last executing test programs: 4m54.750324478s ago: executing program 2 (id=1942): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) readv(r2, &(0x7f0000000200), 0x0) 4m54.606480552s ago: executing program 2 (id=1943): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b0013"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) execve(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_ACT={0x3c, 0x3, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x800fbb36}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000018000000bfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff0000000015040000000002000f040000000000003404ffc101ed0a0065040000170000801f400000000000007b0a00fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9"], 0x0}, 0x94) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000140)={"4497ccf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, "55000000030007000000dc7500", "1575a859", "07d7fcde", "2782914e", ["aabe8459c62224475793e8a7", "7f9ce2d2c4f4390300c1d1c8", "ce0301000c0091023be516d1", '\x00\x00k\x00\x00\x00\x00\x00\x00 \x00']}) 4m51.976723323s ago: executing program 2 (id=1949): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x7}) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000004c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x7, 0x3a, '.', 0x3a, 'fou\x00', 0x3a, './file0'}, 0x2c) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x14000849) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) brk(0x55555ede6001) close(r1) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.pending_reads\x00', 0x40, 0x81) syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffffb, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/8, 0x8}, {&(0x7f0000000240)=""/97, 0x61}], 0x2}) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x31) bind$inet6(0xffffffffffffffff, &(0x7f0000001240)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) 4m51.817709033s ago: executing program 2 (id=1950): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000009b80)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x0, {0x800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r2, 0x0, 0x460e, 0x3) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000a40)={&(0x7f00000004c0)={0x50, 0xfffffffffffffffe, 0x28, {0x7, 0x2b, 0x4, 0x4a420200, 0x7, 0x1ff, 0xb5, 0xa, 0x0, 0x0, 0x100, 0xd1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregset(0x4205, r8, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r9, 0x0, 0x0) ptrace$setregset(0x4205, r8, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="00120000000000000000000001000000", 0x10}) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r10, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="440f78bdb20000003e64460f78b49d0060000065400f841b000000650fc77674dd0166baf80cb85cb2f38cefb800000000efc442a3f5f0c44105d3a100400000b9800000c00f3235000100000f3066baf80cb84a88638aef66bafc0cb017ee", 0x5f}], 0x1, 0x30, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0xb000, 0xeeedffff}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_dellink={0x34, 0x13, 0x1, 0x70bd26, 0x0, {0x7, 0x0, 0x0, r5, 0x8400, 0x40000}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x5}}]}, @IFLA_TXQLEN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004060}, 0x0) 4m49.219855833s ago: executing program 2 (id=1958): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000001240)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) 4m49.024028273s ago: executing program 2 (id=1962): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xa0401, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2}, 0x2) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0) unshare(0x2c040000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) eventfd(0xffffffff) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x102, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000640)={0x0, 0x0}) r7 = getpid() syz_pidfd_open(r7, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000006c0)=0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000780)={0x22002800, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f00000003c0), {0x14}, &(0x7f0000000400)=""/182, 0xb6, &(0x7f00000004c0)=""/39, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, r5, r6, r7, r8, 0x0, 0xffffffffffffffff], 0xa, {r9}}, 0x58) fchown(r4, 0xee01, 0x0) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000180)=0x6, 0x4) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000100)) connect$unix(r2, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) dup3(r1, r0, 0x80000) r10 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x28400) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r10, 0xc0884123, &(0x7f0000000040)={0xb, "16b73f646cc071f1197bdaf7523ca96b89d640cdd2468a85dc9ab99676cbf1e03a6f37beccbc854bc79cccc16f85f36c9eeb7f80f3ec0e9f39679a7450713610", {0xc, 0x200}}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r10, 0xc2604110, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000001c0)={0x7, "d107be096672da308ac08498ddf16b53f1afee66898dc7a862a83c781c4ecf88", 0x3, 0x8, 0x54, 0x6, 0x4, 0x0, 0xa, 0x3}) 4m48.50454245s ago: executing program 32 (id=1962): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xa0401, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2}, 0x2) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0) unshare(0x2c040000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) eventfd(0xffffffff) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x102, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000640)={0x0, 0x0}) r7 = getpid() syz_pidfd_open(r7, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000006c0)=0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000780)={0x22002800, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f00000003c0), {0x14}, &(0x7f0000000400)=""/182, 0xb6, &(0x7f00000004c0)=""/39, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, r5, r6, r7, r8, 0x0, 0xffffffffffffffff], 0xa, {r9}}, 0x58) fchown(r4, 0xee01, 0x0) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000180)=0x6, 0x4) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000100)) connect$unix(r2, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) dup3(r1, r0, 0x80000) r10 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x28400) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r10, 0xc0884123, &(0x7f0000000040)={0xb, "16b73f646cc071f1197bdaf7523ca96b89d640cdd2468a85dc9ab99676cbf1e03a6f37beccbc854bc79cccc16f85f36c9eeb7f80f3ec0e9f39679a7450713610", {0xc, 0x200}}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r10, 0xc2604110, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000001c0)={0x7, "d107be096672da308ac08498ddf16b53f1afee66898dc7a862a83c781c4ecf88", 0x3, 0x8, 0x54, 0x6, 0x4, 0x0, 0xa, 0x3}) 1m14.694590689s ago: executing program 1 (id=2860): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1000000035) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) futex_waitv(&(0x7f0000001b00)=[{0x94a, 0x0, 0x8a}], 0x1, 0x0, 0x0, 0x1) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xfe1c, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9370}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) set_mempolicy(0x8006, &(0x7f00000000c0)=0x9, 0x3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1m13.359529417s ago: executing program 1 (id=2862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x17) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRES16, @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000480)={0x53, 0x4, 0x6, 0xb4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="ac0a9fd4662a", 0x0, 0x2, 0x10002, 0xfffffffd, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8c44279185abb", 0x53}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e21, @local}, 0x10) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x1) mmap$KVM_VCPU(&(0x7f0000014000/0x3000)=nil, 0x0, 0x2000002, 0x100010, r8, 0x0) fchdir(r8) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2200c8}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000008060108000000000000000003050001000700000005000100070000000900020073797a31000000000500afae2c0dd8ca90800100070000000500010007000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0xc000) shutdown(r2, 0x1) prctl$PR_SET_FPEMU(0xa, 0x3) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregs(0xd, r9, 0x1, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r9, 0x2, &(0x7f00000022c0)={0x0, 0xff90}) socket$packet(0x11, 0x3, 0x300) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x51d, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 1m13.194262532s ago: executing program 1 (id=2863): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r4, &(0x7f0000000240)="bad330752181090000316f3a277f953286ddd1030000004000000025e4a40e81692d09dc6b6b0ef17b4ae267ad399762f2b65a5d55f136ea57f0", 0x3a, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xda, 0x6, @remote}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x69, 0x8000) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x1) ioctl$KVM_HYPERV_EVENTFD(r11, 0x4048aec9, &(0x7f0000000080)={0x3}) 1m12.268203958s ago: executing program 1 (id=2869): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) epoll_create1(0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3, 0x3, 0xffffffff, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x5) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b4000021b7d7ace6654ec46bbe1a3fa35828e6913ee12666eadd8f0b8c314cd7418f9227c97bb0706d1e4651bd9e6fdbb05be50dcb188074c1615e52e9a44c469793145ea80df8195ae02cd4656f521896bec6f8641dfdbbb099e0c53a4b7276797eba58c66fce9b8155b76af8305f917dfae75a5e9eb4010a0d00"/134, @ANYRES16=0x0, @ANYBLOB="08002bbd7000fddbdf25020000000800040006000000100001800c000700100000000200000054000180070006007272000008000b007369700008000600776c630014000300ac1414020000000000000000000000000800080008000000060004004e20000014000300e000000100000000000000000000000008000400010000001c00028008000400030000000800040006000000080005000300000008000500060000000800040079000000"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbea250e0000002000018014000700ac1414bb00000000000000000000000008000800040000001c0002800800070007000000060002034e2000000800040000f8ffff"], 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r3, 0x11}, 0x14) 1m10.161148604s ago: executing program 1 (id=2873): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180006ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x2, 0x440, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_io_uring_setup(0x6eda, &(0x7f0000000140)={0x0, 0xaee5, 0x800, 0xffffffff, 0x330}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 1m4.151848399s ago: executing program 1 (id=2888): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000380)={0x82040000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=0x0, {0x41}, &(0x7f0000000240)=""/147, 0x93, &(0x7f0000000100)=""/80, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000400)=r2) r3 = syz_open_dev$media(&(0x7f0000000180), 0x4, 0x40000) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/rcu_expedited', 0x800, 0x145) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x1) socket$tipc(0x1e, 0x2, 0x0) unshare(0x20000400) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x6000, @fd=r3, 0x4d91, 0x0, 0x0, 0x10, 0x0, {0x1}}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) 49.042822198s ago: executing program 33 (id=2888): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000380)={0x82040000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=0x0, {0x41}, &(0x7f0000000240)=""/147, 0x93, &(0x7f0000000100)=""/80, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000400)=r2) r3 = syz_open_dev$media(&(0x7f0000000180), 0x4, 0x40000) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/rcu_expedited', 0x800, 0x145) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x1) socket$tipc(0x1e, 0x2, 0x0) unshare(0x20000400) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x6000, @fd=r3, 0x4d91, 0x0, 0x0, 0x10, 0x0, {0x1}}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) 12.172674504s ago: executing program 5 (id=3048): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x20000201, 0x40, 0x0, 0x2, 0x10001, 0x9}) syz_usb_connect(0x1, 0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="320100036ffa680863070120ff2c0102030109024000021109400c0904090601ff8b"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a300000000009"], 0xe4}, 0x1, 0x0, 0x0, 0x88001}, 0x20050840) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000020c0), 0x503080, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x229) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x16) 10.920649512s ago: executing program 6 (id=3056): syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ca007d050086", @void, {@canfd={0xd, {{0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "7914e066790d4432dbd892d8d38c4038491bce25454d4ae401a9a50fae0005b1b73dbe7b4699647b65a9065e57ef9d15406e41866ee4f1c21b858343951cc1bb"}}}}, 0x0) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = fsmount(r0, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000240)=0x5, 0x7) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 10.678809149s ago: executing program 6 (id=3057): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x38, r3, 0x1, 0x3, 0x20, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x51, @string={0x51, 0x3, "a6bb61ab80bd8f4da8d751c24f658b6dbf76252e9c5277b3e29f9f30cff82eddbc95e45e3cef3a51a16d81bb2eccd0a64aa7c17bfbb1e13d62ebc23ee66bd62c4bec5a436132f162eb9d06afe7bece"}}, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGSTRING(r4, 0x81044804, &(0x7f00000000c0)) 9.031151181s ago: executing program 5 (id=3062): timer_create(0x0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x1b) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38a7, 0x8, 0x0, 0x109}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$video4linux(0x0, 0xe00d, 0x48540) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f00000000c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x4, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x50) r7 = timerfd_create(0x0, 0x800) timerfd_settime(r7, 0x3, &(0x7f0000000300)={{}, {0x77359400}}, 0x0) 8.909443956s ago: executing program 6 (id=3063): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) unshare(0x6020400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, 0x0, 0x0}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x20, 0x9, 0x0, 0x0, 0x0, 0x5, 0x3, 0x68, 0x0, 0x1, 0x0, 0x1, 0x0, 0xff, 0x0, 0xfffffeef}}) 7.18535936s ago: executing program 4 (id=3068): syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x6, &(0x7f00000000c0)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x20001, 0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000100)='9', 0x20000101}]) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f00000001c0)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5a90a000f01c40f019c09000f01c2", 0x65}], 0x1, 0x7d, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0000}]}) getpriority(0x1, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r5, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x4, 0xbfdffff8}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1400}) io_uring_enter(r7, 0x75fa, 0xe475, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x30, "5c83276f6ca662254709b89e1e0000010000000000335b021f55001d00000000000000000000008c1972b27d555a50e65cb6f46365d51d"}}) 6.893534985s ago: executing program 6 (id=3069): r0 = userfaultfd(0x801) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x80800) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x8d, 0x0, 0xfffb, r2, 0x0}]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r6 = dup(r5) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe032000010007000800070000000000030000000200000002000000000400000d"], 0x58) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) unshare(0x28000600) syz_open_dev$video4linux(&(0x7f0000000240), 0x5, 0x400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.84686716s ago: executing program 5 (id=3070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x20}, 0xe) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x18, {[@timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4a) 6.2485496s ago: executing program 3 (id=3071): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mremap(&(0x7f00003d0000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ab5000/0x1000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8004, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') r4 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x0, 0x0, r3}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x1, 0x0, 0x0, 0x3, 0x942}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (fail_nth: 6) 6.174521578s ago: executing program 5 (id=3072): r0 = socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) io_submit(0x0, 0x1, &(0x7f0000000100)=[0x0]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f00000001c0)={0x7, {{0xa, 0x4e20, 0x5, @mcast2, 0x81}}, {{0xa, 0x4e20, 0xfffffffb, @empty, 0x8000}}}, 0x108) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000400)={0x9, 0x100, 0x1, {0xffffffff, 0xbe0, 0xb, 0x10004}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000480)='./bus\x00', 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r6, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000840)=""/10, 0xa}], 0x2, &(0x7f0000000580)=""/238, 0xee}, 0x5}], 0x3, 0x2040, 0x0) r7 = socket(0x10, 0x3, 0x4) sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x136d910f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1040}, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x3]}}) 6.148338652s ago: executing program 4 (id=3073): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = gettid() rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x15) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') r5 = open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000000c0)=0x7fff) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) madvise(&(0x7f000034d000/0x3000)=nil, 0x3000, 0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f00000001c0)) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="a90303000000000000003200000008004001"], 0x1c}}, 0x4004050) 5.0721137s ago: executing program 3 (id=3074): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b0013"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_ACT={0x3c, 0x3, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x800fbb36}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000018000000bfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff0000000015040000000002000f040000000000003404ffc101ed0a0065040000170000801f400000000000007b0a00fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc"], 0x0}, 0x94) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000140)={"4497ccf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, "55000000030007000000dc7500", "1575a859", "07d7fcde", "2782914e", ["aabe8459c62224475793e8a7", "7f9ce2d2c4f4390300c1d1c8", "ce0301000c0091023be516d1", '\x00\x00k\x00\x00\x00\x00\x00\x00 \x00']}) 4.683809599s ago: executing program 0 (id=3076): socket$key(0xf, 0x3, 0x2) mmap(&(0x7f00000a9000/0x3000)=nil, 0x3000, 0x300000b, 0x13, 0xffffffffffffffff, 0x53d27000) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000080)={'ah\x00'}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c800600f344562600000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) socket(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1ff, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) r5 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 4.600852918s ago: executing program 6 (id=3077): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x200000000000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x8002) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, 0x0) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) 4.082479499s ago: executing program 4 (id=3078): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x47ba, 0x100, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x1, {0x7, 0xa44}, 0x80}, 0x1) 2.878455675s ago: executing program 0 (id=3079): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000040)=0x4) 2.789505832s ago: executing program 0 (id=3080): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000100)={0x1, {&(0x7f00000007c0)=""/194, 0xc2, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000a00)={0x1, {&(0x7f00000008c0)=""/38, 0x26, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000340)=""/69, 0x45, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f0000000600)=""/13, 0xd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000640)={0x1, {&(0x7f0000000400)=""/223, 0xdf, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)) ppoll(&(0x7f0000000980)=[{r1, 0x2041}], 0x1, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r5, @ANYBLOB="6422d1d6d7e44851b1586996c21d9634769d5a3329fa67009d3b8db66202a738cb31c1f45ac281895ed0e444009020422c23a17c9606e0b1edff9c13d26a6df3fc4c375081471b5eee38cfab7b93a7db6b3aad77a6b7acc309ddd92601f9e08623dbde7286639843cd0492537c354bdcb53619626f1698a27c0ce035cf35b1eaf5c700a6cd7c05d3f69451f1e043986015b93394569f5369e0c7c0405e1d9826269f34ce21811457d8a4ce6aa6f9cca3a3b699c14f43f74ca7346d88a310048a77de5a8f3ec3030e0d1be996da8d254ed991c7fcf15bb874966df8f6caedde9105f96b878554bdfec79c5bbdd86fe8cedfbe94eb978bc46b1e4d15cdca8482bb2e"], 0x20}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 2.621128547s ago: executing program 5 (id=3081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1c42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@getchain={0x24, 0x66, 0xfff1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0xd}, {0x9, 0xfff1}, {0xffff, 0xa}}}, 0x24}}, 0x800) r4 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) write$apparmor_current(r6, 0x0, 0xf4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r7, &(0x7f00000002c0)={&(0x7f0000000080)=@vsock, 0x80, &(0x7f0000000100)=[{&(0x7f0000000000)=""/41, 0x29}, {&(0x7f0000000180)=""/124, 0x7c}], 0x2, &(0x7f0000000200)=""/154, 0x9a}, 0x240) r8 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc225, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x20, 0x6, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x5, 0x8b, 0x1, {0x22, 0x1fe}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xa1, 0x1, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x8, 0xa, 0x7f}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x6, 0x81, 0x7f, 0xff, 0x40}, 0x51, &(0x7f0000000380)={0x5, 0xf, 0x51, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x6, 0x4, 0xc4a3, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x8, 0xd, 0x8, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0xf2, 0x1, 0x100, 0x0, 0x81, [0x3f30]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x48, 0xff, 0x28, 0x0, 0x3d}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x0, 0x5, 0x100}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "b3bd4538fe051de3b69dcdbdc288df7c"}]}, 0x6, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x40f}}, {0x4a, &(0x7f0000000440)=@string={0x4a, 0x3, "3c0d16e18e73905ad7d84cfd89210f6d7dedd0f3eef4961fc4ae4a32bfbdc4562f8a2b357ee21e9fcfc405dd16b0ce31d510ff04f963a63ba81d171e10a077ce573a948bb56ec946"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40f}}, {0xda, &(0x7f0000000780)=ANY=[@ANYBLOB="da03cbbb704dbba04daa6eacd1722171c05d604ce667372cb716ac60efead639070e89b5dcf65549bc1f8f9640de888ac9919ec5c9ea161d058ef9a75a8d17cd8be414f002b2c0ddaa5c346698cb7b7ef0fd4686595e62ce33cec539ffb9ba46458df25f2d1ba97c5dbfac1e5afb346bf9d19b94504acebfb7565c5e2d213eb9a5b2fa0d619173d5a623a5120f6d04a87e65e016aa7516d9e43acb9dad1f63e1b1dfa9a1b5cbee987781954de555307e1b51442676f7a1d6f76948b242b7b37076f6af471b02dcc7f2a5e5d5739ae937b71af76b835630e499f6bf1008"]}]}) syz_usb_control_io$hid(r8, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002208000000a2", @ANYRES32=r7, @ANYRESDEC=r5, @ANYRESDEC=0x0], 0x0}, 0x0) 2.273589924s ago: executing program 0 (id=3082): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mremap(&(0x7f00003d0000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ab5000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000280)={0x79, 0x0, 0xe82}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x70, 0x0, 0xffffffffffffff7e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.094613688s ago: executing program 4 (id=3083): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x10000, 0x4) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x100000, 0x2, 0x11, r0, 0x100000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) fsopen(&(0x7f0000000040)='hfsplus\x00', 0x0) r1 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x10, r1, 0x0) ftruncate(r1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240601, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$inet6(0xa, 0x800, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000040)="eb28ebd621813e12634e90c7fcf2c99093d83b20", 0x14}, {&(0x7f0000000100)="ea63676c0a2fd682038eaed5b8362509a0979e2216272638e7224bfd57c475acfbeffb7b323827f15bba3c3f1ac1d3bac29384aa7567041617746c940eeeec1027f7208ad2cfef0242f266653febda6f91f74f6ad3bc4fe2247e87a530a5f47b9e2a7b54d85e8a5336862db76c83acd76cee66b8790508", 0x77}, {&(0x7f0000000180)="25a65874069baef73257594e2e168d940ac221e804536a73946965a58bc0d8f449a08de05e12ad2218dcf5c360dcca66cafae0935ea96a4a4844b0f01c6e46b75d0be6058be6c837efac5958625f8e2aae9c1718771e63259ec1e3540f404b0dd4442f43000c9ac36cd6c532cda7e500241de9bad38e720a4776ef7ef0633b1db719a665bcb0e3d9243bf8904ae937a755660d9e94daa6428afb5f25b963ac988bc11165357ab58ead23371b93f9bc00", 0xb0}, {&(0x7f0000000240)="858cdddda9d5b1ae37ed11eafcc3d5d72952ee6722640464db67acaee4d7bfc7a5bb84f3474d8dc85d77d00480f5bb25a5e82aff2439cbb529152c1d0b5632e5cbd1b87dcd0d9edc8129612106208377c34bc2b636b69557ad48b17bb202ab23b1f8d770e77c075018e7336a2a3aef2a3b6db42617b94ff768b3cd4d66d1aa4970c047cd50aa0fae276bd4d75804a63dc492a24d1d35ab12282c6c204128842310343bff2df0ad86aee7151cd003e98aadcdae6cd23feee7a1d2d65c", 0xbc}, {&(0x7f0000000300)="b899417877bb66af4035b0f4b6820b3be0afb055eee15646cb900e7ccd057a4961de2a02eb5ad37e5fdc1907a86d1a2d8beacb8d8364fe5b78d9066af24e774cbe55fa4bb9d7dba133a6588916228ed6b801fc13e79af758676452b6b22b0057a4f8408720f8ae2d1ca6e85ab358bc9fe07a5eb356adf14aaf89c29d4750f2dc61fd4e6908adf75b78cda879493fd60473851c5d453b454a7d0e553be12bfc5bc36026e747", 0xa5}], 0x5, 0x200004, 0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x4000000008000032) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000100feffffbf000100000000000000000000000000000000000020010000000000000000000000000001000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000050000000000000000001f00000000000000fd0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c617465"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x3, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x4e24, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @generic={0x4, 0x6, "0c311500"}]}}}}}}}}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) 1.767615638s ago: executing program 3 (id=3084): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x41}, 0x18) r1 = landlock_create_ruleset(&(0x7f0000000600)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = timerfd_create(0x1, 0x0) timerfd_gettime(r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r5, @ANYBLOB="801400000421000046d4827bcc163dd3aee900707daf449a68edc034216dac3c9ee8fde0dea29877c81c4564c0640073577935929f4273a4bb16f4f9eea0e6d32bc07094ae5da1eb52e54eb6b6501521be6680c982db70a37be27d1dddc9dbec0756f4fd185ae36fde5937eb7438bad4528ba59bc39b25ddd4a53cd02604d99a734dbb321b355f4e3d35723d7cbc4113e367b5d3a6bd5811a233fb53f145a09b8b251384f456ebbac7995221fb10e8c10dbea400f5ebbee3e199861b37313b0c44558bc23e84f5a5571b5b7f35cb39cc9a5ec3d43a8e0f80cc20745a6854962d3a3c"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, &(0x7f0000000100)="c4e17d28970090000048b8de0f0000000000000f23c00f21f835030001000f23f866baa000ec66baa100ec430fc75b0066b8e2008ed866baf80cb894eab284ef66bafc0c66ed640f01ca3e450f300f79db", 0x51}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000001, 0x5, &(0x7f00000003c0)) pause() renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000200)='.\x02\x00', 0x4) madvise(&(0x7f0000279000/0x2000)=nil, 0x2000, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r9, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @mcast1, 0x7daa}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000001200)=[{&(0x7f0000000380)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e80900000024678ec86fc2e69d7e422d199f3fc2b4ff0000f03ac710aa7d0000ffffffffffffffff", 0x58}], 0x1) eventfd2(0x43, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)={'filter\x00', 0x2, [{}, {}]}, 0x48) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000000)='.\x02\x00', 0x2) 1.731116781s ago: executing program 4 (id=3085): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x4000) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x100, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) syz_io_uring_setup(0xb, 0x0, 0x0, &(0x7f00000000c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000011080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x20004000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f00000001c0)=0x6, 0x4) 1.729109273s ago: executing program 0 (id=3086): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f00000002c0)=""/153, 0x99) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ada000/0x3000)=nil, 0x4, &(0x7f00000001c0)=[{0x800000000, 0x0, 0xffffffffffffffff}], 0x1, 0xbff, 0x0, 0x0, 0x2c, 0x7c}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x56}) 1.106740672s ago: executing program 6 (id=3087): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000641000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00001ae000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000780000/0x1000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='16', 0x2}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x4480, 0x8, 0xe1}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_connect$uac2(0x2, 0x8d, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1033, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0xea, 0x60, 0x0, {0x8, 0xb, 0x1, 0x0, 0x1, 0x8, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x49, 0x1, 0x9, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7, 0x3, 0x80, {0x8, 0x25, 0x1, 0x2, 0x50, 0x0, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xf8, 0x1, 0x7f, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1ff, 0x6, 0xb5}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x3f, 0x7, {0x8, 0x25, 0x1, 0x1, 0x0, 0x7, 0x800}}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x2, 0x8, 0x0, 0x40, 0x4}, 0x199, &(0x7f0000000380)={0x5, 0xf, 0x199, 0x6, [@generic={0xb5, 0x10, 0x0, "71671f63c0a20516d04107850525904af3121bbe666d4d00c77218e204656913e8a62b00542794aa416f958e5d3efd297bf8f0bffd998e5e7424ed22dc7e1e8162d0432b1cce9120e74328f2d3c8dff94968f24bf397b1b7a1cc2bae296c8d9c1587557d75c31fb2cf3d1f7994f4dd0b5019ce923f7325c87c87232da3f1174c1ca86cdebc70c39d22bc7ee2c63240ba80f1b8470a091f6651aefcb6957f04bda50cdb71466abd24e6bb2af59364164447a3"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x9, 0x0, 0x9, [0xc0ff, 0xc0, 0xff0000, 0x3f30, 0xf, 0xffc0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0xe, 0x7}, @generic={0xab, 0x10, 0xb, "ca6604c26c35848ceab18b0f0e0c758d0f1f671791969c257828d8f58cbf9f378b448fe4f4432afd63ca70b85fa9458c166ad7b817ab55934e63cfac514bde1bab8b5e4abf992e595c142e80dac2e039eb4d64c9da7a50f1827bdcc97a408b8ca4717b9478aff22efa4476e9e770e1d1365e7faa703607792dc1d532915e7b899db212f58f04a411023740cfbdfbea2d02f7237cd3d45ae02a2591578fc48c34ae4a72b78bd5b52d"}, @ptm_cap={0x3}]}, 0x9, [{0xc3, &(0x7f0000000600)=@string={0xc3, 0x3, "8b899bc2508c326190c754010664d582663a574b3df4ecc61facc7d1728c3afb89ec6bfc4ce431d18585fcce58232ab150037369f816fac5a5bfac6ce068a9027f2ff062d16cfa40695634d3b025f17669bdcedc99709981c56171b2060c131c1a2cbca604310021698bb30f5be7cdc7d28042ef6479222611edcf54db5f095c5271d300c9b19a84db1fc3a4fb93707735d7d4b4610f891374f70e05d5c2228ce5a1b0b0ee94b3ac4917c2817b80a234f91cefb2cedcc3217cf1d7a37074bcaf21"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x414}}, {0x5b, &(0x7f0000000700)=@string={0x5b, 0x3, "95cef412dd9e2cd3074aa44990675378a2a47c717bf1efd96c975df5cef2875fc816db2b64b019e85cb05e9fe9b00a5e02acad433e4fc3dbef83c0f83e788688076cb92d8cd99ca9dacd6f83c5c5a387910048018a8cf774de"}}, {0xcc, &(0x7f0000000780)=@string={0xcc, 0x3, "d8dde9f74081ea010a8a3eadf7cb678b7c09e5dc4597d8803c5e9e47ff57fe86bbb2c5a172b44dbda32d4b11278a5d4f5f99c5cb138330ee8fecacca3d504fec535adedcb4a8641197b5a24acc1a7e912d7f9b14ab3604dbb00dca3521003ece4f29faa6eb61c0d4f9ab6f35468029c396e54e3164af4823294d50598c78826e21066b574ca5721d24193f97fba3d29087f62f43188406436479e89aa4cacc303013f33b65aae7a3bde8f10aad5eaf3caf8ee8ab39cccbf54a816656ae74f6e1b231944d2fdabb3a8b1d"}}, {0xa2, &(0x7f0000000880)=@string={0xa2, 0x3, "a9b46898b36440f53f2b6ad9de2c3a6863f195eaa61d28d7b7feb50ae9c836e225e9675a3ecb39d8fc10a422088f44b556241f112fb25bf719909c86e1b5a7868eecc30aebef63fdbdd5656a68d28823f650093e9327b84e6355f18b581252150a06043d4f3c3404daf004be12662991c225e1ff00225fc024da550c59920ec3db274ee4ca47b1f44943693b27479a73a2bbdecf9f87142e1bd675b389e18ee0"}}, {0xb0, &(0x7f0000000940)=@string={0xb0, 0x3, "964e322cce3a14c56919304eb40c4e0bff4149b8bcab12b1ca3f7f8e823d219713f2a9a41e4583cb4b0affb95d4ec8b08508e87f668b8bd569f9a52c3a8c65650f6573983d41c411cd515943ad26c3bf80ed2edb7e5df65e64b349b8043e1735fde0c950ee38674a8c2c07f74ce861b5a2170fd1024de6cab5cfabdd20a1b605a9cda296aca698f8e1a53b2b807e364e51a8d704cf18eec7511fac09cfc6c48da02d4ce6f3fd34e3d684990dedb4"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40f}}, {0x45, &(0x7f0000000a00)=@string={0x45, 0x3, "bb392d5552b6ebd76507123e45754b5050cb9b920e70f67cc80ea083cbd22d952bef3549b6e14801adecb899b9d4731063ff9cb91046244c31b2ffd3811632f2ae26f0"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x1401}}]}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000010c0)={0x7, {"a2e3ad21ed0d52f91b5d520987f70e06d038e7ff7fc6e5539b0d47078b089b3307386d090890e0878f0e1ac6e7049b334a959b669a240d5d67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07670936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70fe98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf1a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e470dea05918b41243513f000800000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3e3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14d9fdb8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbba8f1b1fdcc7cbb61a7cdb9744ed7f9129afde2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a19000000000000006f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69b15c9f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d44400009a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc01008cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f144b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c16c02ed4b5d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaab1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106d26658b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6b14effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c110000a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b51028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6815d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3f3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51090840517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4e004a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6ce1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c817e9177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d543902113c4c859465c3c115c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc248850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cc009fc074bb6b68a1f0c4649820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948998cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2fd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5dc4ff8f0104000000000000df72279fdb0d2b9e936e5a983c12fded79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d3700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa6e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9f07b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e3ebb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0960600daf60af93109eb1dee72e4363f51af62af6fb2a6df3fec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c2990f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4cddd5d0fc5a752f9000", 0x1000}}, 0x1006) 665.83145ms ago: executing program 3 (id=3088): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="83", 0x1}], 0x1, 0x0, 0x4000}, 0x4c0e0) 525.813247ms ago: executing program 0 (id=3089): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) unshare(0x2c020400) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc040) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='veno', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 525.158606ms ago: executing program 5 (id=3090): r0 = syz_io_uring_setup(0xec7, &(0x7f0000000d00)={0x0, 0x45de, 0x800, 0xffffe, 0x126}, &(0x7f0000000bc0)=0x0, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$kcm(0x29, 0x5, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x1, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f907864"], 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) r7 = socket$kcm(0x10, 0x2, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) keyctl$describe(0x6, 0x0, &(0x7f0000000340)=""/100, 0x64) ioprio_get$pid(0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r6, &(0x7f0000001a40), 0x0, 0x40044) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r3, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x8}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x1, 0x132a, 0x3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, 0xffffffffffffffff, 0x8001}}, 0x48) 311.218641ms ago: executing program 3 (id=3091): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x40000, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000340)='P', 0x1}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e21, 0x1000, @rand_addr=' \x01\x00', 0x1ff}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000400)="88", 0x1}], 0x1}}], 0x2, 0x24004001) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7fffffff}, &(0x7f0000000240)=0x8) 41.694909ms ago: executing program 4 (id=3092): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x1a) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) r3 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) writev(r3, &(0x7f0000000a00)=[{&(0x7f0000000200)="45d49d259ac7c2bb8948bc86fb98df39938ec1d2bcaaee103e1fcdd517fa2f524efeed5efa5beb", 0x27}], 0x1) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x26}, {}, {}, [@map_idx={0x18, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x56, &(0x7f00000002c0)=""/86, 0x41100, 0x34, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x7, 0x546b, 0x5}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000380)=[0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f00000003c0)=[{0x3, 0x5, 0x4, 0x7}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup, 0x26, 0x0, 0x6, &(0x7f0000000400)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0}, 0x40) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x408000, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x17, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcbd2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x54035634f587d379, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff7}]}, &(0x7f0000000780)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0xe, 0x5, 0x5}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000840)=[0xffffffffffffffff, 0x1, r1, 0xffffffffffffffff, 0x1, r0, 0x1, 0xffffffffffffffff], &(0x7f0000000880)=[{0x3, 0x5, 0x4, 0x6}, {0x0, 0x2, 0x7, 0xa}, {0x2, 0x3, 0x7, 0x3}], 0x10, 0x80000000}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@cgroup=r6, r3, 0x11, 0x9, r4, @void, @value=r7, @void, @void, r5}, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x1, r0, 0x4}) 0s ago: executing program 3 (id=3093): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x47ba, 0x100, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x1, {0x7, 0xa44}, 0x80}, 0x1) kernel console output (not intermixed with test programs): mpat=0 ip=0x7fb78899c799 code=0x7ffc0000 [ 809.408617][ T29] audit: type=1326 audit(1773800701.784:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15876 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78899c799 code=0x7ffc0000 [ 809.436079][ T29] audit: type=1326 audit(1773800701.784:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15876 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78899c799 code=0x7ffc0000 [ 809.459304][ T5888] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 809.471034][T14223] usb 6-1: unable to get BOS descriptor or descriptor too short [ 809.478837][ T5888] usb 5-1: device descriptor read/8, error -71 [ 809.537294][T14223] usb 6-1: not running at top speed; connect to a high speed hub [ 809.563695][T14223] usb 6-1: config 255 has an invalid interface number: 180 but max is 0 [ 809.586982][T14223] usb 6-1: config 255 has no interface number 0 [ 809.600515][T14223] usb 6-1: config 255 interface 180 has no altsetting 0 [ 809.616693][T14223] usb 6-1: New USB device found, idVendor=0742, idProduct=2008, bcdDevice=76.8d [ 809.632252][T14223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.644739][T14223] usb 6-1: Product: syz [ 809.651669][T14223] usb 6-1: Manufacturer: syz [ 809.660298][T14223] usb 6-1: SerialNumber: syz [ 809.734779][ T5888] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 809.870420][ T5888] usb 5-1: device descriptor read/8, error -71 [ 809.883928][T15875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.928175][T15875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.978379][ T5888] usb usb5-port1: unable to enumerate USB device [ 810.098103][T14215] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 810.258106][T14215] usb 4-1: Using ep0 maxpacket: 32 [ 810.268693][T14215] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.289171][T14215] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 810.607499][T14215] usb 4-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 810.619148][T14215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.633309][T14215] usb 4-1: Product: syz [ 810.678603][T14215] usb 4-1: Manufacturer: syz [ 810.706064][T14215] usb 4-1: SerialNumber: syz [ 810.782620][T14215] usb 4-1: config 0 descriptor?? [ 810.853245][T14223] HFC-S_USB 6-1:255.180: probe with driver HFC-S_USB failed with error -5 [ 810.893957][T14223] usb 6-1: USB disconnect, device number 37 [ 810.995711][T15891] loop6: detected capacity change from 0 to 2640 [ 811.017382][T15891] buffer_io_error: 11 callbacks suppressed [ 811.017395][T15891] Buffer I/O error on dev loop6, logical block 0, async page read [ 811.041334][T15891] Buffer I/O error on dev loop6, logical block 0, async page read [ 811.055127][T15891] Buffer I/O error on dev loop6, logical block 0, async page read [ 811.063773][T15891] Buffer I/O error on dev loop6, logical block 0, async page read [ 811.077845][T15891] Buffer I/O error on dev loop6, logical block 0, async page read [ 811.091761][T15891] Buffer I/O error on dev loop6, logical block 0, async page read [ 811.151174][T15891] Buffer I/O error on dev loop6, logical block 0, async page read [ 811.198646][T15891] Buffer I/O error on dev loop6, logical block 0, async page read [ 811.212516][T15891] ldm_validate_partition_table(): Disk read failed. [ 811.231960][T15891] Buffer I/O error on dev loop6, logical block 0, async page read [ 811.240195][T15891] Buffer I/O error on dev loop6, logical block 0, async page read [ 811.250663][T15891] Dev loop6: unable to read RDB block 0 [ 811.256472][T15891] loop6: unable to read partition table [ 811.262848][T15891] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 812.148137][T14223] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 812.343586][T14223] usb 6-1: Using ep0 maxpacket: 8 [ 812.521374][T14223] usb 6-1: unable to get BOS descriptor or descriptor too short [ 812.576217][T14223] usb 6-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 812.598637][T14223] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 812.658825][T14223] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 812.671324][T14223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.679613][T14223] usb 6-1: Product: syz [ 812.684038][T14223] usb 6-1: Manufacturer: syz [ 812.689925][T14223] usb 6-1: SerialNumber: syz [ 812.732168][T15915] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 813.111846][T14226] usb 4-1: USB disconnect, device number 121 [ 813.574677][T15927] netlink: 'syz.3.2775': attribute type 2 has an invalid length. [ 813.596925][T15927] !: entered promiscuous mode [ 813.613740][T15927] netlink: 'syz.3.2775': attribute type 2 has an invalid length. [ 813.622423][T15927] !: left promiscuous mode [ 814.754567][T14223] usb 6-1: USB disconnect, device number 38 [ 814.807950][T15942] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2780'. [ 814.820045][T15942] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2780'. [ 815.632249][T15953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2782'. [ 815.888152][T14215] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 816.060044][T14215] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 816.068301][T14215] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.082276][T14215] usb 4-1: config 0 has no interface number 0 [ 816.088488][T14215] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 816.100995][T14215] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 816.110942][T14215] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 816.125288][T14215] usb 4-1: config 0 interface 52 has no altsetting 0 [ 816.134542][T14215] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 816.145756][T14215] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 816.154052][T14215] usb 4-1: Manufacturer: syz [ 816.163526][T14215] usb 4-1: config 0 descriptor?? [ 816.208339][T14223] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 816.365131][T14223] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 816.375586][T14223] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 816.406244][T15949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.415841][T14223] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 816.441121][T14223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.444954][T15949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.473282][T14223] usb 6-1: Product: syz [ 816.489379][T14223] usb 6-1: Manufacturer: syz [ 816.499129][T14223] usb 6-1: SerialNumber: syz [ 816.510033][T14215] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 816.525129][T14215] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -5 [ 816.720889][T13305] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 816.739810][T14226] usb 4-1: USB disconnect, device number 122 [ 816.778286][T14215] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 816.828641][ T5888] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 816.933674][T14223] usb 6-1: cannot find UAC_HEADER [ 816.950991][T14215] usb 5-1: unable to get BOS descriptor or descriptor too short [ 816.966892][T14215] usb 5-1: config 1 has an invalid descriptor of length 227, skipping remainder of the config [ 816.978397][T14215] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 816.990710][T14223] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 816.998057][T14215] usb 5-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 817.002531][T14223] usb 6-1: USB disconnect, device number 39 [ 817.008997][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 817.020025][T14215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.043861][T14215] usb 5-1: Product: syz [ 817.051948][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 817.072279][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.082711][T14215] usb 5-1: Manufacturer: syz [ 817.087338][T14215] usb 5-1: SerialNumber: syz [ 817.107922][ T5888] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 817.130883][ T5888] usb 2-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 817.140217][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.148298][ T5888] usb 2-1: Product: syz [ 817.152738][ T5888] usb 2-1: Manufacturer: syz [ 817.157362][ T5888] usb 2-1: SerialNumber: syz [ 817.165032][ T5888] usb 2-1: config 0 descriptor?? [ 817.808171][T14226] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 817.958160][T14226] usb 4-1: Using ep0 maxpacket: 8 [ 817.967246][T14226] usb 4-1: unable to get BOS descriptor or descriptor too short [ 817.977338][T14226] usb 4-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 817.987922][T14226] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 818.004658][T14226] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 818.015405][T14226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.023680][T14226] usb 4-1: Product: syz [ 818.028295][T14226] usb 4-1: Manufacturer: syz [ 818.033044][T14226] usb 4-1: SerialNumber: syz [ 819.327856][T14223] usb 2-1: USB disconnect, device number 78 [ 819.553347][T14215] usb 5-1: 0:2 : does not exist [ 819.741139][T14215] usb 5-1: USB disconnect, device number 126 [ 819.788487][T14223] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 819.862645][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 819.968706][T14223] usb 2-1: Using ep0 maxpacket: 8 [ 819.986814][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 819.999295][T14223] usb 2-1: unable to get BOS descriptor or descriptor too short [ 819.999545][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 820.019176][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 820.049370][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 820.057330][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 820.060018][T14223] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 820.076425][ T5844] syz_tun (unregistering): left allmulticast mode [ 820.083597][T14223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.120383][T14223] usb 2-1: Product: syz [ 820.124888][T14223] usb 2-1: Manufacturer: syz [ 820.130169][T14223] usb 2-1: SerialNumber: syz [ 820.309101][T15999] chnl_net:caif_netlink_parms(): no params data found [ 820.351206][T14223] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 820.373413][T14223] usb 2-1: USB disconnect, device number 79 [ 820.458517][T15999] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.466210][T15999] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.474196][T15999] bridge_slave_0: entered allmulticast mode [ 820.482465][T15999] bridge_slave_0: entered promiscuous mode [ 820.491373][T15999] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.508617][T15999] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.531225][T15999] bridge_slave_1: entered allmulticast mode [ 820.543247][T14226] usb 4-1: USB disconnect, device number 123 [ 820.585006][T15999] bridge_slave_1: entered promiscuous mode [ 820.656195][T15999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.673385][T15999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.732834][T15999] team0: Port device team_slave_0 added [ 820.756986][T15999] team0: Port device team_slave_1 added [ 820.851292][T15999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.860713][T15999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.894512][T15999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.911463][T15999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.920260][T15999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.949890][T15999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.015138][T16021] FAULT_INJECTION: forcing a failure. [ 821.015138][T16021] name failslab, interval 1, probability 0, space 0, times 0 [ 821.044118][T16021] CPU: 1 UID: 0 PID: 16021 Comm: syz.0.2801 Tainted: G L syzkaller #0 PREEMPT(full) [ 821.044159][T16021] Tainted: [L]=SOFTLOCKUP [ 821.044168][T16021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 821.044180][T16021] Call Trace: [ 821.044189][T16021] [ 821.044198][T16021] dump_stack_lvl+0xe8/0x150 [ 821.044232][T16021] should_fail_ex+0x412/0x560 [ 821.044266][T16021] should_failslab+0xa8/0x100 [ 821.044291][T16021] ? skb_clone+0x212/0x3a0 [ 821.044315][T16021] kmem_cache_alloc_noprof+0x87/0x650 [ 821.044335][T16021] ? __netlink_lookup+0xc6/0x8b0 [ 821.044362][T16021] skb_clone+0x212/0x3a0 [ 821.044388][T16021] __netlink_deliver_tap+0x404/0x850 [ 821.044437][T16021] ? netlink_deliver_tap+0x2e/0x1b0 [ 821.044467][T16021] netlink_deliver_tap+0x19c/0x1b0 [ 821.044497][T16021] netlink_unicast+0x7e3/0x9b0 [ 821.044532][T16021] ? __pfx_netlink_unicast+0x10/0x10 [ 821.044560][T16021] ? netlink_sendmsg+0x650/0xb40 [ 821.044585][T16021] ? skb_put+0x11b/0x210 [ 821.044610][T16021] netlink_sendmsg+0x813/0xb40 [ 821.044646][T16021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.044679][T16021] ? aa_sock_msg_perm+0xf1/0x1b0 [ 821.044710][T16021] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 821.044736][T16021] ____sys_sendmsg+0x972/0x9f0 [ 821.044769][T16021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 821.044802][T16021] ? import_iovec+0x73/0xa0 [ 821.044828][T16021] ___sys_sendmsg+0x2a5/0x360 [ 821.044856][T16021] ? __pfx____sys_sendmsg+0x10/0x10 [ 821.044916][T16021] ? __fget_files+0x2a/0x420 [ 821.044943][T16021] ? __fget_files+0x3a0/0x420 [ 821.044982][T16021] __x64_sys_sendmsg+0x1bd/0x2a0 [ 821.045007][T16021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 821.045041][T16021] ? __pfx_ksys_write+0x10/0x10 [ 821.045076][T16021] do_syscall_64+0x14d/0xf80 [ 821.045097][T16021] ? trace_irq_disable+0x3b/0x150 [ 821.045124][T16021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.045145][T16021] ? clear_bhb_loop+0x40/0x90 [ 821.045178][T16021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.045199][T16021] RIP: 0033:0x7fb78899c799 [ 821.045219][T16021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.045236][T16021] RSP: 002b:00007fb78980b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.045259][T16021] RAX: ffffffffffffffda RBX: 00007fb788c15fa0 RCX: 00007fb78899c799 [ 821.045273][T16021] RDX: 0000000010004000 RSI: 0000200000001900 RDI: 0000000000000003 [ 821.045286][T16021] RBP: 00007fb78980b090 R08: 0000000000000000 R09: 0000000000000000 [ 821.045299][T16021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.045311][T16021] R13: 00007fb788c16038 R14: 00007fb788c15fa0 R15: 00007fb788d3fa48 [ 821.045343][T16021] [ 821.320815][T15999] hsr_slave_0: entered promiscuous mode [ 821.327116][T15999] hsr_slave_1: entered promiscuous mode [ 822.218923][ T5828] Bluetooth: hci5: command tx timeout [ 823.354274][T15999] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 823.369889][T15999] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 823.393491][T16040] snd_dummy snd_dummy.0: control 3:5:3:syz1:9 is already present [ 823.406190][T15999] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 823.419413][T14215] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 823.432641][T15999] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 823.578150][T14215] usb 4-1: Using ep0 maxpacket: 8 [ 823.585684][T14215] usb 4-1: unable to get BOS descriptor or descriptor too short [ 823.594929][T14215] usb 4-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 823.599859][T15999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.613582][T14215] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 823.635124][T15999] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.636167][T14215] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 823.661375][T14215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.662613][T13303] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.676680][T13303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.678056][T14215] usb 4-1: Product: syz [ 823.699120][T14215] usb 4-1: Manufacturer: syz [ 823.700498][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.708066][T14215] usb 4-1: SerialNumber: syz [ 823.710966][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.832884][T15999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.988391][T15999] veth0_vlan: entered promiscuous mode [ 824.012555][T15999] veth1_vlan: entered promiscuous mode [ 824.077516][T15999] veth0_macvtap: entered promiscuous mode [ 824.107877][T15999] veth1_macvtap: entered promiscuous mode [ 824.144277][T15999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.165184][T15999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 824.186489][T13300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.197090][T13300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.229301][T13300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.238260][ T5828] Bluetooth: hci5: command tx timeout [ 824.249413][T14222] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 824.280502][T13306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.371248][T13300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.380452][T13300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.421124][T14222] usb 6-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xB8, changing to 0x88 [ 824.445493][T14222] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 65, changing to 4 [ 824.465028][T13305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.465514][T14222] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 12740, setting to 0 [ 824.482527][T13305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.497602][T14222] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 824.525777][T14222] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.744525][T14222] usb 6-1: string descriptor 0 read error: -71 [ 824.758356][T14222] hub 6-1:32.0: bad descriptor, ignoring hub [ 824.770632][T14222] hub 6-1:32.0: probe with driver hub failed with error -5 [ 825.151176][T14222] usb 6-1: USB disconnect, device number 40 [ 825.905875][T16073] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2812'. [ 825.983893][T14215] usb 4-1: USB disconnect, device number 124 [ 826.319041][ T5828] Bluetooth: hci5: command tx timeout [ 826.503721][T16096] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 827.097137][T16109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2821'. [ 827.281195][T16117] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2825'. [ 827.347177][T16109] macvlan2: entered promiscuous mode [ 827.352819][T16109] macvlan2: entered allmulticast mode [ 827.362813][T16109] bond2: entered promiscuous mode [ 827.371678][T16109] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 827.383333][T16109] bond2: left promiscuous mode [ 827.508294][T14218] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 827.658076][T14218] usb 6-1: Using ep0 maxpacket: 8 [ 827.670033][T14218] usb 6-1: unable to get BOS descriptor or descriptor too short [ 827.742514][T14218] usb 6-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 827.772298][T14218] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 827.841078][T14218] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 827.850354][T14218] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.864202][T14218] usb 6-1: Product: syz [ 827.877316][T14218] usb 6-1: Manufacturer: syz [ 827.887025][T14218] usb 6-1: SerialNumber: syz [ 828.408305][ T5828] Bluetooth: hci5: command tx timeout [ 828.838169][T14226] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 828.988263][T14226] usb 4-1: Using ep0 maxpacket: 16 [ 828.995514][T14226] usb 4-1: config 0 has no interfaces? [ 829.004753][T14226] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 829.014526][T14226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.022632][T14226] usb 4-1: Product: syz [ 829.026849][T14226] usb 4-1: Manufacturer: syz [ 829.031545][T14226] usb 4-1: SerialNumber: syz [ 829.040309][T14226] usb 4-1: config 0 descriptor?? [ 829.263766][T16126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.274630][T16126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.554797][T16131] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 829.882265][T16139] 8021q: VLANs not supported on wg1 [ 829.942726][T16126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2828'. [ 829.965489][T16126] macvtap1: entered promiscuous mode [ 829.984500][T16126] bridge0: entered promiscuous mode [ 830.000348][T16126] macvtap1: entered allmulticast mode [ 830.015435][T16126] bridge0: entered allmulticast mode [ 830.039697][T14226] IPVS: starting estimator thread 0... [ 830.170919][T16144] IPVS: using max 50 ests per chain, 120000 per kthread [ 830.194338][T14218] usb 6-1: USB disconnect, device number 41 [ 830.195363][ T5829] usb 4-1: USB disconnect, device number 125 [ 830.229763][T16150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.841881][T16160] FAULT_INJECTION: forcing a failure. [ 830.841881][T16160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.930550][T16160] CPU: 1 UID: 0 PID: 16160 Comm: syz.1.2832 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.930574][T16160] Tainted: [L]=SOFTLOCKUP [ 830.930578][T16160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 830.930586][T16160] Call Trace: [ 830.930592][T16160] [ 830.930597][T16160] dump_stack_lvl+0xe8/0x150 [ 830.930619][T16160] should_fail_ex+0x412/0x560 [ 830.930639][T16160] _copy_to_user+0x31/0xb0 [ 830.930653][T16160] simple_read_from_buffer+0xe1/0x170 [ 830.930673][T16160] proc_fail_nth_read+0x1bb/0x230 [ 830.930690][T16160] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 830.930705][T16160] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 830.930721][T16160] ? vfs_read+0x1f1/0xa70 [ 830.930734][T16160] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 830.930750][T16160] vfs_read+0x20c/0xa70 [ 830.930761][T16160] ? fdget_pos+0x246/0x320 [ 830.930780][T16160] ? __pfx___mutex_lock+0x10/0x10 [ 830.930794][T16160] ? __pfx_vfs_read+0x10/0x10 [ 830.930807][T16160] ? __fget_files+0x2a/0x420 [ 830.930825][T16160] ? __fget_files+0x3a0/0x420 [ 830.930840][T16160] ? __fget_files+0x2a/0x420 [ 830.930861][T16160] ksys_read+0x150/0x270 [ 830.930875][T16160] ? __pfx_ksys_read+0x10/0x10 [ 830.930894][T16160] do_syscall_64+0x14d/0xf80 [ 830.930905][T16160] ? trace_irq_disable+0x3b/0x150 [ 830.930924][T16160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.930935][T16160] ? clear_bhb_loop+0x40/0x90 [ 830.930949][T16160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.930961][T16160] RIP: 0033:0x7f8964f5cfce [ 830.930972][T16160] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 830.930982][T16160] RSP: 002b:00007f8965ef2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 830.930996][T16160] RAX: ffffffffffffffda RBX: 00007f8965ef36c0 RCX: 00007f8964f5cfce [ 830.931004][T16160] RDX: 000000000000000f RSI: 00007f8965ef30a0 RDI: 0000000000000004 [ 830.931011][T16160] RBP: 00007f8965ef3090 R08: 0000000000000000 R09: 0000000000000000 [ 830.931018][T16160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.931025][T16160] R13: 00007f8965216038 R14: 00007f8965215fa0 R15: 00007f896533fa48 [ 830.931043][T16160] [ 831.340074][T16162] input: syz0 as /devices/virtual/input/input102 [ 831.785237][T16177] fuse: Unknown parameter 'appraise_type' [ 831.802703][T16177] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 832.034095][T16178] program syz.1.2839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 832.226653][T16185] syzkaller0: entered promiscuous mode [ 832.232578][T16185] syzkaller0: entered allmulticast mode [ 832.560775][T16192] netlink: 'syz.0.2843': attribute type 3 has an invalid length. [ 832.763873][T16199] syzkaller1: entered promiscuous mode [ 832.776690][T16199] syzkaller1: entered allmulticast mode [ 832.795465][T16199] FAULT_INJECTION: forcing a failure. [ 832.795465][T16199] name failslab, interval 1, probability 0, space 0, times 0 [ 832.812059][T16203] fuse: Unknown parameter 'ö' [ 832.834542][ T5829] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 832.847520][T16199] CPU: 0 UID: 0 PID: 16199 Comm: syz.0.2848 Tainted: G L syzkaller #0 PREEMPT(full) [ 832.847555][T16199] Tainted: [L]=SOFTLOCKUP [ 832.847562][T16199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 832.847574][T16199] Call Trace: [ 832.847582][T16199] [ 832.847591][T16199] dump_stack_lvl+0xe8/0x150 [ 832.847626][T16199] should_fail_ex+0x412/0x560 [ 832.847660][T16199] should_failslab+0xa8/0x100 [ 832.847688][T16199] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 832.847710][T16199] ? __alloc_skb+0x186/0x7d0 [ 832.847728][T16199] ? __alloc_skb+0x1d0/0x7d0 [ 832.847745][T16199] ? __local_bh_enable_ip+0xd0/0x130 [ 832.847775][T16199] __alloc_skb+0x1d0/0x7d0 [ 832.847799][T16199] alloc_skb_with_frags+0xca/0x890 [ 832.847835][T16199] sock_alloc_send_pskb+0x878/0x990 [ 832.847876][T16199] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 832.847911][T16199] ? iov_iter_advance+0x8b/0x1c0 [ 832.847944][T16199] tun_get_user+0x92d/0x3dd0 [ 832.847978][T16199] ? aa_file_perm+0x192/0x15e0 [ 832.848016][T16199] ? aa_file_perm+0x50e/0x15e0 [ 832.848042][T16199] ? __pfx_tun_get_user+0x10/0x10 [ 832.848058][T16199] ? aa_file_perm+0x192/0x15e0 [ 832.848096][T16199] ? __lock_acquire+0x6b5/0x2cf0 [ 832.848129][T16199] ? ref_tracker_alloc+0x35c/0x4c0 [ 832.848155][T16199] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 832.848186][T16199] ? tun_get+0x1c/0x2f0 [ 832.848208][T16199] ? tun_get+0x1c/0x2f0 [ 832.848224][T16199] ? tun_get+0x1c/0x2f0 [ 832.848245][T16199] tun_chr_write_iter+0x113/0x200 [ 832.848265][T16199] vfs_write+0x61d/0xb90 [ 832.848293][T16199] ? __pfx_vfs_write+0x10/0x10 [ 832.848324][T16199] ? __fget_files+0x2a/0x420 [ 832.848358][T16199] ksys_write+0x150/0x270 [ 832.848379][T16199] ? __pfx_ksys_write+0x10/0x10 [ 832.848409][T16199] do_syscall_64+0x14d/0xf80 [ 832.848428][T16199] ? trace_irq_disable+0x3b/0x150 [ 832.848453][T16199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.848471][T16199] ? clear_bhb_loop+0x40/0x90 [ 832.848493][T16199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.848512][T16199] RIP: 0033:0x7fb78899c799 [ 832.848529][T16199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.848544][T16199] RSP: 002b:00007fb78980b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 832.848566][T16199] RAX: ffffffffffffffda RBX: 00007fb788c15fa0 RCX: 00007fb78899c799 [ 832.848581][T16199] RDX: 0000000000000036 RSI: 00002000000000c0 RDI: 0000000000000003 [ 832.848592][T16199] RBP: 00007fb78980b090 R08: 0000000000000000 R09: 0000000000000000 [ 832.848604][T16199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.848616][T16199] R13: 00007fb788c16038 R14: 00007fb788c15fa0 R15: 00007fb788d3fa48 [ 832.848644][T16199] [ 833.129893][T16201] vlan2: entered allmulticast mode [ 833.135408][T16201] vlan0: entered allmulticast mode [ 833.140966][T16201] veth0_vlan: entered allmulticast mode [ 833.298126][ T5829] usb 5-1: Using ep0 maxpacket: 8 [ 833.310894][ T5829] usb 5-1: unable to get BOS descriptor or descriptor too short [ 833.328716][ T5829] usb 5-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 833.343341][T16210] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2852'. [ 833.362304][ T5829] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 833.411495][ T5829] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 833.445810][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.465348][ T5829] usb 5-1: Product: syz [ 833.484112][ T5829] usb 5-1: Manufacturer: syz [ 833.499346][ T5829] usb 5-1: SerialNumber: syz [ 833.528827][T16206] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 834.174787][T14218] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 834.378197][T14226] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 834.488809][T14218] usb 6-1: Using ep0 maxpacket: 32 [ 834.501270][T14218] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.516677][T14218] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 834.544999][T14218] usb 6-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 834.556558][T14218] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.567841][T14218] usb 6-1: Product: syz [ 834.572761][T14218] usb 6-1: Manufacturer: syz [ 834.594906][T14226] usb 4-1: Using ep0 maxpacket: 32 [ 834.607727][T14218] usb 6-1: SerialNumber: syz [ 834.622798][T14226] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.633019][T14226] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 834.665006][T14218] usb 6-1: config 0 descriptor?? [ 834.686165][T16236] program syz.0.2859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 834.795534][T14226] usb 4-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 834.820952][T14226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.829189][T14226] usb 4-1: Product: syz [ 834.833415][T14226] usb 4-1: Manufacturer: syz [ 834.838355][T14226] usb 4-1: SerialNumber: syz [ 834.984584][T14226] usb 4-1: config 0 descriptor?? [ 835.555665][ T5829] usb 5-1: USB disconnect, device number 127 [ 835.938489][ T5829] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 836.098132][ T5829] usb 5-1: Using ep0 maxpacket: 8 [ 836.105078][ T5829] usb 5-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config [ 836.115954][ T5829] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 836.125600][ T5829] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 836.139327][ T5829] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 836.148833][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.166172][ T5829] hub 5-1:1.0: bad descriptor, ignoring hub [ 836.180553][ T5829] hub 5-1:1.0: probe with driver hub failed with error -5 [ 836.192070][ T5829] cdc_wdm 5-1:1.0: skipping garbage [ 836.197434][ T5829] cdc_wdm 5-1:1.0: skipping garbage [ 836.203494][ T5829] cdc_wdm 5-1:1.0: skipping garbage [ 836.209117][ T5829] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 836.490653][ T5829] usb 5-1: USB disconnect, device number 2 [ 836.617446][T16251] syzkaller0: entered promiscuous mode [ 836.624123][T16251] syzkaller0: entered allmulticast mode [ 836.677710][T14218] usb 6-1: USB disconnect, device number 42 [ 836.774719][T16254] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2864'. [ 836.792228][T16254] vlan2: entered promiscuous mode [ 836.798163][T16254] bond0: entered promiscuous mode [ 836.803497][T16254] bond_slave_0: entered promiscuous mode [ 836.811008][T16254] bond_slave_1: entered promiscuous mode [ 836.828431][ T5829] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 836.978328][ T5829] usb 5-1: Using ep0 maxpacket: 8 [ 836.990510][ T5829] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.001924][ T5829] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 837.005586][ T5888] usb 4-1: USB disconnect, device number 126 [ 837.011963][ T5829] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 837.030260][ T5829] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 837.040685][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.091524][ T5829] hub 5-1:1.0: bad descriptor, ignoring hub [ 837.102887][ T5829] hub 5-1:1.0: probe with driver hub failed with error -5 [ 837.123053][ T5829] cdc_wdm 5-1:1.0: skipping garbage [ 837.130700][ T5829] cdc_wdm 5-1:1.0: skipping garbage [ 837.139028][ T5829] cdc_wdm 5-1:1.0: invalid descriptor buffer length [ 837.147166][ T5829] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 837.409172][ T5888] usb 5-1: USB disconnect, device number 3 [ 837.478186][ T5829] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 837.518212][T14223] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 837.637682][ T5829] usb 6-1: Using ep0 maxpacket: 8 [ 837.665216][ T5829] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 837.688486][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.705073][T14223] usb 4-1: unable to get BOS descriptor or descriptor too short [ 837.714966][ T5829] usb 6-1: Product: syz [ 837.723611][ T5829] usb 6-1: Manufacturer: syz [ 837.730525][T14223] usb 4-1: config 1 has an invalid descriptor of length 227, skipping remainder of the config [ 837.741023][ T5829] usb 6-1: SerialNumber: syz [ 837.746779][T14223] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 837.777137][ T5829] usb 6-1: config 0 descriptor?? [ 837.801977][ T5829] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 837.859509][T14223] usb 4-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 837.880313][T14223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.940572][T14223] usb 4-1: Product: syz [ 837.972452][T14223] usb 4-1: Manufacturer: syz [ 837.985262][T14223] usb 4-1: SerialNumber: syz [ 837.992311][T16274] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2870'. [ 839.326695][T16286] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 840.315237][T14223] usb 4-1: 0:2 : does not exist [ 840.427447][T14223] usb 4-1: USB disconnect, device number 127 [ 840.470706][T16284] [U] J"—E:ÀÆ" [ 840.474234][T16302] netlink: 444 bytes leftover after parsing attributes in process `syz.3.2875'. [ 840.502735][T14222] usb 6-1: USB disconnect, device number 43 [ 840.608481][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2876'. [ 840.621695][T11627] udevd[11627]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 840.625629][T16306] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2877'. [ 840.958300][T14223] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 840.985431][T16313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2878'. [ 841.153124][T14223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.165859][T14223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.296315][T14223] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 841.380757][T14223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.412844][T14223] usb 4-1: config 0 descriptor?? [ 841.906891][T14223] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0 [ 841.975868][T14223] hid-steam 0003:28DE:1142.001D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 842.054465][T16322] binder: 16321:16322 ioctl c0306201 0 returned -14 [ 842.061621][T14223] hid-steam 0003:28DE:1142.001D: Steam wireless receiver connected [ 842.070107][T14223] hid-steam 0003:28DE:1142.001D: No HID_FEATURE_REPORT submitted - nothing to read [ 842.089676][T14223] hid-steam 0003:28DE:1142.001E: unknown main item tag 0x0 [ 842.127362][T14223] hid-steam 0003:28DE:1142.001E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 842.161297][ T29] audit: type=1326 audit(1773800734.684:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.5.2881" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6cc1f9c799 code=0x0 [ 842.319568][T14223] usb 4-1: USB disconnect, device number 2 [ 842.371904][T14223] hid-steam 0003:28DE:1142.001D: Steam wireless receiver disconnected [ 842.372683][T16327] fido_id[16327]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 842.934895][T16331] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2882'. [ 842.982516][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2882'. [ 842.991721][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2882'. [ 843.001930][T16331] netlink: 'syz.4.2882': attribute type 14 has an invalid length. [ 843.016308][T16331] netlink: 'syz.4.2882': attribute type 11 has an invalid length. [ 843.043137][T16332] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 843.732872][T16340] bridge0: port 3(hsr0) entered blocking state [ 843.775747][T16340] bridge0: port 3(hsr0) entered disabled state [ 843.867002][T16340] hsr0: entered allmulticast mode [ 843.968363][T16340] hsr_slave_0: entered allmulticast mode [ 843.975018][T16340] hsr_slave_1: entered allmulticast mode [ 844.004736][T16340] hsr0: entered promiscuous mode [ 844.098165][T14223] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 845.009429][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 845.031625][T14223] usb 5-1: unable to get BOS descriptor or descriptor too short [ 845.033946][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 845.059911][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 845.061147][T14223] usb 5-1: config 1 has an invalid descriptor of length 227, skipping remainder of the config [ 845.079013][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 845.086569][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 845.146413][T14223] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 845.190117][T14223] usb 5-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 845.209194][T14223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.217369][T14223] usb 5-1: Product: syz [ 845.270338][T14223] usb 5-1: Manufacturer: syz [ 845.275001][T14223] usb 5-1: SerialNumber: syz [ 845.827546][T16351] chnl_net:caif_netlink_parms(): no params data found [ 846.061502][T13303] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.209310][T14218] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 846.374641][T13303] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.395302][T14218] usb 6-1: Using ep0 maxpacket: 8 [ 846.408835][T14218] usb 6-1: unable to get BOS descriptor or descriptor too short [ 846.443061][T14218] usb 6-1: config 4 interface 0 has no altsetting 0 [ 846.463772][T14218] usb 6-1: string descriptor 0 read error: -22 [ 846.473379][T14218] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 846.531750][T14218] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 846.619818][T14218] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 846.672507][T13303] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.685602][T14218] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 846.718386][T14215] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 846.753235][T14218] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 846.785411][T14218] usb 6-1: media controller created [ 846.924891][T14215] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 846.925271][T13303] bond0: (slave netdevsim0): Releasing backup interface [ 846.940639][T14218] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 846.983827][T14215] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 847.031959][T14215] usb 4-1: config 0 interface 0 has no altsetting 0 [ 847.082205][T14215] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 847.120485][T14223] usb 5-1: 0:2 : does not exist [ 847.165477][T14215] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 847.179025][T13303] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 847.203574][T13303] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.204917][ T5828] Bluetooth: hci4: command tx timeout [ 847.234613][T14215] usb 4-1: Product: syz [ 847.250835][T14215] usb 4-1: Manufacturer: syz [ 847.265831][T14215] usb 4-1: SerialNumber: syz [ 847.276145][T14223] usb 5-1: USB disconnect, device number 4 [ 847.286632][T14215] usb 4-1: config 0 descriptor?? [ 847.307437][T14215] usb 4-1: selecting invalid altsetting 0 [ 847.425051][T16351] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.451042][T16351] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.506378][T16351] bridge_slave_0: entered allmulticast mode [ 847.542049][T16351] bridge_slave_0: entered promiscuous mode [ 847.554972][T16351] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.565309][T16351] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.576614][T16351] bridge_slave_1: entered allmulticast mode [ 847.585133][T16351] bridge_slave_1: entered promiscuous mode [ 847.617601][T14215] usb 4-1: USB disconnect, device number 3 [ 847.724433][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 847.801696][T16351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.989893][T16351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.091932][T14218] zl10353_read_register: readreg error (reg=127, ret==0) [ 848.095914][T16351] team0: Port device team_slave_0 added [ 848.154726][T16351] team0: Port device team_slave_1 added [ 848.293145][T13303] bridge_slave_1: left allmulticast mode [ 848.300254][T13303] bridge_slave_1: left promiscuous mode [ 848.330842][T13303] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.362648][T16380] netlink: 'syz.3.2892': attribute type 10 has an invalid length. [ 848.381914][T13303] bridge_slave_0: left allmulticast mode [ 848.394217][T13303] bridge_slave_0: left promiscuous mode [ 848.421462][T13303] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.718912][ T3493] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 848.885574][T13303] bond1 (unregistering): (slave geneve2): Releasing active interface [ 849.007794][T14223] usb 6-1: USB disconnect, device number 44 [ 849.018166][T13303] bond0 (unregistering): left allmulticast mode [ 849.026075][T13303] bond_slave_0: left allmulticast mode [ 849.041231][T13303] bond_slave_1: left allmulticast mode [ 849.118849][T13303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.155743][T13303] bond_slave_0: left promiscuous mode [ 849.207366][T13303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.242203][T13303] bond_slave_1: left promiscuous mode [ 849.251630][T13303] bond0 (unregistering): Released all slaves [ 849.265516][T13303] bond1 (unregistering): Released all slaves [ 849.280683][ T5828] Bluetooth: hci4: command tx timeout [ 849.487495][T13303] bond2 (unregistering): (slave veth3): Releasing active interface [ 849.596561][T13303] bond2 (unregistering): Released all slaves [ 849.750601][T16351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.758576][T16351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.823581][T16351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.847233][T16351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.854530][T16351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.889203][T16351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.902238][T16380] veth0_vlan: left promiscuous mode [ 849.910127][T16380] veth0_vlan: entered promiscuous mode [ 849.940801][T16380] team0: Device veth0_vlan failed to register rx_handler [ 850.332092][T16395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2893'. [ 850.348269][T16395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2893'. [ 850.364608][T16395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 850.431283][T13303] tipc: Disabling bearer [ 850.448585][T13303] tipc: Left network mode [ 850.647773][T16351] hsr_slave_0: entered promiscuous mode [ 850.665049][T16413] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2895'. [ 850.718609][T16351] hsr_slave_1: entered promiscuous mode [ 850.724762][T16351] debugfs: 'hsr0' already exists in 'hsr' [ 850.766416][T16351] Cannot create hsr debugfs directory [ 850.996621][T16420] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2896'. [ 851.375769][ T5828] Bluetooth: hci4: command tx timeout [ 851.489162][T16427] FAULT_INJECTION: forcing a failure. [ 851.489162][T16427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 851.523708][T16427] CPU: 0 UID: 0 PID: 16427 Comm: syz.4.2897 Tainted: G L syzkaller #0 PREEMPT(full) [ 851.523742][T16427] Tainted: [L]=SOFTLOCKUP [ 851.523750][T16427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 851.523761][T16427] Call Trace: [ 851.523770][T16427] [ 851.523778][T16427] dump_stack_lvl+0xe8/0x150 [ 851.523813][T16427] should_fail_ex+0x412/0x560 [ 851.523845][T16427] _copy_from_user+0x2d/0xb0 [ 851.523867][T16427] __sys_connect+0x156/0x450 [ 851.523889][T16427] ? __pfx___sys_connect+0x10/0x10 [ 851.523920][T16427] ? __pfx_ksys_write+0x10/0x10 [ 851.523978][T16427] __x64_sys_connect+0x7a/0x90 [ 851.524000][T16427] do_syscall_64+0x14d/0xf80 [ 851.524021][T16427] ? trace_irq_disable+0x3b/0x150 [ 851.524047][T16427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.524067][T16427] ? clear_bhb_loop+0x40/0x90 [ 851.524090][T16427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.524109][T16427] RIP: 0033:0x7f149479c799 [ 851.524128][T16427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.524144][T16427] RSP: 002b:00007f1495570028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 851.524166][T16427] RAX: ffffffffffffffda RBX: 00007f1494a16090 RCX: 00007f149479c799 [ 851.524180][T16427] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004 [ 851.524193][T16427] RBP: 00007f1495570090 R08: 0000000000000000 R09: 0000000000000000 [ 851.524205][T16427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.524217][T16427] R13: 00007f1494a16128 R14: 00007f1494a16090 R15: 00007f1494b3fa48 [ 851.524247][T16427] [ 853.519391][ T5828] Bluetooth: hci4: command tx timeout [ 854.563868][T16490] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 855.082741][T13303] hsr_slave_0: left promiscuous mode [ 855.089404][T13303] hsr_slave_1: left promiscuous mode [ 855.117143][T13303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.137571][T13303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.200992][T13303] batadv0: left allmulticast mode [ 855.215786][T13303] batadv0: left promiscuous mode [ 855.571380][T16504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 855.595332][T13303] team0: left allmulticast mode [ 855.604085][T13303] team_slave_0: left allmulticast mode [ 855.615930][T13303] team_slave_1: left allmulticast mode [ 855.718170][T13303] batadv1: left allmulticast mode [ 856.018434][T13303] team0: left promiscuous mode [ 856.028779][T13303] team_slave_0: left promiscuous mode [ 856.034545][T13303] team_slave_1: left promiscuous mode [ 856.161410][T13303] veth1_macvtap: left promiscuous mode [ 856.167318][T13303] veth0_macvtap: left promiscuous mode [ 856.725030][T16515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 856.767501][T13303] team0 (unregistering): Port device batadv1 removed [ 857.053977][T16520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2905'. [ 857.181890][T13303] team0 (unregistering): Port device team_slave_1 removed [ 857.225328][T13303] team0 (unregistering): Port device team_slave_0 removed [ 857.494681][T16500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.538704][T16500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.638904][T16508] kthread_run failed with err -4 [ 857.955249][T16527] netlink: 'syz.4.2907': attribute type 24 has an invalid length. [ 858.019367][T16351] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 858.031723][T16530] loop5: detected capacity change from 0 to 7 [ 858.056099][T16530] Dev loop5: unable to read RDB block 7 [ 858.079540][T16351] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 858.118205][T16530] loop5: AHDI p1 p2 [ 858.122200][T16530] loop5: partition table partially beyond EOD, truncated [ 858.183006][T16351] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 858.192838][T16530] loop5: p1 size 150995456 extends beyond EOD, truncated [ 858.225958][T16351] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 858.413372][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 858.681085][T13303] IPVS: stop unused estimator thread 0... [ 858.777772][T16351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.847701][T16351] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.881445][T13303] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.888687][T13303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.932812][T13300] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.940052][T13300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.091299][T16351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.184156][T16351] veth0_vlan: entered promiscuous mode [ 859.415273][T16351] veth1_vlan: entered promiscuous mode [ 859.525535][T16351] veth0_macvtap: entered promiscuous mode [ 859.538825][T16351] veth1_macvtap: entered promiscuous mode [ 859.631017][T16351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.639559][T16574] program syz.5.2914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 859.684141][T16351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.735381][T13303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.756005][T13303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.783557][T13303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.835895][T13303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.055531][T13314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.066628][T13314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.163451][T13303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.172458][T13303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.956126][T16602] FAULT_INJECTION: forcing a failure. [ 860.956126][T16602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 861.021068][T16602] CPU: 0 UID: 0 PID: 16602 Comm: syz.3.2919 Tainted: G L syzkaller #0 PREEMPT(full) [ 861.021103][T16602] Tainted: [L]=SOFTLOCKUP [ 861.021111][T16602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 861.021122][T16602] Call Trace: [ 861.021131][T16602] [ 861.021140][T16602] dump_stack_lvl+0xe8/0x150 [ 861.021173][T16602] should_fail_ex+0x412/0x560 [ 861.021207][T16602] _copy_from_user+0x2d/0xb0 [ 861.021230][T16602] ____sys_sendmsg+0x308/0x9f0 [ 861.021263][T16602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 861.021288][T16602] ? __asan_memset+0x22/0x50 [ 861.021319][T16602] __sys_sendmsg_sock+0x28/0x40 [ 861.021341][T16602] io_sendmsg+0x1fa/0x580 [ 861.021375][T16602] __io_issue_sqe+0x180/0x4b0 [ 861.021393][T16602] ? io_file_get_normal+0xe9/0x310 [ 861.021409][T16602] io_issue_sqe+0x164/0xf90 [ 861.021432][T16602] io_submit_sqes+0xcb1/0x2400 [ 861.021473][T16602] __se_sys_io_uring_enter+0x2cc/0x18c0 [ 861.021491][T16602] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 861.021512][T16602] ? __fget_files+0x3a0/0x420 [ 861.021536][T16602] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 861.021552][T16602] ? fput+0xa0/0xd0 [ 861.021572][T16602] ? ksys_write+0x242/0x270 [ 861.021590][T16602] ? __pfx_ksys_write+0x10/0x10 [ 861.021610][T16602] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 861.021628][T16602] do_syscall_64+0x14d/0xf80 [ 861.021644][T16602] ? trace_irq_disable+0x3b/0x150 [ 861.021664][T16602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.021679][T16602] ? clear_bhb_loop+0x40/0x90 [ 861.021698][T16602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.021713][T16602] RIP: 0033:0x7feceaf9c799 [ 861.021727][T16602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.021741][T16602] RSP: 002b:00007fece91cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 861.021758][T16602] RAX: ffffffffffffffda RBX: 00007feceb216090 RCX: 00007feceaf9c799 [ 861.021769][T16602] RDX: 000000000080ffff RSI: 00000000000047f6 RDI: 000000000000000a [ 861.021779][T16602] RBP: 00007fece91cd090 R08: 0000000000000000 R09: 0000000000000000 [ 861.021789][T16602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.021798][T16602] R13: 00007feceb216128 R14: 00007feceb216090 R15: 00007feceb33fa48 [ 861.021822][T16602] [ 861.729476][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 861.740871][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 861.750853][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 861.767220][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 861.775188][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 862.188233][ T5829] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 862.368213][ T5829] usb 6-1: Using ep0 maxpacket: 16 [ 862.441784][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.491252][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.552510][ T5829] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 862.600424][ T5829] usb 6-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 862.614793][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19 [ 862.683762][ T5829] usb 6-1: SerialNumber: syz [ 862.700652][T16608] chnl_net:caif_netlink_parms(): no params data found [ 862.761565][ T5829] usb 6-1: config 0 descriptor?? [ 863.100539][T16623] [U] ¹ÉMÙ­ÕÁQ&’Ù Kœ4 [ 863.105465][T16623] [U] [“)ÎU°}¸Ç”ÍÚJϬ}N°SEF*œ £‡¿ßÅNZÍÀF[F_H®¦'ª„W"ÓXÅ~¶ÎÏÚ;VA˜)^ˆ`Û1C':ZÂÞ÷ÃÃÚÞFOBÞ *?ÛŸC‹Z˜S¯Ý<8ZNÑ·š Ñ˜¾ÔEY TT<$CÐR¿Æ–»/VG¿Ðà {Y«~Y5\—;ƃZ–ÓDX ŸƒYÖA€Ì"XI®F¦{‚Å`A$í¡55?­É×S«AÃM¢ÅO‰¤«ÝÍ»*K€¶ [ 863.167381][T16623] [U] ÔO‡4 [ 863.172368][T16623] [U] œšU·©BÕ+ '~GIÞƒRQ^Á¿™,(-|¢ØÚŸ†Ë-<ƒ6&µÅH.Z9ÉÎ/ÚRJΩ°™³ËˆÅ+)Ö­KΦ.›NHÕA#LW#RF7–PÙªÛÍMAX€Ï]Œ¤›LN"KŒM +,G¶SB´HJ‚¹ËXÏ̧ÉCÎÝQ„ [ 863.241402][T16608] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.277651][T16608] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.321943][T16608] bridge_slave_0: entered allmulticast mode [ 863.348518][ T5829] usbhid 6-1:0.0: can't add hid device: -71 [ 863.354576][ T5829] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 863.379357][T16608] bridge_slave_0: entered promiscuous mode [ 863.388440][T14218] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 863.401495][T16608] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.418143][T16608] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.431987][ T5829] usb 6-1: USB disconnect, device number 45 [ 863.446189][T16608] bridge_slave_1: entered allmulticast mode [ 863.487693][T16608] bridge_slave_1: entered promiscuous mode [ 863.539333][T14218] usb 4-1: Using ep0 maxpacket: 16 [ 863.547275][T14218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.562346][T14218] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 863.590328][T16608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.602327][T14218] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 863.613945][T14218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.624382][T16608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.636852][T14218] usb 4-1: config 0 descriptor?? [ 863.690342][T16608] team0: Port device team_slave_0 added [ 863.698906][T16608] team0: Port device team_slave_1 added [ 863.726536][T16608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.733569][T16608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.760458][T16608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.772954][T16608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.781389][T16608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.807735][T16608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.843835][ T5839] Bluetooth: hci0: command tx timeout [ 863.855123][T16635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.856753][T14218] microsoft 0003:045E:07DA.001F: unknown main item tag 0x1 [ 863.874377][T16635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.878101][T14218] microsoft 0003:045E:07DA.001F: item fetching failed at offset 33/34 [ 863.904873][T16608] hsr_slave_0: entered promiscuous mode [ 863.911498][T14218] microsoft 0003:045E:07DA.001F: parse failed [ 863.917699][T14218] microsoft 0003:045E:07DA.001F: probe with driver microsoft failed with error -22 [ 863.930058][T16608] hsr_slave_1: entered promiscuous mode [ 863.932526][T14218] usb 4-1: USB disconnect, device number 4 [ 863.955026][T16608] debugfs: 'hsr0' already exists in 'hsr' [ 863.968129][ T5829] usb 6-1: new low-speed USB device number 46 using dummy_hcd [ 863.976853][T16608] Cannot create hsr debugfs directory [ 864.011822][T16638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2929'. [ 864.107785][T16639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2929'. [ 864.140037][ T5829] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 864.152180][ T5829] usb 6-1: config 0 has no interface number 0 [ 864.168379][ T5829] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 864.184896][T16641] binder: binder_mmap: 16640 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 864.188247][ T5829] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 864.221444][ T5829] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 864.237632][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.262063][ T5829] usb 6-1: config 0 descriptor?? [ 864.268548][T16634] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 864.284194][ T5829] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 864.366028][T16608] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 864.380446][T16608] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 864.404842][T16608] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 864.424269][T16608] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 864.489642][T16650] FAULT_INJECTION: forcing a failure. [ 864.489642][T16650] name failslab, interval 1, probability 0, space 0, times 0 [ 864.498536][T16649] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2932'. [ 864.515142][T16650] CPU: 0 UID: 0 PID: 16650 Comm: syz.0.2931 Tainted: G L syzkaller #0 PREEMPT(full) [ 864.515175][T16650] Tainted: [L]=SOFTLOCKUP [ 864.515183][T16650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 864.515193][T16650] Call Trace: [ 864.515202][T16650] [ 864.515211][T16650] dump_stack_lvl+0xe8/0x150 [ 864.515244][T16650] should_fail_ex+0x412/0x560 [ 864.515277][T16650] should_failslab+0xa8/0x100 [ 864.515305][T16650] __kmalloc_cache_noprof+0x88/0x660 [ 864.515329][T16650] ? gf128mul_init_64k_bbe+0xb7/0xee0 [ 864.515349][T16650] ? __kmalloc_cache_noprof+0x15b/0x660 [ 864.515374][T16650] gf128mul_init_64k_bbe+0xb7/0xee0 [ 864.515397][T16650] ? lrw_setkey+0x173/0x2d0 [ 864.515423][T16650] lrw_setkey+0x182/0x2d0 [ 864.515446][T16650] ? __pfx_lrw_setkey+0x10/0x10 [ 864.515477][T16650] crypto_skcipher_setkey+0x2c6/0x460 [ 864.515507][T16650] ? __pfx_skcipher_setkey+0x10/0x10 [ 864.515528][T16650] alg_setkey+0x138/0x190 [ 864.515559][T16650] alg_setsockopt+0x3da/0x4a0 [ 864.515586][T16650] ? __pfx_alg_setsockopt+0x10/0x10 [ 864.515616][T16650] do_sock_setsockopt+0x17c/0x1b0 [ 864.515641][T16650] __x64_sys_setsockopt+0x13d/0x1b0 [ 864.515668][T16650] do_syscall_64+0x14d/0xf80 [ 864.515689][T16650] ? trace_irq_disable+0x3b/0x150 [ 864.515714][T16650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.515734][T16650] ? clear_bhb_loop+0x40/0x90 [ 864.515759][T16650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.515777][T16650] RIP: 0033:0x7f32f079c799 [ 864.515797][T16650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.515813][T16650] RSP: 002b:00007f32f165c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 864.515835][T16650] RAX: ffffffffffffffda RBX: 00007f32f0a15fa0 RCX: 00007f32f079c799 [ 864.515849][T16650] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 864.515872][T16650] RBP: 00007f32f165c090 R08: 000000000000001d R09: 0000000000000000 [ 864.515887][T16650] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 864.515900][T16650] R13: 00007f32f0a16038 R14: 00007f32f0a15fa0 R15: 00007f32f0b3fa48 [ 864.515933][T16650] [ 864.774601][T16654] FAULT_INJECTION: forcing a failure. [ 864.774601][T16654] name failslab, interval 1, probability 0, space 0, times 0 [ 864.787305][T16654] CPU: 0 UID: 0 PID: 16654 Comm: syz.4.2933 Tainted: G L syzkaller #0 PREEMPT(full) [ 864.787334][T16654] Tainted: [L]=SOFTLOCKUP [ 864.787339][T16654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 864.787347][T16654] Call Trace: [ 864.787353][T16654] [ 864.787358][T16654] dump_stack_lvl+0xe8/0x150 [ 864.787379][T16654] should_fail_ex+0x412/0x560 [ 864.787398][T16654] should_failslab+0xa8/0x100 [ 864.787414][T16654] __kmalloc_cache_noprof+0x88/0x660 [ 864.787427][T16654] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 864.787445][T16654] ? nft_trans_table_add+0x56/0x430 [ 864.787462][T16654] nft_trans_table_add+0x56/0x430 [ 864.787479][T16654] nf_tables_newtable+0xce3/0x1910 [ 864.787503][T16654] nfnetlink_rcv+0x1240/0x27b0 [ 864.787536][T16654] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 864.787559][T16654] ? ref_tracker_free+0x693/0x840 [ 864.787590][T16654] ? __netlink_deliver_tap+0x807/0x850 [ 864.787607][T16654] ? netlink_deliver_tap+0x2e/0x1b0 [ 864.787632][T16654] netlink_unicast+0x80f/0x9b0 [ 864.787652][T16654] ? __pfx_netlink_unicast+0x10/0x10 [ 864.787667][T16654] ? netlink_sendmsg+0x650/0xb40 [ 864.787682][T16654] ? skb_put+0x11b/0x210 [ 864.787697][T16654] netlink_sendmsg+0x813/0xb40 [ 864.787717][T16654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.787736][T16654] ? aa_sock_msg_perm+0xf1/0x1b0 [ 864.787753][T16654] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 864.787769][T16654] ____sys_sendmsg+0x972/0x9f0 [ 864.787786][T16654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 864.787804][T16654] ? import_iovec+0x73/0xa0 [ 864.787818][T16654] ___sys_sendmsg+0x2a5/0x360 [ 864.787834][T16654] ? __pfx____sys_sendmsg+0x10/0x10 [ 864.787866][T16654] ? __fget_files+0x2a/0x420 [ 864.787881][T16654] ? __fget_files+0x3a0/0x420 [ 864.787903][T16654] __x64_sys_sendmsg+0x1bd/0x2a0 [ 864.787917][T16654] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 864.787939][T16654] ? __pfx_ksys_write+0x10/0x10 [ 864.787958][T16654] do_syscall_64+0x14d/0xf80 [ 864.787970][T16654] ? trace_irq_disable+0x3b/0x150 [ 864.787998][T16654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.788017][T16654] ? clear_bhb_loop+0x40/0x90 [ 864.788041][T16654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.788060][T16654] RIP: 0033:0x7f149479c799 [ 864.788079][T16654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.788094][T16654] RSP: 002b:00007f1495591028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.788116][T16654] RAX: ffffffffffffffda RBX: 00007f1494a15fa0 RCX: 00007f149479c799 [ 864.788130][T16654] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 864.788142][T16654] RBP: 00007f1495591090 R08: 0000000000000000 R09: 0000000000000000 [ 864.788153][T16654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 864.788165][T16654] R13: 00007f1494a16038 R14: 00007f1494a15fa0 R15: 00007f1494b3fa48 [ 864.788205][T16654] [ 865.130716][T16608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.139570][T14214] usb 6-1: USB disconnect, device number 46 [ 865.170392][T16608] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.184276][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.191505][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.269904][T13303] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.277105][T13303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.279127][T16659] program syz.4.2935 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 865.319110][T16657] syzkaller0: entered promiscuous mode [ 865.327686][T16657] syzkaller0: entered allmulticast mode [ 865.459947][T16608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.654655][T16608] veth0_vlan: entered promiscuous mode [ 865.706204][T16608] veth1_vlan: entered promiscuous mode [ 865.751307][T16672] netlink: 'syz.0.2939': attribute type 10 has an invalid length. [ 865.778781][T16672] veth0_vlan: left promiscuous mode [ 865.786226][T16672] veth0_vlan: entered promiscuous mode [ 865.803539][T16672] team0: Device veth0_vlan failed to register rx_handler [ 865.921038][ T5839] Bluetooth: hci0: command tx timeout [ 866.050165][T16675] syz_tun: entered allmulticast mode [ 866.072649][T16608] veth0_macvtap: entered promiscuous mode [ 866.122363][T16669] syz_tun: left allmulticast mode [ 866.203169][T16608] veth1_macvtap: entered promiscuous mode [ 866.232508][T16608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 866.255855][T16608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 866.268808][T16677] x_tables: duplicate underflow at hook 2 [ 866.280291][T13314] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.310547][T13314] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.348646][T13314] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.374017][T16679] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 866.391727][T13314] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.441950][T16681] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2942'. [ 866.602006][T16686] netlink: 'syz.0.2944': attribute type 1 has an invalid length. [ 866.607500][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.626225][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.705532][T16690] program syz.3.2945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 866.795916][T16688] netlink: 8560 bytes leftover after parsing attributes in process `syz.4.2943'. [ 866.847880][T16695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2947'. [ 866.863320][T16695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2947'. [ 866.873156][T16695] netlink: 'syz.3.2947': attribute type 18 has an invalid length. [ 866.875925][T13314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.881575][T16695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2947'. [ 866.927350][T13314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.535462][T16706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2949'. [ 867.635901][T16708] program syz.5.2951 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 867.704960][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2953'. [ 868.012651][ T5839] Bluetooth: hci0: command tx timeout [ 868.451560][T16717] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.459392][T16717] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.792728][T16717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.813031][T16717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.995951][ T228] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.020374][ T5888] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 870.079130][ T5839] Bluetooth: hci0: command tx timeout [ 870.104497][ T228] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.125650][ T228] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.141984][T13311] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.208326][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 870.233946][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 870.275682][ T5888] usb 5-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 870.311670][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.346764][ T5888] usb 5-1: config 0 descriptor?? [ 870.367055][ T5888] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 870.425980][T16755] syzkaller1: entered promiscuous mode [ 870.432929][T16755] syzkaller1: entered allmulticast mode [ 870.494726][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.501157][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.610635][T16740] bond_slave_0: entered promiscuous mode [ 870.616555][T16740] bond_slave_1: entered promiscuous mode [ 870.633768][T16740] vlan2: entered promiscuous mode [ 870.701659][T16765] __nla_validate_parse: 1 callbacks suppressed [ 870.701681][T16765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2965'. [ 870.741128][T16740] bond0: entered promiscuous mode [ 870.741191][ T5888] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 870.936832][ T5888] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 870.972564][ T5829] usb 5-1: USB disconnect, device number 5 [ 870.980919][ T5888] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 871.062547][ T5888] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 871.106384][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.412586][ T5888] usb 6-1: config 0 descriptor?? [ 872.553810][T16786] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2963'. [ 873.263833][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 873.279580][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 873.287794][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 873.295828][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 873.303680][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 873.445874][T16780] delete_channel: no stack [ 873.809559][T16797] tipc: Enabling of bearer rejected, failed to enable media [ 874.687279][T16790] chnl_net:caif_netlink_parms(): no params data found [ 875.049972][T14226] usb 6-1: USB disconnect, device number 47 [ 875.360988][ T5828] Bluetooth: hci6: command tx timeout [ 875.562665][T16790] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.570017][T16790] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.577391][T16790] bridge_slave_0: entered allmulticast mode [ 875.585260][T16790] bridge_slave_0: entered promiscuous mode [ 875.594350][T16790] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.609279][T16790] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.616734][T16790] bridge_slave_1: entered allmulticast mode [ 875.624341][T16790] bridge_slave_1: entered promiscuous mode [ 875.911749][T16790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.016992][T16790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.100964][T16790] team0: Port device team_slave_0 added [ 876.108151][T14226] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 876.123988][T16790] team0: Port device team_slave_1 added [ 876.151544][T16790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.160240][T16790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.194560][T16790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.229711][T16790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.270161][T16790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.298141][T14226] usb 6-1: Using ep0 maxpacket: 32 [ 876.306435][T14226] usb 6-1: config 2 has an invalid interface number: 13 but max is 0 [ 876.314902][T14226] usb 6-1: config 2 has no interface number 0 [ 876.322570][T14226] usb 6-1: config 2 interface 13 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 876.336058][T14226] usb 6-1: config 2 interface 13 has no altsetting 0 [ 876.347927][T14226] usb 6-1: New USB device found, idVendor=0499, idProduct=105a, bcdDevice=52.92 [ 876.358046][T14226] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.366166][T14226] usb 6-1: Product: syz [ 876.383081][T14226] usb 6-1: Manufacturer: syz [ 876.391647][T16790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.406431][T14226] usb 6-1: SerialNumber: syz [ 876.453137][T16832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.477043][T16832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.695931][T14218] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 876.964333][T16838] fuse: Bad value for 'fd' [ 877.007594][T16838] ipip0: entered promiscuous mode [ 877.012901][T16838] ipip0: entered allmulticast mode [ 877.029090][T16838] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2981'. [ 877.186477][T16790] hsr_slave_0: entered promiscuous mode [ 877.199989][T16790] hsr_slave_1: entered promiscuous mode [ 877.207175][T16790] debugfs: 'hsr0' already exists in 'hsr' [ 877.220876][T16790] Cannot create hsr debugfs directory [ 877.340164][T13317] bridge0: port 3(batadv0) entered disabled state [ 877.353705][T13317] bridge_slave_1: left allmulticast mode [ 877.359679][T13317] bridge_slave_1: left promiscuous mode [ 877.370741][T13317] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.438334][ T5828] Bluetooth: hci6: command tx timeout [ 877.623952][T13317] bridge_slave_0: left allmulticast mode [ 877.638178][T13317] bridge_slave_0: left promiscuous mode [ 877.644170][T13317] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.202098][T16854] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2983'. [ 878.787200][T13317] bridge0 (unregistering): left allmulticast mode [ 878.794848][T13317] bridge0 (unregistering): left promiscuous mode [ 879.356191][T14226] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 879.507030][T13317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.518566][ T5828] Bluetooth: hci6: command tx timeout [ 879.532452][T13317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.540887][T14226] usb 6-1: USB disconnect, device number 48 [ 879.567296][T13317] bond0 (unregistering): (slave bond1): Releasing backup interface [ 879.637539][ T6783] udevd[6783]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.13/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 879.675742][T13317] bond0 (unregistering): Released all slaves [ 879.729445][T13317] bond1 (unregistering): Released all slaves [ 880.087228][T16879] FAULT_INJECTION: forcing a failure. [ 880.087228][T16879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.118515][T16879] CPU: 0 UID: 0 PID: 16879 Comm: syz.4.2991 Tainted: G L syzkaller #0 PREEMPT(full) [ 880.118544][T16879] Tainted: [L]=SOFTLOCKUP [ 880.118551][T16879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 880.118560][T16879] Call Trace: [ 880.118568][T16879] [ 880.118576][T16879] dump_stack_lvl+0xe8/0x150 [ 880.118609][T16879] should_fail_ex+0x412/0x560 [ 880.118641][T16879] _copy_from_iter+0x1d3/0x1670 [ 880.118671][T16879] ? rcu_is_watching+0x15/0xb0 [ 880.118699][T16879] ? __pfx__copy_from_iter+0x10/0x10 [ 880.118734][T16879] ? netlink_sendmsg+0x650/0xb40 [ 880.118760][T16879] ? skb_put+0x11b/0x210 [ 880.118780][T16879] netlink_sendmsg+0x6c0/0xb40 [ 880.118815][T16879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 880.118842][T16879] ? aa_sock_msg_perm+0xf1/0x1b0 [ 880.118867][T16879] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 880.118891][T16879] ____sys_sendmsg+0x972/0x9f0 [ 880.118923][T16879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 880.118955][T16879] ? import_iovec+0x73/0xa0 [ 880.118980][T16879] ___sys_sendmsg+0x2a5/0x360 [ 880.119009][T16879] ? __pfx____sys_sendmsg+0x10/0x10 [ 880.119066][T16879] ? __fget_files+0x2a/0x420 [ 880.119104][T16879] ? __fget_files+0x3a0/0x420 [ 880.119143][T16879] __x64_sys_sendmsg+0x1bd/0x2a0 [ 880.119169][T16879] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 880.119201][T16879] ? __pfx_ksys_write+0x10/0x10 [ 880.119235][T16879] do_syscall_64+0x14d/0xf80 [ 880.119256][T16879] ? trace_irq_disable+0x3b/0x150 [ 880.119282][T16879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.119300][T16879] ? clear_bhb_loop+0x40/0x90 [ 880.119324][T16879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.119344][T16879] RIP: 0033:0x7f149479c799 [ 880.119364][T16879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.119380][T16879] RSP: 002b:00007f1495591028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 880.119403][T16879] RAX: ffffffffffffffda RBX: 00007f1494a15fa0 RCX: 00007f149479c799 [ 880.119417][T16879] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 880.119430][T16879] RBP: 00007f1495591090 R08: 0000000000000000 R09: 0000000000000000 [ 880.119447][T16879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.119459][T16879] R13: 00007f1494a16038 R14: 00007f1494a15fa0 R15: 00007f1494b3fa48 [ 880.119491][T16879] [ 880.120970][T13317] tipc: Disabling bearer [ 880.418251][T13317] tipc: Left network mode [ 880.607462][T13317] IPVS: stopping backup sync thread 13669 ... [ 880.668087][ T29] audit: type=1326 audit(1773800773.204:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16886 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc1f9c799 code=0x7ffc0000 [ 880.672296][T16887] FAULT_INJECTION: forcing a failure. [ 880.672296][T16887] name failslab, interval 1, probability 0, space 0, times 0 [ 880.719972][T13303] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 880.771864][T16887] CPU: 1 UID: 0 PID: 16887 Comm: syz.5.2993 Tainted: G L syzkaller #0 PREEMPT(full) [ 880.771898][T16887] Tainted: [L]=SOFTLOCKUP [ 880.771905][T16887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 880.771917][T16887] Call Trace: [ 880.771926][T16887] [ 880.771934][T16887] dump_stack_lvl+0xe8/0x150 [ 880.771969][T16887] should_fail_ex+0x412/0x560 [ 880.772002][T16887] should_failslab+0xa8/0x100 [ 880.772029][T16887] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 880.772059][T16887] ? __alloc_skb+0x186/0x7d0 [ 880.772077][T16887] ? __alloc_skb+0x1d0/0x7d0 [ 880.772094][T16887] ? __local_bh_enable_ip+0xd0/0x130 [ 880.772125][T16887] __alloc_skb+0x1d0/0x7d0 [ 880.772144][T16887] ? __raw_spin_lock_init+0x45/0x100 [ 880.772168][T16887] audit_log_start+0x416/0xa20 [ 880.772200][T16887] ? __pfx_audit_log_start+0x10/0x10 [ 880.772242][T16887] audit_seccomp+0x63/0x190 [ 880.772263][T16887] ? clear_bhb_loop+0x40/0x90 [ 880.772283][T16887] ? clear_bhb_loop+0xe/0x90 [ 880.772308][T16887] __seccomp_filter+0xd48/0x1ef0 [ 880.772339][T16887] ? lockdep_hardirqs_on+0x7a/0x110 [ 880.772360][T16887] ? __pfx___seccomp_filter+0x10/0x10 [ 880.772383][T16887] ? kmem_cache_free+0x187/0x630 [ 880.772408][T16887] ? fput+0xa0/0xd0 [ 880.772434][T16887] ? __se_sys_setns+0x1554/0x1bb0 [ 880.772467][T16887] ? __se_sys_setns+0x505/0x1bb0 [ 880.772504][T16887] ? __secure_computing+0xe1/0x2a0 [ 880.772529][T16887] do_syscall_64+0xf4/0xf80 [ 880.772549][T16887] ? trace_irq_disable+0x3b/0x150 [ 880.772576][T16887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.772595][T16887] ? clear_bhb_loop+0x40/0x90 [ 880.772618][T16887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.772638][T16887] RIP: 0033:0x7f6cc1f5cfce [ 880.772656][T16887] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 880.772672][T16887] RSP: 002b:00007f6cc2e10fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 880.772694][T16887] RAX: ffffffffffffffda RBX: 00007f6cc2e116c0 RCX: 00007f6cc1f5cfce [ 880.772708][T16887] RDX: 000000000000000f RSI: 00007f6cc2e110a0 RDI: 0000000000000004 [ 880.772720][T16887] RBP: 00007f6cc2e11090 R08: 0000000000000000 R09: 0000000000000000 [ 880.772732][T16887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 880.772744][T16887] R13: 00007f6cc2216038 R14: 00007f6cc2215fa0 R15: 00007f6cc233fa48 [ 880.772775][T16887] [ 880.772801][T16887] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 880.849341][ T29] audit: type=1326 audit(1773800773.214:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16886 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f6cc1f9c799 code=0x7ffc0000 [ 880.849394][ T29] audit: type=1326 audit(1773800773.214:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16886 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc1f9c799 code=0x7ffc0000 [ 880.849438][ T29] audit: type=1326 audit(1773800773.214:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16886 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6cc1f5cfce code=0x7ffc0000 [ 880.849485][ T29] audit: type=1326 audit(1773800773.214:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16886 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6cc1f5cfce code=0x7ffc0000 [ 880.849527][ T29] audit: type=1326 audit(1773800773.214:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16886 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6cc1f9c799 code=0x7ffc0000 [ 881.136595][T16887] audit: out of memory in audit_log_start [ 881.158229][ T29] audit: type=1326 audit(1773800773.684:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16886 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6cc1f5cfce code=0x7ffc0000 [ 881.281269][ T29] audit: type=1326 audit(1773800773.684:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16886 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6cc1f5cfce code=0x7ffc0000 [ 881.598098][ T5828] Bluetooth: hci6: command tx timeout [ 881.933994][T16368] syz_tun (unregistering): left allmulticast mode [ 882.359997][T16917] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2997'. [ 882.408110][T14218] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 882.588858][T14218] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 882.598123][T14218] usb 6-1: config 0 has no interface number 0 [ 882.650975][T14218] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 882.742428][T14218] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 882.850140][T14218] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 882.975838][T14218] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 882.985124][T14218] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 882.993291][T14218] usb 6-1: Product: syz [ 882.999054][T14218] usb 6-1: SerialNumber: syz [ 883.022314][T14218] usb 6-1: config 0 descriptor?? [ 883.036475][T14218] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 883.047955][T14218] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input104 [ 884.429262][T16946] netlink: 'syz.6.3005': attribute type 1 has an invalid length. [ 884.781433][ C0] cm109_urb_ctl_callback: 169 callbacks suppressed [ 884.781455][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 884.795155][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 884.802673][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 884.810400][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 884.817551][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 884.824936][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 884.831972][ T5888] usb 6-1: USB disconnect, device number 49 [ 884.837890][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 884.837903][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 884.952553][ T5888] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 885.330228][T13317] hsr_slave_0: left promiscuous mode [ 885.354543][T13317] hsr_slave_1: left promiscuous mode [ 885.360757][T14218] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 885.375189][T13317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.384435][T13317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.570304][T14218] usb 7-1: Using ep0 maxpacket: 32 [ 885.578446][T14218] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 885.597543][T14218] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 885.667299][T14218] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 885.679133][T14218] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 885.712411][T14218] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 885.731183][T14218] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.753830][T14218] usb 7-1: Product: syz [ 885.767454][T14218] usb 7-1: Manufacturer: syz [ 885.781694][T14218] usb 7-1: SerialNumber: syz [ 885.818805][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 885.936588][T14218] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input105 [ 886.058082][T14218] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 886.076598][T14218] (id 0x00) [ 886.484985][T13317] team_slave_1 (unregistering): left allmulticast mode [ 886.502947][T14218] rc_core: IR keymap rc-imon-pad not found [ 886.557441][T13317] team0 (unregistering): Port device team_slave_1 removed [ 886.570851][T14218] Registered IR keymap rc-empty [ 886.587538][T13317] team_slave_0 (unregistering): left allmulticast mode [ 886.596206][T13317] team0 (unregistering): Port device team_slave_0 removed [ 886.628329][T14218] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 886.695571][T14218] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 886.772434][T14218] imon:send_packet: packet tx failed (-71) [ 886.813026][T14218] imon 7-1:155.0: remote input dev register failed [ 886.827047][T14218] imon 7-1:155.0: imon_init_intf0: rc device setup failed [ 886.991926][T14218] imon 7-1:155.0: unable to initialize intf0, err 0 [ 887.036852][T14218] imon:imon_probe: failed to initialize context! [ 887.057237][T14218] imon 7-1:155.0: unable to register, err -19 [ 887.150566][T14218] usb 7-1: USB disconnect, device number 2 [ 887.518769][T14218] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 887.522113][T16790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 887.708144][T14218] usb 7-1: Using ep0 maxpacket: 32 [ 887.729055][T14218] usb 7-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 887.754480][T16790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 887.758034][T14218] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.824776][T16790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 887.900546][ T5888] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 887.952802][T16790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 887.960471][T14218] usb 7-1: Product: syz [ 887.989981][T14218] usb 7-1: Manufacturer: syz [ 888.086408][ T5888] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.128123][T14218] usb 7-1: SerialNumber: syz [ 888.336965][T16790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.382411][T16790] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.408376][ T5888] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 888.462936][T13300] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.470096][T13300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.632368][T13300] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.632395][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.639618][T13300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.660457][T14218] usb 7-1: can't set config #1, error -71 [ 888.689846][T16790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 888.747216][T14218] usb 7-1: USB disconnect, device number 3 [ 888.782225][T13317] IPVS: stop unused estimator thread 0... [ 888.837653][ T5888] usb 6-1: config 0 descriptor?? [ 888.891645][ T5888] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 888.956441][T16790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.158147][T14218] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 889.184799][T16990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.238474][T16990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.270253][T14222] usb 6-1: USB disconnect, device number 50 [ 889.359661][T14218] usb 7-1: Using ep0 maxpacket: 32 [ 889.367003][T14218] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 889.413998][T14218] usb 7-1: config 0 has no interface number 0 [ 889.428997][T13317] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.444619][T14218] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 889.465865][T14218] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.471421][T13317] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.516442][T14218] usb 7-1: Product: syz [ 889.542918][T14218] usb 7-1: Manufacturer: syz [ 889.564993][T14218] usb 7-1: SerialNumber: syz [ 889.583511][T14218] usb 7-1: config 0 descriptor?? [ 889.699095][T14218] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 889.772731][T16790] veth0_vlan: entered promiscuous mode [ 889.798079][T14222] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 889.865234][T13317] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.895001][T13317] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.941359][T14218] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 889.981586][T14222] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 890.003351][T14218] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 890.022240][T14222] usb 6-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 890.123663][T14222] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 890.267027][T14222] usb 6-1: config 220 has no interface number 2 [ 890.291080][T14222] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 890.320377][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 890.320858][ T5829] usb 7-1: USB disconnect, device number 4 [ 890.420724][ T5829] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 890.424417][T16790] veth1_vlan: entered promiscuous mode [ 890.453449][T14222] usb 6-1: config 220 interface 0 has no altsetting 0 [ 890.534454][T14222] usb 6-1: config 220 interface 76 has no altsetting 0 [ 890.567501][ T5829] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 890.596854][T14222] usb 6-1: config 220 interface 1 has no altsetting 0 [ 890.652904][T14222] usb 6-1: string descriptor 0 read error: -71 [ 890.670839][ T5829] quatech2 7-1:0.51: device disconnected [ 890.688390][T14222] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 890.720301][T13317] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.749648][T14222] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.785885][T13317] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.808403][T14222] usb 6-1: can't set config #220, error -71 [ 890.836172][T14222] usb 6-1: USB disconnect, device number 51 [ 891.159812][T13317] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.185859][T17066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.218937][T13317] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.239884][T17066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.320322][T14213] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 891.365710][T16790] veth0_macvtap: entered promiscuous mode [ 891.388216][ T5888] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 891.401131][T16790] veth1_macvtap: entered promiscuous mode [ 891.492856][T14213] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 891.501920][T14213] usb 7-1: config 0 has no interface number 0 [ 891.523979][T14213] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.553545][T16790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.564978][T14213] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.579634][ T5888] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 891.591415][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.606946][T14213] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 891.621365][ T5888] usb 5-1: Product: syz [ 891.625621][ T5888] usb 5-1: Manufacturer: syz [ 891.636076][T16790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.643860][T14213] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.652234][ T5888] usb 5-1: SerialNumber: syz [ 891.666935][T14213] usb 7-1: config 0 descriptor?? [ 891.892444][ T5888] cdc_ncm 5-1:1.0: bind() failure [ 891.924216][ T5888] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 891.944785][ T5888] cdc_ncm 5-1:1.1: bind() failure [ 891.966818][ T5888] usb 5-1: USB disconnect, device number 7 [ 892.093089][T14213] prodikeys 0003:041E:2801.0020: item fetching failed at offset 5/7 [ 892.129080][T14213] prodikeys 0003:041E:2801.0020: hid parse failed [ 892.135693][T14213] prodikeys 0003:041E:2801.0020: probe with driver prodikeys failed with error -22 [ 892.186011][T13317] bond1 (unregistering): (slave gretap1): Releasing active interface [ 892.297450][ T5888] usb 7-1: USB disconnect, device number 5 [ 892.349149][T13317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.419108][T13317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.477589][T13317] bond0 (unregistering): Released all slaves [ 892.532545][T13317] bond1 (unregistering): (slave veth3): Releasing active interface [ 892.557520][T13317] bond1 (unregistering): Released all slaves [ 892.565358][T17088] netlink: 'syz.4.3021': attribute type 10 has an invalid length. [ 892.596096][T13317] bond2 (unregistering): Released all slaves [ 892.729276][T17088] veth0_vlan: left promiscuous mode [ 892.763038][T17088] veth0_vlan: entered promiscuous mode [ 892.794375][T17088] team0: Device veth0_vlan failed to register rx_handler [ 892.812803][T13300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.839934][T17099] loop4: detected capacity change from 0 to 1 [ 892.847797][T13300] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.872926][T17099] Dev loop4: unable to read RDB block 1 [ 892.887472][T17099] loop4: unable to read partition table [ 892.894864][T17099] loop4: partition table beyond EOD, truncated [ 892.901781][T13317] tipc: Left network mode [ 892.909148][T17101] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3023'. [ 892.919008][T13303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.927749][T13303] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.991105][T17099] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 893.148903][ T5196] Dev loop4: unable to read RDB block 1 [ 893.164970][ T5196] loop4: unable to read partition table [ 893.179453][ T5196] loop4: partition table beyond EOD, truncated [ 893.208457][T14214] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 893.388554][T14214] usb 6-1: Using ep0 maxpacket: 16 [ 893.403297][T14214] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 97, changing to 7 [ 893.444519][T14214] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 57864, setting to 1024 [ 893.479194][T14214] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 893.495271][T13300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.498917][T14214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.512615][T14214] usb 6-1: Product: syz [ 893.523416][T13300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.524639][T14214] usb 6-1: Manufacturer: syz [ 893.542741][T14214] usb 6-1: SerialNumber: syz [ 893.545998][T17115] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3027'. [ 893.550685][T14214] usb 6-1: config 0 descriptor?? [ 893.599021][T14214] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 893.611335][T14214] em28xx 6-1:0.0: DVB interface 0 found: isoc [ 893.658101][T14222] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 893.749792][T13314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.837673][T14222] usb 5-1: device descriptor read/64, error -71 [ 893.852659][T13314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.938534][T14214] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 893.965094][T13317] hsr_slave_0: left promiscuous mode [ 893.982618][T13317] hsr_slave_1: left promiscuous mode [ 894.000359][T13317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 894.012042][T14214] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 894.014915][T13317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 894.031388][T14214] em28xx 6-1:0.0: board has no eeprom [ 894.038865][T13317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 894.047477][T13317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 894.055693][T17127] binder: 17126:17127 ioctl c00c620f 0 returned -14 [ 894.074608][T13317] veth1_macvtap: left promiscuous mode [ 894.080503][T13317] veth0_macvtap: left promiscuous mode [ 894.086219][T13317] veth1_vlan: left promiscuous mode [ 894.109686][T14214] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 894.117567][T14214] em28xx 6-1:0.0: dvb set to isoc mode. [ 894.118409][T14222] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 894.169954][T12326] em28xx 6-1:0.0: Binding DVB extension [ 894.212130][T14214] usb 6-1: USB disconnect, device number 52 [ 894.230555][T14214] em28xx 6-1:0.0: Disconnecting em28xx [ 894.258127][T14222] usb 5-1: device descriptor read/64, error -71 [ 894.347604][T12326] em28xx 6-1:0.0: Registering input extension [ 894.356699][T14214] em28xx 6-1:0.0: Closing input extension [ 894.369768][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3029'. [ 894.394495][T14214] em28xx 6-1:0.0: Freeing device [ 894.405252][T14222] usb usb5-port1: attempt power cycle [ 894.778197][T14222] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 894.817100][T14222] usb 5-1: device descriptor read/8, error -71 [ 895.089005][T14222] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 895.122477][T14222] usb 5-1: device descriptor read/8, error -71 [ 895.154806][T13317] team_slave_1 (unregistering): left promiscuous mode [ 895.170317][T13317] team0 (unregistering): Port device team_slave_1 removed [ 895.206701][T13317] team_slave_0 (unregistering): left promiscuous mode [ 895.216336][T13317] team0 (unregistering): Port device team_slave_0 removed [ 895.248565][T14222] usb usb5-port1: unable to enumerate USB device [ 895.702166][T17164] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3038'. [ 895.719209][T17164] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3038'. [ 896.014369][T12326] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 896.070568][T13317] IPVS: stop unused estimator thread 0... [ 896.203415][T12326] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 896.216526][T12326] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.243839][T12326] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 896.302576][T12326] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.335721][T12326] usb 7-1: config 0 descriptor?? [ 896.584767][T12326] usb 7-1: string descriptor 0 read error: -71 [ 896.634857][T12326] pwc: Askey VC010 type 2 USB webcam detected. [ 896.688140][T12326] pwc: send_video_command error -71 [ 896.738098][T12326] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 896.797589][T12326] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 896.929040][T12326] usb 7-1: USB disconnect, device number 6 [ 897.289436][T12326] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 897.483174][T17196] pim6reg9: entered allmulticast mode [ 897.538608][T12326] usb 7-1: Using ep0 maxpacket: 8 [ 897.554319][T12326] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.569993][T12326] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 897.600403][T12326] usb 7-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 897.613770][T12326] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.638109][T12326] usb 7-1: Product: syz [ 897.649137][T12326] usb 7-1: Manufacturer: syz [ 897.653752][T12326] usb 7-1: SerialNumber: syz [ 897.709089][T12326] usb 7-1: config 0 descriptor?? [ 897.756181][T17204] netlink: 'syz.3.3047': attribute type 10 has an invalid length. [ 897.769093][T17204] batman_adv: batadv0: Adding interface: netdevsim0 [ 897.785981][T17204] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.931028][T17204] batman_adv: batadv0: Interface activated: netdevsim0 [ 897.949360][T17210] netlink: 'syz.0.3050': attribute type 10 has an invalid length. [ 897.968957][T17210] veth0_vlan: left promiscuous mode [ 897.984943][T17210] veth0_vlan: entered promiscuous mode [ 897.995208][T17210] team0: Device veth0_vlan failed to register rx_handler [ 898.038498][T12326] usb 6-1: new low-speed USB device number 53 using dummy_hcd [ 898.070513][T17214] syzkaller0: entered promiscuous mode [ 898.076503][T17214] syzkaller0: entered allmulticast mode [ 898.208930][T12326] usb 6-1: unable to get BOS descriptor or descriptor too short [ 898.244983][T12326] usb 6-1: config 17 has an invalid interface number: 9 but max is 1 [ 898.267146][T12326] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 898.309868][T12326] usb 6-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 898.415407][T12326] usb 6-1: config 17 has no interface number 0 [ 898.439307][T12326] usb 6-1: config 17 interface 9 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 898.526311][T14222] usb 7-1: USB disconnect, device number 7 [ 898.540754][T12326] usb 6-1: config 17 interface 9 has no altsetting 0 [ 899.438200][T14222] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 899.593415][T14222] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.623276][T14222] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.678729][T14222] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 899.721939][T14222] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 899.751295][T14222] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.784772][T14222] usb 7-1: config 0 descriptor?? [ 899.881267][T14214] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 899.921464][T14214] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 900.210622][T14222] usbhid 7-1:0.0: can't add hid device: -71 [ 900.216744][T14222] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 900.279092][T14222] usb 7-1: USB disconnect, device number 8 [ 900.760058][T12326] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 900.769581][T12326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.798205][T12326] usb 6-1: can't set config #17, error -71 [ 900.806207][T12326] usb 6-1: USB disconnect, device number 53 [ 902.135563][T17280] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3064'. [ 902.146145][T17280] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 903.318804][T17297] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 903.335939][T17297] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 903.352002][T17297] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 903.373445][T17297] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 903.392061][T17297] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 903.419022][T17297] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 903.436740][T17297] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 903.451215][T17297] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 903.461778][T17297] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 903.479712][T17297] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 903.491623][T17297] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 903.499691][T17297] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 903.514380][T17297] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 903.752901][T17327] FAULT_INJECTION: forcing a failure. [ 903.752901][T17327] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 903.807639][T17327] CPU: 0 UID: 0 PID: 17327 Comm: syz.3.3071 Tainted: G L syzkaller #0 PREEMPT(full) [ 903.807674][T17327] Tainted: [L]=SOFTLOCKUP [ 903.807681][T17327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 903.807692][T17327] Call Trace: [ 903.807700][T17327] [ 903.807717][T17327] dump_stack_lvl+0xe8/0x150 [ 903.807751][T17327] should_fail_ex+0x412/0x560 [ 903.807781][T17327] prepare_alloc_pages+0x22a/0x650 [ 903.807811][T17327] __alloc_frozen_pages_noprof+0x12f/0x380 [ 903.807837][T17327] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 903.807865][T17327] ? __pfx_policy_nodemask+0x10/0x10 [ 903.807886][T17327] ? __lock_acquire+0x6b5/0x2cf0 [ 903.807916][T17327] alloc_pages_mpol+0x232/0x4a0 [ 903.807944][T17327] folio_alloc_mpol_noprof+0x39/0x70 [ 903.807975][T17327] shmem_alloc_and_add_folio+0x445/0xf80 [ 903.808010][T17327] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 903.808035][T17327] ? shmem_allowable_huge_orders+0x5de/0x690 [ 903.808069][T17327] shmem_get_folio_gfp+0x5a9/0x1670 [ 903.808128][T17327] shmem_fault+0x179/0x390 [ 903.808155][T17327] __do_fault+0x138/0x390 [ 903.808180][T17327] do_pte_missing+0x5c4/0x3490 [ 903.808213][T17327] ? handle_mm_fault+0xee/0x3310 [ 903.808246][T17327] handle_mm_fault+0x1bec/0x3310 [ 903.808288][T17327] ? handle_mm_fault+0xee/0x3310 [ 903.808322][T17327] ? __pfx_handle_mm_fault+0x10/0x10 [ 903.808349][T17327] ? follow_page_pte+0x841/0x1450 [ 903.808386][T17327] ? __pfx_follow_page_pte+0x10/0x10 [ 903.808424][T17327] __get_user_pages+0x165b/0x29d0 [ 903.808481][T17327] __gup_longterm_locked+0x7ed/0x1630 [ 903.808535][T17327] gup_fast_fallback+0x1d82/0x22e0 [ 903.808565][T17327] ? lruvec_stat_mod_folio+0x70/0x4b0 [ 903.808618][T17327] ? __pfx_gup_fast_fallback+0x10/0x10 [ 903.808648][T17327] ? is_valid_gup_args+0x11f/0x200 [ 903.808676][T17327] ? pin_user_pages_fast+0x4d/0xb0 [ 903.808705][T17327] io_pin_pages+0xba/0x1b0 [ 903.808742][T17327] io_sqe_buffer_register+0x268/0x1c90 [ 903.808789][T17327] ? rcu_is_watching+0x15/0xb0 [ 903.808816][T17327] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 903.808848][T17327] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 903.808872][T17327] ? io_sqe_buffers_register+0x12d/0x7e0 [ 903.808900][T17327] ? iovec_from_user+0x1ba/0x250 [ 903.808927][T17327] io_sqe_buffers_register+0x2fa/0x7e0 [ 903.808966][T17327] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 903.808995][T17327] ? __fget_files+0x3a0/0x420 [ 903.809023][T17327] ? __fget_files+0x2a/0x420 [ 903.809054][T17327] ? io_is_uring_fops+0xd/0x50 [ 903.809077][T17327] __se_sys_io_uring_register+0x122a/0x19a0 [ 903.809112][T17327] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 903.809141][T17327] ? ksys_write+0x242/0x270 [ 903.809165][T17327] ? __pfx_ksys_write+0x10/0x10 [ 903.809199][T17327] do_syscall_64+0x14d/0xf80 [ 903.809218][T17327] ? trace_irq_disable+0x3b/0x150 [ 903.809236][T17327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.809248][T17327] ? clear_bhb_loop+0x40/0x90 [ 903.809262][T17327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.809273][T17327] RIP: 0033:0x7f5d8399c799 [ 903.809286][T17327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.809296][T17327] RSP: 002b:00007f5d848e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 903.809310][T17327] RAX: ffffffffffffffda RBX: 00007f5d83c16090 RCX: 00007f5d8399c799 [ 903.809319][T17327] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000007 [ 903.809326][T17327] RBP: 00007f5d848e6090 R08: 0000000000000000 R09: 0000000000000000 [ 903.809333][T17327] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 903.809340][T17327] R13: 00007f5d83c16128 R14: 00007f5d83c16090 R15: 00007f5d83d3fa48 [ 903.809359][T17327] [ 904.580337][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 904.586428][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 904.586445][ T29] audit: type=1326 audit(1773800796.804:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149479c799 code=0x7ffc0000 [ 904.616648][ T29] audit: type=1326 audit(1773800796.804:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149479c799 code=0x7ffc0000 [ 904.648097][ T29] audit: type=1326 audit(1773800796.804:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f149475cfce code=0x7ffc0000 [ 904.671091][ T29] audit: type=1326 audit(1773800796.804:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f149475cfce code=0x7ffc0000 [ 904.693726][ T29] audit: type=1326 audit(1773800796.804:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149479c799 code=0x7ffc0000 [ 904.815479][ T29] audit: type=1326 audit(1773800796.804:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149479c799 code=0x7ffc0000 [ 904.904475][T17334] loop9: detected capacity change from 0 to 7 [ 905.074415][T17334] Dev loop9: unable to read RDB block 7 [ 905.080501][T17334] loop9: unable to read partition table [ 905.086392][T17334] loop9: partition table beyond EOD, truncated [ 905.092705][ T29] audit: type=1326 audit(1773800796.804:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f149479c799 code=0x7ffc0000 [ 905.127108][T17334] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 905.216869][ T29] audit: type=1326 audit(1773800796.804:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149479c799 code=0x7ffc0000 [ 905.247420][ T29] audit: type=1326 audit(1773800796.804:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149479c799 code=0x7ffc0000 [ 905.387303][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 905.406807][ T29] audit: type=1326 audit(1773800796.804:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f149479c799 code=0x7ffc0000 [ 905.441182][T17339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3074'. [ 905.441732][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 905.472372][T17341] loop6: detected capacity change from 0 to 2640 [ 905.497471][T17339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3074'. [ 905.512124][T17341] buffer_io_error: 11 callbacks suppressed [ 905.512144][T17341] Buffer I/O error on dev loop6, logical block 0, async page read [ 905.518206][ T5828] Bluetooth: hci6: command 0x0c1a tx timeout [ 905.526976][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 905.590199][T17341] Buffer I/O error on dev loop6, logical block 0, async page read [ 905.634516][T17341] Buffer I/O error on dev loop6, logical block 0, async page read [ 905.669692][T17341] Buffer I/O error on dev loop6, logical block 0, async page read [ 905.677597][T17341] Buffer I/O error on dev loop6, logical block 0, async page read [ 905.868321][T17341] Buffer I/O error on dev loop6, logical block 0, async page read [ 905.876202][T17341] Buffer I/O error on dev loop6, logical block 0, async page read [ 906.020975][T17341] Buffer I/O error on dev loop6, logical block 0, async page read [ 906.105590][T17341] ldm_validate_partition_table(): Disk read failed. [ 906.400639][T17341] Buffer I/O error on dev loop6, logical block 0, async page read [ 906.411159][T17341] Buffer I/O error on dev loop6, logical block 0, async page read [ 906.429368][T17341] Dev loop6: unable to read RDB block 0 [ 906.435949][T17341] loop6: unable to read partition table [ 906.568935][T17341] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 907.070859][T17364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3080'. [ 907.134812][T17364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3080'. [ 907.451625][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 907.528206][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 907.599008][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 907.609981][ T5839] Bluetooth: hci6: command 0x0c1a tx timeout [ 907.648105][T14222] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 907.821036][T14222] usb 6-1: Using ep0 maxpacket: 32 [ 907.833424][T14222] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.861913][T14222] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 907.885459][T17378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3083'. [ 907.898322][T14222] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 907.927948][T14222] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.972270][T14222] usb 6-1: config 0 descriptor?? [ 908.137047][T17381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 908.146325][T17381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.156821][T17381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 908.180760][T17381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.192013][T17381] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 908.204725][T17381] batman_adv: batadv0: Removing interface: netdevsim0 [ 908.393683][T17368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.412756][T17368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.443074][T14222] usbhid 6-1:0.0: can't add hid device: -71 [ 908.459675][T14222] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 908.555383][T14222] usb 6-1: USB disconnect, device number 54 [ 909.003983][T14222] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 909.209255][T14222] usb 7-1: Using ep0 maxpacket: 16 [ 909.234055][T14222] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 909.303161][T14222] usb 7-1: config 0 has no interface number 0 [ 909.328139][T14222] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 224, changing to 11 [ 909.375596][T14222] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49597, setting to 1024 [ 909.430184][T14222] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 909.458126][T14222] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 909.475912][T14222] usb 7-1: Product: syz [ 909.494229][T14222] usb 7-1: SerialNumber: syz [ 909.518531][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 909.530319][T14222] usb 7-1: config 0 descriptor?? [ 909.540866][T14222] cm109 7-1:0.8: invalid payload size 1024, expected 4 [ 909.555096][T14222] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input109 [ 909.598301][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 909.649501][T17406] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3090'. [ 909.687893][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 909.688027][ T5839] Bluetooth: hci6: command 0x0c1a tx timeout [ 909.952147][T17395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.969735][T17395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.100403][ C1] cm109 7-1:0.8: cm109_urb_irq_callback: urb status -71 [ 910.107475][ C1] ------------[ cut here ]------------ [ 910.112928][ C1] URB ffff8880309aa100 submitted while active [ 910.118997][ C1] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18b0, CPU#1: syz.6.3087/17394 [ 910.129181][ C1] Modules linked in: [ 910.133404][ C1] CPU: 1 UID: 0 PID: 17394 Comm: syz.6.3087 Tainted: G L syzkaller #0 PREEMPT(full) [ 910.144349][ C1] Tainted: [L]=SOFTLOCKUP [ 910.148673][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 910.158729][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 910.164199][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 d7 f3 f8 fa 49 83 3e 00 74 40 e8 9c b1 8e fa 48 8d 3d d5 e8 e7 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 81 b1 8e fa eb 05 e8 7a b1 [ 910.183810][ C1] RSP: 0018:ffffc90000a08960 EFLAGS: 00010083 [ 910.189887][ C1] RAX: ffffffff8736ef44 RBX: ffff8880309aa100 RCX: 0000000000040000 [ 910.197867][ C1] RDX: ffffc90002352000 RSI: ffff8880309aa100 RDI: ffffffff901ed820 [ 910.205840][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 910.213840][ C1] R10: dffffc0000000000 R11: fffff5200014112c R12: 0000000000000820 [ 910.221821][ C1] R13: ffff88801ff96830 R14: ffff8880309aa108 R15: dffffc0000000000 [ 910.229820][ C1] FS: 000055558e4a9500(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 910.238778][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 910.245368][ C1] CR2: 000020000003a000 CR3: 000000006a362000 CR4: 00000000003526f0 [ 910.253359][ C1] DR0: 0000000040000005 DR1: 0000000100000000 DR2: 0000000000000898 [ 910.261359][ C1] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 910.269344][ C1] Call Trace: [ 910.272641][ C1] [ 910.275505][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 910.281359][ C1] ? ___ratelimit+0x58c/0x8d0 [ 910.286072][ C1] cm109_urb_irq_callback+0x6e2/0xcb0 [ 910.291481][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 910.296909][ C1] dummy_timer+0xbbd/0x45d0 [ 910.301464][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 910.306460][ C1] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 910.312234][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 910.317644][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 910.322628][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 910.328598][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 910.333608][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 910.338566][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 910.343885][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 910.349622][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 910.355746][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 910.360876][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 910.366083][ C1] handle_softirqs+0x22a/0x870 [ 910.370857][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 910.375637][ C1] __irq_exit_rcu+0x5f/0x150 [ 910.380233][ C1] irq_exit_rcu+0x9/0x30 [ 910.384483][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 910.390206][ C1] [ 910.393137][ C1] [ 910.396069][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 910.402054][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 910.408489][ C1] Code: f7 e8 cd 3f f1 f5 f7 c3 00 02 00 00 74 05 e8 d0 97 1c f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 fc e2 f5 65 8b 05 0d 10 6b 07 85 c0 74 18 5b 41 5e c3 cc cc [ 910.428099][ C1] RSP: 0018:ffffc90005fcfa68 EFLAGS: 00000206 [ 910.434169][ C1] RAX: 0000000000000006 RBX: 0000000000000202 RCX: 0000000080000001 [ 910.442227][ C1] RDX: 0000000000000006 RSI: ffffffff8def714b RDI: 0000000000000001 [ 910.450202][ C1] RBP: ffffc90005fcfb48 R08: ffffffff90119cb7 R09: 1ffffffff2023396 [ 910.458188][ C1] R10: dffffc0000000000 R11: fffffbfff2023397 R12: ffff888029d67118 [ 910.466187][ C1] R13: ffff888029d67100 R14: ffffffff8f479d80 R15: 0000000000000001 [ 910.474196][ C1] usb_hcd_poll_rh_status+0x40c/0x620 [ 910.479598][ C1] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 910.485503][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 910.491325][ C1] dummy_pullup+0x19b/0x200 [ 910.495841][ C1] ? __pfx_dummy_pullup+0x10/0x10 [ 910.501045][ C1] usb_gadget_disconnect_locked+0x143/0x4d0 [ 910.506951][ C1] gadget_unbind_driver+0xc7/0x450 [ 910.512075][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 910.517842][ C1] device_release_driver_internal+0x46f/0x860 [ 910.523925][ C1] driver_detach+0x1f3/0x2d0 [ 910.528616][ C1] bus_remove_driver+0x226/0x320 [ 910.533565][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 910.539294][ C1] raw_release+0xd7/0x260 [ 910.543636][ C1] ? __pfx_raw_release+0x10/0x10 [ 910.548583][ C1] __fput+0x44f/0xa70 [ 910.552582][ C1] task_work_run+0x1d9/0x270 [ 910.557178][ C1] ? __pfx_task_work_run+0x10/0x10 [ 910.562297][ C1] exit_to_user_mode_loop+0xed/0x480 [ 910.567584][ C1] ? rcu_is_watching+0x15/0xb0 [ 910.572362][ C1] do_syscall_64+0x32d/0xf80 [ 910.576958][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.583042][ C1] ? clear_bhb_loop+0x40/0x90 [ 910.587728][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.593622][ C1] RIP: 0033:0x7f65c4b9c799 [ 910.598039][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.617645][ C1] RSP: 002b:00007f65c4f3fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 910.626068][ C1] RAX: 0000000000000000 RBX: 00007f65c4e17da0 RCX: 00007f65c4b9c799 [ 910.634040][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 910.642008][ C1] RBP: 00007f65c4e17da0 R08: 00007f65c4e16038 R09: 0000000000000000 [ 910.649983][ C1] R10: 00000000003ffcb0 R11: 0000000000000246 R12: 00000000000dee8b [ 910.657954][ C1] R13: 00007f65c4e15fac R14: 00000000000de2b9 R15: 00007f65c4f3fcb0 [ 910.666032][ C1] [ 910.669057][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 910.676426][ C1] CPU: 1 UID: 0 PID: 17394 Comm: syz.6.3087 Tainted: G L syzkaller #0 PREEMPT(full) [ 910.687449][ C1] Tainted: [L]=SOFTLOCKUP [ 910.691775][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 910.701833][ C1] Call Trace: [ 910.705116][ C1] [ 910.707970][ C1] vpanic+0x56c/0xa60 [ 910.711969][ C1] ? __pfx__printk+0x10/0x10 [ 910.716563][ C1] ? __pfx_vpanic+0x10/0x10 [ 910.721073][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 910.726371][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 910.731579][ C1] panic+0xc5/0xd0 [ 910.735306][ C1] ? __pfx_panic+0x10/0x10 [ 910.739748][ C1] __warn+0x315/0x4f0 [ 910.743744][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 910.748607][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 910.753550][ C1] __report_bug+0x29a/0x540 [ 910.758059][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 910.763442][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 910.768297][ C1] ? __pfx___report_bug+0x10/0x10 [ 910.773327][ C1] ? dev_printk_emit+0xee/0x140 [ 910.778191][ C1] report_bug_entry+0x19a/0x290 [ 910.783041][ C1] ? usb_submit_urb+0x7e/0x18b0 [ 910.787893][ C1] ? usb_submit_urb+0x83/0x18b0 [ 910.792747][ C1] handle_bug+0xce/0x200 [ 910.796996][ C1] exc_invalid_op+0x1a/0x50 [ 910.801505][ C1] asm_exc_invalid_op+0x1a/0x20 [ 910.806368][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 910.811828][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 d7 f3 f8 fa 49 83 3e 00 74 40 e8 9c b1 8e fa 48 8d 3d d5 e8 e7 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 81 b1 8e fa eb 05 e8 7a b1 [ 910.831442][ C1] RSP: 0018:ffffc90000a08960 EFLAGS: 00010083 [ 910.837518][ C1] RAX: ffffffff8736ef44 RBX: ffff8880309aa100 RCX: 0000000000040000 [ 910.845494][ C1] RDX: ffffc90002352000 RSI: ffff8880309aa100 RDI: ffffffff901ed820 [ 910.853468][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 910.861436][ C1] R10: dffffc0000000000 R11: fffff5200014112c R12: 0000000000000820 [ 910.869405][ C1] R13: ffff88801ff96830 R14: ffff8880309aa108 R15: dffffc0000000000 [ 910.877388][ C1] ? usb_submit_urb+0x74/0x18b0 [ 910.882248][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 910.888071][ C1] ? ___ratelimit+0x58c/0x8d0 [ 910.892772][ C1] cm109_urb_irq_callback+0x6e2/0xcb0 [ 910.898157][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 910.903541][ C1] dummy_timer+0xbbd/0x45d0 [ 910.908076][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 910.913036][ C1] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 910.918770][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 910.924154][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 910.929102][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 910.935006][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 910.939946][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 910.944887][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 910.950106][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 910.955829][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 910.961911][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 910.967031][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 910.972231][ C1] handle_softirqs+0x22a/0x870 [ 910.977003][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 910.981844][ C1] __irq_exit_rcu+0x5f/0x150 [ 910.986438][ C1] irq_exit_rcu+0x9/0x30 [ 910.990688][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 910.996331][ C1] [ 910.999264][ C1] [ 911.002196][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 911.008179][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 911.014602][ C1] Code: f7 e8 cd 3f f1 f5 f7 c3 00 02 00 00 74 05 e8 d0 97 1c f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 fc e2 f5 65 8b 05 0d 10 6b 07 85 c0 74 18 5b 41 5e c3 cc cc [ 911.034209][ C1] RSP: 0018:ffffc90005fcfa68 EFLAGS: 00000206 [ 911.040282][ C1] RAX: 0000000000000006 RBX: 0000000000000202 RCX: 0000000080000001 [ 911.048255][ C1] RDX: 0000000000000006 RSI: ffffffff8def714b RDI: 0000000000000001 [ 911.056224][ C1] RBP: ffffc90005fcfb48 R08: ffffffff90119cb7 R09: 1ffffffff2023396 [ 911.064193][ C1] R10: dffffc0000000000 R11: fffffbfff2023397 R12: ffff888029d67118 [ 911.072167][ C1] R13: ffff888029d67100 R14: ffffffff8f479d80 R15: 0000000000000001 [ 911.080164][ C1] usb_hcd_poll_rh_status+0x40c/0x620 [ 911.085567][ C1] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 911.091498][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 911.097350][ C1] dummy_pullup+0x19b/0x200 [ 911.101881][ C1] ? __pfx_dummy_pullup+0x10/0x10 [ 911.106926][ C1] usb_gadget_disconnect_locked+0x143/0x4d0 [ 911.112844][ C1] gadget_unbind_driver+0xc7/0x450 [ 911.117977][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 911.123723][ C1] device_release_driver_internal+0x46f/0x860 [ 911.129808][ C1] driver_detach+0x1f3/0x2d0 [ 911.134503][ C1] bus_remove_driver+0x226/0x320 [ 911.139444][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 911.145171][ C1] raw_release+0xd7/0x260 [ 911.149508][ C1] ? __pfx_raw_release+0x10/0x10 [ 911.154450][ C1] __fput+0x44f/0xa70 [ 911.158448][ C1] task_work_run+0x1d9/0x270 [ 911.163043][ C1] ? __pfx_task_work_run+0x10/0x10 [ 911.168170][ C1] exit_to_user_mode_loop+0xed/0x480 [ 911.173480][ C1] ? rcu_is_watching+0x15/0xb0 [ 911.178258][ C1] do_syscall_64+0x32d/0xf80 [ 911.182856][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.188922][ C1] ? clear_bhb_loop+0x40/0x90 [ 911.193606][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.199503][ C1] RIP: 0033:0x7f65c4b9c799 [ 911.203921][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.223534][ C1] RSP: 002b:00007f65c4f3fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 911.231951][ C1] RAX: 0000000000000000 RBX: 00007f65c4e17da0 RCX: 00007f65c4b9c799 [ 911.239923][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 911.247984][ C1] RBP: 00007f65c4e17da0 R08: 00007f65c4e16038 R09: 0000000000000000 [ 911.255961][ C1] R10: 00000000003ffcb0 R11: 0000000000000246 R12: 00000000000dee8b [ 911.264020][ C1] R13: 00007f65c4e15fac R14: 00000000000de2b9 R15: 00007f65c4f3fcb0 [ 911.272006][ C1] [ 911.275372][ C1] Kernel Offset: disabled [ 911.279690][ C1] Rebooting in 86400 seconds..