22fbeff6f8d68c41f350ec4fce3880340df95dc7cbed3c2edb94becd97e3a5aac0186c543d184dbcce1b962696c1b617ee6d871d266a5a8692ea5103c8566ff2204609"}, @NL80211_FTM_RESP_ATTR_LCI={0x77, 0x2, "eb2eeddd3ac645734a89c63f27437bf1acc1e29d828f4fee46be37bc7e8401d8e25456aa03be4d42d590fbd58d11b27327f13538c67127033aacdd77ed9d9aa293c9221fabbbea2dde39528d181e2253c1e2f525da7ccf5707bb57e006846d7ea33a13d91c906e12118ef7e6ffffd2bbc798a5"}, @NL80211_FTM_RESP_ATTR_LCI={0xa, 0x2, "331d95945f78"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbb, 0x3, "ba5cb27d38fe419e0081b5c7d9285653a48d5a73196c49a404d95c090ce5828d0f2c051db126c9160e720858bb42fe7d45376de42d9ec1dc6bf9f449ab2e6cd2074611dfbdd307131adfb21b75e97760d7cc4733677441021112d3ccbae4dbfe8a9af92d09454fa9c46f0f19a3ee9467ad6fa5a7d86a7e47d09bd67194c81a81f1f99f9d47131aeb7b2f7fb8becfe294c4c82c25a85c7e595b8e7cd8cc73ca9a195387fc3dc9146be6f5e811d198109ba412786a3b15e9"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x48, 0x3, "e7e2d00f175cc39479112cfdabb9c0ba96f99d6576be18091d068ce4f0ee3f541723ac9382d51f9303f6626ba3e0ad4737b951c054430e4284b1740347033ee17b5263ef"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1e, 0x3, "a846d25ac3331910d905558d8c20dfdb49c556842b839a4d8e14"}]}, @NL80211_ATTR_PROBE_RESP={0x5, 0x91, 'n'}]]}, 0x2e0}}, 0x0) 4.247056495s ago: executing program 0 (id=5096): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r4, 0x29, 0x35, 0x0, &(0x7f0000000140)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='source', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r7 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="6368616e676568617420307830302c00800000000000303030303030", @ANYRES16=r7], 0x1d) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) 4.229222904s ago: executing program 3 (id=5087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x80000000}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_LOG_PREFIX={0x10, 0x2, 0x1, 0x0, '!}*\xdb!/\xc9#.-*\x00'}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x6, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xd8}}, 0x0) 4.070699052s ago: executing program 4 (id=5088): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x6}) poll(&(0x7f0000000340)=[{r0, 0x8000, 0xfefd}], 0x1, 0x9) 4.043631463s ago: executing program 1 (id=5089): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @local, 0x5}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='net\x00') r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80000000, 0x25dfdbf9, {0xa, 0x80, 0x10, 0x0, 0xfd}}, 0x1c}}, 0x0) syz_usb_connect$uac2(0x0, 0x8c, &(0x7f0000001dc0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8210, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0xc, 0x20, 0x81, {0x8, 0xb, 0x0, 0x1, 0x1, 0x5, 0x20, 0xb5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x7, 0x1a, 0x9}, [@mixer_unit={0x5, 0x24, 0x4, 0x2}, @output_terminal={0xc, 0x24, 0x3, 0x3, 0x307, 0xfb, 0x3, 0x2, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x4, 0xb, {0x8, 0x25, 0x1, 0x0, 0x31, 0xa6, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x4, 0x8, {0x8, 0x25, 0x1, 0x80, 0xf, 0x5a, 0x7fff}}}}}}}}]}}, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) connect(r1, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, 'caif0\x00'}}, 0x80) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{0x2bca, 0xc2, 0x200, 0x6}, 'syz0\x00', 0x49}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000180)) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) fsopen(0x0, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000007c0)={0x1, 'veth1_to_hsr\x00', 0x4}, 0x18) 3.988588892s ago: executing program 3 (id=5090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x0) 3.879995655s ago: executing program 4 (id=5091): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) read(0xffffffffffffffff, 0x0, 0xfffffe88) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x22, 0xffffffffffffffff, &(0x7f00000002c0)=0x49) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1e08004502005c00000000002f9078ac1414bbffffffff248086dd000400001c15521910000800000086dd080088be00000000100000000100000000000000080022000000001008005ed36558fffffe558aa9d045fcb31f00c73da515388a701ab89e37d59137227da7ece47fd279795844460f80e41a9e3876e2e46fc03c7ca5f5e158a5e80b86f59a6dd304"], 0x0) r5 = syz_usb_connect$cdc_ecm(0x4, 0x156, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x60, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x144, 0x1, 0x1, 0x67, 0xf0, 0x9}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x0, 0xd0, 0x5, 0x8, 0x5}, 0x2e, &(0x7f00000001c0)={0x5, 0xf, 0x2e, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x2, 0x3, 0x6a84, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xe, 0x7, 0x7}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "bb4e1fe3e3d3ed686a472ac3d2fb4379"}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x421}}]}) syz_usb_ep_write(r5, 0x5, 0x38, &(0x7f0000000500)="8e8ecb86e1686a692ca25e347583fdfc30f27773109e13988de3ddac8aae64793bab124db2a51a3f7905ff8af0b9818f6d59613d778b08c1") sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xffffffffffffff39, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xa3}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000040)) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000080)=[{&(0x7f0000002240)=""/155, 0x9b}], 0x1, 0x8, 0x5) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) 3.871153928s ago: executing program 3 (id=5092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)={0x2e0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x27c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc0, 0x2, "87e5ebd13f9cf3be124e9349855a4164bff4879d768572a9afee9eb422c2d8a1e3ebcafd4f34629662af48c9a8b5ccdcf5ae4edd97b86482a4b8db8eadc2a6d348691c4220bbda0f7d0872d0e640d29157b22146431f21798e0286e5ae3f8006da67138a33eb25ded82a04653bb10ca4fe32c2a141127fdfbe22fbeff6f8d68c41f350ec4fce3880340df95dc7cbed3c2edb94becd97e3a5aac0186c543d184dbcce1b962696c1b617ee6d871d266a5a8692ea5103c8566ff2204609"}, @NL80211_FTM_RESP_ATTR_LCI={0x77, 0x2, "eb2eeddd3ac645734a89c63f27437bf1acc1e29d828f4fee46be37bc7e8401d8e25456aa03be4d42d590fbd58d11b27327f13538c67127033aacdd77ed9d9aa293c9221fabbbea2dde39528d181e2253c1e2f525da7ccf5707bb57e006846d7ea33a13d91c906e12118ef7e6ffffd2bbc798a5"}, @NL80211_FTM_RESP_ATTR_LCI={0xa, 0x2, "331d95945f78"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbb, 0x3, "ba5cb27d38fe419e0081b5c7d9285653a48d5a73196c49a404d95c090ce5828d0f2c051db126c9160e720858bb42fe7d45376de42d9ec1dc6bf9f449ab2e6cd2074611dfbdd307131adfb21b75e97760d7cc4733677441021112d3ccbae4dbfe8a9af92d09454fa9c46f0f19a3ee9467ad6fa5a7d86a7e47d09bd67194c81a81f1f99f9d47131aeb7b2f7fb8becfe294c4c82c25a85c7e595b8e7cd8cc73ca9a195387fc3dc9146be6f5e811d198109ba412786a3b15e9"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x48, 0x3, "e7e2d00f175cc39479112cfdabb9c0ba96f99d6576be18091d068ce4f0ee3f541723ac9382d51f9303f6626ba3e0ad4737b951c054430e4284b1740347033ee17b5263ef"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1e, 0x3, "a846d25ac3331910d905558d8c20dfdb49c556842b839a4d8e14"}]}, @NL80211_ATTR_PROBE_RESP={0x5, 0x91, 'n'}]]}, 0x2e0}}, 0x0) 3.795794968s ago: executing program 3 (id=5093): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0186404, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil}) (async) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r0, &(0x7f00000000c0)=0x7, 0x0) (async) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x8000, 0x80000001, 0x7, 0x9, 0x4, 0x0, [{0x1ff, 0x9, 0x6, '\x00', 0x180}, {0xb, 0x8, 0x0, '\x00', 0x8}, {0x4, 0x7731, 0x18000}, {0x7, 0x7, 0x8, '\x00', 0x583}]}) (async, rerun: 32) r3 = io_uring_setup(0x13b, &(0x7f0000000200)={0x0, 0x46a2, 0x20000, 0x2, 0x2e7}) (rerun: 32) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280), 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000002c0)={0x3b, 0x0, '\x00', [@enc_lim]}, 0x10) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8008}, 0x4000) (async, rerun: 64) r7 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) getsockopt$inet_buf(r7, 0x0, 0x2a, &(0x7f0000000440)=""/95, &(0x7f00000004c0)=0x5f) (async) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0xcfc2, 0x800, 0x0, 0x385}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4dd7, 0x8, 0x2, 0x2cf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9eb0, 0x80, 0x3, 0x30b, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x438e, 0x400, 0x2, 0x2bb, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x41ae, 0x2000, 0x3, 0x39f, 0x0, r3}}], 0x4, &(0x7f0000001800)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x2, 0x377, 0x0, &(0x7f0000000800)=@buf_max_buf="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"}}, &(0x7f0000001880)) pwrite64$ublk_ch(r8, &(0x7f00000018c0)=@buf_max_buf="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", 0x1000, 0x0) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000028c0)={0x0, 0x7f}, &(0x7f0000002900)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000002940)={r9, @in6={{0xa, 0x4e24, 0xbb, @local, 0xfff}}, 0xa3ec, 0x9}, 0x88) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002a40), r5) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000002a80)={@mcast2, 0x0}, &(0x7f0000002ac0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000002b00)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r10, &(0x7f0000002c80)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x20202}, 0xc, &(0x7f0000002c40)={&(0x7f0000002b40)={0x100, r11, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) (async) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000002cc0)={0xc8, 0x5, 0x2, 0x2}) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000002d00), r10) (rerun: 64) r14 = openat$adsp1(0xffffff9c, &(0x7f0000002d40), 0x10c40, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r14, 0xc004500a, &(0x7f0000002d80)=0x80000000) 3.439820395s ago: executing program 3 (id=5094): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16], 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000419000/0x4000)=nil, 0x4000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r1, 0x0) 3.004836716s ago: executing program 2 (id=5095): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0xcf7a}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.822384252s ago: executing program 2 (id=5097): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) r1 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001700)="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", 0x901}], 0x2, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r6, &(0x7f00000001c0)='1', 0x1) write$6lowpan_control(r5, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000002c0)={0x34, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x40004000) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24004881) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000003440)=""/4096) bind$inet6(r9, &(0x7f0000001300)={0xa, 0x0, 0x9, @dev, 0x6}, 0x1c) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000676000/0x1000)=nil, 0x1000}, 0x2}) 2.400975644s ago: executing program 0 (id=5098): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r5, 0x29, 0x35, 0x0, &(0x7f0000000140)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='source', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r3, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close_range(r2, r7, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r9 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r9, &(0x7f0000000280)=ANY=[@ANYBLOB='changehat 0x00', @ANYRES16=r9], 0x1d) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000000)) 2.372789748s ago: executing program 1 (id=5099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x20, 0x7, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.740146263s ago: executing program 1 (id=5100): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x41, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x6008, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x7}, @generic="08605cf4"]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 1.660216571s ago: executing program 1 (id=5101): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0xca042) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '\x00\xd2D\xb2K\x94\xad\x14\xdf\\\t\x9d#\xefEY\x86\x97\x01\xa3\xa6\b\x008/\xea\xf9W\x11\xbd\x0e\xe6\xb8\x8d\x03\xca\xf0\x881\xe8 Pj4\xe9\x021\xe8\x88\x1a\x13C\xf6\xb1\xc2\x7f\x04\xc5*`b3\xe8%5\xeexZ\bii\v\xea\t\xfd\xbc\xc2\xbf?g\x8d\xe05\xab\xd1W\xf0\x92\x86\x86\x05\x00\x00\x00\xaa\xb1.n\xbf\xc8\xd1\xa5\r\xc7\x04O\xde\xd3w\xe1\xdd\x11g3\x15}\xe0\xc5V\xc3\x97J\x10\x17\xd9\x1c\xf9\xfc:>\x0ea\x81*\x15\x14\xfe\xec\x1d@~\x0f9\xce\xb0\xa5\xe3\x12\x04\xef\x12\xd2J$)7/R8\x0eS\xa7\x14\xfdz\x80g\xd5\x9d\x8e{\xeb\xc9\x19\xf4\xf3k\v\xd0\xeaP\xd8p\xf4\n\xe0\x81\x9c\x9a\xd4o\xc2\xb3\xbc\xd2\x8d3\x87\f\xe1C\xb6\x8ct\x97\xeb\xe9\\\x9c\xb8bs#\xf7*\x1c\xb4g\x9d\xaa,\x97\a\x00\x00\x00\x00\x00\x00\x00\a\xdbt\xb3\x84\x98\x87$\xbc\xf8?J\xec@\xa3\xfd\x193\xe7\x01d\xd4\xdfP~\xa1}\x83\x12~>\x89\xcd\xf7\x9d\xbfgV\x02\xb0\x88\x9a\x17\xf2\xb2\xa5z4\xe3&Zc\n\xf4\x19U\xeb\a\xe2W\xeeU\xc6\x06\xeb\n\x045\xe7\x94Ho\xb1\x8e\x91+9\xb8=\xe2b\xc0+\xfc\xd1oz\xdd\xbdDHh\xf8\x04m\a\r$\x8f\x92\xfdw\xb4\xc5&CF$\xeb\x91\xad\x1b-\r\xbe2f\xed8R\\?O;\x01\xac\xb3\xa8\xdc\xf5\x9f]\xc2O\xda]=\r\xff8\x99\xa1\xbd\x85#\x88\xb7C\x7f\xf0\xb8f\x90>P>=\xedBQO\xeb\xbd\xa8%a\xddX\xaa\xfb1\xfc\xb9\xbb\xa2\t\x90xao\x9d\x1d.\x82g\x9b\x13\b\x84\x1d\xba?\xb7\x0elp1\x9b\xac\x8c\xaex\x7f\x12\xd6\xf1C%\xec<\xec\xeblp\xd9\x9dt\x97\xe2|8\x9aVE\xa7\xdc\xdf\xe3L\xd4N\xce\x7fbb$$,48\x12\xa0w\x8c\x90x\xddjt\x1b\x93O\xdc\x12\f\xf0\x99\xb10\xc1\xecW\xe2/\x1e\x1d\xc2C-\xdb<\x86\xe5\xd8\xfa\x9f\xd5>\x13\xf0\xb5\xa1Y\x90\x01\xbd\xbcC#\x00'/530}]}, 0x21e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x4, 0x1]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000180)={0x0, 0x2, 0x800, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x1b0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x4, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) (async) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x7, 0x0, 0x0}}, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 64) setxattr$security_evm(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f00000003c0)=ANY=[@ANYBLOB="0502110017000000004ac9c6ff92994e75ca95da69585c41a92d4a5986e77392619f6e7aaea61f5f67d08fa20bde06f612721ecad77b7e3b53e60586ed1f0b2547029a95d1815c2c6c88a418d137cc5d3bbf68226901419eac536800a4493f0c8ebc44"], 0x9, 0x1) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r8 = socket(0x2c, 0x6, 0x80) (async, rerun: 64) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="1400000a1000010000000000000000000000000a28000000000a01030000000000000000010000010900010073797a31000000e7e03185e6647d7281865e2f487bf41000080002400000000340000000030a01010000000000000000010000000900030073797a32000000000900010073797a310000000014000480080002407c40280f080001400000000014000000000a050000000000000000000100000814000000"], 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x48) (async) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000040)) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r12) (async, rerun: 32) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x4400, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) (async) r13 = openat$cgroup_freezer_state(r12, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r13, &(0x7f00000000c0)='FROZEN\x00', 0x7) (async) sendfile(r13, r13, 0x0, 0x8000002) 1.302171917s ago: executing program 1 (id=5102): r0 = socket(0xa, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000080)={0x0, 0x3, 0xc72, 0x8, 0x97e1, 0x0, 0x200, 0x0, 0x1, 0x1, 0x2, 0xfff, 0xa, 0x2, 0x2, 0x100, 0xffff3ac7, 0x1000, 0x3, 0x1, 0x10000, 0x2, 0xfffffffc, 0x2, 0x400, 0x65e9}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0xe20, @empty}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000090) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x989680}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xa, 0x10002}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) fdatasync(0xffffffffffffffff) sendmsg$netlink(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001a00)={0x10, 0x25, 0x4, 0x70bd26, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x20000801}, 0x40010) r7 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r7, 0x0, 0x0) 1.100318033s ago: executing program 2 (id=5103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x0) 1.046328235s ago: executing program 0 (id=5104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)={0x2e0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x27c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc0, 0x2, "87e5ebd13f9cf3be124e9349855a4164bff4879d768572a9afee9eb422c2d8a1e3ebcafd4f34629662af48c9a8b5ccdcf5ae4edd97b86482a4b8db8eadc2a6d348691c4220bbda0f7d0872d0e640d29157b22146431f21798e0286e5ae3f8006da67138a33eb25ded82a04653bb10ca4fe32c2a141127fdfbe22fbeff6f8d68c41f350ec4fce3880340df95dc7cbed3c2edb94becd97e3a5aac0186c543d184dbcce1b962696c1b617ee6d871d266a5a8692ea5103c8566ff2204609"}, @NL80211_FTM_RESP_ATTR_LCI={0x77, 0x2, "eb2eeddd3ac645734a89c63f27437bf1acc1e29d828f4fee46be37bc7e8401d8e25456aa03be4d42d590fbd58d11b27327f13538c67127033aacdd77ed9d9aa293c9221fabbbea2dde39528d181e2253c1e2f525da7ccf5707bb57e006846d7ea33a13d91c906e12118ef7e6ffffd2bbc798a5"}, @NL80211_FTM_RESP_ATTR_LCI={0xa, 0x2, "331d95945f78"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbb, 0x3, "ba5cb27d38fe419e0081b5c7d9285653a48d5a73196c49a404d95c090ce5828d0f2c051db126c9160e720858bb42fe7d45376de42d9ec1dc6bf9f449ab2e6cd2074611dfbdd307131adfb21b75e97760d7cc4733677441021112d3ccbae4dbfe8a9af92d09454fa9c46f0f19a3ee9467ad6fa5a7d86a7e47d09bd67194c81a81f1f99f9d47131aeb7b2f7fb8becfe294c4c82c25a85c7e595b8e7cd8cc73ca9a195387fc3dc9146be6f5e811d198109ba412786a3b15e9"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x48, 0x3, "e7e2d00f175cc39479112cfdabb9c0ba96f99d6576be18091d068ce4f0ee3f541723ac9382d51f9303f6626ba3e0ad4737b951c054430e4284b1740347033ee17b5263ef"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1e, 0x3, "a846d25ac3331910d905558d8c20dfdb49c556842b839a4d8e14"}]}, @NL80211_ATTR_PROBE_RESP={0x5, 0x91, 'n'}]]}, 0x2e0}}, 0x0) 1.02459193s ago: executing program 2 (id=5105): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) sync() syz_usb_control_io$uac1(r0, 0x0, 0x0) pipe(&(0x7f0000000040)) syz_usb_control_io$printer(r0, 0x0, 0x0) clock_gettime(0x8, &(0x7f0000001ac0)) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 981.224407ms ago: executing program 0 (id=5106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe2$9p(&(0x7f0000000040), 0x80) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0xff7b) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000051c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x6, 0x7, 0xfffffffc}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x3}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x4800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_emit_ethernet(0x6e, 0x0, 0x0) 883.626028ms ago: executing program 0 (id=5107): bpf$TOKEN_CREATE(0x24, &(0x7f0000001240), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x40, 0x40000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000bc0)=0xffffffffffffffff, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r4, &(0x7f0000000040), &(0x7f000009de80), 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000eb3d332ea8434bcfceaf2461d3f3f6e20a5ed1d0e99654a48ac54cc225e05daeca3dd23f1419018062836b8cbccba260b078a975f8be002e5895"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000200), 0x0, 0x0, 0x0, 0x616, r5}, 0x38) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0xd9, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) sendmmsg(r1, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000fc0)="91023dd5e843d3561cf291a3cf4d17daa8b5db27c7b64a8672e49daa4057bbbeb4438630d9173c0381530f12107e8e95a46c3e00f0f104ef702258c51a3545ba8a63dee2e37f924822e4b43718f493fe209f45a79394a571babe9dc6f85937dd517177c7ef81a6131db01c92dbe57d192043f0fe4e1ff3e19431f825fa485e14e92114e2efcba973439adec4502fc58cce2eb5edfba38464c730de8dc5a13819478717db1631c7611a66c5d79f9cf178ee8a99e28fee7089a832c275d60c6316fbe1d1e31e3dd8e94aa84266daceda020f4a", 0xd2}, {&(0x7f00000010c0)="dc764c13a19be64fe88734f40b2cb27e4679328910efe89c933188f8660209c9ec174fc0337966f3c285678513698afb29a59f79c0a6fe514f4c22b93a47b3acce", 0x41}], 0x2, &(0x7f0000001880)=[{0xdc, 0x115, 0x1, "2d80410a51b2f9594bbb85b6b92f3c08e9505b83dacb1ef473bfde6eafa5dfc1c799ad6f2a211e7cab17a19eb4ed5940c3bde5ba828bbfd1f6ca7e5576c2bb2b9999f208740948fba9915391af52711fe51487a1f6ebd61f6827361a32f6b938c53e8f8c5f2ddf069cf26efa507303dc0fdb91d9cad484fa8745d9817f42ace990fe39abe347234440bd00b3d23876c651eb32857c6e4edc4691aaf01cb596953c670ffc1372b7a26d2c67572b447479a9bf22e4def3478f282e73c6536f9226c047a3c6d7ad9eb912e0045074"}, {0x98, 0x10e, 0x9, "d43f698bbe53626fc861ef921ce669d74ec66915e5488754fad66eb5276d647edfa9e7d92a2c48fbfd3f3ad0d3d8db455ba62ea8c9bd880a36d558360e8f55de56748250f1e3f5a008bd9d13b30c948a5fc29b3b9501d1accf6f4f36c08254b340f14ca17430b72b2f2807913bd6751c62a044e158fd2b9ee3f250e4787b58a7f23c014d1245f2d8a2f8fd51"}, {0x100c, 0x1, 0x1, "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"}, {0x88, 0x10d, 0x3, "95a59cdf0d4693712ae740d1559c4ca9389b2dab5a58f6d8fe25409f408fcedc627319d124cd3bf05f19fc8ee1aa95460d05f4edcdb246091e2026d622ff49f86477914abd264bd5c2f80dd3d9fdbe8e8878615c74ef617d85c8314cd5e7bfcf03ee2848660dbbcbdbbc9288af6ff9da55897c8774a2bf26c43f"}, {0xa8, 0x101, 0x7, "dd696365a14994cb7dc45cf000b7fda627ea5121d3604174b462ca2f920c5bf1241962a9f0bf1785b60e10eef6065cde88604688240f1e18d2e2e2c9e8440c34e600a8532b5f620358890d2c8d3fb5479feb42d17c18f7e6d0d55fad9971a4a58914dda950745844fdd2cd64c4f500a22d823a4d7827fb7ae6935487270bc504b0b78ead68dc6c9e0c8743811335c57d74dad9b7771a887a2bb533"}, {0x100c, 0x6, 0xc0, "b3d2b25d1e93a1b2b6f9f7291a904617c524f9ca0fe998bb88a24c62ea82376d6857b2c282a8cacee01b02b4b57c1160609086adec81d855aa676b5da0d7b85c3c41d3073769ca4248d3fab86f6cbcc8a3a635423f43115324b42bbf351aab58b833ce0f2630766def5b5e07d8d51774ad6a19984b438da17615a72d48738592327d51615ff12ea31fbae1c91d07345eb679350e79dd914561adfa800a75394f82e62b61682b3b5739be932975594ce4db341a476916624c456c495b39080333d2d2557ffe2471bf49e255f820c9f0ae88ed10665ad96aeeae890efd15a1c924d801a7518735d80c39549d3c4a490f1804434fcac589937f8fab4180af5621e47857bc0a38442c5b71964fe051f59ac9a7a76134320a3c06305f903fa0cf52bdce0e0dab8b7f5924c8fdfd70bc0876329c59522d572844a9dc26af74de9cbde2b5fddc2fe587ae84af035d435cc618589ccb0fb06aaa839c66150eea1789694ba94e3b7b504438fe21d6fb35de5541827ab77cc7739dc2c02b15a633cad1e3ea4dab28a720c4a4e915667724b311a5d268193c21644d19760a2d76aca5d999bd0d25730f64025a19b9036c21454932d1cf3525e211b17cd735a322f9cabeee1861a0900b482113087330bd6b2e9a4977e8359c85120a7f62e36244ffe9dfe1766596feff5d613649770fcf972125bfe2f6bae47039cc420df339fdf068aaac13718e517b57053fda1e7aed13fcc84e07b54eb669a4a9e9d2e58674f930c64edec67974c6f8270bde34b39addb8c8cacda3616295d296455dd4808baad89875143f239cd4408dedc21db60066ebf824370e6b3032c7394bd2d82e75c066c04acc2a4e292d440c5d3a955e3e297a5ea02e6fa2184a65e8ffc0a16d38e5b716c3a9d92c7afe6f3e6ca3db2eca5cb0db31447ad4581528f9194f5180c417fb6b6de1133c21748a2e90614904e5e51861a13c634367b25375567ecee4c3a23bf1a2eb049e444b12871f6c3394aafacee2339c827a38dc4ed5c28a1e1a5d06deb42d7cf43996fb7640ae9f1dc52c61061d3e97ef9aa577dcefa697f67290da0d5a7442c8221b4c9b75237bcc8762734ab48e88478bd5bb91ba51844768d5271bfffc21d90bceb58e166933b43b7e94c32175d6cbd7e0cfa06316ba6843b0b07e81eca3cf4ab2eacaaaa37eb271bcd6f4e8b179578eed625ed40c7c6d5f36afbd0cdd9d8fca756876f495bc69280fc7b60189f2738b825b3881138d99269edff8cd1c6e3d7d4da4c9bf0cc8be9eddf5ee2d495f022c59d226b4e849ca8aa2a9f86ebee74157043e9dd77dc852afc421de13c409ad23ec8b1f0ecaf77758effd6e81ac4b8b9ebeb8f68c747755c91aa2f77c731ca28165b8e9d5484a82d9c875ccb1cd8148ab2259a0f3bfd7f0953f111783879695315afb4990b7b8cc9371d23b9fda4bbc62aa097a37085f9a6393d523402c4478ed042dfe184d591eee802d3239cdf028d8971ddca5c3c4b405d304c16577e4567690e0bf0d784d95f83a6874a497da6cc9d63e30d6ad8dca37dad2d53e63e35db3bbecb60cb897b8af622481a1fb2208a90a45679daf2af65b7333780c1493eb46341a1260c67a42dd22408d04df4f6be8517b83445f4740330356a7c39abfd09f121f3b0e1ce1484a48b68d644288839f009a5f137605ffcaf18ea21ca6cc527289cc77e8aa56f7c8702ae128dfee58d65131987c486055b6816a5c0fb01ceea3e823a0f54d15e48eafd1b8bb264c491c80d4f6567923794c357850fef64756a0c04a52b9421158b5ad3b7d84659ad2b7a5e529d9f201bcb2788a33dddc3d8e2415fe7ed0b6d6445e05cec6c62b31e2bc3917b51d8480edc9e94e0f65d54f6b61b5e6f39e30e1df120bb1b8efe16c1eed7206216dac9512c25a4086b23b87751141b32dd66da3ff5a11e72d4a812c0579005762da88841e1a23add9102a42adde649bffb822f692cc838f33742ded9eb9fbc3307b937ab6c172e56102daab274cb7f1df9affc88af1e482d89466690a828addcadf8dcf5205203d9e3edd991671015f6f6b90e365367aaf9a7fba3597c8db00c00da4137f068f262c6a1a537adb328ab2ab09e286f4957a37787ded9a3b47b2e3adbe0cb3c2839eff011a2878a3eea688dea043ae1cf62ee60ee5379f5adf5e22d08295c01cd68b4e418d12bebf43c5f4f4d16959acafe70ce02967dc4ddc0b8bf2470ba05e00fd4b3ae2cdb3487423edfd680759b63eb500dce71dfb8dba55d9b37621771f2322353f85779d79e8bb96d9267928839496e060fef8ea201abbea3535080793303527598ff91a0aa6fe6faf33a7729f4855e6a700531b45fc4041c27dd6fc65d045f4aa5984632e9abad0a9c82973f12ae68af9dc4775fd8ae7c88c27c9ff65c3b9c03c77c31dc66f40ea8277457eb52aa2de9960e64220b668fd1e95873fd86af2bbae13a57bcce3ee608688e7f0a2461c2a0cba863bcc57b5ce12f34a168a4b3d3ed2374e8dac5b83c1ff8e0756fc791102418a9ec8793e4dbafee49f0da0aa984b8ddb38a928265746cc27795d3147b7b42e30e6e80ff0db413d54261fdb160cf6bdfd170bc5717d01d9072c9a5030b9b971862ce9331c6b7a6621e2548f2e8fb4f6243dbebcd80d0f1bc4cfd6245aa0a69ada572e435f129588dae32ba10ec874bc9e8d1cff1e998ca00c7a670d62f7fb528b72b553225b1cf42f21715ced58babcf66cb4d02befdf71a45de907178934d6167872d535bb287d3fdbecce31b099c5815258b7b0b7be35302723114df00441687d3c1d1dd11a72079560a16204b208dc0ec4a7bcb5211f152853c2689d67e99cb15f768f1369f3013ea96387a81f05b7e1d3f2be364fcdda7e3bfa0c23d1a43c42d1178a26624ecfe10c77391850e0dba10fc9d9adb84be24ad68750451705c272008528e664ebdfa680ec577321cf81abc11b99a3874a20db1bb5554e8474aa97535377542bbfe5bbef1eee30bbd39affcfd8daa54a1aa9cffe4abe159d992ec3979e1afade91b085ecacb0a9e134ac98177108530766f2338fdb891aa99d247bdaf90aaa8cd4acacd9670bad31de203eba2a770f5985fb89d7b011ee34a2daf2f96f2505a356931b7c0c2a4cc9b94db4f15b91cc944ff6675e8065111197bd6b7273739aedf43e38ba5347754a933b8287e31c8c804e1a7a35a8f749abb25bf754c0e8fe789ef6118e24085d48c06d00e0f9315fbd321d752fd34912a1fc4c2dde5dda86c37796dae3feb4cc6048685908405874a9d9934e96371918b1b0c61ec1c532d6cb4ed22223407a0cf42baa3e3ee473886decd3d049c7098280dc55bd7718d068b57a94366566f29420bcc33844afd63854bac63cb7682ff172457263790d2695a42fbab770a8e209a378d2d8ebbdf560c6050b0eb6336464d8121a95a8084d49915c8d110fa5e77fd7a7b42f404c760c83930047fc0a21c41fb80b0a72d795f2757a674f19063fc6e559df99aed17c352167266940d6acd0e7a3117cf8506d26556f3222096c49d9ceaf25da6b900dff3bf96ea5451d4a42c8d605f1d6a93f3980af708bd62200b205a21e10c780b0c8701cfbdf18a6ad3c335e38e0d616b55addfc0e09446183e3d7224ea5e48e1598bcf49fbaeb30efb80ec8c5a577251272e7b06ff4f0f83bcb218ebf8bc57e7b53f6e17725e58bdee1f590dc0ab4cef7dd7c6f2b7c33d16f288738bd29af364f203590f8d031728ac3385dfe9450ced53886239bd3b3f1807fd14de6812c53badee08779903fc0eefa0e65ebd35d14a45a4ca6ac8bfa0ea7863359bddcb142abd494b137a8c665f46cf4823e0882b7a0a2cb694ff065eb3adc98bab8dae34c7ce00c1f4a6699d71cdd5f131c7637c9cc5bc7d1ed1216f1808e05943c28ee00a4758d47a3c1fe9287f377f22bffd3763b99d3e8a6470d50ca7c21e815bf1b4eb998bf7b39473be8113554df94187fed85531e033877eb43f376f581132a3b67e249a9d3646c8aaa73947b958ec0195829028cfb2c5a0e32a53a4b4a4b4d8894b293c1012aa49de741e67e7d85144bae7cf3f1ecf20549ede826a26390bd03e62eb41099e55a507de31125d3659c868abd1398cc6adccfe63fea0ba1b707d5a8427f111a71310acd093230986ca8475e29862db2aa9cd1b9cce225b9a32ab7d09d12461f76f55304902762891735f481aa614e29e89d0eb9f91528b7ba82b758f0f45c92a5065895dcac220a1d32e809e1210fc7d6bb0f7ce1bf5532eb08342c2a9261d2e0a3457a5558a0202ae5303b4a35d11a59b267e5125e9a2b216b4c4a82be2dd42fa2522e14ea342cf38796b1402f1326cb524e7baef68e337943eafc23a6bb446c794e9814da1a07fe0b7ba98e38b8dcf56dd9d3834144a06ff951265765fcfba1727758756d10513b21f6c8ce3243318d01c79d9947889d8d4d94fb76ec10edcb0bacf7291c85db4367d4b8410bb11ea32abcd460ba3474784a2b9c2279073886560dbe9e4db3d1462f2de71b2a2f800e612a45992bc0f0233227c2b22068a5d88f28af9bc27202c458f8afae1982729ba9c6c22d175f20b2c66b44a2dff147f9190f997c3272274c0b508d907718f76559f7d915adfa088b4a85a3e8c2a88857167bfd76f0254105491cd98776380d5edab1ed0089b25efcdb27dc10dfe709c320175c5207e0d834a322ecec4d277cc4958d8c0bada5ec07d6d413914c4e5d8d65296b580e09abaab00db657ea78a857836acf27196f572fec0c1f1e1b805b9ef30060c6fa336fa0436f8cc02b4da243aec242d497562510566fb0608dae7c79c8e9d8d3ed271db50d3b194e95f04965b74e9f6e1f9e98057eceb702ebde158b2dd42f69dc50c23491a2559eaf7534929489b3f8ea97fe1ecfc3df7adc2b5a25ab496c2c18a846046ee0a3b6a30c5aab227c11d63e2503bfc73f2664beb367cdec27aad352eac5bc395129573aac5c23c8ff4f8388d3292e21b3930ca2918a297027010b454566b1d2a9af2a1575532529d048df9baac96bbc19b9eccd95af03b1de41146312c993f15dd13e5f08cfa7d2d911717abe9b5bebfc12e148e0cc831d2a6a382db7c21eefdfb634a01325189ce10b2aae40f5b3dedd3749b9bd584c9cfec027c839993c60285655ef36d90e06d912bf602655dbec8df24bedff7c4495ddd72d09c449ada707b0df74b479cec74398ce6221a0619f0a5fbf0ada5cc2b450627988279ca481275defbbc7d48265005770ad7cc0bc86b8faba9aaa16a60aedff21083bd22015989112bd0db95bec49e2b3b5b53694986a5690c691d866571aa62e5c19696a9480813115dc569189c0886507c66310e7d574a25f7233b330879e9c37591a585c09cebd3b23a0eb53b5c02ccc366998d8955bcf92bb4ee24ed96b0a519d6e21636cc8d36e3f3159ca740b597483c590ff35ffb12fa602e9b76b5643e3a20ba6ac788d8afa4045267bf63f173235430da493c778dd296b3b949957fb50ef463ed0b864ad81c71c33fe89ff49d9263674643c39363df8f9f925622c199f395af9fdd97a40726ac411d221e885d2f6cb1f81ba99fc2dd241dff8329ca6d80dcb506e56624937b231e02d83777ce8e05689b0a045786f1766c882c5c752a41d1d032c137825073dedc4694cc296772e4c2990c5f91fc03a868245c41dd0dad36b43d0b1b9ec8010f690b5f688c6ccf41fe7394b826c102a688465b82964b5cafbf4b33c7423179305c73ce48088343578ea1c3b83aae996484c34bfe2d8d4123ad778"}, {0xbc, 0x110, 0x1, "aa30555d35618ad08687d60d1e8074485e433a3ffee1288c3a5d8ccacbe906efde160cd12c5a4084301b8469b64d7c01855d99e616b653bdddee304f950bdd78f2a5195a03588aa4324331cacd12409e625ca3ba27d1357a983e0ca0cbd337d3a7d83a9445f510bac2203fede13c3d5a153c9514bbfe38ef391053ebddc0035d4ae7cdc1aa2ea59f1b0690fecedeedab3fb6821db7b207f635ae49256ca295842879faf809901e5e6625848283a240"}, {0xd4, 0x109, 0x81, "dd937ff17b340a4e2f71c3c6ddd2abe0187010ed6999a00f963a3d34e5accd85bd29d7e0758682adadf60fce2e390fb53b0589c407568d82ae4d41b8a3f135961772978d0ba7d242cf0c1190b453bd8a068d0bc399bff1b5e2bce563de6896de08d95024a64a27d455cbebac903ffb5387a3263831652d3528fec053bc70bc6b0da9cdbbc631beab11224f983c139d6e77e8ca8f133abe6f205e1372758a95421d9913e52133ba5cd1e6aa3f41f557372a7ab749e3e140be839ab402666669d77b548d4b7f"}], 0x244c}}], 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00') fchdir(r7) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d40)=@generic={&(0x7f0000000d00)='./file0\x00', 0x0, 0x18}, 0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d80), &(0x7f0000000dc0)='%pB \x00'}, 0x1c) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000100)) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r12 = dup3(r11, r10, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r13 = socket(0x10, 0x3, 0x0) r14 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r14, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r14, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_STREAMON(r14, 0x40045612, &(0x7f0000000100)=0x1) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="18110008da76625ee6c830cf19171b4c032223c31fcee76ce3bafdc7c4041e03e988dadf2642c2f88723046217260b307522334dd89ed2082ab5cc84032b5d1a36956b2d3c71cbb5b3c25889ba", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f00000000c0)='syzkaller\x00', 0xc, 0x3, &(0x7f0000000100)=""/3, 0x20880, 0x23, '\x00', r2, 0x17, r3, 0x8, &(0x7f0000000c00)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x0, 0x50e, 0x401}, 0x10, 0x20387, r0, 0x0, &(0x7f0000000e40)=[0x1, r4, r5, r6, 0xffffffffffffffff, r7, r8, r9, r12], 0x0, 0x10, 0x5}, 0x94) 849.393997ms ago: executing program 0 (id=5108): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) read(0xffffffffffffffff, 0x0, 0xfffffe88) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x22, 0xffffffffffffffff, &(0x7f00000002c0)=0x49) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1e08004502005c00000000002f9078ac1414bbffffffff248086dd000400001c15521910000800000086dd080088be00000000100000000100000000000000080022000000001008005ed36558fffffe558aa9d045fcb31f00c73da515388a701ab89e37d59137227da7ece47fd279795844460f80e41a9e3876e2e46fc03c7ca5f5e158a5e80b86f59a6dd304"], 0x0) r5 = syz_usb_connect$cdc_ecm(0x4, 0x156, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x60, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x144, 0x1, 0x1, 0x67, 0xf0, 0x9}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x0, 0xd0, 0x5, 0x8, 0x5}, 0x2e, &(0x7f00000001c0)={0x5, 0xf, 0x2e, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x2, 0x3, 0x6a84, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xe, 0x7, 0x7}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "bb4e1fe3e3d3ed686a472ac3d2fb4379"}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x421}}]}) syz_usb_ep_write(r5, 0x5, 0x38, &(0x7f0000000500)="8e8ecb86e1686a692ca25e347583fdfc30f27773109e13988de3ddac8aae64793bab124db2a51a3f7905ff8af0b9818f6d59613d778b08c1") sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xffffffffffffff39, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xa3}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000040)) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000080)=[{&(0x7f0000002240)=""/155, 0x9b}], 0x1, 0x8, 0x5) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) 360.12026ms ago: executing program 3 (id=5109): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r4, 0x29, 0x35, 0x0, &(0x7f0000000140)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='source', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r7 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="6368616e676568617420307830302c00800000000000303030303030", @ANYRES16=r7], 0x1d) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) 0s ago: executing program 4 (id=5110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x20, 0x7, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) kernel console output (not intermixed with test programs): 1230.222826][T12339] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1230.233826][T12339] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1230.245633][T12339] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1230.256714][T12339] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1230.258092][T24711] bond2: (slave gretap1): failed to get link speed/duplex [ 1230.279074][T12339] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1230.288423][T12339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.300971][T12339] usb 4-1: config 0 descriptor?? [ 1230.310196][ T5720] usb 3-1: Using ep0 maxpacket: 8 [ 1230.318369][ T5720] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1230.327038][ T5720] usb 3-1: config 0 has no interface number 0 [ 1230.334360][ T5720] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1230.360667][ T5725] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1230.369188][ T5720] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1230.381789][ T5725] usb 2-1: MIDIStreaming interface descriptor not found [ 1230.390193][T24724] bond2: (slave gretap1): failed to get link speed/duplex [ 1230.430211][ T5720] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1230.485871][ T5720] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1230.528109][T24723] bond2: (slave gretap1): failed to get link speed/duplex [ 1230.554331][T25186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.573008][ T5720] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1230.580296][T25186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.601841][ T5725] usb 2-1: USB disconnect, device number 40 [ 1230.614257][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.654342][ T5720] usb 3-1: config 0 descriptor?? [ 1230.693969][T19208] udevd[19208]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1230.832221][T25212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.858971][T25212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.945582][T25188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.957475][T25188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.059040][T25220] AppArmor: change_hat: Invalid input '0x00,' [ 1231.274572][T25226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.296206][T25226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.510691][ T5725] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1231.668522][ T5725] usb 5-1: Using ep0 maxpacket: 16 [ 1231.683424][ T5725] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1231.694516][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.702768][ T5725] usb 5-1: Product: syz [ 1231.707695][ T5725] usb 5-1: Manufacturer: syz [ 1231.712525][ T5725] usb 5-1: SerialNumber: syz [ 1231.730808][ T5725] usb 5-1: config 0 descriptor?? [ 1232.182315][T25233] FAULT_INJECTION: forcing a failure. [ 1232.182315][T25233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1232.195918][ T5725] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1232.206868][ T5725] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1232.217707][T25233] CPU: 0 UID: 0 PID: 25233 Comm: syz.0.4730 Tainted: G L syzkaller #0 PREEMPT(full) [ 1232.217737][T25233] Tainted: [L]=SOFTLOCKUP [ 1232.217744][T25233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1232.217756][T25233] Call Trace: [ 1232.217764][T25233] [ 1232.217772][T25233] dump_stack_lvl+0xe8/0x150 [ 1232.217806][T25233] should_fail_ex+0x40c/0x560 [ 1232.217836][T25233] _copy_to_user+0x31/0xb0 [ 1232.217865][T25233] simple_read_from_buffer+0xe1/0x170 [ 1232.217893][T25233] proc_fail_nth_read+0x1bb/0x230 [ 1232.217919][T25233] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1232.217946][T25233] ? rw_verify_area+0x24a/0x4c0 [ 1232.217975][T25233] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1232.217999][T25233] vfs_read+0x213/0xa80 [ 1232.218032][T25233] ? __pfx___mutex_lock+0x10/0x10 [ 1232.218057][T25233] ? __pfx_vfs_read+0x10/0x10 [ 1232.218085][T25233] ? __fget_files+0x2a/0x420 [ 1232.218211][T25233] ? __fget_files+0x3a2/0x420 [ 1232.218240][T25233] ? __fget_files+0x2a/0x420 [ 1232.218273][T25233] ksys_read+0x150/0x270 [ 1232.218303][T25233] ? __pfx_ksys_read+0x10/0x10 [ 1232.218330][T25233] ? asm_int80_emulation+0x1a/0x20 [ 1232.218352][T25233] do_int80_emulation+0x19a/0x550 [ 1232.218376][T25233] ? trace_irq_disable+0x3b/0x140 [ 1232.218398][T25233] ? asm_int80_emulation+0x1a/0x20 [ 1232.218415][T25233] ? clear_bhb_loop+0x40/0x90 [ 1232.218433][T25233] ? clear_bhb_loop+0x40/0x90 [ 1232.218456][T25233] asm_int80_emulation+0x1a/0x20 [ 1232.218474][T25233] RIP: 0023:0xf71371eb [ 1232.218491][T25233] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1232.218508][T25233] RSP: 002b:00000000f53f64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1232.218528][T25233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53f65d0 [ 1232.218542][T25233] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1232.218562][T25233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1232.218574][T25233] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1232.218585][T25233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1232.218614][T25233] [ 1232.439723][ T5725] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1232.447708][ T5725] usb 5-1: media controller created [ 1232.460941][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1232.582875][T25235] AppArmor: change_hat: Invalid input '0x00,' [ 1232.827914][T12339] usb 4-1: string descriptor 0 read error: -71 [ 1232.907814][T12339] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1232.921623][T12339] usb 4-1: USB disconnect, device number 37 [ 1232.945786][ T5720] usb 3-1: string descriptor 0 read error: -71 [ 1232.979552][ T5720] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1233.004592][T12339] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1233.030954][ T5725] zl10353_read_register: readreg error (reg=127, ret==0) [ 1233.085850][ T5725] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1233.097209][ T5720] usb 3-1: USB disconnect, device number 47 [ 1233.145120][ T5725] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1233.165349][ T5720] ldusb 3-1:0.55: LD USB Device #1 now disconnected [ 1233.189695][ T5725] usb 5-1: USB disconnect, device number 76 [ 1233.309661][ T5725] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1233.431332][T25250] vxcan1: tx drop: invalid da for name 0x000000000000f5ff [ 1233.888282][ T5725] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1233.990455][T25268] mac80211_hwsim hwsim107 syzkaller0: entered promiscuous mode [ 1234.000932][T25268] mac80211_hwsim hwsim107 syzkaller0: entered allmulticast mode [ 1234.022191][T25268] tipc: Started in network mode [ 1234.027264][T25268] tipc: Node identity 080211, cluster identity 4711 [ 1234.034329][T25268] tipc: Enabled bearer , priority 0 [ 1234.048004][T14361] net_ratelimit: 29 callbacks suppressed [ 1234.048024][T14361] bond2: (slave gretap1): failed to get link speed/duplex [ 1234.075878][ T5725] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1234.106316][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.137983][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.153416][T25270] ipip0: entered promiscuous mode [ 1234.158723][ T5725] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1234.172075][T25270] ipip0: entered allmulticast mode [ 1234.178836][ T5725] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1234.188085][ T5720] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1234.195708][ T5725] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1234.208096][ T5725] usb 5-1: Manufacturer: syz [ 1234.218507][ T5725] usb 5-1: config 0 descriptor?? [ 1234.228711][T24723] bond2: (slave gretap1): failed to get link speed/duplex [ 1234.269227][T25269] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4740'. [ 1234.348970][T14361] bond2: (slave gretap1): failed to get link speed/duplex [ 1234.377986][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 1234.389997][ T5720] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1234.398593][ T5720] usb 2-1: config 0 has no interface number 0 [ 1234.405979][ T5720] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1234.417123][ T5720] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1234.429243][ T5720] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1234.459310][ T5720] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1234.472517][T24724] bond2: (slave gretap1): failed to get link speed/duplex [ 1234.488340][ T5720] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1234.499998][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.553406][ T5720] usb 2-1: config 0 descriptor?? [ 1234.588021][T14361] bond2: (slave gretap1): failed to get link speed/duplex [ 1234.647727][ T5725] appleir 0003:05AC:8243.003C: unknown main item tag 0x0 [ 1234.685815][ T5725] appleir 0003:05AC:8243.003C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1234.699075][T14361] bond2: (slave gretap1): failed to get link speed/duplex [ 1234.782059][T25265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.808388][T24723] bond2: (slave gretap1): failed to get link speed/duplex [ 1234.818595][T25265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.938093][T24724] bond2: (slave gretap1): failed to get link speed/duplex [ 1235.050182][ T5725] tipc: Node number set to 134353152 [ 1235.078145][T24724] bond2: (slave gretap1): failed to get link speed/duplex [ 1235.086522][T25280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.110563][T25280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.208045][T24723] bond2: (slave gretap1): failed to get link speed/duplex [ 1235.270930][T25255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1235.340853][ T896] usb 5-1: USB disconnect, device number 77 [ 1235.948347][ T5725] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1236.032352][T25295] mac80211_hwsim hwsim105 syzkaller0: left promiscuous mode [ 1236.040928][T25295] mac80211_hwsim hwsim105 syzkaller0: left allmulticast mode [ 1236.118068][ T5725] usb 4-1: Using ep0 maxpacket: 8 [ 1236.126607][ T5725] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1236.150630][ T5725] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1236.162524][ T5725] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1236.173871][ T5725] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1236.187714][ T5725] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1236.202828][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.429295][ T5725] usb 4-1: GET_CAPABILITIES returned 0 [ 1236.435110][ T5725] usbtmc 4-1:16.0: can't read capabilities [ 1236.641487][T25291] usbtmc 4-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 1236.944167][ T5720] usb 2-1: string descriptor 0 read error: -71 [ 1236.988218][ T5720] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1237.025817][ T5720] usb 2-1: USB disconnect, device number 41 [ 1237.036907][ T5720] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 1237.099303][T25305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4755'. [ 1237.439701][ T5681] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1237.502143][T25321] fuse: Bad value for 'fd' [ 1237.620528][ T5681] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 1237.636675][ T5681] usb 5-1: config 160 has no interface number 0 [ 1237.643912][ T5681] usb 5-1: config 160 interface 200 has no altsetting 0 [ 1237.662640][ T5681] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1237.676638][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.692104][ T5681] usb 5-1: Product: syz [ 1237.704034][ T5681] usb 5-1: Manufacturer: syz [ 1237.712956][ T5681] usb 5-1: SerialNumber: syz [ 1238.087063][T25325] mac80211_hwsim hwsim107 syzkaller0: left promiscuous mode [ 1238.107610][T25325] mac80211_hwsim hwsim107 syzkaller0: left allmulticast mode [ 1238.471250][T25332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4763'. [ 1238.520499][T25336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4764'. [ 1238.717221][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.725467][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.776890][T23484] usb 4-1: USB disconnect, device number 38 [ 1239.078725][T24711] net_ratelimit: 32 callbacks suppressed [ 1239.078747][T24711] bond2: (slave gretap1): failed to get link speed/duplex [ 1239.209246][T24713] bond2: (slave gretap1): failed to get link speed/duplex [ 1239.308086][T23484] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1239.329854][T24711] bond2: (slave gretap1): failed to get link speed/duplex [ 1239.449064][T24723] bond2: (slave gretap1): failed to get link speed/duplex [ 1239.468729][T23484] usb 4-1: Using ep0 maxpacket: 32 [ 1239.480266][T23484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1239.498740][T23484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1239.518256][T23484] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1239.536887][T23484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.555986][T23484] usb 4-1: config 0 descriptor?? [ 1239.569807][T24711] bond2: (slave gretap1): failed to get link speed/duplex [ 1239.590496][T23484] hub 4-1:0.0: USB hub found [ 1239.707996][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1239.791971][T23484] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1239.830827][T24711] bond2: (slave gretap1): failed to get link speed/duplex [ 1239.948035][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1240.058128][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1240.168079][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1240.225824][T23484] hid-generic 0003:046D:C31C.003D: unknown main item tag 0x0 [ 1240.291622][ T5681] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1240.311236][ T5681] usb 5-1: MIDIStreaming interface descriptor not found [ 1240.370932][T25345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4767'. [ 1240.387399][T23484] hid-generic 0003:046D:C31C.003D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 1240.576231][ T5681] usb 5-1: USB disconnect, device number 78 [ 1240.618295][T23484] usb 4-1: USB disconnect, device number 39 [ 1240.687895][T21703] udevd[21703]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1241.038014][T23484] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1241.088284][ T5681] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1241.189449][T23484] usb 4-1: Using ep0 maxpacket: 32 [ 1241.195492][T23484] usb 4-1: no configurations [ 1241.202178][T23484] usb 4-1: can't read configurations, error -22 [ 1241.218237][ T5681] usb 5-1: device descriptor read/64, error -71 [ 1241.338257][T23484] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1241.467966][ T5681] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1241.488006][T23484] usb 4-1: Using ep0 maxpacket: 32 [ 1241.493756][T23484] usb 4-1: no configurations [ 1241.498778][T23484] usb 4-1: can't read configurations, error -22 [ 1241.507366][T23484] usb usb4-port1: attempt power cycle [ 1241.598122][ T5681] usb 5-1: device descriptor read/64, error -71 [ 1241.708582][ T5681] usb usb5-port1: attempt power cycle [ 1241.847995][T23484] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1241.868645][T23484] usb 4-1: Using ep0 maxpacket: 32 [ 1241.889758][T23484] usb 4-1: device descriptor read/all, error -71 [ 1242.022252][T25358] kAFS: unable to lookup cell '/,' [ 1242.047972][ T5681] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1242.088820][ T5681] usb 5-1: device descriptor read/8, error -71 [ 1242.251950][T25366] C: renamed from veth1_to_team (while UP) [ 1242.264437][T25366] FAULT_INJECTION: forcing a failure. [ 1242.264437][T25366] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.277716][T25366] CPU: 1 UID: 0 PID: 25366 Comm: syz.2.4774 Tainted: G L syzkaller #0 PREEMPT(full) [ 1242.277753][T25366] Tainted: [L]=SOFTLOCKUP [ 1242.277760][T25366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1242.277771][T25366] Call Trace: [ 1242.277779][T25366] [ 1242.277787][T25366] dump_stack_lvl+0xe8/0x150 [ 1242.277821][T25366] should_fail_ex+0x40c/0x560 [ 1242.277847][T25366] should_failslab+0xa8/0x100 [ 1242.277880][T25366] __kmalloc_noprof+0xfe/0x720 [ 1242.277902][T25366] ? kobject_get_path+0xc5/0x2f0 [ 1242.277927][T25366] ? kobject_get_path+0xc5/0x2f0 [ 1242.277960][T25366] kobject_get_path+0xc5/0x2f0 [ 1242.277993][T25366] kobject_rename+0x194/0x500 [ 1242.278025][T25366] ? __pfx_kobject_rename+0x10/0x10 [ 1242.278057][T25366] ? sysfs_rename_link_ns+0x178/0x1b0 [ 1242.278087][T25366] device_rename+0x15d/0x210 [ 1242.278111][T25366] netif_change_name+0x27a/0x970 [ 1242.278138][T25366] ? do_setlink+0xb66/0x4670 [ 1242.278165][T25366] ? __lock_acquire+0x683/0x2cf0 [ 1242.278193][T25366] ? __pfx_netif_change_name+0x10/0x10 [ 1242.278223][T25366] ? nla_strscpy+0x10f/0x170 [ 1242.278250][T25366] do_setlink+0xb66/0x4670 [ 1242.278281][T25366] ? do_raw_spin_lock+0x12b/0x2f0 [ 1242.278309][T25366] ? __pfx_do_setlink+0x10/0x10 [ 1242.278334][T25366] ? __lock_acquire+0x683/0x2cf0 [ 1242.278362][T25366] ? stack_depot_save_flags+0x3ec/0x800 [ 1242.278390][T25366] ? kasan_save_track+0x4f/0x80 [ 1242.278412][T25366] ? kasan_save_track+0x3e/0x80 [ 1242.278434][T25366] ? __kasan_kmalloc+0x93/0xb0 [ 1242.278456][T25366] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1242.278485][T25366] ? __mutex_trylock_common+0x15f/0x270 [ 1242.278505][T25366] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1242.278526][T25366] ? rcu_is_watching+0x15/0xb0 [ 1242.278552][T25366] ? trace_contention_end+0x3d/0x140 [ 1242.278571][T25366] ? __mutex_lock+0x30d/0x1550 [ 1242.278604][T25366] ? rtnl_newlink+0x8a3/0x1bd0 [ 1242.278631][T25366] ? __pfx___mutex_lock+0x10/0x10 [ 1242.278664][T25366] ? ns_capable+0x89/0xe0 [ 1242.278687][T25366] ? rtnl_link_get_net_capable+0xd3/0x310 [ 1242.278718][T25366] rtnl_newlink+0x15c2/0x1bd0 [ 1242.278762][T25366] ? __pfx_rtnl_newlink+0x10/0x10 [ 1242.278787][T25366] ? finish_task_switch+0x412/0xc60 [ 1242.278807][T25366] ? lockdep_hardirqs_on+0x7a/0x110 [ 1242.278834][T25366] ? rcu_is_watching+0x15/0xb0 [ 1242.278862][T25366] ? trace_sched_exit_tp+0x3a/0x130 [ 1242.278883][T25366] ? __schedule+0x17ef/0x56c0 [ 1242.278933][T25366] ? __pfx___schedule+0x10/0x10 [ 1242.278953][T25366] ? nlmon_xmit+0xb0/0x100 [ 1242.278990][T25366] ? __lock_acquire+0x683/0x2cf0 [ 1242.279017][T25366] ? lockdep_hardirqs_on+0x7a/0x110 [ 1242.279041][T25366] ? irqentry_exit+0x218/0x8f0 [ 1242.279064][T25366] ? trace_irq_disable+0x3b/0x140 [ 1242.279104][T25366] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1242.279131][T25366] ? __pfx_rtnl_newlink+0x10/0x10 [ 1242.279168][T25366] ? __pfx_rtnl_newlink+0x10/0x10 [ 1242.279192][T25366] rtnetlink_rcv_msg+0x802/0xc00 [ 1242.279220][T25366] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1242.279245][T25366] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1242.279268][T25366] ? ref_tracker_free+0x689/0x830 [ 1242.279293][T25366] ? __pfx_ref_tracker_free+0x10/0x10 [ 1242.279326][T25366] netlink_rcv_skb+0x226/0x4a0 [ 1242.279357][T25366] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1242.279385][T25366] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1242.279424][T25366] ? netlink_deliver_tap+0x2e/0x1b0 [ 1242.279452][T25366] ? netlink_deliver_tap+0x2e/0x1b0 [ 1242.279486][T25366] netlink_unicast+0x7bb/0x940 [ 1242.279522][T25366] netlink_sendmsg+0x813/0xb40 [ 1242.279549][T25366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1242.279573][T25366] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1242.279598][T25366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1242.279615][T25366] sock_sendmsg_nosec+0x13a/0x180 [ 1242.279640][T25366] sock_write_iter+0x2de/0x3e0 [ 1242.279663][T25366] ? __pfx_sock_write_iter+0x10/0x10 [ 1242.279691][T25366] ? bpf_lsm_file_permission+0x9/0x20 [ 1242.279712][T25366] ? security_file_permission+0x75/0x260 [ 1242.279752][T25366] vfs_write+0x612/0xba0 [ 1242.279789][T25366] ? __pfx_vfs_write+0x10/0x10 [ 1242.279827][T25366] ? __fget_files+0x2a/0x420 [ 1242.279859][T25366] ksys_write+0x150/0x270 [ 1242.279890][T25366] ? __pfx_ksys_write+0x10/0x10 [ 1242.279927][T25366] __do_fast_syscall_32+0x23e/0x6f0 [ 1242.279954][T25366] ? do_fast_syscall_32+0x33/0x70 [ 1242.279979][T25366] ? lockdep_hardirqs_on+0x7a/0x110 [ 1242.280003][T25366] ? asm_int80_emulation+0x1a/0x20 [ 1242.280021][T25366] ? do_int80_emulation+0x29f/0x550 [ 1242.280046][T25366] ? trace_irq_disable+0x3b/0x140 [ 1242.280070][T25366] do_fast_syscall_32+0x33/0x70 [ 1242.280097][T25366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1242.280120][T25366] RIP: 0023:0xf704f0ec [ 1242.280138][T25366] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1242.280155][T25366] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1242.280174][T25366] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1242.280188][T25366] RDX: 000000000000fe33 RSI: 0000000000000000 RDI: 0000000000000000 [ 1242.280200][T25366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1242.280212][T25366] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1242.280223][T25366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1242.280251][T25366] [ 1242.338368][ T5681] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1242.860359][ T5681] usb 5-1: device descriptor read/8, error -71 [ 1242.958134][ T896] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1242.987041][ T5681] usb usb5-port1: unable to enumerate USB device [ 1243.117973][ T896] usb 3-1: Using ep0 maxpacket: 16 [ 1243.126239][ T896] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1243.139048][ T896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.147078][ T896] usb 3-1: Product: syz [ 1243.154029][ T896] usb 3-1: Manufacturer: syz [ 1243.158752][ T896] usb 3-1: SerialNumber: syz [ 1243.165304][ T896] usb 3-1: config 0 descriptor?? [ 1243.237997][ T29] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1243.287955][ T5681] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1243.363751][T25381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4780'. [ 1243.376864][T25381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4780'. [ 1243.396659][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1243.409764][ T29] usb 4-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 1243.419967][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.431651][ T29] usb 4-1: Product: syz [ 1243.436304][ T29] usb 4-1: Manufacturer: syz [ 1243.442420][ T29] usb 4-1: SerialNumber: syz [ 1243.449394][ T5681] usb 2-1: Using ep0 maxpacket: 8 [ 1243.460915][ T5681] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1243.478043][ T5681] usb 2-1: config 0 has no interface number 0 [ 1243.502720][ T5681] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1243.514244][ T5681] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1243.526376][ T5681] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1243.543354][ T5681] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1243.558156][ T5681] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1243.568050][ T5681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.581562][ T5681] usb 2-1: config 0 descriptor?? [ 1243.668752][ T896] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1243.682715][ T896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1243.684438][T25375] input: syz0 as /devices/virtual/input/input136 [ 1243.703057][ T896] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1243.713439][ T896] usb 3-1: media controller created [ 1243.752783][ T896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1243.814180][T25378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.842489][T25378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.850479][ T29] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1243.873232][ T896] zl10353_read_register: readreg error (reg=127, ret==0) [ 1243.890611][ T896] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1243.899265][ T29] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1243.928038][ T896] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1243.958291][ T896] usb 3-1: USB disconnect, device number 48 [ 1244.036458][ T29] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1244.052243][ T896] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1244.072465][ T29] usb 4-1: USB disconnect, device number 44 [ 1244.111717][T25392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.140552][T25392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.148366][T19207] udevd[19207]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1244.169764][T24723] net_ratelimit: 33 callbacks suppressed [ 1244.169783][T24723] bond2: (slave gretap1): failed to get link speed/duplex [ 1244.328192][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1244.448166][T24723] bond2: (slave gretap1): failed to get link speed/duplex [ 1244.568047][T24710] bond2: (slave gretap1): failed to get link speed/duplex [ 1244.728139][T24710] bond2: (slave gretap1): failed to get link speed/duplex [ 1244.857980][ T896] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1244.858568][T24710] bond2: (slave gretap1): failed to get link speed/duplex [ 1244.970553][T25410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4791'. [ 1244.982606][T25410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4791'. [ 1244.988856][T24723] bond2: (slave gretap1): failed to get link speed/duplex [ 1245.017984][ T896] usb 4-1: Using ep0 maxpacket: 16 [ 1245.031699][ T896] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1245.050951][ T896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.066932][ T896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1245.086145][ T896] usb 4-1: No eUSB2 isoc ep 0x81 companion for config 1 interface 0 altsetting 0 [ 1245.106151][ T896] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1245.116034][ T896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.118733][T24713] bond2: (slave gretap1): failed to get link speed/duplex [ 1245.124947][ T896] usb 4-1: Product: syz [ 1245.135789][ T896] usb 4-1: Manufacturer: syz [ 1245.141115][ T896] usb 4-1: SerialNumber: syz [ 1245.248015][T24713] bond2: (slave gretap1): failed to get link speed/duplex [ 1245.368090][T24713] bond2: (slave gretap1): failed to get link speed/duplex [ 1245.373016][ T896] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1245.384250][ T896] cdc_ncm 4-1:1.0: bind() failure [ 1245.399052][ T896] usb 4-1: USB disconnect, device number 45 [ 1245.469046][ T5725] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1245.612950][T25421] AppArmor: change_hat: Invalid input '0x00,' [ 1245.648028][ T5725] usb 3-1: Using ep0 maxpacket: 16 [ 1245.679911][ T5725] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1245.690839][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.699077][ T5725] usb 3-1: Product: syz [ 1245.703447][ T5725] usb 3-1: Manufacturer: syz [ 1245.709432][ T5725] usb 3-1: SerialNumber: syz [ 1245.716405][ T5725] usb 3-1: config 0 descriptor?? [ 1246.082441][ T5681] usb 2-1: string descriptor 0 read error: -71 [ 1246.130960][ T5681] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1246.178914][ T5681] usb 2-1: USB disconnect, device number 42 [ 1246.192559][ T5725] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1246.223485][ T5681] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1246.234848][ T5725] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1246.261466][ T5725] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1246.283139][ T5725] usb 3-1: media controller created [ 1246.322002][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1246.391068][ T5725] zl10353_read_register: readreg error (reg=127, ret==0) [ 1246.405352][ T5725] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1246.413869][ T5725] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1246.430474][ T5725] usb 3-1: USB disconnect, device number 49 [ 1246.534850][ T5725] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1246.587961][ T5681] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1246.714758][T25436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4802'. [ 1246.726280][T25436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4802'. [ 1246.748189][ T5681] usb 2-1: Using ep0 maxpacket: 8 [ 1246.755299][ T5681] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.765982][ T5681] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1246.777751][ T5681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1246.788165][T23484] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1246.792928][ T5681] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1246.808195][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1246.816880][ T5681] usb 2-1: Product: syz [ 1246.822287][ T5681] usb 2-1: Manufacturer: syz [ 1246.827010][ T5681] usb 2-1: SerialNumber: syz [ 1246.836372][ T5681] usb 2-1: config 0 descriptor?? [ 1246.919420][ T5681] rc_core: IR keymap rc-imon-rsc not found [ 1246.927737][ T5681] Registered IR keymap rc-empty [ 1246.935788][ T5681] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1246.949925][ T5681] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input137 [ 1247.090167][ T896] usb 2-1: USB disconnect, device number 43 [ 1247.646178][T25453] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1247.654842][T25454] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1247.958500][ T5725] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1248.027958][ T5681] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1248.128003][ T5725] usb 2-1: Using ep0 maxpacket: 32 [ 1248.134855][ T5725] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1248.143443][ T5725] usb 2-1: config 0 has no interface number 0 [ 1248.152311][ T5725] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1248.161811][ T5681] usb 5-1: device descriptor read/64, error -71 [ 1248.168158][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.176544][ T5725] usb 2-1: Product: syz [ 1248.181022][ T5725] usb 2-1: Manufacturer: syz [ 1248.185978][ T5725] usb 2-1: SerialNumber: syz [ 1248.193893][ T5725] usb 2-1: config 0 descriptor?? [ 1248.204534][ T5725] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1248.214025][ T5725] usb 2-1: selecting invalid altsetting 1 [ 1248.220020][ T5725] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1248.231472][ T5725] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1248.242663][ T5725] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1248.251176][ T5725] usb 2-1: media controller created [ 1248.266451][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1248.428108][ T5681] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1248.560860][ T5681] usb 5-1: device descriptor read/64, error -71 [ 1248.679345][ T5681] usb usb5-port1: attempt power cycle [ 1248.942529][T25469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4813'. [ 1249.038568][ T5681] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1249.078138][ T5681] usb 5-1: device descriptor read/8, error -71 [ 1249.198067][T24723] net_ratelimit: 33 callbacks suppressed [ 1249.198088][T24723] bond2: (slave gretap1): failed to get link speed/duplex [ 1249.318140][ T5681] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1249.319014][T24723] bond2: (slave gretap1): failed to get link speed/duplex [ 1249.351070][ T5725] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1249.358321][ T5681] usb 5-1: device descriptor read/8, error -71 [ 1249.364707][ T5725] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1249.364741][T25456] usb 2-1: dvb_usb_ce6230: I2C read not implemented [ 1249.379104][ T29] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1249.417639][ T5725] usb 2-1: USB disconnect, device number 44 [ 1249.441114][T24723] bond2: (slave gretap1): failed to get link speed/duplex [ 1249.478222][ T5681] usb usb5-port1: unable to enumerate USB device [ 1249.538907][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 1249.551857][T23484] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1249.559974][T24723] bond2: (slave gretap1): failed to get link speed/duplex [ 1249.573828][ T29] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1249.593523][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.603772][T23484] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1249.618257][ T29] usb 3-1: Product: syz [ 1249.623643][T23484] usb 4-1: can't read configurations, error -71 [ 1249.631246][ T29] usb 3-1: Manufacturer: syz [ 1249.636654][ T29] usb 3-1: SerialNumber: syz [ 1249.645071][ T29] usb 3-1: config 0 descriptor?? [ 1249.689840][T24710] bond2: (slave gretap1): failed to get link speed/duplex [ 1249.799380][T24711] bond2: (slave gretap1): failed to get link speed/duplex [ 1249.918491][T24710] bond2: (slave gretap1): failed to get link speed/duplex [ 1250.029325][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1250.113238][ T29] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1250.126001][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1250.136657][ T29] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1250.146063][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1250.150201][ T29] usb 3-1: media controller created [ 1250.175565][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1250.235332][T25496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4822'. [ 1250.269469][T24713] bond2: (slave gretap1): failed to get link speed/duplex [ 1250.323298][ T29] zl10353_read_register: readreg error (reg=127, ret==0) [ 1250.335008][ T29] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1250.343639][ T29] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1250.363266][ T29] usb 3-1: USB disconnect, device number 50 [ 1250.416937][ T29] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1250.788616][T25506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4826'. [ 1251.121374][T25518] AppArmor: change_hat: Invalid input '0x00,' [ 1251.375095][T25520] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1251.413264][T25520] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1251.548034][T23484] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1251.710208][T23484] usb 4-1: Using ep0 maxpacket: 32 [ 1251.724509][T23484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.777843][T23484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1251.824339][T23484] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1251.858497][T23484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.899523][T23484] usb 4-1: config 0 descriptor?? [ 1251.925149][T23484] hub 4-1:0.0: USB hub found [ 1251.942735][T25535] netlink: 392 bytes leftover after parsing attributes in process `syz.0.4837'. [ 1252.265675][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1252.265694][ T30] audit: type=1326 audit(1783298497.855:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25523 comm="syz.3.4833" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1252.453811][ T30] audit: type=1326 audit(1783298497.855:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25523 comm="syz.3.4833" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1252.545427][ T30] audit: type=1326 audit(1783298497.855:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25523 comm="syz.3.4833" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1252.581673][T25544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4839'. [ 1252.637713][ T30] audit: type=1326 audit(1783298497.855:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25523 comm="syz.3.4833" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1252.733540][ T30] audit: type=1326 audit(1783298497.865:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25523 comm="syz.3.4833" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1252.826485][ T30] audit: type=1326 audit(1783298497.865:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25523 comm="syz.3.4833" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1252.894183][ T30] audit: type=1326 audit(1783298497.865:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25523 comm="syz.3.4833" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1252.928177][ T30] audit: type=1326 audit(1783298497.865:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25523 comm="syz.3.4833" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1253.021031][ T30] audit: type=1326 audit(1783298497.865:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25523 comm="syz.3.4833" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1253.051985][ T30] audit: type=1326 audit(1783298497.865:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25523 comm="syz.3.4833" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1253.595514][T25563] FAULT_INJECTION: forcing a failure. [ 1253.595514][T25563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1253.626643][T25563] CPU: 1 UID: 0 PID: 25563 Comm: syz.2.4844 Tainted: G L syzkaller #0 PREEMPT(full) [ 1253.626664][T25563] Tainted: [L]=SOFTLOCKUP [ 1253.626668][T25563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1253.626675][T25563] Call Trace: [ 1253.626680][T25563] [ 1253.626685][T25563] dump_stack_lvl+0xe8/0x150 [ 1253.626706][T25563] should_fail_ex+0x40c/0x560 [ 1253.626723][T25563] _copy_from_user+0x2d/0xb0 [ 1253.626740][T25563] get_compat_msghdr+0xb3/0x4c0 [ 1253.626753][T25563] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1253.626769][T25563] ___sys_sendmsg+0x201/0x360 [ 1253.626785][T25563] ? __lock_acquire+0x683/0x2cf0 [ 1253.626801][T25563] ? __pfx____sys_sendmsg+0x10/0x10 [ 1253.626817][T25563] ? get_pid_task+0x20/0x1f0 [ 1253.626831][T25563] ? get_pid_task+0x20/0x1f0 [ 1253.626844][T25563] ? get_pid_task+0x20/0x1f0 [ 1253.626871][T25563] ? __fget_files+0x2a/0x420 [ 1253.626885][T25563] ? __fget_files+0x3a2/0x420 [ 1253.626915][T25563] __sys_sendmsg+0x177/0x240 [ 1253.626935][T25563] ? __pfx___sys_sendmsg+0x10/0x10 [ 1253.626959][T25563] __do_fast_syscall_32+0x23e/0x6f0 [ 1253.626975][T25563] ? do_fast_syscall_32+0x33/0x70 [ 1253.626988][T25563] ? lockdep_hardirqs_on+0x7a/0x110 [ 1253.627001][T25563] ? asm_int80_emulation+0x1a/0x20 [ 1253.627011][T25563] ? do_int80_emulation+0x29f/0x550 [ 1253.627025][T25563] ? trace_irq_disable+0x3b/0x140 [ 1253.627040][T25563] do_fast_syscall_32+0x33/0x70 [ 1253.627055][T25563] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1253.627068][T25563] RIP: 0023:0xf704f0ec [ 1253.627084][T25563] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1253.627094][T25563] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1253.627105][T25563] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1253.627113][T25563] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1253.627119][T25563] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1253.627125][T25563] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1253.627131][T25563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1253.627145][T25563] [ 1254.298498][ T12] net_ratelimit: 26 callbacks suppressed [ 1254.298520][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1254.424498][T25572] AppArmor: change_hat: Invalid input '0x00,' [ 1254.478316][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1254.694738][T25575] netlink: 392 bytes leftover after parsing attributes in process `syz.2.4848'. [ 1254.708042][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1254.828842][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1254.836933][T23484] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1254.897495][T23484] usbhid 4-1:0.0: can't add hid device: -71 [ 1254.914943][T23484] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1254.959531][T23484] usb 4-1: USB disconnect, device number 48 [ 1254.968223][T24723] bond2: (slave gretap1): failed to get link speed/duplex [ 1255.003252][T25579] syzkaller0: entered promiscuous mode [ 1255.019472][T25579] syzkaller0: entered allmulticast mode [ 1255.047404][T25579] tipc: Started in network mode [ 1255.063126][T25579] tipc: Node identity , cluster identity 4711 [ 1255.094507][T25579] tipc: Failed to obtain node identity [ 1255.135478][T25579] tipc: Enabling of bearer rejected, failed to enable media [ 1255.298044][T24723] bond2: (slave gretap1): failed to get link speed/duplex [ 1255.354962][T25592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4853'. [ 1255.448250][T24723] bond2: (slave gretap1): failed to get link speed/duplex [ 1255.514930][T25594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4851'. [ 1255.568666][T24724] bond2: (slave gretap1): failed to get link speed/duplex [ 1255.728246][T24724] bond2: (slave gretap1): failed to get link speed/duplex [ 1255.868398][T24724] bond2: (slave gretap1): failed to get link speed/duplex [ 1255.975855][T25608] netlink: 392 bytes leftover after parsing attributes in process `syz.4.4859'. [ 1256.048249][T23484] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1256.104996][T25615] FAULT_INJECTION: forcing a failure. [ 1256.104996][T25615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1256.126965][T25615] CPU: 0 UID: 0 PID: 25615 Comm: syz.0.4860 Tainted: G L syzkaller #0 PREEMPT(full) [ 1256.126995][T25615] Tainted: [L]=SOFTLOCKUP [ 1256.127002][T25615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1256.127012][T25615] Call Trace: [ 1256.127019][T25615] [ 1256.127026][T25615] dump_stack_lvl+0xe8/0x150 [ 1256.127058][T25615] should_fail_ex+0x40c/0x560 [ 1256.127084][T25615] _copy_from_user+0x2d/0xb0 [ 1256.127111][T25615] get_compat_msghdr+0xb3/0x4c0 [ 1256.127132][T25615] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1256.127161][T25615] ___sys_sendmsg+0x201/0x360 [ 1256.127187][T25615] ? __lock_acquire+0x683/0x2cf0 [ 1256.127215][T25615] ? __pfx____sys_sendmsg+0x10/0x10 [ 1256.127241][T25615] ? get_pid_task+0x20/0x1f0 [ 1256.127266][T25615] ? get_pid_task+0x20/0x1f0 [ 1256.127288][T25615] ? get_pid_task+0x20/0x1f0 [ 1256.127340][T25615] ? __fget_files+0x2a/0x420 [ 1256.127364][T25615] ? __fget_files+0x3a2/0x420 [ 1256.127405][T25615] __sys_sendmsg+0x177/0x240 [ 1256.127435][T25615] ? __pfx___sys_sendmsg+0x10/0x10 [ 1256.127477][T25615] __do_fast_syscall_32+0x23e/0x6f0 [ 1256.127503][T25615] ? do_fast_syscall_32+0x33/0x70 [ 1256.127528][T25615] ? lockdep_hardirqs_on+0x7a/0x110 [ 1256.127553][T25615] ? asm_int80_emulation+0x1a/0x20 [ 1256.127572][T25615] ? do_int80_emulation+0x29f/0x550 [ 1256.127598][T25615] ? trace_irq_disable+0x3b/0x140 [ 1256.127624][T25615] do_fast_syscall_32+0x33/0x70 [ 1256.127651][T25615] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1256.127675][T25615] RIP: 0023:0xf7f390ec [ 1256.127692][T25615] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1256.127711][T25615] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1256.127732][T25615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1256.127746][T25615] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1256.127757][T25615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1256.127768][T25615] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1256.127780][T25615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1256.127808][T25615] [ 1256.364022][ T5681] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1256.428229][T23484] usb 3-1: Using ep0 maxpacket: 16 [ 1256.435393][T23484] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1256.443765][T23484] usb 3-1: can't read configurations, error -61 [ 1256.550458][ T5681] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 1256.558913][ T5681] usb 4-1: config 160 has no interface number 0 [ 1256.565205][ T5681] usb 4-1: config 160 interface 200 has no altsetting 0 [ 1256.575598][ T5681] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1256.578751][T23484] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1256.584749][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.603400][ T5681] usb 4-1: Product: syz [ 1256.607603][ T5681] usb 4-1: Manufacturer: syz [ 1256.612265][ T5681] usb 4-1: SerialNumber: syz [ 1256.639005][ T24] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1256.778207][T23484] usb 3-1: Using ep0 maxpacket: 16 [ 1256.786672][T23484] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1256.799619][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1256.806671][T23484] usb 3-1: can't read configurations, error -61 [ 1256.817278][ T24] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1256.826827][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.835870][T23484] usb usb3-port1: attempt power cycle [ 1256.841868][ T24] usb 5-1: Product: syz [ 1256.847470][ T24] usb 5-1: Manufacturer: syz [ 1256.852817][ T24] usb 5-1: SerialNumber: syz [ 1256.866206][ T24] usb 5-1: config 0 descriptor?? [ 1257.178127][T23484] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1257.198722][T23484] usb 3-1: Using ep0 maxpacket: 16 [ 1257.207684][T23484] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1257.216107][T23484] usb 3-1: can't read configurations, error -61 [ 1257.341083][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1257.349146][T23484] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1257.360028][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1257.371249][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1257.379989][ T24] usb 5-1: media controller created [ 1257.388825][T23484] usb 3-1: Using ep0 maxpacket: 16 [ 1257.396987][T23484] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1257.411614][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1257.420186][T23484] usb 3-1: can't read configurations, error -61 [ 1257.426891][T23484] usb usb3-port1: unable to enumerate USB device [ 1257.551058][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 1257.558569][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1257.566597][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1257.581175][ T24] usb 5-1: USB disconnect, device number 87 [ 1257.632816][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1258.350622][T25634] AppArmor: change_hat: Invalid input '0x00,' [ 1258.968748][T25640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4868'. [ 1259.000389][ T5681] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1259.010913][ T5681] usb 4-1: MIDIStreaming interface descriptor not found [ 1259.147282][ T5681] usb 4-1: USB disconnect, device number 49 [ 1259.214290][T25651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4871'. [ 1259.378014][T24724] net_ratelimit: 29 callbacks suppressed [ 1259.378033][T24724] bond2: (slave gretap1): failed to get link speed/duplex [ 1259.498314][T24724] bond2: (slave gretap1): failed to get link speed/duplex [ 1259.619123][T24724] bond2: (slave gretap1): failed to get link speed/duplex [ 1259.729592][ T5681] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1259.768118][T24710] bond2: (slave gretap1): failed to get link speed/duplex [ 1259.783492][T25665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4876'. [ 1259.819388][T25673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4877'. [ 1259.919165][ T5681] usb 4-1: Using ep0 maxpacket: 8 [ 1259.927822][ T5681] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1259.936981][ T5681] usb 4-1: config 0 has no interface number 0 [ 1259.969223][ T5681] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1259.991159][ T5681] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1260.002933][T24710] bond2: (slave gretap1): failed to get link speed/duplex [ 1260.041191][ T5681] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1260.078968][ T5681] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1260.107994][T24710] bond2: (slave gretap1): failed to get link speed/duplex [ 1260.150307][ T5681] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1260.184571][ T5681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.208767][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1260.208781][ T30] audit: type=1326 audit(1783298505.795:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25671 comm="syz.2.4878" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x0 [ 1260.247052][T24713] bond2: (slave gretap1): failed to get link speed/duplex [ 1260.249033][ T5681] usb 4-1: config 0 descriptor?? [ 1260.367991][T24724] bond2: (slave gretap1): failed to get link speed/duplex [ 1260.478626][T25660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.478719][T24724] bond2: (slave gretap1): failed to get link speed/duplex [ 1260.513602][T25660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.538007][T23484] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1260.628434][T24724] bond2: (slave gretap1): failed to get link speed/duplex [ 1260.699965][T23484] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 1260.722050][T23484] usb 2-1: config 160 has no interface number 0 [ 1260.741153][T23484] usb 2-1: config 160 interface 200 has no altsetting 0 [ 1260.760122][T23484] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1260.793006][T23484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.823030][T23484] usb 2-1: Product: syz [ 1260.837064][T23484] usb 2-1: Manufacturer: syz [ 1260.854044][T23484] usb 2-1: SerialNumber: syz [ 1260.930360][T25678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.982645][T25678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.442651][T25690] tipc: Enabling of bearer rejected, already enabled [ 1262.457315][ T5681] usb 4-1: string descriptor 0 read error: -71 [ 1262.501564][ T5681] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1262.511790][T25690] mac80211_hwsim hwsim107 syzkaller0: entered promiscuous mode [ 1262.526956][T25690] mac80211_hwsim hwsim107 syzkaller0: entered allmulticast mode [ 1262.537506][ T5681] usb 4-1: USB disconnect, device number 50 [ 1262.559055][T25691] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1262.563951][ T5681] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1262.589657][T25693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4883'. [ 1262.662131][T25690] tipc: Resetting bearer [ 1262.862889][T25701] netlink: 'syz.0.4886': attribute type 1 has an invalid length. [ 1262.979792][T25701] bond3: entered promiscuous mode [ 1262.994563][T25701] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1263.050579][T25704] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1263.066498][T25704] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 1263.124268][T25704] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1263.173092][T25704] bond3: (slave vti0): making interface the new active one [ 1263.184231][T25704] vti0: entered promiscuous mode [ 1263.199091][T25704] bond3: (slave vti0): Enslaving as an active interface with an up link [ 1263.285956][T25715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4888'. [ 1263.400683][T23484] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1263.421603][T23484] usb 2-1: MIDIStreaming interface descriptor not found [ 1263.591689][T23484] usb 2-1: USB disconnect, device number 45 [ 1263.663444][T19208] udevd[19208]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1264.020158][T23484] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1264.192039][T23484] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1264.217198][T23484] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1264.234380][T25743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4894'. [ 1264.243325][T23484] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1264.243382][T23484] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1264.265828][T23484] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1264.285403][T23484] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1264.297490][T23484] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1264.306230][T23484] usb 2-1: Product: syz [ 1264.312564][T23484] usb 2-1: Manufacturer: syz [ 1264.331028][T23484] cdc_wdm 2-1:1.0: skipping garbage [ 1264.340230][T23484] cdc_wdm 2-1:1.0: skipping garbage [ 1264.355378][T23484] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1264.366021][T23484] cdc_wdm 2-1:1.0: Unknown control protocol [ 1264.481243][T24713] net_ratelimit: 29 callbacks suppressed [ 1264.481262][T24713] bond2: (slave gretap1): failed to get link speed/duplex [ 1264.641670][T24713] bond2: (slave gretap1): failed to get link speed/duplex [ 1264.759135][T24713] bond2: (slave gretap1): failed to get link speed/duplex [ 1264.807977][ T5681] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1264.878201][T24710] bond2: (slave gretap1): failed to get link speed/duplex [ 1264.984098][ T5681] usb 3-1: config 160 has an invalid interface number: 200 but max is 0 [ 1264.998110][T24713] bond2: (slave gretap1): failed to get link speed/duplex [ 1265.004398][ T5681] usb 3-1: config 160 has no interface number 0 [ 1265.021869][ T5681] usb 3-1: config 160 interface 200 has no altsetting 0 [ 1265.035670][ T5681] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1265.044826][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.052973][ T5681] usb 3-1: Product: syz [ 1265.057149][ T5681] usb 3-1: Manufacturer: syz [ 1265.061787][ T5681] usb 3-1: SerialNumber: syz [ 1265.108095][T24710] bond2: (slave gretap1): failed to get link speed/duplex [ 1265.141346][T25772] netlink: 'syz.3.4901': attribute type 1 has an invalid length. [ 1265.173067][T25772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4901'. [ 1265.183877][T25772] bond1: entered promiscuous mode [ 1265.189353][T25772] bond1: entered allmulticast mode [ 1265.195275][T25772] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1265.238093][T24713] bond2: (slave gretap1): failed to get link speed/duplex [ 1265.358101][T24710] bond2: (slave gretap1): failed to get link speed/duplex [ 1265.439188][T25780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4902'. [ 1265.478140][T24713] bond2: (slave gretap1): failed to get link speed/duplex [ 1265.589017][T24710] bond2: (slave gretap1): failed to get link speed/duplex [ 1266.471332][T23484] usb 2-1: USB disconnect, device number 46 [ 1266.589684][T25785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4903'. [ 1266.750836][T25791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4906'. [ 1267.596112][ T5681] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1267.612943][ T5681] usb 3-1: MIDIStreaming interface descriptor not found [ 1267.670775][T25811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4914'. [ 1267.801369][ T5681] usb 3-1: USB disconnect, device number 55 [ 1267.891379][T19208] udevd[19208]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1267.976559][T25822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4915'. [ 1268.121102][T25827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4918'. [ 1268.304793][T25837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.316576][T25837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.668328][ T5681] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1268.719416][T25853] FAULT_INJECTION: forcing a failure. [ 1268.719416][T25853] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.734397][T25853] CPU: 0 UID: 0 PID: 25853 Comm: syz.2.4928 Tainted: G L syzkaller #0 PREEMPT(full) [ 1268.734428][T25853] Tainted: [L]=SOFTLOCKUP [ 1268.734435][T25853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1268.734447][T25853] Call Trace: [ 1268.734456][T25853] [ 1268.734467][T25853] dump_stack_lvl+0xe8/0x150 [ 1268.734501][T25853] should_fail_ex+0x40c/0x560 [ 1268.734538][T25853] should_failslab+0xa8/0x100 [ 1268.734566][T25853] __kmalloc_noprof+0xfe/0x720 [ 1268.734589][T25853] ? __kmalloc_cache_noprof+0x150/0x660 [ 1268.734610][T25853] ? mpi_alloc+0x77/0x140 [ 1268.734630][T25853] ? mpi_alloc+0x77/0x140 [ 1268.734658][T25853] mpi_alloc+0x77/0x140 [ 1268.734682][T25853] mpi_read_raw_data+0x139/0x970 [ 1268.734713][T25853] dh_set_secret+0x193/0x320 [ 1268.734734][T25853] ? crypto_create_tfm_node+0x81/0x3c0 [ 1268.734767][T25853] ? __pfx_dh_set_secret+0x10/0x10 [ 1268.734795][T25853] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 1268.734831][T25853] __keyctl_dh_compute+0x5ae/0xd10 [ 1268.734852][T25853] ? get_pid_task+0x20/0x1f0 [ 1268.734888][T25853] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1268.734933][T25853] ? ksys_write+0x1e6/0x270 [ 1268.734965][T25853] ? __mutex_unlock_slowpath+0x731/0x900 [ 1268.734996][T25853] compat_keyctl_dh_compute+0x19d/0x220 [ 1268.735016][T25853] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1268.735040][T25853] ? __pfx_compat_keyctl_dh_compute+0x10/0x10 [ 1268.735067][T25853] ? fput+0xa0/0xd0 [ 1268.735091][T25853] ? ksys_write+0x242/0x270 [ 1268.735125][T25853] ? __ia32_compat_sys_keyctl+0x3f6/0x630 [ 1268.735148][T25853] __do_fast_syscall_32+0x23e/0x6f0 [ 1268.735174][T25853] ? do_fast_syscall_32+0x33/0x70 [ 1268.735197][T25853] ? lockdep_hardirqs_on+0x7a/0x110 [ 1268.735221][T25853] ? asm_int80_emulation+0x1a/0x20 [ 1268.735239][T25853] ? do_int80_emulation+0x29f/0x550 [ 1268.735265][T25853] ? trace_irq_disable+0x3b/0x140 [ 1268.735291][T25853] do_fast_syscall_32+0x33/0x70 [ 1268.735322][T25853] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1268.735346][T25853] RIP: 0023:0xf704f0ec [ 1268.735364][T25853] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1268.735380][T25853] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000120 [ 1268.735400][T25853] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 00000000800000c0 [ 1268.735414][T25853] RDX: 0000000080003380 RSI: 0000000000000ffe RDI: 0000000000000000 [ 1268.735427][T25853] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1268.735438][T25853] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1268.735450][T25853] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1268.735477][T25853] [ 1269.069167][T25855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4929'. [ 1269.083890][T25855] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1269.099498][ T5681] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 1269.107992][ T5681] usb 4-1: config 160 has no interface number 0 [ 1269.114409][ T5681] usb 4-1: config 160 interface 200 has no altsetting 0 [ 1269.126895][ T5681] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1269.136422][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.144520][ T5681] usb 4-1: Product: syz [ 1269.148905][ T5681] usb 4-1: Manufacturer: syz [ 1269.153544][ T5681] usb 4-1: SerialNumber: syz [ 1269.211801][T25857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4930'. [ 1269.517787][T25871] FAULT_INJECTION: forcing a failure. [ 1269.517787][T25871] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.547724][T25874] FAULT_INJECTION: forcing a failure. [ 1269.547724][T25874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1269.549979][T25871] CPU: 1 UID: 0 PID: 25871 Comm: syz.1.4936 Tainted: G L syzkaller #0 PREEMPT(full) [ 1269.550007][T25871] Tainted: [L]=SOFTLOCKUP [ 1269.550014][T25871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1269.550025][T25871] Call Trace: [ 1269.550033][T25871] [ 1269.550042][T25871] dump_stack_lvl+0xe8/0x150 [ 1269.550074][T25871] should_fail_ex+0x40c/0x560 [ 1269.550100][T25871] should_failslab+0xa8/0x100 [ 1269.550128][T25871] __kmalloc_noprof+0xfe/0x720 [ 1269.550151][T25871] ? __kmalloc_cache_noprof+0x150/0x660 [ 1269.550173][T25871] ? mpi_alloc+0x77/0x140 [ 1269.550195][T25871] ? mpi_alloc+0x77/0x140 [ 1269.550221][T25871] mpi_alloc+0x77/0x140 [ 1269.550244][T25871] mpi_read_raw_data+0x139/0x970 [ 1269.550273][T25871] dh_set_secret+0x193/0x320 [ 1269.550293][T25871] ? crypto_create_tfm_node+0x81/0x3c0 [ 1269.550325][T25871] ? __pfx_dh_set_secret+0x10/0x10 [ 1269.550351][T25871] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 1269.550388][T25871] __keyctl_dh_compute+0x5ae/0xd10 [ 1269.550408][T25871] ? get_pid_task+0x20/0x1f0 [ 1269.550442][T25871] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1269.550484][T25871] ? ksys_write+0x1e6/0x270 [ 1269.550515][T25871] ? __mutex_unlock_slowpath+0x731/0x900 [ 1269.550542][T25871] compat_keyctl_dh_compute+0x19d/0x220 [ 1269.550563][T25871] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1269.550589][T25871] ? __pfx_compat_keyctl_dh_compute+0x10/0x10 [ 1269.550616][T25871] ? fput+0xa0/0xd0 [ 1269.550638][T25871] ? ksys_write+0x242/0x270 [ 1269.550670][T25871] ? __ia32_compat_sys_keyctl+0x3f6/0x630 [ 1269.550693][T25871] __do_fast_syscall_32+0x23e/0x6f0 [ 1269.550718][T25871] ? do_fast_syscall_32+0x33/0x70 [ 1269.550741][T25871] ? lockdep_hardirqs_on+0x7a/0x110 [ 1269.550765][T25871] ? asm_int80_emulation+0x1a/0x20 [ 1269.550782][T25871] ? do_int80_emulation+0x29f/0x550 [ 1269.550806][T25871] ? trace_irq_disable+0x3b/0x140 [ 1269.550831][T25871] do_fast_syscall_32+0x33/0x70 [ 1269.550856][T25871] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1269.550878][T25871] RIP: 0023:0xf709f0ec [ 1269.550896][T25871] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1269.550912][T25871] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000120 [ 1269.550938][T25871] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 00000000800000c0 [ 1269.550952][T25871] RDX: 0000000080003380 RSI: 0000000000000ffe RDI: 0000000000000000 [ 1269.550963][T25871] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1269.550974][T25871] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1269.550985][T25871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1269.551011][T25871] [ 1269.591405][ T12] net_ratelimit: 32 callbacks suppressed [ 1269.591424][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1269.598241][T25874] CPU: 0 UID: 0 PID: 25874 Comm: syz.4.4937 Tainted: G L syzkaller #0 PREEMPT(full) [ 1269.598274][T25874] Tainted: [L]=SOFTLOCKUP [ 1269.598281][T25874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1269.598292][T25874] Call Trace: [ 1269.598299][T25874] [ 1269.598307][T25874] dump_stack_lvl+0xe8/0x150 [ 1269.598338][T25874] should_fail_ex+0x40c/0x560 [ 1269.598364][T25874] _copy_from_user+0x2d/0xb0 [ 1269.598392][T25874] snd_seq_oss_write+0x6e2/0x950 [ 1269.598434][T25874] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1269.598461][T25874] ? apparmor_file_permission+0x1f4/0x300 [ 1269.598489][T25874] ? security_file_permission+0x75/0x260 [ 1269.598517][T25874] odev_write+0x5a/0x80 [ 1269.598534][T25874] ? __pfx_odev_write+0x10/0x10 [ 1269.598550][T25874] vfs_write+0x296/0xba0 [ 1269.598585][T25874] ? __pfx_vfs_write+0x10/0x10 [ 1269.598612][T25874] ? __fget_files+0x2a/0x420 [ 1269.598638][T25874] ? __fget_files+0x2a/0x420 [ 1269.598659][T25874] ? __fget_files+0x3a2/0x420 [ 1269.598681][T25874] ? __fget_files+0x2a/0x420 [ 1269.598711][T25874] ksys_write+0x150/0x270 [ 1269.598739][T25874] ? __pfx_ksys_write+0x10/0x10 [ 1269.598775][T25874] __do_fast_syscall_32+0x23e/0x6f0 [ 1269.598801][T25874] ? do_fast_syscall_32+0x33/0x70 [ 1269.598825][T25874] ? lockdep_hardirqs_on+0x7a/0x110 [ 1269.598848][T25874] ? asm_int80_emulation+0x1a/0x20 [ 1269.598865][T25874] ? do_int80_emulation+0x29f/0x550 [ 1269.598889][T25874] ? trace_irq_disable+0x3b/0x140 [ 1269.598915][T25874] do_fast_syscall_32+0x33/0x70 [ 1269.598940][T25874] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1269.598961][T25874] RIP: 0023:0xf7f290ec [ 1269.598978][T25874] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1269.598994][T25874] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1269.599013][T25874] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1269.599026][T25874] RDX: 0000000000000233 RSI: 0000000000000000 RDI: 0000000000000000 [ 1269.599038][T25874] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1269.599048][T25874] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1269.599059][T25874] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1269.599085][T25874] [ 1270.170487][T25876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4935'. [ 1270.202552][T24713] bond2: (slave gretap1): failed to get link speed/duplex [ 1270.222376][T25881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4938'. [ 1270.320384][T24723] bond2: (slave gretap1): failed to get link speed/duplex [ 1270.429094][T24710] bond2: (slave gretap1): failed to get link speed/duplex [ 1270.482645][T25887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4941'. [ 1270.538037][T24710] bond2: (slave gretap1): failed to get link speed/duplex [ 1270.682074][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1270.707560][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1270.717377][T24713] bond2: (slave gretap1): failed to get link speed/duplex [ 1270.734008][ T5639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1270.748063][ T5639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1270.764365][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1270.919118][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1271.038436][T14361] bond2: (slave gretap1): failed to get link speed/duplex [ 1271.268191][T24713] bond2: (slave gretap1): failed to get link speed/duplex [ 1271.395870][T20826] syz_tun (unregistering): left allmulticast mode [ 1271.524196][ T5681] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1271.534184][ T5681] usb 4-1: MIDIStreaming interface descriptor not found [ 1271.682947][T25913] binder: 25911:25913 ioctl c0306201 800003c0 returned -22 [ 1271.718052][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 1271.818921][ T5681] usb 4-1: USB disconnect, device number 51 [ 1272.013503][T25915] fuse: Bad value for 'fd' [ 1272.153782][T14361] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.461058][T14361] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.740308][T14361] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.846683][T25896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.856250][T25896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.872901][T25896] bridge_slave_0: entered allmulticast mode [ 1272.878994][ T5639] Bluetooth: hci5: command tx timeout [ 1272.895095][T25896] bridge_slave_0: entered promiscuous mode [ 1272.901846][ T5681] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1272.960189][T25931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4951'. [ 1273.006984][T14361] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.051340][T25896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.059126][T25896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.066389][T25896] bridge_slave_1: entered allmulticast mode [ 1273.076253][T25896] bridge_slave_1: entered promiscuous mode [ 1273.099887][ T5681] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1273.114743][ T5681] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1273.129848][T25896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1273.145534][ T5681] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1273.158101][T25896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.167266][ T5681] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1273.187347][ T5681] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1273.219648][ T5681] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1273.232313][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1273.241472][T25896] team0: Port device team_slave_0 added [ 1273.250056][T25896] team0: Port device team_slave_1 added [ 1273.255750][ T5681] usb 4-1: Product: syz [ 1273.260489][ T5681] usb 4-1: Manufacturer: syz [ 1273.269052][ T896] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1273.287021][ T5681] cdc_wdm 4-1:1.0: skipping garbage [ 1273.299128][ T5681] cdc_wdm 4-1:1.0: skipping garbage [ 1273.311992][ T5681] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1273.319438][ T5681] cdc_wdm 4-1:1.0: Unknown control protocol [ 1273.375641][T25896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.382894][T25896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.409461][T25896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.421971][T25896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.429004][T25896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.438535][ T896] usb 3-1: Using ep0 maxpacket: 8 [ 1273.455169][T25896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.483267][ T896] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1273.496559][ T896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.574475][ T896] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1273.595260][ T896] pvrusb2: ********** [ 1273.605060][ T896] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1273.626359][ T896] pvrusb2: Important functionality might not be entirely working. [ 1273.645687][ T896] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1273.659765][T25896] hsr_slave_0: entered promiscuous mode [ 1273.667031][T25896] hsr_slave_1: entered promiscuous mode [ 1273.674346][ T896] pvrusb2: ********** [ 1273.774636][ T2367] pvrusb2: Invalid write control endpoint [ 1273.878909][ T2367] pvrusb2: Invalid write control endpoint [ 1273.892762][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1273.917431][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1273.949481][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1273.967906][ T2367] pvrusb2: Device being rendered inoperable [ 1273.986224][ T2367] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1274.006418][ T2367] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1274.050387][ T2367] pvrusb2: Attached sub-driver cx25840 [ 1274.063125][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1274.074536][T14361] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 1274.087700][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1274.098472][T14361] ip6gre1 (unregistering): left promiscuous mode [ 1274.196335][ T30] audit: type=1326 audit(1783298519.785:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.2.4952" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x0 [ 1274.244666][ T896] usb 4-1: USB disconnect, device number 52 [ 1274.407242][T14361] bond2 (unregistering): (slave gretap1): Removing an active aggregator [ 1274.420166][T14361] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 1274.517182][T14361] bond1 (unregistering): Released all slaves [ 1274.535915][T14361] bond0 (unregistering): Released all slaves [ 1274.555118][T14361] bond2 (unregistering): Released all slaves [ 1274.576082][T14361] bond3 (unregistering): (slave vlan1): Releasing active interface [ 1274.587668][T14361] bond3 (unregistering): Released all slaves [ 1274.624373][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1274.779031][T14361] : left promiscuous mode [ 1274.825697][T25969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4957'. [ 1274.870602][T25969] veth1_to_team: entered promiscuous mode [ 1274.877463][T25969] gretap0: entered promiscuous mode [ 1274.885228][T25969] debugfs: 'hsr0' already exists in 'hsr' [ 1274.911008][T25969] Cannot create hsr debugfs directory [ 1274.916620][T25969] hsr0: entered promiscuous mode [ 1274.943386][T14361] tipc: Disabling bearer [ 1274.948488][ T5639] Bluetooth: hci5: command tx timeout [ 1274.961166][T14361] tipc: Left network mode [ 1275.567971][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1275.718182][ T24] usb 2-1: device descriptor read/64, error -71 [ 1275.978618][ T24] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1276.157943][ T24] usb 2-1: device descriptor read/64, error -71 [ 1276.158382][T14361] IPVS: stopping master sync thread 22502 ... [ 1276.272494][ T24] usb usb2-port1: attempt power cycle [ 1276.307639][ T896] usb 3-1: USB disconnect, device number 56 [ 1276.620198][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1276.664051][ T24] usb 2-1: device descriptor read/8, error -71 [ 1276.814333][T14361] veth1_macvtap: left promiscuous mode [ 1276.820029][T14361] veth0_macvtap: left promiscuous mode [ 1276.951188][ T24] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1276.990938][ T24] usb 2-1: device descriptor read/8, error -71 [ 1277.028703][ T5639] Bluetooth: hci5: command tx timeout [ 1277.118283][ T24] usb usb2-port1: unable to enumerate USB device [ 1277.918690][T26001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4961'. [ 1278.085568][T26004] tipc: Resetting bearer [ 1278.406566][T14361] IPVS: stop unused estimator thread 0... [ 1278.521378][T25896] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1278.552018][T25896] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1278.573447][T25896] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1278.598830][T25896] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1278.622930][T25896] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1278.650616][T25896] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1278.667238][T25896] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1278.695325][T25896] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1278.796041][T25896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1278.808356][T23484] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1278.830875][T25896] 8021q: adding VLAN 0 to HW filter on device team0 [ 1278.844764][T14361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.852085][T14361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.884914][T14361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.892180][T14361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1278.980182][T23484] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1278.994744][T23484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1279.007166][T25896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.018446][T23484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1279.040678][T23484] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1279.056553][T23484] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1279.084319][T23484] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1279.095862][T25896] veth0_vlan: entered promiscuous mode [ 1279.109260][ T5639] Bluetooth: hci5: command tx timeout [ 1279.117028][T23484] usb 2-1: Manufacturer: syz [ 1279.129422][T25896] veth1_vlan: entered promiscuous mode [ 1279.137071][T23484] usb 2-1: config 0 descriptor?? [ 1279.189323][T25896] veth0_macvtap: entered promiscuous mode [ 1279.220355][T25896] veth1_macvtap: entered promiscuous mode [ 1279.264715][T25896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.294434][T25896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1279.332290][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.342909][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.355045][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.365471][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.572346][T23484] appleir 0003:05AC:8243.003E: unknown main item tag 0x0 [ 1279.633621][T23484] appleir 0003:05AC:8243.003E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1279.657173][T24713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.699749][T24713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.707419][T24711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.732252][T24711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.994569][T26065] AppArmor: change_hat: Invalid input '0x00,' [ 1280.140195][T26039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1280.242623][ T5681] usb 2-1: USB disconnect, device number 51 [ 1280.368594][T23484] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1280.529576][T23484] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1280.559051][T23484] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.580394][T26075] fuse: Bad value for 'fd' [ 1280.585996][T23484] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.604546][T23484] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1280.634206][T23484] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1280.667745][T23484] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1280.685777][T23484] usb 5-1: Manufacturer: syz [ 1280.709709][T23484] usb 5-1: config 0 descriptor?? [ 1281.108729][ T29] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1281.126460][T23484] appleir 0003:05AC:8243.003F: unknown main item tag 0x0 [ 1281.155197][T23484] appleir 0003:05AC:8243.003F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1281.270555][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1281.291550][ T29] usb 2-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 1281.304453][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.327204][ T29] usb 2-1: Product: syz [ 1281.355075][ T29] usb 2-1: Manufacturer: syz [ 1281.389520][ T29] usb 2-1: SerialNumber: syz [ 1281.652247][T26077] input: syz0 as /devices/virtual/input/input139 [ 1281.724823][T26069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1281.770525][ T29] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1281.786895][ T29] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1281.830754][ T5681] usb 5-1: USB disconnect, device number 88 [ 1281.865825][ T29] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1281.893278][ T29] usb 2-1: USB disconnect, device number 52 [ 1281.927193][T19207] udevd[19207]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1281.943552][T23484] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1282.098910][T23484] usb 3-1: Using ep0 maxpacket: 16 [ 1282.107239][T23484] usb 3-1: config 0 has an invalid interface number: 108 but max is 0 [ 1282.115791][T23484] usb 3-1: config 0 has no interface number 0 [ 1282.123554][T23484] usb 3-1: too many endpoints for config 0 interface 108 altsetting 111: 119, using maximum allowed: 30 [ 1282.135229][T23484] usb 3-1: config 0 interface 108 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 119 [ 1282.149076][T23484] usb 3-1: config 0 interface 108 has no altsetting 0 [ 1282.160911][T23484] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1282.170623][T23484] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1282.178902][T23484] usb 3-1: Product: syz [ 1282.183320][T23484] usb 3-1: Manufacturer: syz [ 1282.189442][T23484] usb 3-1: SerialNumber: syz [ 1282.205297][T23484] usb 3-1: config 0 descriptor?? [ 1282.504850][T26101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4981'. [ 1282.520933][T23484] usb 3-1: USB disconnect, device number 57 [ 1282.668002][ T896] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1282.718353][ T5681] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1282.838062][ T896] usb 2-1: Using ep0 maxpacket: 16 [ 1282.853416][ T896] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1282.872967][ T896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.887671][ T896] usb 2-1: Product: syz [ 1282.892725][ T896] usb 2-1: Manufacturer: syz [ 1282.897984][ T896] usb 2-1: SerialNumber: syz [ 1282.900089][ T5681] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1282.905969][ T896] usb 2-1: config 0 descriptor?? [ 1282.934873][ T5681] usb 5-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 1282.953804][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.974456][ T5681] usb 5-1: Product: syz [ 1282.990668][ T5681] usb 5-1: Manufacturer: syz [ 1283.005653][ T5681] usb 5-1: SerialNumber: syz [ 1283.208061][T23484] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1283.262142][T26100] input: syz0 as /devices/virtual/input/input140 [ 1283.362484][T26109] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 1283.378011][T23484] usb 4-1: Using ep0 maxpacket: 16 [ 1283.396795][ T5681] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1283.402942][ T896] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1283.427204][ T5681] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1283.446861][T23484] usb 4-1: config 0 has an invalid interface number: 108 but max is 0 [ 1283.460624][T23484] usb 4-1: config 0 has no interface number 0 [ 1283.485541][ T896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1283.496778][T23484] usb 4-1: too many endpoints for config 0 interface 108 altsetting 111: 119, using maximum allowed: 30 [ 1283.524197][ T896] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1283.535617][T23484] usb 4-1: config 0 interface 108 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 119 [ 1283.549355][ T896] usb 2-1: media controller created [ 1283.572980][T23484] usb 4-1: config 0 interface 108 has no altsetting 0 [ 1283.605341][T23484] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1283.619442][ T896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1283.630338][T23484] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1283.656656][T23484] usb 4-1: Product: syz [ 1283.675540][T23484] usb 4-1: Manufacturer: syz [ 1283.692419][T23484] usb 4-1: SerialNumber: syz [ 1283.692634][ T5681] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1283.708294][ T896] zl10353_read_register: readreg error (reg=127, ret==0) [ 1283.726580][T23484] usb 4-1: config 0 descriptor?? [ 1283.733851][ T896] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1283.763652][ T896] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1283.792563][ T5681] usb 5-1: USB disconnect, device number 89 [ 1283.803028][ T896] usb 2-1: USB disconnect, device number 53 [ 1283.922816][T19207] udevd[19207]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1283.987988][ T896] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1284.092751][T23484] usb 4-1: USB disconnect, device number 53 [ 1284.165193][T19106] udevd[19106]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.108/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1284.634290][T26112] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4987'. [ 1284.684686][T26112] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4987'. [ 1284.763088][T26119] net_ratelimit: 2 callbacks suppressed [ 1284.763109][T26119] TC_ACT_REPEAT abuse ? [ 1285.078018][ T896] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1285.247960][ T896] usb 2-1: Using ep0 maxpacket: 8 [ 1285.258352][ T896] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1285.277053][ T896] usb 2-1: config 0 has no interface number 0 [ 1285.286917][ T896] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1285.310583][ T896] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1285.335771][ T896] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1285.364390][ T896] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1285.399565][ T896] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1285.419688][ T896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.439648][ T896] usb 2-1: config 0 descriptor?? [ 1285.478042][ T5720] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1285.641393][ T5720] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1285.681991][ T5720] usb 4-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 1285.691953][T26121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.703795][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.713007][T26121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.724971][ T5720] usb 4-1: Product: syz [ 1285.736537][ T5720] usb 4-1: Manufacturer: syz [ 1285.756463][ T5720] usb 4-1: SerialNumber: syz [ 1285.942274][T26134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.954815][T26134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.015160][T26125] input: syz0 as /devices/virtual/input/input141 [ 1286.119618][ T5720] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1286.157310][ T5720] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1286.317301][ T5720] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1286.392684][ T5720] usb 4-1: USB disconnect, device number 54 [ 1286.481090][T19207] udevd[19207]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1287.118047][ T29] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1287.257969][ T5720] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1287.278012][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 1287.291229][ T29] usb 3-1: config 0 has an invalid interface number: 108 but max is 0 [ 1287.307321][ T29] usb 3-1: config 0 has no interface number 0 [ 1287.320533][ T29] usb 3-1: too many endpoints for config 0 interface 108 altsetting 111: 119, using maximum allowed: 30 [ 1287.333139][ T29] usb 3-1: config 0 interface 108 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 119 [ 1287.346951][ T29] usb 3-1: config 0 interface 108 has no altsetting 0 [ 1287.357660][ T29] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1287.367624][ T29] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1287.375934][ T29] usb 3-1: Product: syz [ 1287.381349][ T29] usb 3-1: Manufacturer: syz [ 1287.386063][ T29] usb 3-1: SerialNumber: syz [ 1287.398676][ T29] usb 3-1: config 0 descriptor?? [ 1287.581593][T26154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5003'. [ 1287.585313][ T5720] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1287.604718][ T5720] usb 4-1: no configurations [ 1287.612815][ T5720] usb 4-1: can't read configurations, error -22 [ 1287.699799][ T29] usb 3-1: USB disconnect, device number 58 [ 1287.709030][T23215] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1287.752157][T19106] udevd[19106]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.108/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1287.876673][ T896] usb 2-1: string descriptor 0 read error: -71 [ 1287.899450][T23215] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1287.904757][T26159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5004'. [ 1287.943025][ T896] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1287.976081][ T896] usb 2-1: USB disconnect, device number 54 [ 1288.003042][T23215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.034534][ T896] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1288.050964][T23215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.091919][T23215] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1288.136249][T23215] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1288.164589][T23215] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1288.199915][T23215] usb 5-1: Manufacturer: syz [ 1288.242924][T23215] usb 5-1: config 0 descriptor?? [ 1288.663925][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1288.688840][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1288.699373][T23215] appleir 0003:05AC:8243.0040: unknown main item tag 0x0 [ 1288.706712][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1288.725746][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1288.733503][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1288.778430][T23215] appleir 0003:05AC:8243.0040: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1289.300518][T26173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1289.468171][ T5720] usb 5-1: USB disconnect, device number 90 [ 1289.622405][T24711] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.846097][T26178] syzkaller0: entered promiscuous mode [ 1289.856646][T26178] syzkaller0: entered allmulticast mode [ 1290.008936][T24711] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.161699][T26178] tipc: Enabled bearer , priority 0 [ 1290.264330][T24711] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.505298][T26193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5014'. [ 1290.686387][T24711] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.743440][T26171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.762779][T26171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.784410][T26171] bridge_slave_0: entered allmulticast mode [ 1290.791237][ T50] Bluetooth: hci4: command tx timeout [ 1290.831145][T26171] bridge_slave_0: entered promiscuous mode [ 1290.841522][T26177] tipc: Resetting bearer [ 1290.868337][T23484] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1291.031150][T23484] usb 5-1: Using ep0 maxpacket: 32 [ 1291.042829][T23484] usb 5-1: config 18 has an invalid interface number: 88 but max is 0 [ 1291.052688][T23484] usb 5-1: config 18 has no interface number 0 [ 1291.061535][T23484] usb 5-1: config 18 interface 88 has no altsetting 0 [ 1291.072086][T23484] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1291.082920][T23484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.096419][T23484] usb 5-1: Product: syz [ 1291.103576][T23484] usb 5-1: Manufacturer: syz [ 1291.108949][T23484] usb 5-1: SerialNumber: syz [ 1291.138117][ T896] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1291.298009][ T896] usb 4-1: Using ep0 maxpacket: 8 [ 1291.306540][ T896] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1291.316368][ T896] usb 4-1: config 0 has no interface number 0 [ 1291.327175][ T896] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1291.340228][T26205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5019'. [ 1291.349298][ T896] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1291.367343][ T896] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1291.411900][ T896] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1291.449681][ T896] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1291.485739][ T896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.526425][ T896] usb 4-1: config 0 descriptor?? [ 1291.746913][T26197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.758532][T26197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.039863][T26209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.066525][T26209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.878114][ T50] Bluetooth: hci4: command tx timeout [ 1293.920019][ T896] usb 4-1: string descriptor 0 read error: -71 [ 1293.961281][ T896] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1293.983088][ T896] usb 4-1: USB disconnect, device number 57 [ 1293.995822][ T896] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1294.378053][ T896] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1294.539922][ T896] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1294.551570][ T896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.562883][ T896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.573476][ T896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1294.596681][ T896] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1294.606098][ T896] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1294.614512][ T896] usb 4-1: Manufacturer: syz [ 1294.622401][ T896] usb 4-1: config 0 descriptor?? [ 1294.958362][ T50] Bluetooth: hci4: command tx timeout [ 1295.044916][ T896] appleir 0003:05AC:8243.0041: unknown main item tag 0x0 [ 1295.080577][ T896] appleir 0003:05AC:8243.0041: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1295.732201][T26219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1296.159463][T23484] asix 5-1:18.88: probe with driver asix failed with error -110 [ 1296.447966][T23484] usb 4-1: reset high-speed USB device number 58 using dummy_hcd [ 1297.028542][ T50] Bluetooth: hci4: command tx timeout [ 1297.972154][T26177] tipc: Disabling bearer [ 1297.985287][T26171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.994013][T26171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.001847][T26171] bridge_slave_1: entered allmulticast mode [ 1298.010658][T26171] bridge_slave_1: entered promiscuous mode [ 1298.043352][T26207] batadv0: entered promiscuous mode [ 1298.055632][T26207] vlan2: entered promiscuous mode [ 1298.252320][T26171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.254293][ T5720] usb 5-1: USB disconnect, device number 91 [ 1298.395817][T26228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5025'. [ 1298.435591][T26171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1298.663515][T26171] team0: Port device team_slave_0 added [ 1298.726456][T26171] team0: Port device team_slave_1 added [ 1298.807153][T26238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5026'. [ 1298.911783][T26171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1298.919651][T26171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.946580][T26171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.964902][T26171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.972889][T26171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.000472][T26171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1299.035635][T24711] dummy0: left allmulticast mode [ 1299.069030][T24711] dummy0: left promiscuous mode [ 1299.076486][T24711] bridge0: port 3(dummy0) entered disabled state [ 1299.091024][T24711] bridge_slave_1: left allmulticast mode [ 1299.097101][T24711] bridge_slave_1: left promiscuous mode [ 1299.106117][T24711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.119661][T24711] bridge_slave_0: left allmulticast mode [ 1299.133022][T24711] bridge_slave_0: left promiscuous mode [ 1299.143427][T24711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.165165][T24711] lo: left allmulticast mode [ 1299.188085][T23484] usb 4-1: device descriptor read/64, error -71 [ 1299.296148][T24711] bond0 (unregistering): (slave ip6gre2): Releasing backup interface [ 1299.428035][T23484] usb 4-1: reset high-speed USB device number 58 using dummy_hcd [ 1299.449788][T23484] usb 4-1: device reset changed ep0 maxpacket size! [ 1299.457950][ T896] usb 4-1: USB disconnect, device number 58 [ 1299.584958][T24711] bond0 (unregistering): Released all slaves [ 1299.622318][T24711] bond1 (unregistering): Released all slaves [ 1299.628449][ T896] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1299.663839][T24711] bond2 (unregistering): Released all slaves [ 1299.698555][T24711] bond3 (unregistering): Released all slaves [ 1299.801514][ T896] usb 4-1: Using ep0 maxpacket: 8 [ 1299.825457][ T896] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1299.839344][T26171] hsr_slave_0: entered promiscuous mode [ 1299.845101][ T896] usb 4-1: config 0 has no interface number 0 [ 1299.871698][T26171] hsr_slave_1: entered promiscuous mode [ 1299.877473][ T896] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1299.893430][T26171] debugfs: 'hsr0' already exists in 'hsr' [ 1299.899295][T23484] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1299.916630][T26171] Cannot create hsr debugfs directory [ 1299.922165][ T896] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1299.948504][T24711] tipc: Disabling bearer [ 1299.958071][ T896] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1299.980244][T24711] tipc: Left network mode [ 1300.019507][ T896] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1300.065099][ T896] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1300.117220][T23484] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1300.156039][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.158155][ T896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.162577][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.204251][T23484] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.267406][ T896] usb 4-1: config 0 descriptor?? [ 1300.275456][T23484] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.294893][T23484] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1300.377438][T23484] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1300.391903][T23484] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1300.407937][T23484] usb 5-1: Manufacturer: syz [ 1300.446632][T23484] usb 5-1: config 0 descriptor?? [ 1300.496023][T26240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.538676][T26240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.751260][T24711] IPVS: stopping master sync thread 25013 ... [ 1300.932387][T23484] appleir 0003:05AC:8243.0042: unknown main item tag 0x0 [ 1300.949678][T26269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.984189][T26269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.041122][T23484] appleir 0003:05AC:8243.0042: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1301.511453][T26254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1302.058134][ T896] usb 4-1: string descriptor 0 read error: -71 [ 1302.184666][ T896] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1302.230112][ T896] usb 4-1: USB disconnect, device number 59 [ 1302.264646][ T896] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 1302.359036][ T29] usb 5-1: reset high-speed USB device number 92 using dummy_hcd [ 1302.544428][T26283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5036'. [ 1302.657305][T26285] netlink: 392 bytes leftover after parsing attributes in process `syz.0.5037'. [ 1306.028619][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1306.038684][T26283] veth1_to_team: left promiscuous mode [ 1306.081073][T26283] gretap0: left promiscuous mode [ 1306.225068][T26299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5040'. [ 1306.383728][T24711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1306.416229][T24711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1306.441021][T26310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5043'. [ 1306.466138][T24711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1306.522407][T24711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1306.682449][T24711] veth1_macvtap: left promiscuous mode [ 1306.707446][T24711] veth0_macvtap: left promiscuous mode [ 1306.735205][T24711] veth1_vlan: left promiscuous mode [ 1306.761014][T24711] veth0_vlan: left promiscuous mode [ 1306.841373][T23484] usb 5-1: USB disconnect, device number 92 [ 1307.759829][T24711] team0 (unregistering): Port device team_slave_1 removed [ 1307.795098][T24711] team0 (unregistering): Port device team_slave_0 removed [ 1308.159264][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1308.336855][T26341] set match dimension is over the limit! [ 1308.448619][ T29] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 1308.467410][T26345] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 1308.474049][T26345] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1308.491072][T26345] vhci_hcd vhci_hcd.0: Device attached [ 1308.611540][ T29] usb 4-1: not running at top speed; connect to a high speed hub [ 1308.631013][ T29] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 943, setting to 64 [ 1308.649223][ T29] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1308.679524][ T29] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1308.696968][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.727978][ T29] usb 4-1: Product: Џ [ 1308.732261][T23484] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 1308.739753][ T29] usb 4-1: Manufacturer: 䠊 [ 1308.747811][ T29] usb 4-1: SerialNumber: တ [ 1308.759476][ T5681] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1308.862886][T26345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5046'. [ 1308.930954][ T5681] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1308.969050][ T5681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.999182][ T5681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1309.018974][ T5681] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1309.036435][T26345] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1309.057471][ T5681] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1309.067312][ T5681] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1309.075780][ T5681] usb 2-1: Manufacturer: syz [ 1309.080801][T26345] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1309.101570][ T5681] usb 2-1: config 0 descriptor?? [ 1309.235436][T26334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.258780][T26334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.391844][T26347] vhci_hcd: connection reset by peer [ 1309.409695][T24711] vhci_hcd vhci_hcd.4: stop threads [ 1309.416234][T24711] vhci_hcd vhci_hcd.4: release socket [ 1309.449575][ T29] cdc_ncm 4-1:1.0: bind() failure [ 1309.451593][T24711] vhci_hcd vhci_hcd.4: disconnect device [ 1309.500326][ T29] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1309.515210][ T29] cdc_ncm 4-1:1.1: bind() failure [ 1309.557211][ T5681] appleir 0003:05AC:8243.0043: unknown main item tag 0x0 [ 1309.566278][ T29] usb 4-1: USB disconnect, device number 60 [ 1309.615163][ T5681] appleir 0003:05AC:8243.0043: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1310.185526][T26375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1310.604927][ T29] usb 2-1: USB disconnect, device number 55 [ 1310.738938][T23215] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1310.863627][T26407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5056'. [ 1310.929574][T23215] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1310.950811][T23215] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1310.966143][T23215] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1310.975287][T23215] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1311.016346][T23215] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1311.109616][T23215] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1311.157695][T23215] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1311.201347][T23215] usb 4-1: Product: syz [ 1311.242122][T23215] usb 4-1: Manufacturer: syz [ 1311.257304][T23215] cdc_wdm 4-1:1.0: skipping garbage [ 1311.303286][T23215] cdc_wdm 4-1:1.0: skipping garbage [ 1311.360139][T23215] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1311.373347][T23215] cdc_wdm 4-1:1.0: Unknown control protocol [ 1313.549790][ T29] usb 4-1: USB disconnect, device number 61 [ 1313.818224][T23484] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1314.090702][T26472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5061'. [ 1316.781589][T26171] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1316.817447][T26171] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1316.837282][T26171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1316.859386][T26171] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1316.869172][T26171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1316.890401][T26171] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1316.909659][T26171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1316.922914][T26171] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1317.056095][T26171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1317.096985][T26171] 8021q: adding VLAN 0 to HW filter on device team0 [ 1317.127340][T24716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.134592][T24716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1317.169514][T24716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.176645][T24716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1317.406774][T26171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1317.561460][T26171] veth0_vlan: entered promiscuous mode [ 1317.605615][T26171] veth1_vlan: entered promiscuous mode [ 1317.703186][T26171] veth0_macvtap: entered promiscuous mode [ 1317.733942][T26171] veth1_macvtap: entered promiscuous mode [ 1317.803538][T26171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1317.846081][T26171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1317.886108][T24711] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.912759][T24711] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.939478][T24711] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.972250][T24711] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.199601][T24711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.224577][T24711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.267704][T24711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.282122][T24711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.583878][T26512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5072'. [ 1318.677987][ T29] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1318.849831][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1318.869265][ T29] usb 3-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 1318.886916][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.903945][ T29] usb 3-1: Product: syz [ 1318.912894][ T29] usb 3-1: Manufacturer: syz [ 1318.923031][ T29] usb 3-1: SerialNumber: syz [ 1319.146143][T26505] input: syz0 as /devices/virtual/input/input143 [ 1319.220213][T26521] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 1319.255382][ T29] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1319.304076][ T29] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1319.398227][ T29] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1319.441207][ T29] usb 3-1: USB disconnect, device number 59 [ 1319.479025][T26474] udevd[26474]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1320.014458][T26529] AppArmor: change_hat: Invalid input '0x00,' [ 1320.156922][T26538] AppArmor: change_hat: Invalid input '0x00' [ 1320.211029][T26541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5075'. [ 1321.802185][T26565] AppArmor: change_hat: Invalid input '0x00,' [ 1322.003156][T26577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5091'. [ 1322.036636][T23215] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1322.294933][T23215] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1322.350488][T23215] usb 2-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 1322.376288][T23215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.420196][T23215] usb 2-1: Product: syz [ 1322.432946][T23215] usb 2-1: Manufacturer: syz [ 1322.459263][T23215] usb 2-1: SerialNumber: syz [ 1322.548960][ T29] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1322.707226][T26569] input: syz0 as /devices/virtual/input/input144 [ 1322.727937][ T29] usb 4-1: device descriptor read/64, error -71 [ 1322.849906][T23215] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1322.872443][T23215] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1322.998108][ T29] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1323.024812][T23215] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1323.077039][T23215] usb 2-1: USB disconnect, device number 56 [ 1323.099728][T26474] udevd[26474]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1323.128026][ T29] usb 4-1: device descriptor read/64, error -71 [ 1323.259501][ T29] usb usb4-port1: attempt power cycle [ 1323.527928][ T5681] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1323.579291][T26595] AppArmor: change_hat: Invalid input '0x00' [ 1323.607922][ T29] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1323.658434][ T29] usb 4-1: device descriptor read/8, error -71 [ 1323.688048][ T5681] usb 3-1: Using ep0 maxpacket: 16 [ 1323.697728][ T5681] usb 3-1: config 0 has an invalid interface number: 108 but max is 0 [ 1323.715427][ T5681] usb 3-1: config 0 has no interface number 0 [ 1323.729685][ T5681] usb 3-1: too many endpoints for config 0 interface 108 altsetting 111: 119, using maximum allowed: 30 [ 1323.756287][ T5681] usb 3-1: config 0 interface 108 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 119 [ 1323.782732][ T5681] usb 3-1: config 0 interface 108 has no altsetting 0 [ 1323.800441][ T5681] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1323.815757][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1323.831765][ T5681] usb 3-1: Product: syz [ 1323.843892][ T5681] usb 3-1: Manufacturer: syz [ 1323.854331][ T5681] usb 3-1: SerialNumber: syz [ 1323.879314][ T5681] usb 3-1: config 0 descriptor?? [ 1323.917930][ T29] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1323.948741][ T29] usb 4-1: device descriptor read/8, error -71 [ 1324.019757][T26597] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1324.080656][ T29] usb usb4-port1: unable to enumerate USB device [ 1324.162614][T26599] loop4: detected capacity change from 0 to 1 [ 1324.244070][T26599] Dev loop4: unable to read RDB block 1 [ 1324.260234][ T5681] usb 3-1: USB disconnect, device number 60 [ 1324.283712][T26599] loop4: unable to read partition table [ 1324.324963][T26599] loop4: partition table beyond EOD, truncated [ 1324.334846][T26484] udevd[26484]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.108/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1324.348354][T26599] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 1324.413418][ T4992] Dev loop4: unable to read RDB block 1 [ 1324.426371][ T4992] loop4: unable to read partition table [ 1324.435720][ T4992] loop4: partition table beyond EOD, truncated [ 1324.543148][T26605] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5102'. [ 1324.807933][ T5681] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1324.973408][ T5681] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1324.992343][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.007754][ T5681] usb 2-1: Product: syz [ 1325.016678][ T5681] usb 2-1: Manufacturer: syz [ 1325.017911][ T29] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1325.027973][ T5681] usb 2-1: SerialNumber: syz [ 1325.037722][T26620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5108'. [ 1325.052205][ T5681] usb 2-1: config 0 descriptor?? [ 1325.069428][ T5681] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1325.177933][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 1325.190818][ T29] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1325.206393][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.217069][ T29] usb 3-1: Product: syz [ 1325.225608][ T29] usb 3-1: Manufacturer: syz [ 1325.233684][ T29] usb 3-1: SerialNumber: syz [ 1325.251222][ T29] usb 3-1: config 0 descriptor?? [ 1325.475725][T26605] netdevsim netdevsim1: Firmware load for '../file0/file0' refused, path contains '..' component [ 1325.525064][ T5681] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input145 [ 1325.533165][T26624] AppArmor: change_hat: Invalid input '0x00,' [ 1325.750678][ T29] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1325.792143][ T896] usb 2-1: USB disconnect, device number 57 [ 1325.876000][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1325.909429][ T29] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1325.933262][ T29] usb 3-1: media controller created [ 1325.983642][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1325.995364][T26611] ------------[ cut here ]------------ [ 1326.001467][T26611] usb 3-1: BOGUS control dir, pipe 80003d80 doesn't match bRequestType c0 [ 1326.010118][T26611] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#1: syz.2.5105/26611 [ 1326.020847][T26611] Modules linked in: [ 1326.025597][T26611] CPU: 1 UID: 0 PID: 26611 Comm: syz.2.5105 Tainted: G L syzkaller #0 PREEMPT(full) [ 1326.038727][T26611] Tainted: [L]=SOFTLOCKUP [ 1326.043073][T26611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1326.053453][T26611] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 1326.059220][T26611] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 1326.079078][T26611] RSP: 0000:ffffc900058c76f8 EFLAGS: 00010246 [ 1326.085187][T26611] RAX: 0000000000000000 RBX: ffff888034335200 RCX: 0000000080003d80 [ 1326.093374][T26611] RDX: ffff888021e8dd80 RSI: ffffffff8ca31080 RDI: ffffffff90655eb0 [ 1326.101528][T26611] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 1326.109639][T26611] R10: ffffc900058c77e0 R11: fffff52000b18f08 R12: 1ffff11005671a4c [ 1326.117674][T26611] R13: ffff88802b38d260 R14: ffff888021e8dd80 R15: 0000000080003d80 [ 1326.125967][T26611] FS: 0000000000000000(0000) GS:ffff888125059000(0063) knlGS:00000000f53ddb40 [ 1326.135194][T26611] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1326.141877][T26611] CR2: 0000000080158000 CR3: 00000000510b6000 CR4: 00000000003526f0 [ 1326.150145][T26611] Call Trace: [ 1326.153443][T26611] [ 1326.156402][T26611] usb_start_wait_urb+0x13f/0x5b0 [ 1326.161504][T26611] ? trace_kmalloc+0x2a/0xf0 [ 1326.166134][T26611] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1326.171776][T26611] usb_control_msg+0x234/0x3e0 [ 1326.176575][T26611] dtv5100_i2c_msg+0x231/0x2f0 [ 1326.181410][T26611] dtv5100_i2c_xfer+0x1a5/0x610 [ 1326.186296][T26611] __i2c_transfer+0x7be/0x1fe0 [ 1326.191118][T26611] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1326.196955][T26611] ? lockdep_hardirqs_on+0x7a/0x110 [ 1326.202231][T26611] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1326.208189][T26611] ? rt_mutex_lock_nested+0x156/0x1c0 [ 1326.213635][T26611] ? i2c_transfer+0xc8/0x2d0 [ 1326.218327][T26611] i2c_transfer+0x1cc/0x2d0 [ 1326.223126][T26611] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 1326.229154][T26611] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1326.235401][T26611] ? _copy_from_user+0x94/0xb0 [ 1326.240263][T26611] i2cdev_write+0x113/0x1e0 [ 1326.244906][T26611] vfs_writev+0x4bb/0x990 [ 1326.249338][T26611] ? __pfx_i2cdev_write+0x10/0x10 [ 1326.254395][T26611] ? __pfx_vfs_writev+0x10/0x10 [ 1326.259337][T26611] ? __fget_files+0x2a/0x420 [ 1326.264051][T26611] ? __fget_files+0x3a2/0x420 [ 1326.268832][T26611] ? __fget_files+0x2a/0x420 [ 1326.273453][T26611] do_writev+0x154/0x2e0 [ 1326.277727][T26611] ? __pfx_do_writev+0x10/0x10 [ 1326.282619][T26611] __do_fast_syscall_32+0x23e/0x6f0 [ 1326.287882][T26611] ? do_fast_syscall_32+0x33/0x70 [ 1326.292940][T26611] ? lockdep_hardirqs_on+0x7a/0x110 [ 1326.298240][T26611] ? asm_int80_emulation+0x1a/0x20 [ 1326.303348][T26611] ? do_int80_emulation+0x29f/0x550 [ 1326.309381][T26611] ? trace_irq_disable+0x3b/0x140 [ 1326.314416][T26611] do_fast_syscall_32+0x33/0x70 [ 1326.319412][T26611] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1326.325946][T26611] RIP: 0023:0xf6fef0ec [ 1326.330217][T26611] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1326.349890][T26611] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1326.358355][T26611] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800005c0 [ 1326.366601][T26611] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1326.374610][T26611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1326.382638][T26611] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1326.390866][T26611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1326.398924][T26611] [ 1326.402160][T26611] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1326.409539][T26611] CPU: 1 UID: 0 PID: 26611 Comm: syz.2.5105 Tainted: G L syzkaller #0 PREEMPT(full) [ 1326.420483][T26611] Tainted: [L]=SOFTLOCKUP [ 1326.424805][T26611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1326.434864][T26611] Call Trace: [ 1326.438151][T26611] [ 1326.441108][T26611] vpanic+0x56c/0xa60 [ 1326.445094][T26611] ? __pfx__printk+0x10/0x10 [ 1326.449686][T26611] ? __pfx_vpanic+0x10/0x10 [ 1326.454191][T26611] ? is_bpf_text_address+0x292/0x2b0 [ 1326.459484][T26611] ? is_bpf_text_address+0x26/0x2b0 [ 1326.464688][T26611] panic+0xc5/0xd0 [ 1326.468408][T26611] ? __pfx_panic+0x10/0x10 [ 1326.472931][T26611] __warn+0x315/0x4c0 [ 1326.476902][T26611] ? usb_submit_urb+0x1057/0x18b0 [ 1326.481938][T26611] ? usb_submit_urb+0x1057/0x18b0 [ 1326.486961][T26611] __report_bug+0x331/0x530 [ 1326.491465][T26611] ? usb_submit_urb+0x1057/0x18b0 [ 1326.496489][T26611] ? __pfx___report_bug+0x10/0x10 [ 1326.501513][T26611] ? stack_trace_save+0xa9/0x100 [ 1326.506450][T26611] ? __kmalloc_noprof+0x1ad/0x720 [ 1326.511471][T26611] ? kasan_save_track+0x4f/0x80 [ 1326.516318][T26611] report_bug_entry+0x19a/0x290 [ 1326.521163][T26611] ? usb_submit_urb+0x1100/0x18b0 [ 1326.526180][T26611] ? usb_submit_urb+0x1105/0x18b0 [ 1326.531196][T26611] handle_bug+0xce/0x200 [ 1326.535448][T26611] exc_invalid_op+0x1a/0x50 [ 1326.539946][T26611] asm_exc_invalid_op+0x1a/0x20 [ 1326.544786][T26611] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 1326.550500][T26611] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 1326.570103][T26611] RSP: 0000:ffffc900058c76f8 EFLAGS: 00010246 [ 1326.576165][T26611] RAX: 0000000000000000 RBX: ffff888034335200 RCX: 0000000080003d80 [ 1326.584123][T26611] RDX: ffff888021e8dd80 RSI: ffffffff8ca31080 RDI: ffffffff90655eb0 [ 1326.592086][T26611] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 1326.600049][T26611] R10: ffffc900058c77e0 R11: fffff52000b18f08 R12: 1ffff11005671a4c [ 1326.608017][T26611] R13: ffff88802b38d260 R14: ffff888021e8dd80 R15: 0000000080003d80 [ 1326.615990][T26611] ? usb_submit_urb+0x1091/0x18b0 [ 1326.621104][T26611] usb_start_wait_urb+0x13f/0x5b0 [ 1326.626129][T26611] ? trace_kmalloc+0x2a/0xf0 [ 1326.630744][T26611] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1326.636301][T26611] usb_control_msg+0x234/0x3e0 [ 1326.641065][T26611] dtv5100_i2c_msg+0x231/0x2f0 [ 1326.645832][T26611] dtv5100_i2c_xfer+0x1a5/0x610 [ 1326.650684][T26611] __i2c_transfer+0x7be/0x1fe0 [ 1326.655450][T26611] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1326.661253][T26611] ? lockdep_hardirqs_on+0x7a/0x110 [ 1326.666447][T26611] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1326.672243][T26611] ? rt_mutex_lock_nested+0x156/0x1c0 [ 1326.677610][T26611] ? i2c_transfer+0xc8/0x2d0 [ 1326.682194][T26611] i2c_transfer+0x1cc/0x2d0 [ 1326.686692][T26611] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 1326.692319][T26611] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1326.698469][T26611] ? _copy_from_user+0x94/0xb0 [ 1326.703229][T26611] i2cdev_write+0x113/0x1e0 [ 1326.707732][T26611] vfs_writev+0x4bb/0x990 [ 1326.712083][T26611] ? __pfx_i2cdev_write+0x10/0x10 [ 1326.717110][T26611] ? __pfx_vfs_writev+0x10/0x10 [ 1326.721963][T26611] ? __fget_files+0x2a/0x420 [ 1326.726572][T26611] ? __fget_files+0x3a2/0x420 [ 1326.731238][T26611] ? __fget_files+0x2a/0x420 [ 1326.735841][T26611] do_writev+0x154/0x2e0 [ 1326.740084][T26611] ? __pfx_do_writev+0x10/0x10 [ 1326.744851][T26611] __do_fast_syscall_32+0x23e/0x6f0 [ 1326.750051][T26611] ? do_fast_syscall_32+0x33/0x70 [ 1326.755069][T26611] ? lockdep_hardirqs_on+0x7a/0x110 [ 1326.760271][T26611] ? asm_int80_emulation+0x1a/0x20 [ 1326.765393][T26611] ? do_int80_emulation+0x29f/0x550 [ 1326.770596][T26611] ? trace_irq_disable+0x3b/0x140 [ 1326.775625][T26611] do_fast_syscall_32+0x33/0x70 [ 1326.780474][T26611] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1326.786797][T26611] RIP: 0023:0xf6fef0ec [ 1326.790860][T26611] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1326.811151][T26611] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1326.820082][T26611] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800005c0 [ 1326.828047][T26611] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1326.836023][T26611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1326.843985][T26611] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1326.851950][T26611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1326.859929][T26611] [ 1326.863262][T26611] Kernel Offset: disabled [ 1326.867574][T26611] Rebooting in 86400 seconds..