last executing test programs: 2m54.011423696s ago: executing program 3 (id=1517): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40000102) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, r1, 0x8000000) syz_io_uring_submit(r2, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)) r4 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ef915f210070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c2402080001030000eefe000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYBLOB], 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$9p_tcp(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x802002, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=tcor=0x0000000000004e23,dfltuid=\x00\x00\x00', @ANYRESHEX=r6, @ANYBLOB=',aname=/dev/fuse\x00,ignoreqv,\x00']) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48020000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000000000000180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) pread64(r0, &(0x7f0000004200)=""/236, 0xec, 0x0) 2m52.35171846s ago: executing program 3 (id=1526): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x9, 0x30c40) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0x4, 0x1, 0x0, 0x4, 0x7, 0x0, &(0x7f0000000080)=[{0x1a, 0xfe, 0x4}, {0x1b, 0x0, 0x9}, {0x1a, 0x1ff, 0x4}, {0x2, 0x101, 0x1}, {0x1c, 0x0, 0x3}, {0xc, 0x1ff, 0x6}, {0x1, 0x101, 0x1ff}]}) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x10, &(0x7f0000000240)=0x7fff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m50.96446698s ago: executing program 3 (id=1527): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x1010, r0, 0x79f26000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x8040) 2m49.618013534s ago: executing program 3 (id=1534): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffff8bbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) 2m49.512700509s ago: executing program 3 (id=1536): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xda) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$inet6(0xa, 0xa, 0x100) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x1042000, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000111401"], 0x20}, 0x1, 0x0, 0x0, 0x811}, 0x4080) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20004845}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0xfffffffb}, 0x50) socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 2m47.499280689s ago: executing program 3 (id=1552): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m47.068190791s ago: executing program 32 (id=1552): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.515934179s ago: executing program 0 (id=2294): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) socket(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x0, 0x33}, @in=@broadcast, {0x80, 0x5, 0x0, 0x1, 0x8, 0x0, 0x4}, {0x0, 0x1000000, 0x45, 0xfffffffffffffffd}, {0x0, 0x1}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1c}, 0x0, 0x1}}, 0xf8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x48) syz_io_uring_setup(0x634, &(0x7f0000000680)={0x0, 0x10, 0x9, 0x5, 0x279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1}) r5 = socket(0x1d, 0x2, 0x6) bind$packet(r5, 0x0, 0x0) write$dsp(r0, &(0x7f0000000480)="75d512d39077459e67ee110daaf0413bc745ef85bc9f2141d513969bd8000000", 0x1000c) 10.249540145s ago: executing program 0 (id=2298): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a000f000200142603600e12080005007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6eaa0c261210ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0", 0xbd}], 0x1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) futex_waitv(&(0x7f0000001d00)=[{0x2, &(0x7f00000000c0)=0x2, 0x82}, {0x4, &(0x7f0000000100)=0x1c, 0x80}, {0xffffffffffffffb3, &(0x7f0000000180), 0x2}, {0x2df, &(0x7f00000001c0)=0xfffffffffffffffb, 0x82}, {0x6, &(0x7f0000000280)=0x4, 0x82}, {0x8001, &(0x7f0000000340)=0x71a, 0x2}, {0x4f, &(0x7f0000000380)=0x2, 0x2}, {0x9, &(0x7f00000003c0)=0x9, 0x82}, {0x2, &(0x7f0000000400)=0x443, 0x82}, {0x9, &(0x7f0000000440)=0x200000000000000}, {0x3, &(0x7f00000004c0)=0x1, 0x2}, {0x69c, &(0x7f0000000600)=0x100000000, 0x82}, {0x100000000, &(0x7f0000000640)=0x6, 0x2}, {0x0, &(0x7f0000000680)=0x2760, 0x2}, {0x6, &(0x7f00000006c0)=0x3ff, 0x82}, {0x306e450, &(0x7f0000000700)=0x4, 0x82}, {0x401, &(0x7f0000000740)=0x9, 0x2}, {0x100000000, &(0x7f0000000780)=0xff, 0x82}, {0x4, &(0x7f00000007c0)=0x2, 0x2}, {0xbe7a, &(0x7f0000000800)=0x7, 0x2}, {0x8757, &(0x7f0000000840)=0x10, 0x82}, {0x0, &(0x7f0000000880)=0x2, 0x2}, {0x9, &(0x7f00000008c0)=0xfffffffffffffff7, 0xdf31976347cc9778}, {0x5, &(0x7f0000000900)=0xc, 0x2}, {0xffffffffffffb454, &(0x7f0000000940)=0x6bd, 0x2}, {0x93, &(0x7f0000000980)=0x1, 0x82}, {0xfffffffffffffffa, &(0x7f00000009c0), 0x2}, {0xffffffffffffffff, &(0x7f0000000a00), 0x82}, {0x924, &(0x7f0000000a40)=0x1, 0x82}, {0x7ff, &(0x7f0000000a80)=0x2, 0x82}, {0x1af, &(0x7f0000000ac0)=0x8, 0x82}, {0x27b, &(0x7f0000000b00)=0x8, 0x82}, {0xffffffffffffff4d, &(0x7f0000000b40)=0xe, 0x82}, {0x1, &(0x7f0000000b80)=0x2, 0x82}, {0xffffffffffffe601, &(0x7f0000000bc0)=0x4, 0x2}, {0xfffffffffffffff7, &(0x7f0000000c00)=0xffffffffffffff82, 0x2}, {0x6f, &(0x7f0000000c40)=0x2, 0x2}, {0xd2, &(0x7f0000000c80)=0xd, 0x2}, {0x749, &(0x7f0000000cc0)=0x2, 0x82}, {0x7fffffff, &(0x7f0000000d00)=0x8, 0x82}, {0xffffffff, &(0x7f0000000d40)=0x9, 0x2}, {0x2, &(0x7f0000000d80)=0x5, 0x2}, {0xe, &(0x7f0000000dc0)=0xea01, 0x2}, {0xb82, &(0x7f0000000e00)=0x8000000000000001, 0x82}, {0x8, &(0x7f0000000e40)=0x7, 0x2}, {0xfffffffffffff801, &(0x7f0000000e80)=0x3ff, 0x82}, {0x5, &(0x7f0000000ec0)=0xfffffffffffff001, 0x82}, {0xb, &(0x7f0000000f00)=0x5, 0x82}, {0x4, &(0x7f0000000f40)=0x7be009b8, 0x82}, {0x5, &(0x7f0000000f80)=0xfffffffffffffff9, 0x82}, {0x5, &(0x7f0000000fc0)=0x6544, 0x82}, {0x9, &(0x7f0000001000), 0x82}, {0x8, &(0x7f0000001040)=0x2, 0x82}, {0x6, &(0x7f0000001080)=0x5ed, 0x2}, {0xdf, &(0x7f00000010c0)=0x1, 0x82}, {0x0, &(0x7f0000001100)=0x9, 0x82}, {0x0, &(0x7f0000001140)=0xb54c, 0x2}, {0xec8, &(0x7f0000001180)=0x1, 0x2}, {0x7, &(0x7f00000011c0)=0x7fffffffffffffff, 0x82}, {0x0, &(0x7f0000001200)=0x200, 0x82}, {0x100000001, &(0x7f0000001240)=0xffffffffffff8c9e, 0x82}, {0x0, &(0x7f0000001280)=0x9c6, 0x2}, {0x5, &(0x7f00000012c0)=0x3, 0x2}, {0x4, &(0x7f0000001300), 0x82}, {0x800, &(0x7f0000001340)=0x4, 0x2}, {0x5, &(0x7f00000013c0)=0xe78, 0x2}, {0x4, &(0x7f0000001400)=0xd, 0x82}, {0x6, &(0x7f0000001440)=0x8, 0x82}, {0x800, 0x0, 0x82}, {0x6, &(0x7f00000014c0)=0x8, 0x82}, {0xce06, &(0x7f0000001500)=0x1, 0x82}, {0x1ba8, &(0x7f0000001540)=0xa90e, 0x2}, {0xfffffffffffffff9, &(0x7f0000001580)=0x1, 0x82}, {0x6, &(0x7f00000015c0)=0xfffffffffffffffa, 0x26ee602c20d9572a}, {0x232, &(0x7f0000001640)=0x9, 0x82}, {0x1, &(0x7f0000001680)=0x8a69, 0x2}, {0x1, &(0x7f00000016c0)=0x10001, 0x2}, {0x7, &(0x7f0000001700)=0x829f, 0x82}, {0xf34, &(0x7f0000001740)=0x6, 0x82}, {0x9, &(0x7f0000001780)=0x8000000000000000, 0x2}, {0x80000001, &(0x7f00000017c0)=0x6, 0x82}, {0x4855, &(0x7f0000001800), 0x2}, {0x5, &(0x7f0000001840)=0x9, 0x2}, {0x0, &(0x7f0000001880), 0x82}, {0x9, &(0x7f00000018c0)=0x49, 0x82}, {0x7, &(0x7f0000001900)=0x10, 0x2}, {0x84, &(0x7f0000001940)=0x4, 0x2}, {0x6, &(0x7f0000001980)=0x6, 0x2}, {0x2, &(0x7f00000019c0)=0x2, 0x82}, {0x3, &(0x7f0000001a00)=0x602d, 0x82}, {0x10001, &(0x7f0000001a40)=0x1, 0x2}, {0x9, &(0x7f0000001a80)=0x1bf2, 0x82}, {0xffff, &(0x7f0000001ac0)=0x101, 0x2}, {0x5, &(0x7f0000001b00)=0xa3, 0x82}, {0x2, &(0x7f0000001b40)=0x1, 0x82}, {0x6, &(0x7f0000001b80)=0x5, 0x82}, {0x9, &(0x7f0000001bc0)=0x100, 0x2}, {0xef67, &(0x7f0000001c00)=0x1, 0x82}, {0xffffffffffffffff, &(0x7f0000001c40)=0x3, 0x82}, {0x8, &(0x7f0000001c80)=0x101, 0x2}, {0x5e0a, &(0x7f0000001cc0)=0x9, 0x82}], 0x65, 0x0, &(0x7f0000002700), 0x0) 9.239705271s ago: executing program 1 (id=2301): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000080)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "e7848bbb4aebb7f4ff19d3b497a59fdd1cd9d51ac958600c4984588499634960", 0x2, 0x101, 0x8001, 0x3}, 0x3c) socket$inet(0x2, 0x1, 0x0) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x800000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f00000001c0)=0x8140) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/reserved_size', 0x40a82, 0x84) sendfile(r4, r4, 0x0, 0x4) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000080)={0x2e, 0x1, 0x13d, 0x89, 0xffffffff, 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) bpf$ITER_CREATE(0x21, 0x0, 0xffffffffffffffec) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000008) unshare(0x20010000) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5c, 0x0, &(0x7f0000000240)="e30080670000ec67838717bd86dde148f0630962bb87dd45fe42904bcfe14db4241544716b9ea42231ed03000000017f9c1fd05dacf5bb80b4b7dd0fae7aea53492b38978d0958a5df2dc6781a2c1b2af08596c7e12bfd09f4562e9f", 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) write$UHID_DESTROY(r4, &(0x7f0000000100), 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 8.686310112s ago: executing program 5 (id=2304): socket$inet(0x2, 0x800, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000a000000010000000000008e"], 0x0, 0x66, 0x0, 0x9}, 0x28) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) setresgid(0xee00, 0xee01, 0x0) r3 = semget$private(0x0, 0x7, 0x191) semtimedop(r3, &(0x7f0000000000)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) 8.481451323s ago: executing program 5 (id=2305): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)) 8.163519386s ago: executing program 5 (id=2306): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x84aebfbd634936f2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x81) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x66) syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x441) 7.959835354s ago: executing program 5 (id=2307): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280), 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x20, 0x9, 0x12, "4f9119518768f0bf0102c27b34bd08474faa"}, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0xd, 0x0, 0x5, 0xfffffffd, 0xfffffffd}) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000100)=@known='trusted.overlay.upper\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x1110, &(0x7f0000000240)={0x0, 0xdb9c, 0x800, 0x10000000, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r4, 0xa289c37, 0x0, 0x40002, 0x5}) io_uring_enter(r5, 0x47f6, 0x0, 0x20, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000008200)) setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), &(0x7f0000000200)=@v3={0x3000000, [{0x1, 0x5}, {0x7, 0x4}]}, 0x18, 0x4) munlock(&(0x7f0000003000/0x3000)=nil, 0x3000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={r3, 0x3}, 0x8) 6.965455671s ago: executing program 1 (id=2312): socket$inet(0x2, 0x800, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000a000000010000000000008e"], 0x0, 0x66, 0x0, 0x9}, 0x28) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) setresgid(0xee00, 0xee01, 0x0) r3 = semget$private(0x0, 0x7, 0x191) semtimedop(r3, &(0x7f0000000000)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) semctl$SETVAL(r3, 0x0, 0x10, &(0x7f0000000080)=0x4) 6.739500882s ago: executing program 0 (id=2313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r1, 0x8010aebb, &(0x7f0000000180)={0x54000}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) landlock_restrict_self(r3, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)="81", 0x1}], 0x1, &(0x7f0000000040)=[{0x10, 0x84, 0x8}], 0x10}, 0x41) 4.826566815s ago: executing program 0 (id=2317): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xca, &(0x7f0000000240)={0x20, 0xf, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x18, &(0x7f0000000740)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x7, 0x1, 0x2, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x80, 0x4, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xff, 0x73, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x3cf, 0x8, 0x4, 0x1}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xb8, 0x3, 0x2, 0x40, 0x2}, 0x16, &(0x7f0000000180)={0x5, 0xf, 0x16, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x7, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x1, 0x6bd}, @ptm_cap={0x3}]}, 0x3, [{0x5, &(0x7f00000001c0)=@string={0x5, 0x3, "86e8a8"}}, {0x102, &(0x7f0000000780)=@string={0x102, 0x3, "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"}}, {0xcd, &(0x7f0000000580)=@string={0xcd, 0x3, "562b25c0a5f1081f2ea0e64da37648114fe0d2e983e1c39afe75fbabc8b4539b39fb5ec71ec7f0c7873aef68dd18e51f5329d08e78610f2999e3456dc167a67c60258bdae5851bfa7e2392747bdcfbe9e63fa44a0ff4f02bfb8471045d7945f842a11ce77a3f1a5fbef5bbe8ef6163baeb4a3a645f7e88a017561c18aaaa4aaa82a68b9f45303ab486d92fc2c8e2ff3fdfa10dc3d77d1f24c256814c0dee9acc23f8c2a94190a363f5cf7e110ae3badc4792587eaf06e546f5d3e2308ae10e5001b2d421d69105c0ba65a8"}}]}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000200)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.789222273s ago: executing program 4 (id=2318): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xffeff00c}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) link(0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2eff, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r5) 4.766404786s ago: executing program 5 (id=2319): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000640)="167af72b41e9e2ce", 0x8, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x3, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x7, 0x6, 0x0, 0x200000}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000002c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000004000000", 0x30) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x16, &(0x7f0000000080)="441f08100000009837a0324d7df546", 0xf) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fbdbdf250c00000058000580080001007564700044000280080001001e00000008000400080000800800030007000000080004000000000008000300200d000008000400df"], 0x6c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000010000003000018014000400ff010000e4ffffffffffffff00000001060005004e220000060001000a0000000800060001000000"], 0x44}}, 0x0) 3.544662665s ago: executing program 5 (id=2321): fanotify_init(0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 3.49127355s ago: executing program 4 (id=2322): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x6, 0xfffff000}, {0x6, 0x1b, 0x4}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0xc}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.361785228s ago: executing program 1 (id=2323): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a000f000200142603600e12080005007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6eaa0c261210ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0", 0xbd}], 0x1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) futex_waitv(&(0x7f0000001d00)=[{0x2, &(0x7f00000000c0)=0x2, 0x82}, {0x4, &(0x7f0000000100)=0x1c, 0x80}, {0xffffffffffffffb3, &(0x7f0000000180), 0x2}, {0x2df, &(0x7f00000001c0)=0xfffffffffffffffb, 0x82}, {0x6, &(0x7f0000000280)=0x4, 0x82}, {0x8001, &(0x7f0000000340)=0x71a, 0x2}, {0x4f, &(0x7f0000000380)=0x2, 0x2}, {0x9, &(0x7f00000003c0)=0x9, 0x82}, {0x2, &(0x7f0000000400)=0x443, 0x82}, {0x9, &(0x7f0000000440)=0x200000000000000}, {0x3, &(0x7f00000004c0)=0x1, 0x2}, {0x69c, &(0x7f0000000600)=0x100000000, 0x82}, {0x100000000, &(0x7f0000000640)=0x6, 0x2}, {0x0, &(0x7f0000000680)=0x2760, 0x2}, {0x6, &(0x7f00000006c0)=0x3ff, 0x82}, {0x306e450, &(0x7f0000000700)=0x4, 0x82}, {0x401, &(0x7f0000000740)=0x9, 0x2}, {0x100000000, &(0x7f0000000780)=0xff, 0x82}, {0x4, &(0x7f00000007c0)=0x2, 0x2}, {0xbe7a, &(0x7f0000000800)=0x7, 0x2}, {0x8757, &(0x7f0000000840)=0x10, 0x82}, {0x0, &(0x7f0000000880)=0x2, 0x2}, {0x9, &(0x7f00000008c0)=0xfffffffffffffff7, 0xdf31976347cc9778}, {0x5, &(0x7f0000000900)=0xc, 0x2}, {0xffffffffffffb454, &(0x7f0000000940)=0x6bd, 0x2}, {0x93, &(0x7f0000000980)=0x1, 0x82}, {0xfffffffffffffffa, &(0x7f00000009c0), 0x2}, {0xffffffffffffffff, &(0x7f0000000a00), 0x82}, {0x924, &(0x7f0000000a40)=0x1, 0x82}, {0x7ff, &(0x7f0000000a80)=0x2, 0x82}, {0x1af, &(0x7f0000000ac0)=0x8, 0x82}, {0x27b, &(0x7f0000000b00)=0x8, 0x82}, {0xffffffffffffff4d, &(0x7f0000000b40)=0xe, 0x82}, {0x1, &(0x7f0000000b80)=0x2, 0x82}, {0xffffffffffffe601, &(0x7f0000000bc0)=0x4, 0x2}, {0xfffffffffffffff7, &(0x7f0000000c00)=0xffffffffffffff82, 0x2}, {0x6f, &(0x7f0000000c40)=0x2, 0x2}, {0xd2, &(0x7f0000000c80)=0xd, 0x2}, {0x749, &(0x7f0000000cc0)=0x2, 0x82}, {0x7fffffff, &(0x7f0000000d00)=0x8, 0x82}, {0xffffffff, &(0x7f0000000d40)=0x9, 0x2}, {0x2, &(0x7f0000000d80)=0x5, 0x2}, {0xe, &(0x7f0000000dc0)=0xea01, 0x2}, {0xb82, &(0x7f0000000e00)=0x8000000000000001, 0x82}, {0x8, &(0x7f0000000e40)=0x7, 0x2}, {0xfffffffffffff801, &(0x7f0000000e80)=0x3ff, 0x82}, {0x5, &(0x7f0000000ec0)=0xfffffffffffff001, 0x82}, {0xb, &(0x7f0000000f00)=0x5, 0x82}, {0x4, &(0x7f0000000f40)=0x7be009b8, 0x82}, {0x5, &(0x7f0000000f80)=0xfffffffffffffff9, 0x82}, {0x5, &(0x7f0000000fc0)=0x6544, 0x82}, {0x9, &(0x7f0000001000), 0x82}, {0x8, &(0x7f0000001040)=0x2, 0x82}, {0x6, &(0x7f0000001080)=0x5ed, 0x2}, {0xdf, &(0x7f00000010c0)=0x1, 0x82}, {0x0, &(0x7f0000001100)=0x9, 0x82}, {0x0, &(0x7f0000001140)=0xb54c, 0x2}, {0xec8, &(0x7f0000001180)=0x1, 0x2}, {0x7, &(0x7f00000011c0)=0x7fffffffffffffff, 0x82}, {0x0, &(0x7f0000001200)=0x200, 0x82}, {0x100000001, &(0x7f0000001240)=0xffffffffffff8c9e, 0x82}, {0x0, &(0x7f0000001280)=0x9c6, 0x2}, {0x5, &(0x7f00000012c0)=0x3, 0x2}, {0x4, &(0x7f0000001300), 0x82}, {0x800, &(0x7f0000001340)=0x4, 0x2}, {0x5, &(0x7f00000013c0)=0xe78, 0x2}, {0x4, &(0x7f0000001400)=0xd, 0x82}, {0x6, &(0x7f0000001440)=0x8, 0x82}, {0x800, 0x0, 0x82}, {0x6, &(0x7f00000014c0)=0x8, 0x82}, {0xce06, &(0x7f0000001500)=0x1, 0x82}, {0x1ba8, &(0x7f0000001540)=0xa90e, 0x2}, {0xfffffffffffffff9, &(0x7f0000001580)=0x1, 0x82}, {0x6, &(0x7f00000015c0)=0xfffffffffffffffa, 0x26ee602c20d9572a}, {0x232, &(0x7f0000001640)=0x9, 0x82}, {0x1, &(0x7f0000001680)=0x8a69, 0x2}, {0x1, &(0x7f00000016c0)=0x10001, 0x2}, {0x7, &(0x7f0000001700)=0x829f, 0x82}, {0xf34, &(0x7f0000001740)=0x6, 0x82}, {0x9, &(0x7f0000001780)=0x8000000000000000, 0x2}, {0x80000001, &(0x7f00000017c0)=0x6, 0x82}, {0x4855, &(0x7f0000001800), 0x2}, {0x5, &(0x7f0000001840)=0x9, 0x2}, {0x0, &(0x7f0000001880), 0x82}, {0x9, &(0x7f00000018c0)=0x49, 0x82}, {0x7, &(0x7f0000001900)=0x10, 0x2}, {0x84, &(0x7f0000001940)=0x4, 0x2}, {0x6, &(0x7f0000001980)=0x6, 0x2}, {0x2, &(0x7f00000019c0)=0x2, 0x82}, {0x3, &(0x7f0000001a00)=0x602d, 0x82}, {0x10001, &(0x7f0000001a40)=0x1, 0x2}, {0x9, &(0x7f0000001a80)=0x1bf2, 0x82}, {0xffff, &(0x7f0000001ac0)=0x101, 0x2}, {0x5, &(0x7f0000001b00)=0xa3, 0x82}, {0x2, &(0x7f0000001b40)=0x1, 0x82}, {0x6, &(0x7f0000001b80)=0x5, 0x82}, {0x9, &(0x7f0000001bc0)=0x100, 0x2}, {0xef67, &(0x7f0000001c00)=0x1, 0x82}, {0xffffffffffffffff, &(0x7f0000001c40)=0x3, 0x82}, {0x8, &(0x7f0000001c80)=0x101, 0x2}, {0x5e0a, &(0x7f0000001cc0)=0x9, 0x82}], 0x65, 0x0, &(0x7f0000002700), 0x0) 3.199279927s ago: executing program 4 (id=2324): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='source', &(0x7f0000000080)='%.({^\xfa@:', 0x0) 3.19888933s ago: executing program 2 (id=2325): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r1, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x80000000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000801) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') mount(&(0x7f0000003d00)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000080)='.\x00', &(0x7f0000000140)='binder\x00', 0x3200896, 0x0) 2.989412034s ago: executing program 4 (id=2326): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f0000001880)={0x8, {"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", 0x1000}}, 0x1006) syz_open_dev$hidraw(&(0x7f0000000180), 0x5, 0x282) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f00000028c0)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620a00fef8ffffff71a400fe000000001f03000000000000e5000600000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d275e92e3216a1cf7be75e57cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab094e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fd97db5c1502930d7c7d1165dda0a708459f004db76741ae76bc6bb81dd8a893d8c2a3e3d13a4ea4c2806033b0e48a1f6e5cdad84b27701b042401c1aa4865431a1a7212ef0b42479f1b45d0e579c9b9f7418e3b252af7b8fdb13c213011b629f85ee4e7280d7019ef0e8af42751530f2361c05472d7953ea55d6b0039de3f07c63c2bc718c08cb5f38cfd4bc7be8337c11c370149fb9096dddd73ea1b2dc509265da426e"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x80001200, 0xffffffff}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x4, 0x7, 0x4}, 0x10}, 0x94) 2.859275932s ago: executing program 2 (id=2327): r0 = socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x22200, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0xa, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010100, @in6=@local, 0x18, 0x14, 0x2}]}, 0x38}, 0x1, 0x7}, 0x20040000) 2.767919909s ago: executing program 4 (id=2328): unshare(0x22020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x85) pwrite64(r0, 0x0, 0x0, 0x3) 2.650568575s ago: executing program 4 (id=2329): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280), 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x20, 0x9, 0x12, "4f9119518768f0bf0102c27b34bd08474faa"}, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0xd, 0x0, 0x5, 0xfffffffd, 0xfffffffd}) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000100)=@known='trusted.overlay.upper\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x1110, &(0x7f0000000240)={0x0, 0xdb9c, 0x800, 0x10000000, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r4, 0xa289c37, 0x0, 0x40002, 0x5}) io_uring_enter(r5, 0x47f6, 0x0, 0x20, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000008200)) setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), &(0x7f0000000200)=@v3={0x3000000, [{0x1, 0x5}, {0x7, 0x4}]}, 0x18, 0x4) munlock(&(0x7f0000003000/0x3000)=nil, 0x3000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={r3, 0x3}, 0x8) 2.545866601s ago: executing program 2 (id=2330): socket$inet(0x2, 0x800, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000a000000010000000000008e"], 0x0, 0x66, 0x0, 0x9}, 0x28) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) setresgid(0xee00, 0xee01, 0x0) r3 = semget$private(0x0, 0x7, 0x191) semtimedop(r3, &(0x7f0000000000)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) semctl$SETVAL(r3, 0x0, 0x10, &(0x7f0000000080)=0x4) 1.515654073s ago: executing program 1 (id=2331): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}, 0x0) 1.487109008s ago: executing program 1 (id=2332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000024c0)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x6, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4094) 1.409145869s ago: executing program 1 (id=2333): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_connect(0x4, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x16, 0xb, 0xd8, 0x8, 0x55f, 0xa800, 0xd624, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x3, 0xa, 0x130, 0x7, "", [{{0x9, 0x4, 0xf, 0x18, 0x1, 0xba, 0x28, 0x39, 0x3, [], [{{0x9, 0x5, 0xa, 0x10, 0x10, 0x6, 0x7, 0x2a, [@generic={0x26, 0xd, "dde8369151bf0323fd322db34b9bb7d97feaf2fe35ca273d8616293617cb8d1a7b75bc3a"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xb4, 0x8}]}}]}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x5, 0x2, 0x40, 0x10, 0x2}, 0x1a, &(0x7f0000000440)={0x5, 0xf, 0x1a, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0xd, 0x6}, @wireless={0xb, 0x10, 0x1, 0x4, 0x5d2b47e933f0bd83, 0xec, 0x1, 0x1, 0x8}]}, 0x5, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x455}}, {0x5a, &(0x7f00000004c0)=@string={0x5a, 0x3, "3186317db77e2f6ca19d011167bea8d05487a289e352e873a135d9513267fb1e5fd9bcbd68f39c0616ef00f77e0a4da19bad4b2b47b35703c40ab0f8c04c8bf79b624fe4dff252b145d05911d47ed20f96ceb71f074fe69d"}}, {0x31, &(0x7f00000005c0)=@string={0x31, 0x3, "a1d23edc89895427aedb7ec5c12c69fe9dadbe71aff28626f97af89dfd88ab8da74c21e93a601f173e5920f9b1f371"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x861}}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000002c0)={0x0, 0xe, 0x1, "ea"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000180)={0x20, 0xc}, 0x0, 0x0}) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @local, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x6e, 0x6, 0x0, @remote, @remote}, {{0x4e1e, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x200, 0x0, 0xe7}}}}}}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'hsr0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x23, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a1180002000202000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x54, r8, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x18, 0x34, @random="6e84e4d0d22c5770d681deda9fb3da3d809f3ef0"}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_KEYS={0x14, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}]}]}]}, 0x54}}, 0x20004800) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1, 0x0, 0x0, 0xeaff}, 0x0) 1.098908811s ago: executing program 2 (id=2334): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000e8ff0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2012) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000700)=""/171, 0xab}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000000d80)=""/4020, 0xfb4}, {&(0x7f00000038c0)=""/4111, 0x100f}, {&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000000)=""/39, 0x27}, {&(0x7f00000000c0)=""/122, 0x7a}], 0x8}, 0x120) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 639.80363ms ago: executing program 0 (id=2335): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) socket(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x0, 0x33}, @in=@broadcast, {0x80, 0x5, 0x0, 0x1, 0x8, 0x0, 0x4}, {0x0, 0x1000000, 0x45, 0xfffffffffffffffd}, {0x0, 0x1}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1c}, 0x0, 0x1}}, 0xf8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x48) r2 = syz_io_uring_setup(0x634, &(0x7f0000000680)={0x0, 0x10, 0x9, 0x5, 0x279}, &(0x7f00000002c0), &(0x7f0000000140)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) bind$packet(r4, 0x0, 0x0) write$dsp(r0, &(0x7f0000000480)="75d512d39077459e67ee110daaf0413bc745ef85bc9f2141d513969bd8000000", 0x1000c) 418.517805ms ago: executing program 0 (id=2336): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x3a4, &(0x7f0000000040)=ANY=[]) r2 = syz_open_dev$video4linux(&(0x7f0000000540), 0xff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f0000000400)={0x0, 0x6, 0x8000, '\x00', 0x0}) unshare(0x6020400) openat(0xffffffffffffff9c, 0x0, 0x42840, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="f4020405bb506f1421fb"]}, 0x0) 100.321498ms ago: executing program 2 (id=2337): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r1, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x80000000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000801) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') mount(&(0x7f0000003d00)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000080)='.\x00', &(0x7f0000000140)='binder\x00', 0x3200896, 0x0) 0s ago: executing program 2 (id=2338): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000408e98f5be6b8e0e0007012bbd70000000000004a5cf144dd5efca2eb6ed7c00000400c2800c0001", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001580)=""/4095, 0xfff}, {&(0x7f0000000300)=""/63, 0x3f}], 0x2}, 0x0) syz_emit_ethernet(0x9b, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @dev, @void, {@generic={0x88fb, "cd471ede2490b1649927c273849da107dfcc0d38b270e3c0ecd949f453fe2988e82496ae2b87b81a9a9951745b5634c3edd11b5a2045122e87d71fdae2be87a4672a0c9d259109c9664d87d8785d362825ebac40a512d1c320b4a3607c40f14cf18e69791cddc14c3bf4c95a9fe94b24bb45d612f6682b6dd35e9a8a1f650253fc4fac7e3c211255973794458e"}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r2}, 0x18) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807", @ANYRESHEX], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x1f, 0x11, 0x48, 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="700000001000010029bc7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c5af07000f0e0000140003006e657464657673696d30000000000000300016802c00018028000100090000000180c200000100000000000000000000000000000000000000000000000000000a0001"], 0x70}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="693fbc00e378859e7fff250c403c4200", 0x10) kernel console output (not intermixed with test programs): 8: hidraw0: HID v0.00 Device [syz1] on syz0 [ 441.441173][ T809] usb 3-1: 0:2 : does not exist [ 441.441257][ T809] usb 3-1: unit 5: unexpected type 0x03 [ 441.441276][ T809] usb 3-1: unit 4 not found! [ 441.549860][ T809] usb 3-1: USB disconnect, device number 41 [ 441.682329][ T6059] udevd[6059]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 441.899905][ T5802] Bluetooth: hci5: command tx timeout [ 442.509855][T10369] loop2: detected capacity change from 0 to 7 [ 442.530333][T10369] Dev loop2: unable to read RDB block 7 [ 442.530374][T10369] loop2: unable to read partition table [ 442.530574][T10369] loop2: partition table beyond EOD, truncated [ 442.530603][T10369] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 443.509787][T10365] netlink: 'syz.3.1483': attribute type 2 has an invalid length. [ 443.980370][ T5802] Bluetooth: hci5: command tx timeout [ 444.124631][ T64] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.648832][T10398] netlink: 'syz.2.1496': attribute type 4 has an invalid length. [ 444.964124][ T64] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.965522][T10420] fuse: Bad value for 'user_id' [ 444.965533][T10420] fuse: Bad value for 'user_id' [ 445.846744][ T64] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.060141][ T5802] Bluetooth: hci5: command tx timeout [ 446.254685][ T5880] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 446.332467][ T64] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.399894][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 446.426290][ T5880] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 446.426319][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.426347][ T5880] usb 2-1: Product: syz [ 446.426362][ T5880] usb 2-1: Manufacturer: syz [ 446.426374][ T5880] usb 2-1: SerialNumber: syz [ 446.495813][ T5880] usb 2-1: config 0 descriptor?? [ 446.499568][ T5880] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 446.879380][T10308] chnl_net:caif_netlink_parms(): no params data found [ 447.211381][ T809] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 447.359800][ T809] usb 4-1: Using ep0 maxpacket: 16 [ 447.369148][ T809] usb 4-1: config index 0 descriptor too short (expected 37359, got 202) [ 447.369175][ T809] usb 4-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 447.369195][ T809] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 447.369212][ T809] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 447.381095][ T809] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.381122][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.381140][ T809] usb 4-1: Product: syz [ 447.381153][ T809] usb 4-1: Manufacturer: syz [ 447.381166][ T809] usb 4-1: SerialNumber: syz [ 447.574650][T10308] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.607327][T10308] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.607566][T10308] bridge_slave_0: entered allmulticast mode [ 447.620549][T10308] bridge_slave_0: entered promiscuous mode [ 447.668036][T10465] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1517'. [ 447.674159][ T64] bridge_slave_1: left allmulticast mode [ 447.674381][ T64] bridge_slave_1: left promiscuous mode [ 447.705866][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.750251][ T809] usb 4-1: 0:2 : does not exist [ 447.761354][ T809] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 447.852898][ T64] bridge_slave_0: left allmulticast mode [ 447.852926][ T64] bridge_slave_0: left promiscuous mode [ 447.853141][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.927803][ T5880] usb 2-1: USB disconnect, device number 28 [ 447.998520][ T809] usb 4-1: USB disconnect, device number 30 [ 448.140157][ T5802] Bluetooth: hci5: command tx timeout [ 448.182098][ T6059] udevd[6059]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 448.389878][ T5880] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 449.841948][ T5880] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 449.841976][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.841994][ T5880] usb 5-1: config 0 has no interface number 0 [ 449.842037][ T5880] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 449.842058][ T5880] usb 5-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 449.844512][ T5880] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 449.844537][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.844556][ T5880] usb 5-1: Product: syz [ 449.844570][ T5880] usb 5-1: Manufacturer: syz [ 449.844583][ T5880] usb 5-1: SerialNumber: syz [ 449.930571][ T5880] usb 5-1: config 0 descriptor?? [ 450.099946][T10508] dlm: non-version read from control device 131 [ 450.165915][T10498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.179364][T10498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.218072][ T31] usb 5-1: USB disconnect, device number 22 [ 451.166750][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.270422][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.328534][ T64] bond0 (unregistering): Released all slaves [ 451.476973][ T1551] ODEBUG: Out of memory. ODEBUG disabled [ 451.497902][T10308] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.498017][T10308] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.498218][T10308] bridge_slave_1: entered allmulticast mode [ 451.523414][T10308] bridge_slave_1: entered promiscuous mode [ 451.536578][T10482] netlink: 'syz.2.1521': attribute type 4 has an invalid length. [ 451.798212][T10308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.810846][T10541] Invalid option length (0) for dns_resolver key [ 451.819534][T10308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.857407][ T37] kauditd_printk_skb: 83 callbacks suppressed [ 451.857426][ T37] audit: type=1326 audit(1772407916.790:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10538 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 451.857468][ T37] audit: type=1326 audit(1772407916.790:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10538 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 451.857507][ T37] audit: type=1326 audit(1772407916.790:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10538 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 451.857546][ T37] audit: type=1326 audit(1772407916.790:4734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10538 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 451.857584][ T37] audit: type=1326 audit(1772407916.790:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10538 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 451.857622][ T37] audit: type=1326 audit(1772407916.790:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10538 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 451.857660][ T37] audit: type=1326 audit(1772407916.790:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10538 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 451.857711][ T37] audit: type=1326 audit(1772407916.790:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10538 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 451.857749][ T37] audit: type=1326 audit(1772407916.790:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10538 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 451.857787][ T37] audit: type=1326 audit(1772407916.790:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10538 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 453.909001][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 453.926462][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 453.927192][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 453.928378][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 453.930976][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 454.044758][T10308] team0: Port device team_slave_0 added [ 454.084551][T10308] team0: Port device team_slave_1 added [ 454.205408][T10308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.205423][T10308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.205442][T10308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.251860][T10308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.251877][T10308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.251903][T10308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.970532][T10593] wlan1 speed is unknown, defaulting to 1000 [ 455.133240][T10308] hsr_slave_0: entered promiscuous mode [ 455.155814][T10308] hsr_slave_1: entered promiscuous mode [ 455.156757][T10308] debugfs: 'hsr0' already exists in 'hsr' [ 455.156780][T10308] Cannot create hsr debugfs directory [ 455.298491][T10613] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1563'. [ 455.980000][ T5807] Bluetooth: hci1: command tx timeout [ 456.158088][T10614] wlan1 speed is unknown, defaulting to 1000 [ 456.322285][ T64] hsr_slave_0: left promiscuous mode [ 456.359896][ T64] hsr_slave_1: left promiscuous mode [ 456.361082][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.361184][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.421537][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.421572][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.611612][ T64] veth1_macvtap: left promiscuous mode [ 456.611838][ T64] veth0_macvtap: left promiscuous mode [ 456.612091][ T64] veth1_vlan: left promiscuous mode [ 456.612370][ T64] veth0_vlan: left promiscuous mode [ 457.329850][ T31] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 457.504200][ T31] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 457.504236][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.504255][ T31] usb 2-1: config 0 has no interface number 0 [ 457.504302][ T31] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 457.504324][ T31] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.507344][ T31] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 457.507372][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.507392][ T31] usb 2-1: Product: syz [ 457.507405][ T31] usb 2-1: Manufacturer: syz [ 457.507419][ T31] usb 2-1: SerialNumber: syz [ 457.644897][ T31] usb 2-1: config 0 descriptor?? [ 457.970504][ T64] team0 (unregistering): Port device team_slave_1 removed [ 458.030659][ T64] team0 (unregistering): Port device team_slave_0 removed [ 458.066531][ T5807] Bluetooth: hci1: command tx timeout [ 458.094450][T10675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.094935][T10675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.101747][ T31] usb 2-1: USB disconnect, device number 29 [ 458.447772][T10722] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1609'. [ 458.464265][T10722] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1609'. [ 459.130094][ T37] kauditd_printk_skb: 81 callbacks suppressed [ 459.130111][ T37] audit: type=1800 audit(1772407924.070:4822): pid=10746 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1619" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 459.860386][ T809] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 459.999789][ T809] usb 2-1: device descriptor read/64, error -71 [ 460.143664][ T5807] Bluetooth: hci1: command tx timeout [ 460.160255][T10593] chnl_net:caif_netlink_parms(): no params data found [ 460.239809][ T809] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 460.369799][ T809] usb 2-1: device descriptor read/64, error -71 [ 460.481011][ T809] usb usb2-port1: attempt power cycle [ 460.797116][ T10] IPVS: starting estimator thread 0... [ 460.839772][ T809] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 460.860525][ T809] usb 2-1: device descriptor read/8, error -71 [ 460.890155][T10811] IPVS: using max 9 ests per chain, 21600 per kthread [ 460.891489][T10815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.891997][T10815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.119818][ T5880] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 461.129821][ T809] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 461.153080][ T809] usb 2-1: device descriptor read/8, error -71 [ 461.244981][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.261629][ T809] usb usb2-port1: unable to enumerate USB device [ 461.286568][T10593] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.286740][T10593] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.286897][T10593] bridge_slave_0: entered allmulticast mode [ 461.288223][T10593] bridge_slave_0: entered promiscuous mode [ 461.549213][T10593] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.549331][T10593] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.549536][T10593] bridge_slave_1: entered allmulticast mode [ 461.559784][T10593] bridge_slave_1: entered promiscuous mode [ 461.614536][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1651'. [ 461.794138][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.027201][T10862] FAULT_INJECTION: forcing a failure. [ 462.027201][T10862] name failslab, interval 1, probability 0, space 0, times 0 [ 462.027237][T10862] CPU: 0 UID: 0 PID: 10862 Comm: syz.4.1657 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 462.027265][T10862] Tainted: [L]=SOFTLOCKUP [ 462.027272][T10862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 462.027284][T10862] Call Trace: [ 462.027291][T10862] [ 462.027299][T10862] dump_stack_lvl+0xe8/0x150 [ 462.027334][T10862] should_fail_ex+0x46b/0x600 [ 462.027371][T10862] should_failslab+0xa8/0x100 [ 462.027403][T10862] __kmalloc_node_noprof+0xe7/0x7f0 [ 462.027434][T10862] ? alloc_slab_obj_exts+0x4b/0x1a0 [ 462.027465][T10862] alloc_slab_obj_exts+0x4b/0x1a0 [ 462.027494][T10862] __memcg_slab_post_alloc_hook+0x525/0xa30 [ 462.027533][T10862] ? __alloc_skb+0x1d0/0x7d0 [ 462.027558][T10862] kmem_cache_alloc_node_noprof+0x4b7/0x6e0 [ 462.027586][T10862] ? __alloc_skb+0x1d0/0x7d0 [ 462.027614][T10862] __alloc_skb+0x1d0/0x7d0 [ 462.027642][T10862] alloc_skb_with_frags+0xca/0x890 [ 462.027672][T10862] ? __lock_acquire+0x6b5/0x2cf0 [ 462.027697][T10862] sock_alloc_send_pskb+0x884/0x9a0 [ 462.027743][T10862] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 462.027777][T10862] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 462.027815][T10862] unix_stream_sendmsg+0x4c4/0xe80 [ 462.027855][T10862] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 462.027887][T10862] ? kernel_text_address+0xa5/0xe0 [ 462.027915][T10862] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 462.027946][T10862] sock_write_iter+0x509/0x550 [ 462.027979][T10862] ? __pfx_sock_write_iter+0x10/0x10 [ 462.028029][T10862] do_iter_readv_writev+0x62b/0x8d0 [ 462.028062][T10862] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 462.028099][T10862] ? rw_verify_area+0x25b/0x4e0 [ 462.028129][T10862] vfs_writev+0x345/0x9a0 [ 462.028159][T10862] ? __pfx_vfs_writev+0x10/0x10 [ 462.028193][T10862] ? __fget_files+0x2a/0x420 [ 462.028220][T10862] ? __fget_files+0x3a6/0x420 [ 462.028242][T10862] ? __fget_files+0x2a/0x420 [ 462.028273][T10862] do_writev+0x15a/0x2e0 [ 462.028296][T10862] ? __pfx_do_writev+0x10/0x10 [ 462.028327][T10862] do_syscall_64+0x14d/0xf80 [ 462.028353][T10862] ? trace_irq_disable+0x3b/0x150 [ 462.028375][T10862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.028395][T10862] ? clear_bhb_loop+0x40/0x90 [ 462.028419][T10862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.028438][T10862] RIP: 0033:0x7fc1d486c799 [ 462.028456][T10862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.028473][T10862] RSP: 002b:00007fc1d2abe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 462.028494][T10862] RAX: ffffffffffffffda RBX: 00007fc1d4ae5fa0 RCX: 00007fc1d486c799 [ 462.028509][T10862] RDX: 0000000000000003 RSI: 0000200000000100 RDI: 0000000000000003 [ 462.028521][T10862] RBP: 00007fc1d2abe090 R08: 0000000000000000 R09: 0000000000000000 [ 462.028533][T10862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.028544][T10862] R13: 00007fc1d4ae6038 R14: 00007fc1d4ae5fa0 R15: 00007ffd9d1e5098 [ 462.028574][T10862] [ 462.225085][ T5807] Bluetooth: hci1: command tx timeout [ 462.492627][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.545843][T10593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.664724][T10593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.271639][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.803772][ T809] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 463.951153][T10593] team0: Port device team_slave_0 added [ 463.952821][T10308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 463.969740][ T809] usb 2-1: device descriptor read/64, error -71 [ 464.024685][T10593] team0: Port device team_slave_1 added [ 464.025170][T10308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 464.141961][T10308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 464.210063][ T809] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 464.255942][T10308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 464.260021][ T10] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 464.324904][T10593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.324921][T10593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.324947][T10593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.339781][ T809] usb 2-1: device descriptor read/64, error -71 [ 464.341801][T10593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.341815][T10593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.341842][T10593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.390122][ T10] usb 3-1: device descriptor read/64, error -71 [ 464.461173][ T809] usb usb2-port1: attempt power cycle [ 464.632821][ T10] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 464.759836][ T10] usb 3-1: device descriptor read/64, error -71 [ 464.799807][ T809] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 464.807762][T10593] hsr_slave_0: entered promiscuous mode [ 464.808948][T10593] hsr_slave_1: entered promiscuous mode [ 464.822066][ T809] usb 2-1: device descriptor read/8, error -71 [ 464.831603][T10593] debugfs: 'hsr0' already exists in 'hsr' [ 464.831627][T10593] Cannot create hsr debugfs directory [ 464.870145][ T10] usb usb3-port1: attempt power cycle [ 464.915736][ T64] bridge_slave_1: left allmulticast mode [ 464.915764][ T64] bridge_slave_1: left promiscuous mode [ 464.915992][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.021399][ T64] bridge_slave_0: left allmulticast mode [ 465.021427][ T64] bridge_slave_0: left promiscuous mode [ 465.021678][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.061025][ T809] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 465.080582][ T809] usb 2-1: device descriptor read/8, error -71 [ 465.190933][ T809] usb usb2-port1: unable to enumerate USB device [ 465.229799][ T10] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 465.252923][ T10] usb 3-1: device descriptor read/8, error -71 [ 465.491290][ T10] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 465.511958][ T10] usb 3-1: device descriptor read/8, error -71 [ 465.640987][ T10] usb usb3-port1: unable to enumerate USB device [ 465.659050][T10978] FAULT_INJECTION: forcing a failure. [ 465.659050][T10978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.659073][T10978] CPU: 0 UID: 0 PID: 10978 Comm: syz.4.1693 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 465.659087][T10978] Tainted: [L]=SOFTLOCKUP [ 465.659091][T10978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 465.659097][T10978] Call Trace: [ 465.659101][T10978] [ 465.659106][T10978] dump_stack_lvl+0xe8/0x150 [ 465.659126][T10978] should_fail_ex+0x46b/0x600 [ 465.659145][T10978] _copy_from_user+0x2d/0xb0 [ 465.659160][T10978] sk_setsockopt+0x2b3/0x2bb0 [ 465.659177][T10978] ? __pfx_sk_setsockopt+0x10/0x10 [ 465.659191][T10978] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 465.659205][T10978] ? lockdep_hardirqs_on+0x7a/0x110 [ 465.659225][T10978] ? __fget_files+0x2a/0x420 [ 465.659239][T10978] ? __fget_files+0x2a/0x420 [ 465.659249][T10978] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 465.659267][T10978] do_sock_setsockopt+0x11b/0x1b0 [ 465.659282][T10978] __x64_sys_setsockopt+0x143/0x1b0 [ 465.659298][T10978] do_syscall_64+0x14d/0xf80 [ 465.659311][T10978] ? trace_irq_disable+0x3b/0x150 [ 465.659322][T10978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.659332][T10978] ? clear_bhb_loop+0x40/0x90 [ 465.659344][T10978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.659354][T10978] RIP: 0033:0x7fc1d486c799 [ 465.659364][T10978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.659373][T10978] RSP: 002b:00007fc1d2abe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 465.659385][T10978] RAX: ffffffffffffffda RBX: 00007fc1d4ae5fa0 RCX: 00007fc1d486c799 [ 465.659392][T10978] RDX: 0000000000000050 RSI: 0000000000000001 RDI: 0000000000000003 [ 465.659398][T10978] RBP: 00007fc1d2abe090 R08: 0000000000000048 R09: 0000000000000000 [ 465.659404][T10978] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 465.659411][T10978] R13: 00007fc1d4ae6038 R14: 00007fc1d4ae5fa0 R15: 00007ffd9d1e5098 [ 465.659426][T10978] [ 467.738806][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1706'. [ 468.660550][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.750400][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.791727][ T64] bond0 (unregistering): Released all slaves [ 469.012556][T11040] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1719'. [ 469.012621][T11040] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1719'. [ 469.012636][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1719'. [ 469.203751][T11046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1722'. [ 469.203778][T11046] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1722'. [ 469.203796][T11046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1722'. [ 469.207606][T11046] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1722'. [ 469.329827][ T31] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 469.459801][ T31] usb 2-1: device descriptor read/64, error -71 [ 470.057708][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1727'. [ 470.600508][ T31] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 470.789765][ T31] usb 2-1: device descriptor read/64, error -71 [ 470.900070][ T31] usb usb2-port1: attempt power cycle [ 471.239761][ T31] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 471.260353][ T31] usb 2-1: device descriptor read/8, error -71 [ 471.541087][ T31] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 471.559912][ T64] hsr_slave_0: left promiscuous mode [ 471.560570][ T31] usb 2-1: device descriptor read/8, error -71 [ 471.631851][ T64] hsr_slave_1: left promiscuous mode [ 471.632973][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.632999][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.670263][ T31] usb usb2-port1: unable to enumerate USB device [ 471.688563][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.688588][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.792786][ T64] team0: left allmulticast mode [ 471.792801][ T64] team_slave_0: left allmulticast mode [ 471.792810][ T64] team_slave_1: left allmulticast mode [ 471.792858][ T64] team0: left promiscuous mode [ 471.793214][ T64] team_slave_0: left promiscuous mode [ 471.793245][ T64] team_slave_1: left promiscuous mode [ 471.793327][ T64] veth1_macvtap: left promiscuous mode [ 471.793367][ T64] veth0_macvtap: left promiscuous mode [ 472.009957][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1745'. [ 473.246985][ T64] team0 (unregistering): Port device team_slave_1 removed [ 473.326550][ T64] team0 (unregistering): Port device team_slave_0 removed [ 473.773303][T11121] hsr0: entered promiscuous mode [ 474.283943][T10308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.349348][T10593] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 474.440108][T10593] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 474.504571][T10593] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 474.620715][T10593] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 474.818574][T11188] program syz.1.1774 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.880495][T10308] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.883373][T11188] SQUASHFS error: Failed to read block 0x0: -5 [ 474.883424][T11188] unable to read squashfs_super_block [ 474.925611][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.925850][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.972261][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.972401][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.533096][T10593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.746594][T10593] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.782797][ T4956] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.783008][ T4956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.809256][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.855772][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.092520][T11233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1784'. [ 477.093665][T11233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1784'. [ 477.520518][T10308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.738248][T10308] veth0_vlan: entered promiscuous mode [ 477.787413][T10308] veth1_vlan: entered promiscuous mode [ 478.610059][T11257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1791'. [ 478.714213][T10308] veth0_macvtap: entered promiscuous mode [ 478.761248][T10308] veth1_macvtap: entered promiscuous mode [ 478.812765][T10593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.924442][T10308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.961792][T10308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.030123][ T5090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.035347][ T5090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.036164][ T5090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.036442][ T5090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.599859][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.599881][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.941851][ T6361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.941872][ T6361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.409937][T11306] syz.1.1804 (11306): /proc/11305/oom_adj is deprecated, please use /proc/11305/oom_score_adj instead. [ 481.950591][T10593] veth0_vlan: entered promiscuous mode [ 482.045496][T10593] veth1_vlan: entered promiscuous mode [ 482.327171][T10593] veth0_macvtap: entered promiscuous mode [ 482.338655][T10593] veth1_macvtap: entered promiscuous mode [ 483.160906][T10593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.209825][ T5811] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 483.230668][T10593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.248448][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.248711][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.248915][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.249116][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.365596][ T5811] usb 1-1: Invalid ep0 maxpacket: 64 [ 483.509826][ T5811] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 483.679715][ T5811] usb 1-1: Invalid ep0 maxpacket: 64 [ 483.680312][ T5811] usb usb1-port1: attempt power cycle [ 483.707273][ T1551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.707294][ T1551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.059869][ T5811] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 484.080378][ T5811] usb 1-1: Invalid ep0 maxpacket: 64 [ 484.232535][ T5811] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 484.263370][ T5811] usb 1-1: Invalid ep0 maxpacket: 64 [ 484.263687][ T5811] usb usb1-port1: unable to enumerate USB device [ 484.442769][ T6361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.442789][ T6361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.421451][T11387] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1826'. [ 489.422056][T11387] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1826'. [ 492.936063][T11448] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1827'. [ 493.001755][ T37] audit: type=1326 audit(1772407957.860:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11428 comm="syz.1.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d0ac799 code=0x7ffc0000 [ 493.001973][ T37] audit: type=1326 audit(1772407957.860:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11428 comm="syz.1.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d0ac799 code=0x7ffc0000 [ 493.002163][ T37] audit: type=1326 audit(1772407957.860:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11428 comm="syz.1.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d0ac799 code=0x7ffc0000 [ 493.002360][ T37] audit: type=1326 audit(1772407957.860:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11428 comm="syz.1.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a6d0ac799 code=0x7ffc0000 [ 493.002708][ T37] audit: type=1326 audit(1772407957.870:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11428 comm="syz.1.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d0ac799 code=0x7ffc0000 [ 493.006157][ T37] audit: type=1326 audit(1772407957.870:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11428 comm="syz.1.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d0ac799 code=0x7ffc0000 [ 493.006410][ T37] audit: type=1326 audit(1772407957.870:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11428 comm="syz.1.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d0ac799 code=0x7ffc0000 [ 493.006585][ T37] audit: type=1326 audit(1772407957.870:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11428 comm="syz.1.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6a6d0ac799 code=0x7ffc0000 [ 493.006781][ T37] audit: type=1326 audit(1772407957.880:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11428 comm="syz.1.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d0ac799 code=0x7ffc0000 [ 493.006974][ T37] audit: type=1326 audit(1772407957.880:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11428 comm="syz.1.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d0ac799 code=0x7ffc0000 [ 494.006765][T11459] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1845'. [ 494.021708][T11459] FAULT_INJECTION: forcing a failure. [ 494.021708][T11459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.021767][T11459] CPU: 0 UID: 0 PID: 11459 Comm: syz.4.1845 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 494.021795][T11459] Tainted: [L]=SOFTLOCKUP [ 494.021802][T11459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 494.021813][T11459] Call Trace: [ 494.021821][T11459] [ 494.021830][T11459] dump_stack_lvl+0xe8/0x150 [ 494.021931][T11459] should_fail_ex+0x46b/0x600 [ 494.022055][T11459] _copy_to_user+0x31/0xb0 [ 494.022106][T11459] simple_read_from_buffer+0xe1/0x170 [ 494.022181][T11459] proc_fail_nth_read+0x1be/0x230 [ 494.022269][T11459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 494.022293][T11459] ? rw_verify_area+0x2ac/0x4e0 [ 494.022420][T11459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 494.022444][T11459] vfs_read+0x212/0xa80 [ 494.022479][T11459] ? __pfx_vfs_read+0x10/0x10 [ 494.022509][T11459] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 494.022584][T11459] ? lockdep_hardirqs_on+0x7a/0x110 [ 494.022635][T11459] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 494.022663][T11459] ? mutex_lock_nested+0x152/0x1d0 [ 494.022682][T11459] ? fdget_pos+0x252/0x320 [ 494.022739][T11459] ksys_read+0x156/0x270 [ 494.022768][T11459] ? __pfx_ksys_read+0x10/0x10 [ 494.022807][T11459] do_syscall_64+0x14d/0xf80 [ 494.022857][T11459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.022893][T11459] ? clear_bhb_loop+0x40/0x90 [ 494.022918][T11459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.022937][T11459] RIP: 0033:0x7fc1d482cfce [ 494.022956][T11459] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 494.022973][T11459] RSP: 002b:00007fc1d2a7bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 494.022993][T11459] RAX: ffffffffffffffda RBX: 00007fc1d2a7c6c0 RCX: 00007fc1d482cfce [ 494.023007][T11459] RDX: 000000000000000f RSI: 00007fc1d2a7c0a0 RDI: 0000000000000006 [ 494.023019][T11459] RBP: 00007fc1d2a7c090 R08: 0000000000000000 R09: 0000000000000000 [ 494.023031][T11459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.023043][T11459] R13: 00007fc1d4ae6218 R14: 00007fc1d4ae6180 R15: 00007ffd9d1e5098 [ 494.023074][T11459] [ 495.448527][T11475] netlink: 'syz.2.1853': attribute type 1 has an invalid length. [ 495.448635][T11475] netlink: 'syz.2.1853': attribute type 2 has an invalid length. [ 495.448649][T11475] netlink: 'syz.2.1853': attribute type 1 has an invalid length. [ 495.448662][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'. [ 495.456329][T11475] overlayfs: workdir and upperdir must be separate subtrees [ 497.054314][T11515] netlink: 'syz.5.1868': attribute type 3 has an invalid length. [ 497.219793][ T810] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 497.389316][ T810] usb 2-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 497.389352][ T810] usb 2-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.389374][ T810] usb 2-1: config 2 interface 0 has no altsetting 0 [ 497.389405][ T810] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 497.389428][ T810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.649751][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 498.706816][ T810] elo 0003:04E7:0009.0009: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.1-1/input0 [ 498.769754][ T5880] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 498.807126][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=b6.98 [ 498.807162][ T10] usb 3-1: New USB device strings: Mfr=50, Product=8, SerialNumber=0 [ 498.807181][ T10] usb 3-1: Product: syz [ 498.807194][ T10] usb 3-1: Manufacturer: syz [ 498.825331][ T10] usb 3-1: config 0 descriptor?? [ 498.857741][ T10] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 498.878132][ T10] ftdi_sio ttyUSB0: unknown device type: 0xb698 [ 498.929722][ T5880] usb 6-1: Using ep0 maxpacket: 8 [ 498.931923][ T5880] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.931947][ T5880] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 498.931993][ T5880] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 498.934765][ T5880] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 498.934790][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.934809][ T5880] usb 6-1: Product: syz [ 498.934821][ T5880] usb 6-1: Manufacturer: syz [ 498.934834][ T5880] usb 6-1: SerialNumber: syz [ 498.968640][ T5880] usb 6-1: config 0 descriptor?? [ 498.971958][ T10] usb 2-1: USB disconnect, device number 42 [ 499.060357][T11546] fido_id[11546]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 499.096836][ T5880] powermate 6-1:0.0: probe with driver powermate failed with error -22 [ 499.219773][T10947] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 499.372645][T10947] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 499.372678][T10947] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.372703][T10947] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 499.372714][T10947] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 499.374878][T10947] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 499.374905][T10947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.374922][T10947] usb 1-1: Product: syz [ 499.374931][T10947] usb 1-1: Manufacturer: syz [ 499.374938][T10947] usb 1-1: SerialNumber: syz [ 500.906344][ T10] usb 3-1: USB disconnect, device number 47 [ 501.014358][ T10] ftdi_sio 3-1:0.0: device disconnected [ 501.115923][ T31] usb 6-1: USB disconnect, device number 2 [ 501.510716][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.510790][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.329487][T10947] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 502.329519][T10947] cdc_ncm 1-1:1.0: bind() failure [ 502.336750][T10947] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 502.336793][T10947] cdc_ncm 1-1:1.1: bind() failure [ 502.348280][T10947] usb 1-1: USB disconnect, device number 19 [ 502.377800][ T5811] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 502.554536][ T5811] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 502.554564][ T5811] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 502.556862][ T5811] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 502.556888][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 502.556905][ T5811] usb 2-1: Product: syz [ 502.556917][ T5811] usb 2-1: Manufacturer: syz [ 502.556930][ T5811] usb 2-1: SerialNumber: syz [ 503.151682][T11608] fuse: Unknown parameter '0x0000000000000009' [ 503.359078][ T810] usb 2-1: USB disconnect, device number 43 [ 509.322179][ T37] kauditd_printk_skb: 101 callbacks suppressed [ 509.322197][ T37] audit: type=1326 audit(1772407974.270:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11653 comm="syz.2.1913" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24388ac799 code=0x0 [ 509.734414][T11660] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 509.840097][T11660] overlayfs: failed to resolve '/d¶jàJ¦': -2 [ 509.904605][T11665] overlayfs: failed to resolve '/G§³js ': -2 [ 511.107771][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1927'. [ 512.469860][ T994] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 512.700578][T11721] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1934'. [ 512.719966][ T994] usb 2-1: Using ep0 maxpacket: 16 [ 512.720886][ T994] usb 2-1: too many configurations: 180, using maximum allowed: 8 [ 512.811010][ T994] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 512.819189][ T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.819212][ T994] usb 2-1: Product: syz [ 512.819223][ T994] usb 2-1: Manufacturer: syz [ 512.819235][ T994] usb 2-1: SerialNumber: syz [ 512.880270][ T994] r8152-cfgselector 2-1: Unknown version 0x0000 [ 512.880306][ T994] r8152-cfgselector 2-1: config 0 descriptor?? [ 513.123762][T11721] wlan1 speed is unknown, defaulting to 1000 [ 513.201736][T11727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.202225][T11727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.282388][ T31] r8152-cfgselector 2-1: USB disconnect, device number 44 [ 514.440523][T11757] IPv6: NLM_F_CREATE should be specified when creating new route [ 514.441144][T11757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 514.441158][T11757] IPv6: NLM_F_CREATE should be set when creating new route [ 514.441747][T11757] IPv6: NLM_F_CREATE should be set when creating new route [ 514.453444][T11759] FAULT_INJECTION: forcing a failure. [ 514.453444][T11759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.453478][T11759] CPU: 0 UID: 0 PID: 11759 Comm: syz.0.1943 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 514.453504][T11759] Tainted: [L]=SOFTLOCKUP [ 514.453510][T11759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 514.453521][T11759] Call Trace: [ 514.453528][T11759] [ 514.453536][T11759] dump_stack_lvl+0xe8/0x150 [ 514.453570][T11759] should_fail_ex+0x46b/0x600 [ 514.453606][T11759] _copy_from_user+0x2d/0xb0 [ 514.453631][T11759] do_sys_poll+0x2a0/0xfa0 [ 514.453756][T11759] ? __lock_acquire+0x6b5/0x2cf0 [ 514.453797][T11759] ? __pfx_do_sys_poll+0x10/0x10 [ 514.453816][T11759] ? is_bpf_text_address+0x26/0x2b0 [ 514.453857][T11759] ? kernel_text_address+0xa5/0xe0 [ 514.453884][T11759] ? __kernel_text_address+0xd/0x30 [ 514.454000][T11759] ? __pfx_timespec64_add_safe+0x10/0x10 [ 514.454048][T11759] __x64_sys_poll+0x190/0x350 [ 514.454071][T11759] ? __pfx___x64_sys_poll+0x10/0x10 [ 514.454102][T11759] do_syscall_64+0x14d/0xf80 [ 514.454129][T11759] ? trace_irq_disable+0x3b/0x150 [ 514.454159][T11759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.454178][T11759] ? clear_bhb_loop+0x40/0x90 [ 514.454201][T11759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.454220][T11759] RIP: 0033:0x7f14f4eac799 [ 514.454238][T11759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.454254][T11759] RSP: 002b:00007f14f30fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 514.454273][T11759] RAX: ffffffffffffffda RBX: 00007f14f5125fa0 RCX: 00007f14f4eac799 [ 514.454288][T11759] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 514.454300][T11759] RBP: 00007f14f30fe090 R08: 0000000000000000 R09: 0000000000000000 [ 514.454312][T11759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.454323][T11759] R13: 00007f14f5126038 R14: 00007f14f5125fa0 R15: 00007ffc00eee758 [ 514.454352][T11759] [ 514.649737][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 514.649985][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 514.779797][ T10] usb 3-1: device descriptor read/64, error -32 [ 514.881538][ T37] audit: type=1326 audit(1772407979.830:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11766 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f4eac799 code=0x7ffc0000 [ 514.882120][ T37] audit: type=1326 audit(1772407979.830:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11766 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f4eac799 code=0x7ffc0000 [ 514.882163][ T37] audit: type=1326 audit(1772407979.830:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11766 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f4eac799 code=0x7ffc0000 [ 514.882435][ T37] audit: type=1326 audit(1772407979.830:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11766 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f14f4eac799 code=0x7ffc0000 [ 514.882810][ T37] audit: type=1326 audit(1772407979.830:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11766 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f4eac799 code=0x7ffc0000 [ 514.882850][ T37] audit: type=1326 audit(1772407979.830:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11766 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f4eac799 code=0x7ffc0000 [ 514.883130][ T37] audit: type=1326 audit(1772407979.830:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11766 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f4eac799 code=0x7ffc0000 [ 514.883495][ T37] audit: type=1326 audit(1772407979.830:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11766 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14f4eac799 code=0x7ffc0000 [ 514.883535][ T37] audit: type=1326 audit(1772407979.830:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11766 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f4eac799 code=0x7ffc0000 [ 514.884066][ T37] audit: type=1326 audit(1772407979.830:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11766 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f4eac799 code=0x7ffc0000 [ 515.019865][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 515.184801][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 515.194528][ T10] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 515.194555][ T10] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 515.194576][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 515.194595][ T10] usb 3-1: config 1 has no interface number 0 [ 515.194637][ T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 515.194661][ T10] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 515.194699][ T10] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 515.194719][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.247325][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 515.496559][T11744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.499196][T11744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.544467][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 516.009085][ T10] usb 3-1: USB disconnect, device number 49 [ 516.012997][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 516.029779][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 516.189790][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 516.220681][ T31] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 516.220715][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 516.220739][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 516.220761][ T31] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.220800][ T31] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 516.220819][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.370363][ T994] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 516.519702][ T994] usb 2-1: Using ep0 maxpacket: 8 [ 516.554595][ T994] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 516.554625][ T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.554643][ T994] usb 2-1: Product: syz [ 516.554653][ T994] usb 2-1: Manufacturer: syz [ 516.554661][ T994] usb 2-1: SerialNumber: syz [ 516.597411][ T994] usb 2-1: config 0 descriptor?? [ 516.602831][ T31] usb 1-1: GET_CAPABILITIES returned 0 [ 516.602873][ T31] usbtmc 1-1:16.0: can't read capabilities [ 516.647636][ T994] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 517.639605][ T994] gspca_sonixj: reg_r err -32 [ 517.639840][ T994] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 518.353480][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 518.361078][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 518.394980][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 518.398363][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 518.416464][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 518.793466][T11798] wlan1 speed is unknown, defaulting to 1000 [ 518.927175][ T994] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 519.103137][ T994] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 4 [ 519.120007][ T994] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 519.120035][ T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.120053][ T994] usb 3-1: Product: syz [ 519.120067][ T994] usb 3-1: Manufacturer: syz [ 519.120080][ T994] usb 3-1: SerialNumber: syz [ 519.382630][T11804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.383096][T11804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.418016][ T994] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 519.418678][ T994] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 519.512073][ T994] usb 3-1: USB disconnect, device number 50 [ 519.809025][ T994] usb 1-1: USB disconnect, device number 20 [ 520.986779][ T5811] usb 2-1: USB disconnect, device number 45 [ 521.901182][T11836] siw: device registration error -23 [ 521.910167][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'. [ 522.723181][ T5802] Bluetooth: hci4: command tx timeout [ 522.731891][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 522.874353][T11844] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1964'. [ 524.058646][T11798] chnl_net:caif_netlink_parms(): no params data found [ 524.066958][T11853] loop8: detected capacity change from 0 to 8 [ 524.075600][T11853] Dev loop8: unable to read RDB block 8 [ 524.075646][T11853] loop8: unable to read partition table [ 524.075826][T11853] loop8: partition table beyond EOD, truncated [ 524.075843][T11853] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 524.275841][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1968'. [ 524.782143][ T5802] Bluetooth: hci4: command tx timeout [ 524.969308][T11401] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.999786][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1970'. [ 525.261177][T11875] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1972'. [ 525.274908][T11875] siw: device registration error -23 [ 525.283626][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1972'. [ 525.537185][T11864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.683163][T11881] net_ratelimit: 56 callbacks suppressed [ 525.683184][T11881] openvswitch: netlink: Missing key (keys=1040, expected=10000000) [ 525.969802][ T5811] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 526.129852][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 526.131955][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.131986][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.132008][ T5811] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 526.132054][ T5811] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 526.132076][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.174635][ T5811] usb 1-1: config 0 descriptor?? [ 526.628221][ T5811] microsoft 0003:045E:07DA.000A: item 0 4 0 8 parsing failed [ 526.628960][ T5811] microsoft 0003:045E:07DA.000A: parse failed [ 526.649782][ T5811] microsoft 0003:045E:07DA.000A: probe with driver microsoft failed with error -22 [ 526.896383][ T5802] Bluetooth: hci4: command tx timeout [ 526.916324][T11884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.916792][T11884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.924674][T11864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.005658][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1974'. [ 527.316608][T11886] nbd: socks must be embedded in a SOCK_ITEM attr [ 528.239360][T10947] usb 1-1: USB disconnect, device number 21 [ 528.289291][T11401] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.418581][ T37] kauditd_printk_skb: 31 callbacks suppressed [ 528.418599][ T37] audit: type=1800 audit(1772407993.360:4976): pid=11903 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1978" name="bus" dev="overlay" ino=1347 res=0 errno=0 [ 528.486929][ T6059] udevd[6059]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 528.721865][T11401] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.783150][T11798] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.783270][T11798] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.783438][T11798] bridge_slave_0: entered allmulticast mode [ 528.786174][T11798] bridge_slave_0: entered promiscuous mode [ 528.789459][T11798] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.790614][T11798] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.790789][T11798] bridge_slave_1: entered allmulticast mode [ 528.793307][T11798] bridge_slave_1: entered promiscuous mode [ 528.939837][ T5802] Bluetooth: hci4: command tx timeout [ 529.243446][T11918] siw: device registration error -23 [ 529.255786][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1982'. [ 529.792772][T11401] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.932409][T11917] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1982'. [ 529.981489][T11798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.000577][T11798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.088750][T11798] team0: Port device team_slave_0 added [ 530.098461][T11798] team0: Port device team_slave_1 added [ 530.143948][T11798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.143965][T11798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.143991][T11798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.146080][T11798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.146093][T11798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.146118][T11798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.301231][T11798] hsr_slave_0: entered promiscuous mode [ 530.302641][T11798] hsr_slave_1: entered promiscuous mode [ 530.303629][T11798] debugfs: 'hsr0' already exists in 'hsr' [ 530.303652][T11798] Cannot create hsr debugfs directory [ 530.980352][ T810] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 531.158014][ T810] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.158068][ T810] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 531.158090][ T810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.187562][ T5811] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 531.203651][ T810] usb 2-1: config 0 descriptor?? [ 531.218851][ T810] usb 2-1: bad CDC descriptors [ 531.309803][ T5811] usb 1-1: device descriptor read/64, error -71 [ 531.621406][ T5811] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 531.871241][ T5811] usb 1-1: device descriptor read/64, error -71 [ 531.985886][ T5811] usb usb1-port1: attempt power cycle [ 532.003505][ T5859] usb 2-1: USB disconnect, device number 46 [ 532.460031][ T5811] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 532.508184][ T5811] usb 1-1: device descriptor read/8, error -71 [ 532.646670][T11401] bridge_slave_0: left allmulticast mode [ 532.646698][T11401] bridge_slave_0: left promiscuous mode [ 532.646934][T11401] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.749755][ T5811] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 532.749776][ T994] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 532.779759][ T5811] usb 1-1: device descriptor read/8, error -71 [ 532.879776][ T994] usb 3-1: device descriptor read/64, error -71 [ 532.889810][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 532.903864][ T5811] usb usb1-port1: unable to enumerate USB device [ 533.029786][T10947] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 533.040168][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 533.042835][ T10] usb 6-1: config 251 has an invalid interface number: 202 but max is 0 [ 533.042859][ T10] usb 6-1: config 251 has no interface number 0 [ 533.042902][ T10] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 533.042922][ T10] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 533.042944][ T10] usb 6-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 533.042965][ T10] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 533.042990][ T10] usb 6-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 533.043014][ T10] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 120 [ 533.043035][ T10] usb 6-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.043061][ T10] usb 6-1: config 251 interface 202 has no altsetting 0 [ 533.045961][ T10] usb 6-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 533.045987][ T10] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 533.046004][ T10] usb 6-1: Product: syz [ 533.046018][ T10] usb 6-1: SerialNumber: syz [ 533.063013][T11948] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 533.119784][ T994] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 533.187019][T10947] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 533.187046][T10947] usb 2-1: config 0 has no interface number 0 [ 533.187090][T10947] usb 2-1: config 0 interface 41 has no altsetting 0 [ 533.194717][T10947] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 533.194746][T10947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.195121][T10947] usb 2-1: Product: syz [ 533.195136][T10947] usb 2-1: Manufacturer: syz [ 533.195150][T10947] usb 2-1: SerialNumber: syz [ 533.213951][T10947] usb 2-1: config 0 descriptor?? [ 533.249705][ T994] usb 3-1: device descriptor read/64, error -71 [ 533.360619][ T994] usb usb3-port1: attempt power cycle [ 533.468860][ T10] cxacru 6-1:251.202: submit of write urb for cm 0x90 failed (-90) [ 533.469816][ T10] cxacru 6-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 533.470733][T11953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.471105][T11953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.478475][ T10] cxacru 6-1:251.202: probe with driver cxacru failed with error -22 [ 533.571862][ T10] usb 6-1: USB disconnect, device number 4 [ 533.709809][ T994] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 533.730391][ T994] usb 3-1: device descriptor read/8, error -71 [ 533.879735][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 533.969807][ T994] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 533.993408][ T994] usb 3-1: device descriptor read/8, error -71 [ 534.154148][T11972] siw: device registration error -23 [ 534.273699][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1993'. [ 534.735574][T10947] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 534.741895][ T994] usb usb3-port1: unable to enumerate USB device [ 534.803982][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.804029][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 534.804104][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.037855][ T10] usb 6-1: config 0 descriptor?? [ 535.245764][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 535.246106][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 535.284024][ T10] usb 6-1: USB disconnect, device number 5 [ 535.539783][ T5811] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 535.609756][ T10] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 535.660386][T11401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.699800][ T5811] usb 3-1: Using ep0 maxpacket: 16 [ 535.702963][ T5811] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.702993][ T5811] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.703014][ T5811] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 535.703048][ T5811] usb 3-1: config 0 interface 0 has no altsetting 0 [ 535.703078][ T5811] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 535.703099][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.707200][ T5811] usb 3-1: config 0 descriptor?? [ 535.769518][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 535.769991][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 535.770016][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.790435][ T10] usb 6-1: config 0 descriptor?? [ 535.841025][T11401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.862499][T11401] bond0 (unregistering): Released all slaves [ 535.880109][T11971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1993'. [ 536.015633][T11976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.017224][T11976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.025172][T11976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.027252][T11976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.034133][T11976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.035875][T11976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.041362][T11976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.043125][T11976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.324475][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 536.324574][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 536.339963][ T10] usb 6-1: USB disconnect, device number 6 [ 536.447364][T11975] loop6: detected capacity change from 0 to 7 [ 536.484912][T10947] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 536.484960][T10947] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 536.485160][T10947] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 536.512426][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 536.512554][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 536.542164][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 536.542196][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 536.556606][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 536.556644][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 536.571105][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 536.571142][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 536.580471][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 536.580505][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 536.603341][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 536.603377][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 536.615007][T10947] usb 2-1: USB disconnect, device number 47 [ 536.621367][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 536.621397][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 536.673792][T11975] ldm_validate_partition_table(): Disk read failed. [ 536.677930][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 536.677964][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 536.678945][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 536.678977][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 536.679387][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 536.679413][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 536.719948][T11975] Dev loop6: unable to read RDB block 0 [ 536.788818][T11975] loop6: unable to read partition table [ 536.790191][T11975] loop6: partition table beyond EOD, truncated [ 536.790218][T11975] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 536.863007][ T5811] usbhid 3-1:0.0: can't add hid device: -71 [ 536.863390][ T5811] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 537.035593][ T5811] usb 3-1: USB disconnect, device number 55 [ 537.149754][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 537.407707][ T10] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 537.407737][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.447397][ T10] usb 6-1: config 0 descriptor?? [ 537.481599][ T10] cp210x 6-1:0.0: cp210x converter detected [ 538.286375][ T10] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 538.286415][ T10] cp210x 6-1:0.0: querying part number failed [ 538.289545][ T10] usb 6-1: cp210x converter now attached to ttyUSB0 [ 538.317080][ T10] usb 6-1: USB disconnect, device number 7 [ 538.361410][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 538.362116][ T10] cp210x 6-1:0.0: device disconnected [ 538.638284][ T37] audit: type=1326 audit(1772408003.580:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12000 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d0ac799 code=0x7ffc0000 [ 538.638390][ T37] audit: type=1326 audit(1772408003.580:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12000 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d0ac799 code=0x7ffc0000 [ 538.638541][ T37] audit: type=1326 audit(1772408003.580:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12000 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d0ac799 code=0x7ffc0000 [ 538.639034][ T37] audit: type=1326 audit(1772408003.580:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12000 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d0ac799 code=0x7ffc0000 [ 538.651122][ T37] audit: type=1326 audit(1772408003.600:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12000 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d0ac799 code=0x7ffc0000 [ 538.651401][ T37] audit: type=1326 audit(1772408003.600:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12000 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6a6d0ac799 code=0x7ffc0000 [ 538.652000][ T37] audit: type=1326 audit(1772408003.600:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12000 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d0ac799 code=0x7ffc0000 [ 538.652495][ T37] audit: type=1326 audit(1772408003.600:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12000 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d0ac799 code=0x7ffc0000 [ 538.652534][ T37] audit: type=1326 audit(1772408003.600:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12000 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d0ac799 code=0x7ffc0000 [ 538.652896][ T37] audit: type=1326 audit(1772408003.600:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12000 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a6d0ae007 code=0x7ffc0000 [ 539.784969][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2004'. [ 540.210233][T12009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2004'. [ 542.049352][T12034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2011'. [ 542.079832][ T10] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 542.209851][ T10] usb 6-1: device descriptor read/64, error -71 [ 542.349781][ T810] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 542.462189][ T10] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 542.479857][ T31] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 542.487509][T11401] hsr_slave_0: left promiscuous mode [ 542.514935][ T810] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 542.514964][ T810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.514984][ T810] usb 1-1: Product: syz [ 542.514998][ T810] usb 1-1: Manufacturer: syz [ 542.515011][ T810] usb 1-1: SerialNumber: syz [ 542.706581][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2017'. [ 542.951318][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.951346][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.952930][ T31] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 542.952956][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 542.952974][ T31] usb 2-1: SerialNumber: syz [ 543.067484][ T810] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 543.163184][ T5859] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 543.325983][ T31] usb 2-1: 0:2 : does not exist [ 543.369228][T12039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.384201][T12039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.402302][T12039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.405950][T12039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.453702][T12039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.737723][ T10] usb 6-1: device descriptor read/64, error -71 [ 543.840229][ T10] usb usb6-port1: attempt power cycle [ 544.411358][T11401] hsr_slave_1: left promiscuous mode [ 544.412333][T11401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.412357][T11401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.424648][ T5859] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 544.424812][ T5859] ath9k_htc: Failed to initialize the device [ 544.428072][T12039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.429143][ T810] usb 1-1: USB disconnect, device number 26 [ 544.463787][ T810] usb 1-1: ath9k_htc: USB layer deinitialized [ 544.539787][ T31] usb 2-1: USB disconnect, device number 48 [ 544.539846][T11401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.539865][T11401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.631511][T11401] veth1_macvtap: left promiscuous mode [ 544.631606][T11401] veth0_macvtap: left promiscuous mode [ 544.656735][ T6059] udevd[6059]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.675833][T12059] netlink: 'syz.0.2018': attribute type 10 has an invalid length. [ 544.675854][T12059] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2018'. [ 544.961087][T12066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.961556][T12066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.565800][T11401] team0 (unregistering): Port device team_slave_1 removed [ 545.713964][T11401] team0 (unregistering): Port device team_slave_0 removed [ 545.821035][ T31] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 545.906892][T12050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2017'. [ 546.019727][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 546.026190][ T31] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 546.026219][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.026238][ T31] usb 2-1: Product: syz [ 546.026251][ T31] usb 2-1: Manufacturer: syz [ 546.026265][ T31] usb 2-1: SerialNumber: syz [ 546.047367][ T31] usb 2-1: config 0 descriptor?? [ 546.458408][T12085] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2026'. [ 546.600010][ T31] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 547.134679][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2028'. [ 547.244445][T11798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 547.355573][T11798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 547.959792][ T809] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 548.109691][ T809] usb 3-1: Using ep0 maxpacket: 8 [ 548.112293][ T809] usb 3-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 548.115620][ T809] usb 3-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 548.115723][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.115742][ T809] usb 3-1: Product: syz [ 548.115757][ T809] usb 3-1: Manufacturer: syz [ 548.115771][ T809] usb 3-1: SerialNumber: syz [ 548.251060][T12104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.253456][T12104] batadv_slave_0: entered promiscuous mode [ 548.253481][T12104] batadv_slave_0: entered allmulticast mode [ 548.295285][T12104] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2031'. [ 548.295310][T12104] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 548.337131][T11798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 548.386334][T11798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 548.404649][ T809] kvaser_usb 3-1:53.0: error -ENODEV: Cannot get usb endpoint(s) [ 548.432606][ T809] usb 3-1: USB disconnect, device number 56 [ 548.694072][T12118] siw: device registration error -23 [ 548.704137][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2033'. [ 549.018388][T12117] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2033'. [ 549.154527][T12127] cgroup2: Unknown parameter 'memor¸ting' [ 549.334810][T11798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.430053][T11798] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.472500][ T3594] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.472646][ T3594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.474989][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.475113][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.034483][ T5880] usb 2-1: USB disconnect, device number 49 [ 550.816155][T11798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.768666][T11798] veth0_vlan: entered promiscuous mode [ 552.942907][T11798] veth1_vlan: entered promiscuous mode [ 553.531799][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2053'. [ 553.677475][T11798] veth0_macvtap: entered promiscuous mode [ 553.692051][T11798] veth1_macvtap: entered promiscuous mode [ 553.856158][T11798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.874662][T11798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.938794][ T1109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.955721][ T1109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.970178][ T1109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.974271][T11401] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.230594][T12204] loop2: detected capacity change from 0 to 75 [ 554.390441][T10947] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 554.395277][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.395296][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.473774][T12208] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2059'. [ 554.499747][ T809] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 554.500328][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.500344][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.540023][T10947] usb 6-1: Using ep0 maxpacket: 8 [ 554.558867][T10947] usb 6-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 554.558896][T10947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.558914][T10947] usb 6-1: Product: ш [ 554.558927][T10947] usb 6-1: Manufacturer: አ[ 554.558941][T10947] usb 6-1: SerialNumber: à ” [ 554.679759][ T809] usb 2-1: Using ep0 maxpacket: 32 [ 554.695817][ T809] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 554.695842][ T809] usb 2-1: config 0 has no interface number 0 [ 554.695921][ T809] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 554.695936][ T809] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 554.695947][ T809] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 554.695959][ T809] usb 2-1: config 0 interface 196 has no altsetting 0 [ 554.699284][ T809] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 554.699310][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.699329][ T809] usb 2-1: Product: syz [ 554.699342][ T809] usb 2-1: Manufacturer: syz [ 554.699356][ T809] usb 2-1: SerialNumber: syz [ 554.807550][ T809] usb 2-1: config 0 descriptor?? [ 554.827207][T12204] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 554.846932][T10947] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 554.859579][T10947] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 554.868641][T10947] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 554.899061][T10947] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 554.919039][T12214] netlink: 'syz.4.1953': attribute type 4 has an invalid length. [ 554.951717][T10947] usb 6-1: 2:3 : does not exist [ 554.952008][T10947] usb 6-1: BAAD SPEAKERPHONE c_chmask mismatch [ 555.022170][T12216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.026070][T12203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.026463][T12216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.057123][T12203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.086769][ T809] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 555.087035][ T809] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 555.121109][ T809] usb 2-1: USB disconnect, device number 50 [ 555.244658][T10947] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 555.361757][T12216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.381339][T12216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.416146][ T6059] udevd[6059]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.510814][ T810] usb 6-1: USB disconnect, device number 11 [ 555.560235][ T37] kauditd_printk_skb: 318 callbacks suppressed [ 555.560255][ T37] audit: type=1800 audit(1772408020.500:5305): pid=12224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2061" name="bus" dev="tmpfs" ino=23 res=0 errno=0 [ 562.855923][T12326] netlink: 'syz.2.2088': attribute type 10 has an invalid length. [ 562.894000][T12326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.898361][T12326] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 562.965873][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.965935][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.489826][ T31] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 563.603644][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2090'. [ 563.729775][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 563.732572][ T31] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 563.732598][ T31] usb 5-1: config 0 has no interface number 0 [ 563.732640][ T31] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 563.732663][ T31] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 563.732683][ T31] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 563.732704][ T31] usb 5-1: config 0 interface 196 has no altsetting 0 [ 563.735288][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 563.735314][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.735334][ T31] usb 5-1: Product: syz [ 563.735346][ T31] usb 5-1: Manufacturer: syz [ 563.735358][ T31] usb 5-1: SerialNumber: syz [ 563.754588][ T31] usb 5-1: config 0 descriptor?? [ 563.759414][T12339] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 564.028484][ T31] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 564.028755][ T31] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 564.047340][ T31] usb 5-1: USB disconnect, device number 23 [ 564.277564][ T37] audit: type=1326 audit(1772408029.220:5306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12351 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 564.313851][ T37] audit: type=1326 audit(1772408029.260:5307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12351 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 564.361272][ T37] audit: type=1326 audit(1772408029.260:5308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12351 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 564.361322][ T37] audit: type=1326 audit(1772408029.300:5309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12351 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 564.361359][ T37] audit: type=1326 audit(1772408029.300:5310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12351 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 564.361393][ T37] audit: type=1326 audit(1772408029.300:5311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12351 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 564.361428][ T37] audit: type=1326 audit(1772408029.300:5312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12351 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 564.361466][ T37] audit: type=1326 audit(1772408029.300:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12351 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 564.361503][ T37] audit: type=1326 audit(1772408029.300:5314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12351 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 564.361542][ T37] audit: type=1326 audit(1772408029.300:5315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12351 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 565.020233][ T5802] Bluetooth: hci5: command 0x0406 tx timeout [ 565.648032][T12379] 9p: Bad value for 'rfdno' [ 565.739005][T12382] netlink: 'syz.2.2103': attribute type 5 has an invalid length. [ 566.460558][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802427bc00: rx timeout, send abort [ 566.600687][ T5859] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 567.829717][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802427bc00: abort rx timeout. Force session deactivation [ 567.883665][ T5859] usb 2-1: Using ep0 maxpacket: 32 [ 567.885741][ T5859] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 567.885767][ T5859] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 567.885786][ T5859] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 567.885818][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 567.885829][ T5859] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 567.885841][ T5859] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 567.885863][ T5859] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 567.885881][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.904638][ T5859] usb 2-1: config 0 descriptor?? [ 568.146886][ T5859] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 568.181981][ T5859] usb 2-1: USB disconnect, device number 51 [ 568.193565][ T5859] usblp0: removed [ 568.264027][T12415] FAULT_INJECTION: forcing a failure. [ 568.264027][T12415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.264065][T12415] CPU: 1 UID: 0 PID: 12415 Comm: syz.0.2115 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 568.264092][T12415] Tainted: [L]=SOFTLOCKUP [ 568.264099][T12415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 568.264111][T12415] Call Trace: [ 568.264118][T12415] [ 568.264127][T12415] dump_stack_lvl+0xe8/0x150 [ 568.264164][T12415] should_fail_ex+0x46b/0x600 [ 568.264202][T12415] _copy_from_user+0x2d/0xb0 [ 568.264228][T12415] do_sys_poll+0x2a0/0xfa0 [ 568.264263][T12415] ? __pfx_do_sys_poll+0x10/0x10 [ 568.264281][T12415] ? __lock_acquire+0x6b5/0x2cf0 [ 568.264302][T12415] ? is_bpf_text_address+0x26/0x2b0 [ 568.264400][T12415] ? set_user_sigmask+0xcd/0x1c0 [ 568.264438][T12415] ? __pfx_set_user_sigmask+0x10/0x10 [ 568.264451][T12415] ? rt_mutex_slowunlock+0x1cb/0x300 [ 568.264463][T12415] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 568.264478][T12415] __se_sys_ppoll+0x209/0x2b0 [ 568.264489][T12415] ? fput+0xa0/0xd0 [ 568.264559][T12415] ? __pfx___se_sys_ppoll+0x10/0x10 [ 568.264570][T12415] ? __pfx_ksys_write+0x10/0x10 [ 568.264587][T12415] ? __x64_sys_ppoll+0x20/0xc0 [ 568.264599][T12415] do_syscall_64+0x14d/0xf80 [ 568.264614][T12415] ? trace_irq_disable+0x3b/0x150 [ 568.264631][T12415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.264643][T12415] ? clear_bhb_loop+0x40/0x90 [ 568.264656][T12415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.264666][T12415] RIP: 0033:0x7f14f4eac799 [ 568.264677][T12415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.264686][T12415] RSP: 002b:00007f14f30fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 568.264698][T12415] RAX: ffffffffffffffda RBX: 00007f14f5125fa0 RCX: 00007f14f4eac799 [ 568.264705][T12415] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 568.264712][T12415] RBP: 00007f14f30fe090 R08: 0000000000000000 R09: 0000000000000000 [ 568.264718][T12415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.264724][T12415] R13: 00007f14f5126038 R14: 00007f14f5125fa0 R15: 00007ffc00eee758 [ 568.264739][T12415] [ 568.689775][ T5859] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 568.739871][ T810] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 568.829824][ T5859] usb 2-1: device descriptor read/64, error -71 [ 568.911796][ T810] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 568.911824][ T810] usb 1-1: config 0 has no interface number 0 [ 568.911859][ T810] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 568.911873][ T810] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 568.911886][ T810] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 568.911899][ T810] usb 1-1: config 0 interface 2 has no altsetting 0 [ 568.914186][ T810] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 568.914212][ T810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.914230][ T810] usb 1-1: Product: syz [ 568.914241][ T810] usb 1-1: Manufacturer: syz [ 568.914248][ T810] usb 1-1: SerialNumber: syz [ 568.921238][ T810] usb 1-1: config 0 descriptor?? [ 568.930320][T12418] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 568.930580][T12418] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 569.107146][ T5859] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 569.190536][T12437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2116'. [ 569.239899][ T5859] usb 2-1: device descriptor read/64, error -71 [ 569.263592][ T810] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 569.354887][ T5859] usb usb2-port1: attempt power cycle [ 569.465794][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 569.516799][ T810] usb 1-1: USB disconnect, device number 27 [ 570.268346][ T6362] udevd[6362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.753781][ T10] wlan1 speed is unknown, defaulting to 1000 [ 570.880251][T12474] netlink: 'syz.4.2134': attribute type 2 has an invalid length. [ 570.970786][T12479] program syz.5.2136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 571.213586][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2139'. [ 571.213629][T12487] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 571.674591][T12500] netlink: 'syz.4.2143': attribute type 6 has an invalid length. [ 571.879717][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 572.056241][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.056275][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.057650][ T10] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 572.057677][ T10] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 572.057696][ T10] usb 6-1: Manufacturer: syz [ 572.065489][ T10] usb 6-1: config 0 descriptor?? [ 572.103839][T12511] lo speed is unknown, defaulting to 1000 [ 572.103931][T12511] lo speed is unknown, defaulting to 1000 [ 572.132458][T12511] lo speed is unknown, defaulting to 1000 [ 572.293118][T12513] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 572.386911][T12515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2148'. [ 572.472057][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 572.472074][ T37] audit: type=1326 audit(1772408037.420:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.2.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24388ac799 code=0x7ffc0000 [ 572.472742][ T37] audit: type=1326 audit(1772408037.420:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.2.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f24388ac42b code=0x7ffc0000 [ 572.472973][ T37] audit: type=1326 audit(1772408037.420:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.2.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f24388ac42b code=0x7ffc0000 [ 572.473208][ T37] audit: type=1326 audit(1772408037.420:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.2.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f24388ac42b code=0x7ffc0000 [ 572.473475][ T37] audit: type=1326 audit(1772408037.420:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.2.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f24388ac42b code=0x7ffc0000 [ 572.473716][ T37] audit: type=1326 audit(1772408037.420:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.2.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f24388ac42b code=0x7ffc0000 [ 572.474026][ T37] audit: type=1326 audit(1772408037.420:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.2.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f24388ac42b code=0x7ffc0000 [ 572.474258][ T37] audit: type=1326 audit(1772408037.420:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.2.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f24388ac42b code=0x7ffc0000 [ 572.474554][ T37] audit: type=1326 audit(1772408037.420:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.2.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f24388ac42b code=0x7ffc0000 [ 572.474787][ T37] audit: type=1326 audit(1772408037.420:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.2.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f24388ac42b code=0x7ffc0000 [ 572.654694][T12519] netlink: 'syz.4.2149': attribute type 2 has an invalid length. [ 572.665577][T12511] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 573.012398][T12511] lo speed is unknown, defaulting to 1000 [ 573.018815][T12511] lo speed is unknown, defaulting to 1000 [ 573.051862][T12511] lo speed is unknown, defaulting to 1000 [ 573.069558][T12511] lo speed is unknown, defaulting to 1000 [ 573.083344][T12511] lo speed is unknown, defaulting to 1000 [ 573.880473][T12526] FAULT_INJECTION: forcing a failure. [ 573.880473][T12526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.880532][T12526] CPU: 1 UID: 0 PID: 12526 Comm: syz.1.2151 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 573.880559][T12526] Tainted: [L]=SOFTLOCKUP [ 573.880566][T12526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 573.880578][T12526] Call Trace: [ 573.880585][T12526] [ 573.880594][T12526] dump_stack_lvl+0xe8/0x150 [ 573.880629][T12526] should_fail_ex+0x46b/0x600 [ 573.880667][T12526] _copy_from_user+0x2d/0xb0 [ 573.880693][T12526] do_ipv6_setsockopt+0x264/0x31c0 [ 573.880824][T12526] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 573.880856][T12526] ? __pfx___schedule+0x10/0x10 [ 573.880908][T12526] ? __lock_acquire+0x6b5/0x2cf0 [ 573.880930][T12526] ? irqentry_exit+0x59e/0x620 [ 573.880957][T12526] ? lockdep_hardirqs_on+0x7a/0x110 [ 573.880977][T12526] ? irqentry_exit+0x59e/0x620 [ 573.880996][T12526] ? rcu_is_watching+0x15/0xb0 [ 573.881037][T12526] ipv6_setsockopt+0x59/0x170 [ 573.881060][T12526] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 573.881106][T12526] do_sock_setsockopt+0x17c/0x1b0 [ 573.881152][T12526] __x64_sys_setsockopt+0x143/0x1b0 [ 573.881175][T12526] do_syscall_64+0x14d/0xf80 [ 573.881196][T12526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.881213][T12526] ? clear_bhb_loop+0x40/0x90 [ 573.881232][T12526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.881248][T12526] RIP: 0033:0x7f6a6d0ac799 [ 573.881262][T12526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.881276][T12526] RSP: 002b:00007f6a6b2bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 573.881294][T12526] RAX: ffffffffffffffda RBX: 00007f6a6d326180 RCX: 00007f6a6d0ac799 [ 573.881305][T12526] RDX: 000000000000004e RSI: 0000000000000029 RDI: 0000000000000005 [ 573.881314][T12526] RBP: 00007f6a6b2bc090 R08: 0000000000000004 R09: 0000000000000000 [ 573.881324][T12526] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 573.881333][T12526] R13: 00007f6a6d326218 R14: 00007f6a6d326180 R15: 00007ffd3a8a12b8 [ 573.881356][T12526] [ 575.934349][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 575.934459][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 575.995411][ T10] usb 6-1: USB disconnect, device number 12 [ 576.747587][T12559] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2164'. [ 576.799934][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 576.951888][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.951916][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 576.953142][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 576.953168][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 576.953179][ T10] usb 5-1: SerialNumber: syz [ 577.010197][ T810] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 577.050803][T12566] netlink: 512 bytes leftover after parsing attributes in process `syz.0.2167'. [ 577.175305][ T810] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.175373][ T810] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.185158][ T810] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 577.185188][ T810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.185207][ T810] usb 6-1: Product: syz [ 577.185221][ T810] usb 6-1: Manufacturer: syz [ 577.185235][ T810] usb 6-1: SerialNumber: syz [ 577.194213][ T10] usb 5-1: 0:2 : does not exist [ 577.272127][ T810] cdc_mbim 6-1:1.0: skipping garbage [ 577.602491][ T10] usb 5-1: USB disconnect, device number 24 [ 578.514219][ T6059] udevd[6059]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 578.850087][ T809] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 579.331685][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 579.334244][ T809] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.334275][ T809] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.336302][ T809] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 579.336329][ T809] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 579.336350][ T809] usb 1-1: Product: syz [ 579.336364][ T809] usb 1-1: Manufacturer: syz [ 579.473065][ T809] hub 1-1:4.0: USB hub found [ 580.334554][ T809] hub 1-1:4.0: 5 ports detected [ 580.336378][ T809] hub 1-1:4.0: insufficient power available to use all downstream ports [ 580.391068][ T5807] Bluetooth: hci1: command 0x0406 tx timeout [ 580.641064][ T810] cdc_mbim 6-1:1.0: bind() failure [ 580.655222][ T810] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 580.670211][ T810] usb 6-1: USB disconnect, device number 13 [ 580.758196][T12600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.758687][T12600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.909756][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2180'. [ 583.199710][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2181'. [ 583.804802][ T809] hub 1-1:4.0: set hub depth failed [ 584.168861][ T809] usb 1-1: USB disconnect, device number 28 [ 585.009755][ T31] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 585.442762][ T810] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 585.453324][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 585.537248][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.537280][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 585.545056][ T31] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 585.545085][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 585.545104][ T31] usb 2-1: SerialNumber: syz [ 585.629902][ T810] usb 1-1: device descriptor read/64, error -32 [ 585.790843][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2191'. [ 585.815281][T12644] wlan1 speed is unknown, defaulting to 1000 [ 585.816001][T12644] wlan1 speed is unknown, defaulting to 1000 [ 585.830003][T12644] wlan1 speed is unknown, defaulting to 1000 [ 585.996753][T12644] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 586.121708][T12642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2191'. [ 586.130536][T12644] wlan1 speed is unknown, defaulting to 1000 [ 586.133148][T12644] wlan1 speed is unknown, defaulting to 1000 [ 586.135689][T12644] wlan1 speed is unknown, defaulting to 1000 [ 586.138275][T12644] wlan1 speed is unknown, defaulting to 1000 [ 586.140883][T12644] wlan1 speed is unknown, defaulting to 1000 [ 586.287351][ T810] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 586.342410][ T31] usb 2-1: 0:2 : does not exist [ 586.466578][ T31] usb 2-1: USB disconnect, device number 55 [ 586.468893][T12650] siw: device registration error -23 [ 586.483962][ T810] usb 1-1: unable to get BOS descriptor or descriptor too short [ 586.486073][ T810] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 586.486097][ T810] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 586.486115][ T810] usb 1-1: config 63 has no interface number 0 [ 586.486144][ T810] usb 1-1: config 63 interface 66 has no altsetting 0 [ 586.488580][ T810] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 586.488605][ T810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.488624][ T810] usb 1-1: Product: syz [ 586.488637][ T810] usb 1-1: Manufacturer: syz [ 586.488651][ T810] usb 1-1: SerialNumber: syz [ 587.674587][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2193'. [ 587.704338][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2193'. [ 588.350425][ T810] uvcvideo 1-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 588.357600][ T810] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 588.359361][ T810] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 588.388595][ T810] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 588.389128][ T810] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 588.417195][ T6059] udevd[6059]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 588.424206][ T810] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 588.424290][ T810] uvcvideo 1-1:63.66: No streaming interface found for terminal 29. [ 588.424532][ T810] uvcvideo 1-1:63.66: Entity type for entity Output 32773 was not initialized! [ 588.499994][ T810] usb 1-1: USB disconnect, device number 30 [ 588.860056][ T810] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 589.032585][ T810] usb 1-1: unable to get BOS descriptor or descriptor too short [ 589.034554][ T810] usb 1-1: not running at top speed; connect to a high speed hub [ 589.035797][ T810] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 589.035821][ T810] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 589.035841][ T810] usb 1-1: config 63 has no interface number 0 [ 589.035871][ T810] usb 1-1: config 63 interface 66 has no altsetting 0 [ 589.040068][ T810] usb 1-1: string descriptor 0 read error: -22 [ 589.040200][ T810] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 589.040222][ T810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.077886][ T810] uvcvideo 1-1:63.66: Found UVC 0.07 device (174f:8acf) [ 589.309004][ T810] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 589.309528][ T810] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 589.315989][ T810] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 589.316606][ T810] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 589.317701][ T810] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 589.317778][ T810] uvcvideo 1-1:63.66: No streaming interface found for terminal 29. [ 589.317797][ T810] uvcvideo 1-1:63.66: Entity type for entity Output 32773 was not initialized! [ 589.421760][ T810] usb 1-1: USB disconnect, device number 31 [ 589.761691][ T31] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 589.939784][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 589.942832][ T31] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 589.942859][ T31] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 589.942880][ T31] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 589.942927][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 589.942949][ T31] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 589.942977][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 589.943016][ T31] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 589.943039][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.951908][ T31] usb 6-1: config 0 descriptor?? [ 591.169568][ T31] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 591.183449][ T31] usb 6-1: USB disconnect, device number 14 [ 591.196409][ T31] usblp0: removed [ 593.219752][ T809] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 594.689354][ T809] usb 6-1: device descriptor read/64, error -71 [ 594.850692][ T5811] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 594.905180][T12736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2223'. [ 594.929744][ T809] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 595.009795][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 595.021589][ T5811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.024302][ T5811] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 595.024329][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.024347][ T5811] usb 2-1: Product: syz [ 595.024361][ T5811] usb 2-1: Manufacturer: syz [ 595.024374][ T5811] usb 2-1: SerialNumber: syz [ 595.035879][ T5811] usb 2-1: config 0 descriptor?? [ 595.079659][ T809] usb 6-1: device descriptor read/64, error -71 [ 595.238541][ T809] usb usb6-port1: attempt power cycle [ 595.338889][T12743] siw: device registration error -23 [ 595.589695][ T809] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 595.620918][ T809] usb 6-1: device descriptor read/8, error -71 [ 596.221236][ T809] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 596.399283][ T809] usb 6-1: device descriptor read/8, error -71 [ 596.461721][ T5880] usb 2-1: USB disconnect, device number 56 [ 596.510426][ T809] usb usb6-port1: unable to enumerate USB device [ 596.586867][T12758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2231'. [ 596.702716][T12762] netlink: 'syz.1.2230': attribute type 21 has an invalid length. [ 596.702743][T12762] IPv6: NLM_F_CREATE should be specified when creating new route [ 597.327142][ T31] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 598.330471][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.330496][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 598.333426][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 598.333454][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 598.333472][ T31] usb 1-1: SerialNumber: syz [ 598.556696][ T31] usb 1-1: 0:2 : does not exist [ 598.634357][ T31] usb 1-1: USB disconnect, device number 32 [ 598.700383][ T6059] udevd[6059]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.239757][ T31] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 599.370268][ T31] usb 5-1: device descriptor read/64, error -71 [ 599.620192][ T31] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 599.632123][T12790] overlayfs: statfs failed on './file0' [ 599.749704][ T31] usb 5-1: device descriptor read/64, error -71 [ 599.944114][ T31] usb usb5-port1: attempt power cycle [ 600.290450][ T31] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 600.317480][ T31] usb 5-1: device descriptor read/8, error -71 [ 600.669181][ T31] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 600.833708][ T31] usb 5-1: device descriptor read/8, error -71 [ 600.940125][ T31] usb usb5-port1: unable to enumerate USB device [ 601.430769][T12826] netlink: 'syz.5.2252': attribute type 2 has an invalid length. [ 602.751776][T12850] siw: device registration error -23 [ 602.771278][T12846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2257'. [ 604.469115][T12880] 9p: Bad value for 'rfdno' [ 604.699735][ T5811] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 604.879739][ T5811] usb 5-1: device descriptor read/64, error -71 [ 605.129786][ T5811] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 605.259891][ T5811] usb 5-1: device descriptor read/64, error -71 [ 605.370419][ T5811] usb usb5-port1: attempt power cycle [ 605.412130][T12895] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2276'. [ 605.413441][T12895] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2276'. [ 605.730046][ T5811] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 605.750557][ T5811] usb 5-1: device descriptor read/8, error -71 [ 605.836957][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2278'. [ 606.140640][ T5811] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 606.173673][ T5811] usb 5-1: device descriptor read/8, error -71 [ 606.285478][ T5811] usb usb5-port1: unable to enumerate USB device [ 606.510813][T12914] siw: device registration error -23 [ 606.529936][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2282'. [ 607.333966][T12921] siw: device registration error -23 [ 607.336480][T12921] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 607.569824][ T810] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 607.709779][ T810] usb 2-1: device descriptor read/64, error -71 [ 607.969740][ T810] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 608.099771][ T810] usb 2-1: device descriptor read/64, error -71 [ 608.220676][ T810] usb usb2-port1: attempt power cycle [ 608.392188][T12929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2287'. [ 608.601300][ T810] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 608.731810][ T810] usb 2-1: device descriptor read/8, error -71 [ 608.803262][T12932] ip6gre1: entered promiscuous mode [ 608.853835][T12934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2289'. [ 609.571032][ T810] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 609.600573][ T810] usb 2-1: device descriptor read/8, error -71 [ 609.718650][ T810] usb usb2-port1: unable to enumerate USB device [ 610.219772][ T809] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 610.370821][ T809] usb 6-1: Using ep0 maxpacket: 32 [ 610.376188][ T809] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 610.376217][ T809] usb 6-1: config 0 has no interface number 0 [ 610.376261][ T809] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 610.376294][ T809] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 610.376317][ T809] usb 6-1: config 0 interface 85 has no altsetting 0 [ 610.379455][ T809] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 610.379481][ T809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.379500][ T809] usb 6-1: Product: syz [ 610.379514][ T809] usb 6-1: Manufacturer: syz [ 610.379528][ T809] usb 6-1: SerialNumber: syz [ 610.401822][ T809] usb 6-1: config 0 descriptor?? [ 611.466674][ T809] appletouch 6-1:0.85: Failed to read mode from device. [ 611.466862][ T809] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 611.509821][ T809] usb 6-1: USB disconnect, device number 19 [ 611.635380][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2300'. [ 611.754755][T12977] netlink: 758 bytes leftover after parsing attributes in process `syz.5.2302'. [ 612.161042][T12981] delete_channel: no stack [ 612.977145][T12990] program syz.1.2301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 613.139747][ T809] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 613.473424][ T809] usb 6-1: device descriptor read/64, error -71 [ 613.808985][T13004] siw: device registration error -23 [ 613.819808][ T809] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 613.949784][ T809] usb 6-1: device descriptor read/64, error -71 [ 614.060288][ T809] usb usb6-port1: attempt power cycle [ 614.399732][ T809] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 614.420455][ T809] usb 6-1: device descriptor read/8, error -71 [ 614.659755][ T809] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 614.680506][ T809] usb 6-1: device descriptor read/8, error -71 [ 614.850324][ T809] usb usb6-port1: unable to enumerate USB device [ 616.020349][T13022] overlayfs: failed to clone upperpath [ 617.212214][ T810] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 617.360625][ T810] usb 1-1: Using ep0 maxpacket: 16 [ 617.369547][ T810] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 617.369823][ T810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 617.383755][ T810] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 617.383788][ T810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.383807][ T810] usb 1-1: Product: syz [ 617.383820][ T810] usb 1-1: Manufacturer: syz [ 617.383833][ T810] usb 1-1: SerialNumber: syz [ 617.403454][ T810] usb 1-1: config 0 descriptor?? [ 617.457403][ T810] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 617.457464][ T810] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 617.696109][T13042] kAFS: unable to lookup cell '.({^ú@' [ 618.041812][ T810] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 618.042589][ T810] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 618.244997][ T810] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 618.245021][ T810] em28xx 1-1:0.0: No AC97 audio processor [ 618.739787][ T31] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 618.909783][ T31] usb 5-1: device descriptor read/64, error -71 [ 618.970785][T13063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.971447][T13063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.149746][ T31] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 619.281551][ T31] usb 5-1: device descriptor read/64, error -71 [ 619.390101][ T31] usb usb5-port1: attempt power cycle [ 619.629814][ T810] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 619.730589][T13073] geneve2: entered promiscuous mode [ 619.730760][ T31] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 619.750527][ T31] usb 5-1: device descriptor read/8, error -71 [ 619.799823][ T810] usb 2-1: Using ep0 maxpacket: 16 [ 619.802785][ T810] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 619.802817][ T810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 619.805296][ T810] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 619.805324][ T810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.805343][ T810] usb 2-1: Product: syz [ 619.805356][ T810] usb 2-1: Manufacturer: syz [ 619.805369][ T810] usb 2-1: SerialNumber: syz [ 619.809427][ T810] usb 2-1: config 0 descriptor?? [ 619.832996][ T810] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 619.834229][ T810] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 619.999738][ T31] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 620.022159][ T994] usb 1-1: USB disconnect, device number 33 [ 620.024499][ T994] em28xx 1-1:0.0: Disconnecting em28xx [ 620.047886][ T31] usb 5-1: device descriptor read/8, error -71 [ 620.084902][ T994] em28xx 1-1:0.0: Freeing device [ 620.150436][ T31] usb usb5-port1: unable to enumerate USB device [ 620.454105][ T810] em28xx 2-1:0.0: unknown em28xx chip ID (234) [ 620.629826][ T5811] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 620.656648][ T810] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 620.803366][ T5811] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 620.803396][ T5811] usb 1-1: config 0 has no interface number 0 [ 620.808321][ T5811] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 620.808512][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.808528][ T5811] usb 1-1: Product: syz [ 620.808535][ T5811] usb 1-1: Manufacturer: syz [ 620.808543][ T5811] usb 1-1: SerialNumber: syz [ 620.824877][ T5811] usb 1-1: config 0 descriptor?? [ 620.888764][T13083] siw: device registration error -23 [ 620.953535][T13070] ------------[ cut here ]------------ [ 620.953551][T13070] RTNL: assertion failed at net/core/dev.c (9555) [ 620.953573][T13070] WARNING: net/core/dev.c:9555 at __dev_set_promiscuity+0x530/0x710, CPU#0: syz.1.2333/13070 [ 620.953695][T13070] Modules linked in: [ 620.953720][T13070] CPU: 0 UID: 0 PID: 13070 Comm: syz.1.2333 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 620.953748][T13070] Tainted: [L]=SOFTLOCKUP [ 620.953756][T13070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.953765][T13070] RIP: 0010:__dev_set_promiscuity+0x53c/0x710 [ 620.953783][T13070] Code: c4 0b 17 e9 06 fc ff ff e8 e1 5e ce f8 e9 fc fb ff ff e8 d7 5e ce f8 48 8d 3d 80 db 81 06 48 c7 c6 60 4c 4b 8c ba 53 25 00 00 <67> 48 0f b9 3a e9 22 fb ff ff e8 b5 5e ce f8 48 8b 7c 24 08 48 c7 [ 620.953801][T13070] RSP: 0018:ffffc9000e2af698 EFLAGS: 00010283 [ 620.953818][T13070] RAX: ffffffff88f5f459 RBX: ffff88805f1d8000 RCX: 0000000000080000 [ 620.953834][T13070] RDX: 0000000000002553 RSI: ffffffff8c4b4c60 RDI: ffffffff8f77cfe0 [ 620.953850][T13070] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.953862][T13070] R10: dffffc0000000000 R11: ffffed100be3b016 R12: 00000000ffffffff [ 620.953877][T13070] R13: 0000000000000000 R14: ffff88805f1d80b0 R15: 1ffff1100be3b016 [ 620.953892][T13070] FS: 00007f6a6b2fe6c0(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 620.953910][T13070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 620.953923][T13070] CR2: 000000110c3eedb6 CR3: 0000000030ef4000 CR4: 00000000003526f0 [ 620.953937][T13070] Call Trace: [ 620.953942][T13070] [ 620.953949][T13070] ? __hw_addr_add_ex+0x361/0x650 [ 620.954021][T13070] __dev_set_rx_mode+0x17c/0x260 [ 620.954049][T13070] ? dev_mc_add+0x4e/0x140 [ 620.954076][T13070] dev_mc_add+0xd2/0x140 [ 620.954106][T13070] igmp6_group_added+0x234/0x820 [ 620.954236][T13070] ? __pfx_igmp6_group_added+0x10/0x10 [ 620.954410][T13070] ? mld_del_delrec+0x1af/0xcd0 [ 620.954440][T13070] ? __ipv6_dev_mc_inc+0x548/0xa50 [ 620.954472][T13070] __ipv6_dev_mc_inc+0x897/0xa50 [ 620.954509][T13070] addrconf_join_solict+0x104/0x190 [ 620.954683][T13070] ? __pfx_addrconf_join_solict+0x10/0x10 [ 620.954711][T13070] ? rt_spin_unlock+0x160/0x200 [ 620.954738][T13070] __ipv6_dev_ac_inc+0x8ab/0xb20 [ 620.954839][T13070] ? __ipv6_dev_ac_inc+0x35/0xb20 [ 620.954873][T13070] ipv6_sock_ac_join+0x6a8/0x880 [ 620.954907][T13070] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 620.954934][T13070] ? _copy_from_user+0x94/0xb0 [ 620.954967][T13070] do_ipv6_setsockopt+0x2031/0x31c0 [ 620.955141][T13070] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 620.955192][T13070] ? futex_wait+0x29a/0x380 [ 620.955238][T13070] ? __pfx_futex_wait+0x10/0x10 [ 620.955259][T13070] ? __lock_acquire+0x6b5/0x2cf0 [ 620.955280][T13070] ? put_user_ifreq+0x7a/0xc0 [ 620.955311][T13070] ? sock_do_ioctl+0x298/0x320 [ 620.955334][T13070] ? do_futex+0x333/0x420 [ 620.955576][T13070] ? __fget_files+0x2a/0x420 [ 620.955612][T13070] ipv6_setsockopt+0x59/0x170 [ 620.955633][T13070] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 620.955652][T13070] do_sock_setsockopt+0x17c/0x1b0 [ 620.955684][T13070] __x64_sys_setsockopt+0x143/0x1b0 [ 620.955747][T13070] do_syscall_64+0x14d/0xf80 [ 620.955778][T13070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.955800][T13070] ? clear_bhb_loop+0x40/0x90 [ 620.955820][T13070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.955839][T13070] RIP: 0033:0x7f6a6d0ac799 [ 620.955859][T13070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.955877][T13070] RSP: 002b:00007f6a6b2fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 620.955898][T13070] RAX: ffffffffffffffda RBX: 00007f6a6d325fa0 RCX: 00007f6a6d0ac799 [ 620.955913][T13070] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000007 [ 620.955924][T13070] RBP: 00007f6a6d142bd9 R08: 0000000000000014 R09: 0000000000000000 [ 620.955934][T13070] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.955946][T13070] R13: 00007f6a6d326038 R14: 00007f6a6d325fa0 R15: 00007ffd3a8a12b8 [ 620.955978][T13070] [ 620.956001][T13070] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 620.956020][T13070] CPU: 0 UID: 0 PID: 13070 Comm: syz.1.2333 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 620.956049][T13070] Tainted: [L]=SOFTLOCKUP [ 620.956056][T13070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.956068][T13070] Call Trace: [ 620.956077][T13070] [ 620.956084][T13070] vpanic+0x56c/0xa60 [ 620.956131][T13070] ? __pfx__printk+0x10/0x10 [ 620.956206][T13070] ? __pfx_vpanic+0x10/0x10 [ 620.956234][T13070] ? is_bpf_text_address+0x292/0x2b0 [ 620.956263][T13070] ? is_bpf_text_address+0x26/0x2b0 [ 620.956300][T13070] panic+0xc5/0xd0 [ 620.956320][T13070] ? __pfx_panic+0x10/0x10 [ 620.956344][T13070] __warn+0x315/0x4f0 [ 620.956370][T13070] ? __dev_set_promiscuity+0x530/0x710 [ 620.956397][T13070] ? __dev_set_promiscuity+0x530/0x710 [ 620.956425][T13070] __report_bug+0x29a/0x540 [ 620.956584][T13070] ? dev_mc_add+0xab/0x140 [ 620.956677][T13070] ? igmp6_group_added+0x234/0x820 [ 620.956708][T13070] ? __ipv6_dev_mc_inc+0x897/0xa50 [ 620.956740][T13070] ? __dev_set_promiscuity+0x530/0x710 [ 620.956767][T13070] ? __pfx___report_bug+0x10/0x10 [ 620.956912][T13070] report_bug_entry+0x19a/0x290 [ 620.956950][T13070] ? __dev_set_promiscuity+0x53c/0x710 [ 620.956976][T13070] ? __dev_set_promiscuity+0x541/0x710 [ 620.957001][T13070] handle_bug+0xca/0x200 [ 620.957031][T13070] exc_invalid_op+0x1a/0x50 [ 620.957067][T13070] asm_exc_invalid_op+0x1a/0x20 [ 620.957087][T13070] RIP: 0010:__dev_set_promiscuity+0x53c/0x710 [ 620.957115][T13070] Code: c4 0b 17 e9 06 fc ff ff e8 e1 5e ce f8 e9 fc fb ff ff e8 d7 5e ce f8 48 8d 3d 80 db 81 06 48 c7 c6 60 4c 4b 8c ba 53 25 00 00 <67> 48 0f b9 3a e9 22 fb ff ff e8 b5 5e ce f8 48 8b 7c 24 08 48 c7 [ 620.957133][T13070] RSP: 0018:ffffc9000e2af698 EFLAGS: 00010283 [ 620.957152][T13070] RAX: ffffffff88f5f459 RBX: ffff88805f1d8000 RCX: 0000000000080000 [ 620.957168][T13070] RDX: 0000000000002553 RSI: ffffffff8c4b4c60 RDI: ffffffff8f77cfe0 [ 620.957179][T13070] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.957310][T13070] R10: dffffc0000000000 R11: ffffed100be3b016 R12: 00000000ffffffff [ 620.957329][T13070] R13: 0000000000000000 R14: ffff88805f1d80b0 R15: 1ffff1100be3b016 [ 620.957355][T13070] ? __dev_set_promiscuity+0x529/0x710 [ 620.957433][T13070] ? __dev_set_promiscuity+0x529/0x710 [ 620.957449][T13070] ? __hw_addr_add_ex+0x361/0x650 [ 620.957480][T13070] __dev_set_rx_mode+0x17c/0x260 [ 620.957506][T13070] ? dev_mc_add+0x4e/0x140 [ 620.957533][T13070] dev_mc_add+0xd2/0x140 [ 620.957564][T13070] igmp6_group_added+0x234/0x820 [ 620.957596][T13070] ? __pfx_igmp6_group_added+0x10/0x10 [ 620.957751][T13070] ? mld_del_delrec+0x1af/0xcd0 [ 620.957781][T13070] ? __ipv6_dev_mc_inc+0x548/0xa50 [ 620.957813][T13070] __ipv6_dev_mc_inc+0x897/0xa50 [ 620.957852][T13070] addrconf_join_solict+0x104/0x190 [ 620.957880][T13070] ? __pfx_addrconf_join_solict+0x10/0x10 [ 620.957906][T13070] ? rt_spin_unlock+0x160/0x200 [ 620.957933][T13070] __ipv6_dev_ac_inc+0x8ab/0xb20 [ 620.957960][T13070] ? __ipv6_dev_ac_inc+0x35/0xb20 [ 620.957996][T13070] ipv6_sock_ac_join+0x6a8/0x880 [ 620.958031][T13070] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 620.958061][T13070] ? _copy_from_user+0x94/0xb0 [ 620.958093][T13070] do_ipv6_setsockopt+0x2031/0x31c0 [ 620.958132][T13070] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 620.958171][T13070] ? futex_wait+0x29a/0x380 [ 620.958196][T13070] ? __pfx_futex_wait+0x10/0x10 [ 620.958222][T13070] ? __lock_acquire+0x6b5/0x2cf0 [ 620.958247][T13070] ? put_user_ifreq+0x7a/0xc0 [ 620.958426][T13070] ? sock_do_ioctl+0x298/0x320 [ 620.958535][T13070] ? do_futex+0x333/0x420 [ 620.958579][T13070] ? __fget_files+0x2a/0x420 [ 620.958611][T13070] ipv6_setsockopt+0x59/0x170 [ 620.958644][T13070] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 620.958669][T13070] do_sock_setsockopt+0x17c/0x1b0 [ 620.958700][T13070] __x64_sys_setsockopt+0x143/0x1b0 [ 620.958734][T13070] do_syscall_64+0x14d/0xf80 [ 620.958761][T13070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.958773][T13070] ? clear_bhb_loop+0x40/0x90 [ 620.958792][T13070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.958813][T13070] RIP: 0033:0x7f6a6d0ac799 [ 620.958834][T13070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.958852][T13070] RSP: 002b:00007f6a6b2fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 620.958873][T13070] RAX: ffffffffffffffda RBX: 00007f6a6d325fa0 RCX: 00007f6a6d0ac799 [ 620.958888][T13070] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000007 [ 620.958901][T13070] RBP: 00007f6a6d142bd9 R08: 0000000000000014 R09: 0000000000000000 [ 620.958914][T13070] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.958927][T13070] R13: 00007f6a6d326038 R14: 00007f6a6d325fa0 R15: 00007ffd3a8a12b8 [ 620.958945][T13070] [ 620.959658][T13070] Kernel Offset: disabled