last executing test programs: 5m3.531469128s ago: executing program 0 (id=3464): syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c0440"], 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000240)={{&(0x7f0000000000), 0x0, 0x40, 0xc, 0x6}, {&(0x7f0000000040)=[{0x9, 0x27}], 0x1, 0x10, 0x7f, 0xa}, {&(0x7f00000000c0)=[0x8, 0x4000000000c4de, 0x7, 0x1, 0x8, 0x6], 0x6, 0x8, 0x8, 0x6}, {&(0x7f0000000180)=[{0xb6, 0xece, 0x4, 0x617, 0x401}, {0x3, 0xff, 0x1, 0x0, 0x5}], 0x2, 0x28, 0xc, 0x5}, {&(0x7f0000000100)=[0x57, 0x50d, 0x3b, 0x5a11588b], 0x4, 0x8, 0x8, 0x9}}) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x40) keyctl$clear(0x11, 0xfffffffffffffffd) listen(r0, 0xa) add_key$keyring(&(0x7f0000000ac0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) listen(r0, 0x80007) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805ec4e"], 0x0) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000080)={0x2, 0x0, 0xfffffffffffffff9, 0x4}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0700000004000000000900000500000020"], 0x50) syz_usb_connect$uac3(0x6, 0x103, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf1, 0x3, 0x1, 0x17, 0x50, 0x2, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x45, 0x120000}, [@selector_unit={0x8, 0x24, 0xc, 0x7, 0x3, "945c14"}, @cluster_info_segment={0x6, 0x20, 0x2, 0x93, 0x81}, @multiply_unit={0xb, 0x24, 0xd, 0x3, 0x6, 0x1, 0x9}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x100, 0x2, 0x2, 0x4, 0x7, 0x200, 0xbb51, 0x5}, @power_domain={0xf, 0x24, 0x10, 0x6, 0xf09, 0x9, 0x80, "9454cfcb5686"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x5, 0x78, 0x3, 0x4, 0x9, 0xb4, 0x9, 0x8}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x2, 0x1, 0x9, "227f"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x4}, @as_header={0x17, 0x24, 0x1, 0x7, 0x80000001, 0x400, 0x5, 0xe3, 0x9, 0x0, 0x73}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x4, 0x6, {0xa, 0x25, 0x25, 0x6, 0x91, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x81, 0x4, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xf0, 0x2, 0x81, {0xa, 0x25, 0x25, 0x8, 0xff, 0x3}}}}}}}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x250, 0x3, 0x6, 0xfe, 0xff}, 0x118, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x3, [{0x77, &(0x7f0000000900)=ANY=[@ANYBLOB="7703c225294fb27e782af41fbaa3a933d420960b42af5628c48aa0d7e30f076dd73f4fcdae80579223976e3314306e54df528fa0aeeb727653f17abbf87639f155a234614d9c1e702ee5040cf65db3b64bb39b30cb422968d49a2de965d93edc8d139fd2ce47ebbcdb41be0e09be6743da2d9d2acbd5ca"]}, {0x5a, &(0x7f0000000980)=@string={0x5a, 0x3, "58ab7e48d85bf1e85a2fb9683d8369034b88dd846f20a99b6d76f432d36492b24e25f1e2a5b4198011792f55d7c02f7f898309f632aa58f0b542f14be87a2dd600bfca42b82200098491ff6ad76a8c098878a8b52be82703"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4}}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r3}, 0xc) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1535, 0x0, 0xffffffff, 0x22c3}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x0, 0xa317, 0x4000, 0x3, 0xa2, 0x0, r4}, &(0x7f0000001f40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x742b, 0x4000, 0x2, 0x201, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5cde, 0x800, 0x3, 0xa5, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x97f2, 0x80, 0x2, 0x287}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x37e1, 0x1000, 0x3, 0xcc}}], 0x4, &(0x7f0000005740)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x4, 0x893, 0x0, &(0x7f0000004740)=@buf_512="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"}}, &(0x7f00000057c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000600000000000000020000840901000004"], &(0x7f0000000f40)=""/4079, 0x42, 0xfef, 0x8}, 0x28) 5m0.727831437s ago: executing program 0 (id=3473): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018", @ANYRES32], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66", 0x53}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b", 0x53}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e0000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5m0.368910812s ago: executing program 0 (id=3476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a02"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583", 0x46}, {&(0x7f0000000100)}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7b", 0x9c}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5m0.159990873s ago: executing program 0 (id=3478): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 4m58.800849201s ago: executing program 0 (id=3484): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m57.416571768s ago: executing program 0 (id=3487): syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="20e2240000004ee6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = eventfd(0x34) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/237, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000005640)=[{{&(0x7f0000000340)=@abs={0x8c3042a35af0b697, 0x0, 0x4e23}, 0x6e, &(0x7f0000001a40)=[{&(0x7f00000003c0)="8f59678fbafe10dda31d2f0623db2d5d2fe90e2b345364cf817710369c02b275946945a000b79819639927234894baa47f04b2604f5a2205a215b7c3c3593da464806b2b9742230bf74c3162d6db114435607f48292a0135f89322b2f8bf62f674a639845c673db1634383f3b9c39129fc421afc59d586f9ab5c295eae919302f2d614afce150ff3e843d1d7c63e79b40d6c3cc68aa48ade43e5782a8893d8cfa53727d7524e387be76795262cb8d1ef1396575ed8a4d093a1a18967913c7e6a8cf23013d7405d4c97610f84685b33affe11f5873405c1ae0adac9eea044c02c6dc6773917", 0xe5}, {&(0x7f0000000500)="986a15d2cd4a275c01cb2b587aadb9ff110e66ded0ca1f96665f743614bcb258bad66834bb0f27300a3e09efefac8b28baaf8b0a3e642f643afcf3c2094cf24197f88cd1cb0de4f34a66b74089851f5d313d7bdffb995704fa5dffd791fa4555fc1029a1c0bfd95e036f97a2f6bd8c4ea5cb0c7b7bf4a720ee5fc836227de13245baaefcaf1106e1a82a2b0ffccfe4db0dd2ff", 0x93}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="9d6937b1948ef45ebe158b2ea29e6d4f9f1705a03e6da70fcd4be2dc07e01e0b8d86e03eb54620295e65e24a6d4de29db8ab3e27992017bfcb2ec8e5a66b8f592d2da2507521523249a3", 0x4a}, {&(0x7f00000018c0)="7012d99b9eb3b83b04559c00688ca0ad749a6c3c41878f027ffcdd0ac95648316ca7e4cb6375979336eb0d6a9b491c62df5ea331cfabbdfac86e8ee1b2de15505e67fbac4e14fb64c5e0ed928cc9d0253157331e7315ef6a6a991d3c3c76db55bc7b02d0bd792179114fd0d994325e4eb851c8378060b929d86cf9d05704aec7f89dfd0e6dca042cd41f9bf3b435a18854a9669a8ad1", 0x96}, {&(0x7f0000001980)="662fa7800a667ce9607d56a6a3b3496f3d69dbbad150ee566dd0f8868d74dd9ede5e1504900924610f9dd026ad49de90fbc5f41a78a054c1e128726106acc28c9be88720162452444076b00b", 0x4c}, {&(0x7f0000001a00)="875483ddc8f2b72f685f1423bb23fc1fce33d972dd599e6a0986c48ba9e38c0c276a", 0x22}], 0x7, &(0x7f0000001ec0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c200000000000000100040022000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4], 0xc8, 0x40}}, {{0x0, 0x0, &(0x7f0000005600)=[{&(0x7f0000005280)="8c1b2adcd7fd989a2d6feaa933273fefeb91ee7ea81f621cdec21e906fd952136b7042d1ed0e2d0b1822ee4445e46773563d602da734f55b6caafb52d6da1b3f11af10b34113aee4198bcad8ea3d3c562603c854051ba746015c1ffc411d3173d3d6907dbe9d279de9791193de6689899a4e16d35f442f1b4692f392cd9c04feb7edb2ecb84db2c260981496a813442ff7f34426671adf8e9f1d7242ffc43ab94c2aa796", 0xa4}, {&(0x7f0000005340)="7c0a6ce5a678972e2984fd90b1407190db8723d94ee8bb15a4ce499265e41e70ba8df070c81576a5b8dd4e52789943cab49d3ddbf387fd6f645a3fdd232b36b8834dccbe1d8110d75289918bf9e5b48adc4829f5e0e07e0cbe0acfab327891c1b0d1873974d64e37a150a0c5bb478bdca1e149684a2f3f96473e627621e9f20602b97f533ff4fe8caaf993ab638f6d6a5740bc903d949b4bb5737f227a03963da58febeb971421ca096b4b89689a3439b25e1d3b3141a3902fcf42847871c6efddcc5ae51f47ed84e84abbde3d984995491d2b1abf3108c34a08671006eddb3284ba939002adacc485c9", 0xea}, {&(0x7f0000005440)="66c7193ad6190e961b3bb3e082fbae071d197089dfe225da651566a9b8a733ed7448020ed0ebd978f027b0ccdf53e62a046a696e04c937d73d788c3b53cdc8e536ada6974ac5aeea05de3c7528ce225b9a91ec6cc000d7dd12a790bf6f1b425beace5b8d4288d7493268b4d58d99323d639fe175c03e62044be1cd6b736c89e422e2569bd30e7fd8952bc8580237d9b0c76f4edc39795c31b87f1b13658a25e8c7da3d22c7b8028ec6929c3f93a30e98712a014963ff0b45abcdc5669aafed52c4caa092c390213b7099c557249528606533ce672248c66e", 0xd8}, {&(0x7f0000005540)="7cc0bec12d98d3e2cd9feaea54f99900ef588d8ccb4bc555ad6b0c6f60a3997c19886994b83ae3369f2eb5e566dcc9ecd635dafe33ec15ac32c6a1f1f9d45892d9e34b4fb423c56071e5ffdf67f897883a7f4925f28a9ce6eb87e17fb8de7ab04a1bf627456f3486af00f85c05744277432805ba8032e870062f5e5b56fd490e34696df48976791f8c893342d6a24d60dce917", 0x93}], 0x4, 0x0, 0x0, 0x840}}], 0x2, 0x24004004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 15.789162321s ago: executing program 2 (id=4169): r0 = io_uring_setup(0x765a, &(0x7f0000000000)={0x0, 0x2491, 0x10, 0x2, 0x21a}) io_uring_enter(r0, 0x759c, 0xd1de, 0xb4, &(0x7f0000000080)={[0x3d273f5c]}, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/sync_on_suspend', 0x60c900, 0x180) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000140)=0xe) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/169, 0xa9}, {&(0x7f0000000240)=""/33, 0x21}, {&(0x7f0000000280)=""/78, 0x4e}, {&(0x7f0000000300)=""/155, 0x9b}, {&(0x7f00000003c0)=""/112, 0x70}, {&(0x7f0000000440)=""/93, 0x5d}, {&(0x7f00000004c0)=""/4, 0x4}, {&(0x7f0000000500)=""/180, 0xb4}, {&(0x7f00000005c0)=""/252, 0xfc}], 0x9, 0x6, 0xfffffffb) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000780)=0x0) connect$nfc_llcp(r2, &(0x7f00000007c0)={0x27, r3, 0x1, 0x1, 0x80, 0xb8, "04f1ff15c4a7024ffff7ae859163d4492633f654f347fffc87d860180ba8af96e7fae13670c3984ea44fc4e65834fc27e09fb6e7be9909c061fe5ecdd48cdb", 0x12}, 0x60) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000840)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0xb0, 0x0, {"80dfa41976f151bdf15a7db744181e16"}, 0x8, 0x975, 0x3}, @in={0x2, 0x4e24, @private=0xa010102}}}, 0x118) ioctl$FE_SET_VOLTAGE(r2, 0x6f43, &(0x7f0000000980)=0x1) write$UHID_INPUT(r2, &(0x7f00000009c0)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001b00), 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001b40)={0x0, 0x1, 0x1}, &(0x7f0000001b80)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000001bc0)={r4, @in6={{0xa, 0x4e22, 0x0, @private1, 0x4}}}, 0x84) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfc, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001d40)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001dc0)={{r5}, &(0x7f0000001d00), &(0x7f0000001d80)=r6}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e40), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001e80)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001ec0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000001f80)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x38, r7, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048001}, 0x8015) r10 = dup(0xffffffffffffffff) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002000), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x24, r11, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}}, 0x844) connect(r10, &(0x7f0000002100)=@ieee802154={0x24, @none={0x0, 0xd2928d8f1228cf77}}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000002180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$UFFDIO_COPY(r12, 0xc028aa03, &(0x7f00000021c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x2}) 15.594166435s ago: executing program 2 (id=4170): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x21, 0x0) 15.091231529s ago: executing program 2 (id=4174): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe9ac0000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13.359615063s ago: executing program 2 (id=4181): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x94, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x68, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x58, 0x1, [@m_tunnel_key={0x54, 0xf, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x58, 0x0, 0x305, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x0, 0x9, 0x80000001, 0x800]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 12.251872884s ago: executing program 2 (id=4185): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000005e00), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x16d, 0x3, {0x0, 0x8}, 0x6, 0x6}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) landlock_create_ruleset(&(0x7f0000000040)={0x10000, 0xb, 0x4, 0xc00, 0x1, 0x1}, 0x30, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc53", 0x35}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce9", 0x8c}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e", 0x79}, {&(0x7f0000000180)="2180ed85fe6ba7829fb14e43bf1075bc651dc53121b428043077d42f2d599f93420da5052bcc750bd0a39b0a222563b972fa259bc8bdfa52d78be35252fc8885832081af9c49dfe4a144b5048f7278f9246836e8d522303119da41bc8ef861663ecbf3b8428c93962cca36ed282465ac79e5492e9b7b50f209d964b6e753caeb01c957a5fc03f96fa0a8014e8fbc61cd4e1c", 0x92}, {&(0x7f0000000240)="bfadd80d146ddd6ee573d3a90137a2bd30", 0x11}], 0x3}}], 0x2, 0x14042082) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400200000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x400, 0x0}}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 12.243085709s ago: executing program 1 (id=4186): write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r2, 0x331, 0x70ad2c, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x4000000) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f000001b7c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x4008804) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 9.297093222s ago: executing program 1 (id=4190): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe9ac0000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.540742774s ago: executing program 1 (id=4195): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=""/4079, 0x42, 0xfef, 0x8}, 0x28) 7.250103282s ago: executing program 1 (id=4197): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000006e00)=[{{&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000940)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f0000000480)=""/190, 0xbe}, {&(0x7f00000005c0)=""/91, 0x5b}, {&(0x7f0000000640)=""/213, 0xd5}, {&(0x7f0000000740)=""/237, 0xed}, {&(0x7f0000000840)=""/249, 0xf9}], 0x6, &(0x7f0000000a00)=""/117, 0x75}, 0xd}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a80)=""/37, 0x25}, {&(0x7f0000000ac0)=""/3, 0x3}], 0x2}, 0xe}, {{&(0x7f0000000b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000bc0)=""/230, 0xe6}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/136, 0x88}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/27, 0x1b}, {&(0x7f0000002dc0)=""/166, 0xa6}, {&(0x7f0000002e80)=""/4096, 0x1000}], 0x7, &(0x7f0000003f00)=""/74, 0x4a}, 0x6}, {{&(0x7f0000003f80)=@xdp, 0x80, &(0x7f0000005180)=[{&(0x7f0000004000)=""/88, 0x58}, {&(0x7f0000004080)}, {&(0x7f00000040c0)=""/49, 0x31}, {&(0x7f0000004100)=""/91, 0x5b}, {&(0x7f0000004180)=""/4096, 0x1000}], 0x5, &(0x7f0000005200)=""/176, 0xb0}, 0x2}, {{&(0x7f00000052c0)=@nl=@unspec, 0x80, &(0x7f0000006440)=[{&(0x7f0000005340)=""/4096, 0x1000}, {&(0x7f0000006340)=""/207, 0xcf}], 0x2, &(0x7f0000006480)=""/204, 0xcc}, 0x6061}, {{0x0, 0x0, &(0x7f0000006680)=[{&(0x7f0000006580)=""/195, 0xc3}], 0x1}, 0x8}, {{&(0x7f00000066c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000006c40)=[{&(0x7f0000006740)=""/61, 0x3d}, {&(0x7f0000006780)=""/119, 0x77}, {&(0x7f0000006800)=""/178, 0xb2}, {&(0x7f00000068c0)=""/150, 0x96}, {&(0x7f0000006980)}, {&(0x7f00000069c0)=""/100, 0x64}, {&(0x7f0000006a40)=""/108, 0x6c}, {&(0x7f0000006ac0)=""/45, 0x2d}, {&(0x7f0000006b00)=""/229, 0xe5}, {&(0x7f0000006c00)=""/20, 0x14}], 0xa, &(0x7f0000006d00)=""/216, 0xd8}, 0x6}], 0x7, 0x10003, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f0000000680), &(0x7f0000000400)=@tcp6=r6, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r7, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1a, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 6.317094043s ago: executing program 1 (id=4199): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x71, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f0000000100)={0x2}, 0x0) landlock_restrict_self(r3, 0x4) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @local}, 0x1c) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x106f) 6.274070528s ago: executing program 2 (id=4200): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x28, 0x0, 0xd6, {{0xb, 0x4, 0x1, 0x23, 0x2c, 0x66, 0x0, 0xbc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@cipso={0x86, 0x18, 0x0, [{0x6, 0xc, "80c014fe524b1603865e"}, {0x2, 0x6, "8e8d288d"}]}]}}}}}) syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), 0x0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r3, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66e", 0x59}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc0740", 0x52}], 0x2, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.215270734s ago: executing program 4 (id=4202): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 5.167101619s ago: executing program 3 (id=4203): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x20004814) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25150000002c002b8020000380080002000300000006000100000000000c0004000203aaaaaaaaaaaa08000100000000000c00060001"], 0x54}, 0x1, 0x0, 0x0, 0x4045}, 0x8004) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='secret\x00', &(0x7f0000000080)='A===\x00', 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe0000010000000008001a"], 0x2c}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x90004) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e130100c900", @ANYRES8], 0x16) ppoll(&(0x7f00000000c0)=[{r5, 0x60}], 0x1, 0x0, 0x0, 0x0) 5.166532154s ago: executing program 4 (id=4204): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe9ac0000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.007479122s ago: executing program 3 (id=4205): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@deltfilter={0x3c, 0x2d, 0x4, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xb, 0xfff2}, {0xf, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x4e}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048000}, 0x24008844) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000001c0)={0x0, r0}, 0x1) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/105, 0x69}], 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x1000001, 0x5069d481, 0x81, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000008e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008400)={0x18, 0x0, 0xde, {0x2}}, 0x0, &(0x7f0000008480)={0x20, 0x0, 0x1, {0x0, 0x87b223a071b1752a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008d40)={0x130, 0x0, 0x80000000, {0xfffffffffffff28e, 0x3, 0x0, '\x00', {0x7ff, 0x69ab20d5, 0x9a, 0x1000, r4, r5, 0xa000, '\x00', 0x4, 0x10, 0x2, 0x1000, {0x140000000000, 0x8452}, {0x3, 0x4}, {0x9, 0x10000}, {0x8000000000000001, 0x7}, 0x1, 0x1ff, 0x80000001, 0x6}}}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) dup3(r6, r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r7 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000048c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000004980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004940)={&(0x7f0000004900)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x35}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000805) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r7, 0x2219, 0xcf74, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008840) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f00000047c0)=[{0x7f, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/235, 0xeb}]}, {0x8, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)=""/73, 0x49}]}, {0x80, 0x0, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/95, 0x5f}, {&(0x7f0000000740)=""/43, 0x2b}, {&(0x7f0000000780)=""/55, 0x37}, {&(0x7f00000007c0)}]}, {0x59b00, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/218, 0xda}, {&(0x7f0000000a40)=""/25, 0x19}, {&(0x7f0000000a80)=""/4096, 0x1000}]}, {0x5, 0x0, &(0x7f0000002100)=[{&(0x7f0000001ac0)=""/187, 0xbb}, {&(0x7f0000001b80)=""/229, 0xe5}, {&(0x7f0000001c80)=""/83, 0x53}, {&(0x7f0000001d00)=""/166, 0xa6}, {&(0x7f0000001dc0)=""/219, 0xdb}, {&(0x7f0000001ec0)=""/17, 0x11}, {&(0x7f0000001f00)=""/207, 0xcf}, {&(0x7f0000002000)=""/9, 0x9}, {&(0x7f0000002040)=""/131, 0x83}]}, {0xab, 0x0, &(0x7f0000002440)=[{&(0x7f00000021c0)=""/24, 0x18}, {&(0x7f0000002200)=""/150, 0x96}, {&(0x7f00000022c0)=""/53, 0x35}, {&(0x7f0000002300)=""/234, 0xea}, {&(0x7f0000002400)=""/20, 0x14}]}, {0x71, 0x0, &(0x7f0000002780)=[{&(0x7f00000024c0)=""/1, 0x1}, {&(0x7f0000002500)=""/106, 0x6a}, {&(0x7f0000002580)=""/140, 0x8c}, {&(0x7f0000002640)}, {&(0x7f0000002680)=""/223, 0xdf}]}, {0x61, 0x0, &(0x7f0000002800)}, {0x2, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002840)=""/226, 0xe2}, {&(0x7f0000002940)=""/163, 0xa3}, {&(0x7f0000002a00)=""/198, 0xc6}, {&(0x7f0000002b00)=""/110, 0x6e}, {&(0x7f0000002b80)=""/178, 0xb2}]}, {0x101, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/236, 0xec}, {&(0x7f0000002dc0)=""/252, 0xfc}, {&(0x7f0000002ec0)=""/26, 0x1a}, {&(0x7f0000002f00)=""/54, 0x36}, {&(0x7f0000002f40)=""/134, 0x86}, {&(0x7f0000003000)=""/60, 0x3c}, {&(0x7f0000003040)}, {&(0x7f0000003080)=""/153, 0x99}, {&(0x7f0000003140)=""/179, 0xb3}]}, {0xa08, 0x0, &(0x7f0000003380)=[{&(0x7f00000032c0)=""/69, 0x45}, {&(0x7f0000003340)=""/56, 0x38}]}, {0x1, 0x0, &(0x7f0000004600)=[{&(0x7f00000033c0)=""/154, 0x9a}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/141, 0x8d}, {&(0x7f0000004540)=""/122, 0x7a}, {&(0x7f00000045c0)=""/58, 0x3a}]}, {0x7fffffff, 0x0, &(0x7f0000004780)=[{&(0x7f0000004680)=""/252, 0xfc}]}], 0xd) 2.990934031s ago: executing program 3 (id=4206): socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/ehci-pci/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='808', 0x3) 2.975638002s ago: executing program 1 (id=4207): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r0, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000a80)=""/4089, 0xff9}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000040)=""/181, 0xb5}, {&(0x7f0000002e00)=""/175, 0xaf}, {&(0x7f0000002ec0)=""/220, 0xdc}, {&(0x7f0000003080)=""/4086, 0xff6}, {&(0x7f0000001d80)=""/46, 0x2e}], 0x5}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x40, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@multicast2, @multicast1, 0x0}, &(0x7f0000000240)=0xc) syz_usb_connect(0x1, 0xb60, &(0x7f000000a980)=ANY=[@ANYBLOB="12015002fc9f5108480b032088730102030109024e0b040806008109043b020a2065ae4009051a"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x0, 0x18) mknodat(r10, &(0x7f0000000840)='./file0\x00', 0x800, 0x80000001) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0x6}, {0xfff1, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0x34c, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9e}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3782}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x3, 0x6, 0xbe, 0x7}, {0x7f, 0xec, 0xa, 0xf54}, {0x100, 0x7, 0x8e, 0x3}, {0x0, 0xab, 0x8, 0xfffffff7}, {0x7, 0x81, 0x4, 0x9}, {0xc, 0x5, 0x2, 0x3}, {0x2, 0x52, 0x10, 0x2}, {0x5b19, 0x8, 0x1, 0x5}, {0x4, 0x40, 0x82, 0x3}, {0x3b5, 0x6, 0x9, 0x8}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff0000}}}]}}]}, 0x34c}, 0x1, 0x0, 0x0, 0x4}, 0x80) 2.314872511s ago: executing program 3 (id=4208): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f00000002c0)={0x123200, 0x6, 0x12}, 0x18) unshare(0xa020480) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff"], 0x0) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) lseek(r1, 0x87, 0x1) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000000201030000000000000000050000021c0003800c00028005000100060000000c000280050001003af1ffff07000540000000940e000600736e6d705f74726170000000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4c094) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x6, 0x204800) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) r4 = syz_open_dev$vbi(&(0x7f0000000d40), 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000f00)={0x100, [0x4, 0x9, 0x0, 0xa, 0x8, 0x9, 0x2, 0x9, 0x1, 0xfff, 0x8, 0x1, 0x400, 0x80, 0x7fff, 0x3, 0x7, 0x3, 0x43, 0x3, 0x5, 0x0, 0xa, 0x4, 0x4, 0x97, 0x5, 0x7ff, 0xf4, 0x0, 0x7, 0x81, 0x3, 0xfc, 0xabd2, 0x7, 0xfffe, 0x4003, 0x611, 0x2, 0x2, 0x40, 0xfeff, 0xfff5, 0x8000, 0x6, 0x9, 0x400], 0x5}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x520, 0x4000) (async) socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000300)={0x0}, 0x1) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r5 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) (rerun: 32) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r5], 0x2b) sendfile(r7, r5, 0x0, 0x4000000053d2) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) 2.165656782s ago: executing program 4 (id=4209): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.905018122s ago: executing program 3 (id=4210): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (fail_nth: 1) 1.43768076s ago: executing program 4 (id=4211): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000840)=ANY=[@ANYBLOB="180800000000008000000000802b1993b49e087667235e360975ba7c007af5a7181957d4bcfd4a150f6901", @ANYRES32, @ANYBLOB="00000000000000003c080100000000001800000000000000000000000000000095000000000000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x8) mkdir(0x0, 0x19) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$mtd(&(0x7f0000000140), 0x212, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x6, 0x80000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000feff000000000000ff01000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000bbf55e8f7acb208200000000540000008300000287092000000000005509010000000000950000000000000045090400fcffff010091000000000000b7020000010000008500000000000010b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r6, 0x3cea5ee9, 0x80000000, 0x3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000380)={'erspan0\x00', &(0x7f00000009c0)={'erspan0\x00', 0x0, 0x7, 0x7800, 0x4, 0x504b, {{0x2a, 0x4, 0x2, 0x39, 0xa8, 0x66, 0x0, 0xc0, 0x29, 0x0, @loopback, @private=0xa010102, {[@ssrr={0x89, 0x17, 0x8e, [@broadcast, @multicast1, @private=0xa010100, @multicast1, @rand_addr=0x64010101]}, @lsrr={0x83, 0x3, 0x22}, @end, @noop, @end, @cipso={0x86, 0x58, 0x3, [{0x0, 0x9, "6c38c7fe45f8d5"}, {0x5, 0xe, "5798de3b573f7a699c3b822b"}, {0x5, 0xe, "bfae280f92892e964ad6a562"}, {0x6, 0xe, "1b1e0ccf2d08020022ce893e"}, {0x6, 0x10, "8198f4b01d04699a54fe4e4ba941"}, {0x0, 0xf, "5e1e20e392fe93f3da942f15e4"}]}, @timestamp={0x44, 0x14, 0x60, 0x0, 0x0, [0x577, 0xffff, 0x49, 0x8000]}, @rr={0x7, 0xb, 0x71, [@loopback, @remote]}]}}}}}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x5}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r6, 0x107, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9a, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000500), 0x8, 0x3e, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)={@fallback=r3, r6, 0x1c, 0x18, 0xffffffffffffffff, @void, @value=r5}, 0x20) clock_gettime(0x3, &(0x7f0000000080)) 1.437073652s ago: executing program 3 (id=4212): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000006c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0xa00, 0x0, 0x0, 0x0, 0x10}}, 0x120) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='schedstat\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) syz_open_dev$I2C(0x0, 0x1, 0x22603) 156.83444ms ago: executing program 4 (id=4213): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x8) (fail_nth: 1) 0s ago: executing program 4 (id=4214): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x20004814) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25150000002c002b8020000380080002000300000006000100000000000c0004000203aaaaaaaaaaaa08000100000000000c00060001"], 0x54}, 0x1, 0x0, 0x0, 0x4045}, 0x8004) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='secret\x00', &(0x7f0000000080)='A===\x00', 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe0000010000000008001a"], 0x2c}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x90004) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e130100c900", @ANYRES8], 0x16) ppoll(&(0x7f00000000c0)=[{r5, 0x60}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 8 RDI: 0000000000000e26 [ 1172.958895][T17544] RBP: 0000200000000780 R08: 0000200000000340 R09: 0000000000000000 [ 1172.958906][T17544] R10: 0000200000000810 R11: 0000000000000206 R12: 0000200000000808 [ 1172.958917][T17544] R13: 0000200000000810 R14: 00007f59e2585fd8 R15: 0000000000000000 [ 1172.958941][T17544] [ 1173.386293][T17529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.476326][T17529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.548559][T17529] bond0 (unregistering): Released all slaves [ 1174.235117][ T9347] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1174.388362][ T9347] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1174.388397][ T9347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.438212][ T9347] usb 3-1: config 0 descriptor?? [ 1174.482775][ T9347] pwc: Samsung MPC-C10 USB webcam detected. [ 1174.655990][ T5604] Bluetooth: hci4: command 0x0406 tx timeout [ 1174.802372][ T9347] pwc: send_video_command error -71 [ 1174.802391][ T9347] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1174.802494][ T9347] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1174.845214][ T9347] usb 3-1: USB disconnect, device number 61 [ 1174.885744][T17571] FAULT_INJECTION: forcing a failure. [ 1174.885744][T17571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1174.885785][T17571] CPU: 1 UID: 0 PID: 17571 Comm: syz.1.3793 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1174.885817][T17571] Tainted: [L]=SOFTLOCKUP [ 1174.885825][T17571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1174.885838][T17571] Call Trace: [ 1174.885847][T17571] [ 1174.885858][T17571] dump_stack_lvl+0xe8/0x150 [ 1174.885903][T17571] should_fail_ex+0x467/0x600 [ 1174.885949][T17571] _copy_to_user+0x31/0xb0 [ 1174.885980][T17571] simple_read_from_buffer+0xe1/0x170 [ 1174.886013][T17571] proc_fail_nth_read+0x1be/0x230 [ 1174.886045][T17571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1174.886075][T17571] ? rw_verify_area+0x250/0x4d0 [ 1174.886107][T17571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1174.886131][T17571] vfs_read+0x219/0xa90 [ 1174.886169][T17571] ? __pfx_vfs_read+0x10/0x10 [ 1174.886202][T17571] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1174.886250][T17571] ? lockdep_hardirqs_on+0x7a/0x110 [ 1174.886281][T17571] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1174.886309][T17571] ? mutex_lock_nested+0x152/0x1d0 [ 1174.886329][T17571] ? fdget_pos+0x252/0x320 [ 1174.886365][T17571] ksys_read+0x156/0x270 [ 1174.886404][T17571] ? __pfx_ksys_read+0x10/0x10 [ 1174.886441][T17571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.886468][T17571] do_syscall_64+0x174/0x580 [ 1174.886499][T17571] ? trace_irq_disable+0x3b/0x140 [ 1174.886525][T17571] ? clear_bhb_loop+0x40/0x90 [ 1174.886560][T17571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.886584][T17571] RIP: 0033:0x7f4c5e71e84e [ 1174.886606][T17571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1174.886627][T17571] RSP: 002b:00007f4c5c994fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1174.886651][T17571] RAX: ffffffffffffffda RBX: 00007f4c5c9956c0 RCX: 00007f4c5e71e84e [ 1174.886669][T17571] RDX: 000000000000000f RSI: 00007f4c5c9950a0 RDI: 0000000000000007 [ 1174.886683][T17571] RBP: 00007f4c5c995090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.886698][T17571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.886712][T17571] R13: 00007f4c5e9e6128 R14: 00007f4c5e9e6090 R15: 00007ffc8e340de8 [ 1174.886748][T17571] [ 1175.861197][T17402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.866840][T17402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.867119][T17402] bridge_slave_0: entered allmulticast mode [ 1175.871523][T17402] bridge_slave_0: entered promiscuous mode [ 1176.288688][T17402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.288794][T17402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.289015][T17402] bridge_slave_1: entered allmulticast mode [ 1176.313730][T17402] bridge_slave_1: entered promiscuous mode [ 1176.370300][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3799'. [ 1176.423386][T17587] netlink: 'syz.4.3799': attribute type 26 has an invalid length. [ 1176.423409][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3799'. [ 1176.449800][ T5603] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1176.566119][ T5854] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1176.715740][ T5854] usb 3-1: Using ep0 maxpacket: 8 [ 1176.720292][ T5854] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.720323][ T5854] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1176.720433][ T5854] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1176.723475][ T5854] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1176.723545][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.723562][ T5854] usb 3-1: Product: syz [ 1176.723573][ T5854] usb 3-1: Manufacturer: syz [ 1176.723720][ T5854] usb 3-1: SerialNumber: syz [ 1176.827004][T17402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.872585][T17402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.096855][T17402] team0: Port device team_slave_0 added [ 1177.100703][T17402] team0: Port device team_slave_1 added [ 1177.561332][ T5854] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1177.639678][ T5854] usb 3-1: USB disconnect, device number 62 [ 1177.695805][T16497] udevd[16497]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1177.909939][T17601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3801'. [ 1177.993241][T17603] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.022914][T17402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1178.022933][T17402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1178.022966][T17402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1178.357774][T17402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1178.357794][T17402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1178.357827][T17402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1178.486216][T17607] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.525642][T14072] bridge_slave_1: left allmulticast mode [ 1178.525746][T14072] bridge_slave_1: left promiscuous mode [ 1178.526235][T14072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.712128][T14072] bridge_slave_0: left allmulticast mode [ 1178.712158][T14072] bridge_slave_0: left promiscuous mode [ 1178.713104][T14072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.674562][T17635] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1179.875937][T17638] FAULT_INJECTION: forcing a failure. [ 1179.875937][T17638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1179.875974][T17638] CPU: 1 UID: 0 PID: 17638 Comm: syz.4.3817 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1179.876002][T17638] Tainted: [L]=SOFTLOCKUP [ 1179.876010][T17638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1179.876024][T17638] Call Trace: [ 1179.876032][T17638] [ 1179.876041][T17638] dump_stack_lvl+0xe8/0x150 [ 1179.876079][T17638] should_fail_ex+0x467/0x600 [ 1179.876118][T17638] _copy_from_user+0x2d/0xb0 [ 1179.876144][T17638] __sys_bpf+0x2e7/0xd90 [ 1179.876175][T17638] ? __pfx___sys_bpf+0x10/0x10 [ 1179.876199][T17638] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1179.876233][T17638] ? rt_mutex_slowunlock+0x219/0x460 [ 1179.876273][T17638] ? ksys_write+0x248/0x270 [ 1179.876302][T17638] ? __pfx_ksys_write+0x10/0x10 [ 1179.876332][T17638] __x64_sys_bpf+0xba/0xd0 [ 1179.876365][T17638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.876387][T17638] do_syscall_64+0x174/0x580 [ 1179.876414][T17638] ? trace_irq_disable+0x3b/0x140 [ 1179.876434][T17638] ? clear_bhb_loop+0x40/0x90 [ 1179.876459][T17638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.876478][T17638] RIP: 0033:0x7f6c3726e019 [ 1179.876502][T17638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.876519][T17638] RSP: 002b:00007f6c354a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1179.876540][T17638] RAX: ffffffffffffffda RBX: 00007f6c374f6090 RCX: 00007f6c3726e019 [ 1179.876555][T17638] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000001 [ 1179.876568][T17638] RBP: 00007f6c354a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.876580][T17638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.876592][T17638] R13: 00007f6c374f6128 R14: 00007f6c374f6090 R15: 00007ffdead751c8 [ 1179.876623][T17638] [ 1180.199359][ T9347] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1180.417644][ T9347] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1180.418436][ T9347] usb 4-1: not running at top speed; connect to a high speed hub [ 1180.420055][ T9347] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 1180.420082][ T9347] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.420170][ T9347] usb 4-1: config 5 has no interface number 0 [ 1180.420231][ T9347] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1180.420259][ T9347] usb 4-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1180.420292][ T9347] usb 4-1: config 5 interface 246 has no altsetting 0 [ 1180.423480][ T9347] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 1180.423511][ T9347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.423534][ T9347] usb 4-1: Product: syz [ 1180.423550][ T9347] usb 4-1: Manufacturer: syz [ 1180.423568][ T9347] usb 4-1: SerialNumber: syz [ 1181.016802][T14072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1181.106756][T14072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1181.140746][T14072] bond0 (unregistering): Released all slaves [ 1181.704285][ T9347] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1181.790069][T14089] usb 4-1: Failed to submit usb control message: -71 [ 1181.790112][T14089] usb 4-1: unable to send the bmi data to the device: -71 [ 1181.790133][T14089] usb 4-1: unable to get target info from device [ 1181.790167][T14089] usb 4-1: could not get target info (-71) [ 1181.790643][T14089] usb 4-1: could not probe fw (-71) [ 1181.908283][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 1181.908302][ T36] audit: type=1107 audit(2000000383.130:89): pid=17641 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1182.969636][ T9347] usb 4-1: USB disconnect, device number 72 [ 1183.115801][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.115879][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.138381][T17644] netlink: 'syz.2.3820': attribute type 26 has an invalid length. [ 1183.138898][T17644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3820'. [ 1183.202031][ T5604] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1183.202064][ T5604] CPU: 1 UID: 0 PID: 5604 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1183.202098][ T5604] Tainted: [L]=SOFTLOCKUP [ 1183.202107][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1183.202122][ T5604] Workqueue: hci5 hci_rx_work [ 1183.202158][ T5604] Call Trace: [ 1183.202168][ T5604] [ 1183.202178][ T5604] dump_stack_lvl+0xe8/0x150 [ 1183.202221][ T5604] sysfs_create_dir_ns+0x271/0x2a0 [ 1183.202254][ T5604] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1183.202287][ T5604] ? rt_spin_unlock+0x163/0x200 [ 1183.202317][ T5604] kobject_add_internal+0x62c/0xce0 [ 1183.202350][ T5604] kobject_add+0x163/0x240 [ 1183.202388][ T5604] ? rt_spin_unlock+0x157/0x200 [ 1183.202419][ T5604] ? __pfx_kobject_add+0x10/0x10 [ 1183.202476][ T5604] ? get_device_parent+0x370/0x3a0 [ 1183.202516][ T5604] device_add+0x3fa/0xb80 [ 1183.202551][ T5604] hci_conn_add_sysfs+0xd5/0x210 [ 1183.202584][ T5604] le_conn_complete_evt+0xfef/0x1580 [ 1183.202635][ T5604] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1183.202672][ T5604] ? lockdep_hardirqs_on+0x7a/0x110 [ 1183.202705][ T5604] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1183.202738][ T5604] ? rt_mutex_slowunlock+0x219/0x460 [ 1183.202764][ T5604] ? skb_pull_data+0xf0/0x200 [ 1183.202808][ T5604] hci_le_conn_complete_evt+0x187/0x470 [ 1183.202856][ T5604] hci_event_packet+0x67a/0xf10 [ 1183.202894][ T5604] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1183.202928][ T5604] ? __pfx_hci_event_packet+0x10/0x10 [ 1183.202959][ T5604] ? rt_spin_unlock+0x157/0x200 [ 1183.202995][ T5604] ? hci_send_to_monitor+0xe2/0x590 [ 1183.203021][ T5604] hci_rx_work+0x3ee/0x1020 [ 1183.203061][ T5604] ? process_scheduled_works+0xa20/0x14e0 [ 1183.203092][ T5604] process_scheduled_works+0xa8e/0x14e0 [ 1183.203156][ T5604] ? __pfx_process_scheduled_works+0x10/0x10 [ 1183.203194][ T5604] ? assign_work+0x3cf/0x5d0 [ 1183.203230][ T5604] worker_thread+0xa47/0xfb0 [ 1183.203292][ T5604] kthread+0x388/0x470 [ 1183.203330][ T5604] ? __pfx_worker_thread+0x10/0x10 [ 1183.203359][ T5604] ? __pfx_kthread+0x10/0x10 [ 1183.203395][ T5604] ret_from_fork+0x514/0xb70 [ 1183.203436][ T5604] ? __pfx_ret_from_fork+0x10/0x10 [ 1183.203484][ T5604] ? __switch_to+0xc89/0x1420 [ 1183.203522][ T5604] ? __pfx_kthread+0x10/0x10 [ 1183.203561][ T5604] ret_from_fork_asm+0x1a/0x30 [ 1183.203606][ T5604] [ 1183.218429][ T5604] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1183.218496][ T5604] Bluetooth: hci5: failed to register connection device [ 1183.642657][T17654] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.3821'. [ 1183.856328][T17402] hsr_slave_0: entered promiscuous mode [ 1183.872095][T17402] hsr_slave_1: entered promiscuous mode [ 1184.047021][T17659] FAULT_INJECTION: forcing a failure. [ 1184.047021][T17659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1184.047065][T17659] CPU: 0 UID: 0 PID: 17659 Comm: syz.3.3823 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1184.047097][T17659] Tainted: [L]=SOFTLOCKUP [ 1184.047105][T17659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1184.047119][T17659] Call Trace: [ 1184.047127][T17659] [ 1184.047137][T17659] dump_stack_lvl+0xe8/0x150 [ 1184.047179][T17659] should_fail_ex+0x467/0x600 [ 1184.047221][T17659] _copy_from_user+0x2d/0xb0 [ 1184.047250][T17659] do_sock_getsockopt+0x200/0x7e0 [ 1184.047289][T17659] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1184.047336][T17659] ? __fget_files+0x3a8/0x420 [ 1184.047362][T17659] ? __fget_files+0x2a/0x420 [ 1184.047393][T17659] __x64_sys_getsockopt+0x1aa/0x250 [ 1184.047431][T17659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.047456][T17659] do_syscall_64+0x174/0x580 [ 1184.047489][T17659] ? clear_bhb_loop+0x40/0x90 [ 1184.047517][T17659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.047541][T17659] RIP: 0033:0x7fb23ee3e019 [ 1184.047562][T17659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.047581][T17659] RSP: 002b:00007fb23d075028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1184.047606][T17659] RAX: ffffffffffffffda RBX: 00007fb23f0c6090 RCX: 00007fb23ee3e019 [ 1184.047622][T17659] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 1184.047636][T17659] RBP: 00007fb23d075090 R08: 00002000000000c0 R09: 0000000000000000 [ 1184.047651][T17659] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1184.047666][T17659] R13: 00007fb23f0c6128 R14: 00007fb23f0c6090 R15: 00007ffdb46922a8 [ 1184.047699][T17659] [ 1184.082552][T17663] FAULT_INJECTION: forcing a failure. [ 1184.082552][T17663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1184.082591][T17663] CPU: 1 UID: 0 PID: 17663 Comm: syz.4.3825 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1184.082619][T17663] Tainted: [L]=SOFTLOCKUP [ 1184.082627][T17663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1184.082639][T17663] Call Trace: [ 1184.082647][T17663] [ 1184.082656][T17663] dump_stack_lvl+0xe8/0x150 [ 1184.082697][T17663] should_fail_ex+0x467/0x600 [ 1184.082734][T17663] _copy_from_user+0x2d/0xb0 [ 1184.082760][T17663] do_sys_poll+0x258/0xf50 [ 1184.082792][T17663] ? __lock_acquire+0x683/0x2ce0 [ 1184.082815][T17663] ? __pfx_do_sys_poll+0x10/0x10 [ 1184.082837][T17663] ? is_bpf_text_address+0x292/0x2b0 [ 1184.082861][T17663] ? is_bpf_text_address+0x26/0x2b0 [ 1184.082973][T17663] ? set_user_sigmask+0xcd/0x1c0 [ 1184.083001][T17663] ? __pfx_set_user_sigmask+0x10/0x10 [ 1184.083026][T17663] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1184.083056][T17663] __se_sys_ppoll+0x209/0x2b0 [ 1184.083075][T17663] ? fput+0xa0/0xd0 [ 1184.083097][T17663] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1184.083130][T17663] ? __pfx_ksys_write+0x10/0x10 [ 1184.083162][T17663] ? __x64_sys_ppoll+0x20/0xc0 [ 1184.083192][T17663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.083214][T17663] do_syscall_64+0x174/0x580 [ 1184.083241][T17663] ? trace_irq_disable+0x3b/0x140 [ 1184.083261][T17663] ? clear_bhb_loop+0x40/0x90 [ 1184.083286][T17663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.083306][T17663] RIP: 0033:0x7f6c3726e019 [ 1184.083325][T17663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.083343][T17663] RSP: 002b:00007f6c354c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1184.083364][T17663] RAX: ffffffffffffffda RBX: 00007f6c374f5fa0 RCX: 00007f6c3726e019 [ 1184.083379][T17663] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000080 [ 1184.083401][T17663] RBP: 00007f6c354c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.083414][T17663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.083426][T17663] R13: 00007f6c374f6038 R14: 00007f6c374f5fa0 R15: 00007ffdead751c8 [ 1184.083455][T17663] [ 1184.757254][T14072] hsr_slave_0: left promiscuous mode [ 1184.942231][T14072] hsr_slave_1: left promiscuous mode [ 1184.943349][T14072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1185.018004][T14072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1185.677690][ T36] audit: type=1107 audit(2000000386.920:90): pid=17681 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1187.046881][T17678] FAULT_INJECTION: forcing a failure. [ 1187.046881][T17678] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.046917][T17678] CPU: 1 UID: 0 PID: 17678 Comm: syz.2.3830 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1187.046943][T17678] Tainted: [L]=SOFTLOCKUP [ 1187.046949][T17678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1187.046961][T17678] Call Trace: [ 1187.046968][T17678] [ 1187.046976][T17678] dump_stack_lvl+0xe8/0x150 [ 1187.047012][T17678] should_fail_ex+0x467/0x600 [ 1187.047044][T17678] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1187.047062][T17678] should_failslab+0xa8/0x100 [ 1187.047087][T17678] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1187.047102][T17678] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 1187.047122][T17678] ? sock_alloc_inode+0x2c/0x1a0 [ 1187.047137][T17678] ? sock_alloc_inode+0x2c/0x1a0 [ 1187.047157][T17678] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1187.047173][T17678] sock_alloc_inode+0x2c/0x1a0 [ 1187.047190][T17678] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1187.047205][T17678] alloc_inode+0x6a/0x1b0 [ 1187.047235][T17678] __sock_create+0x12d/0x9d0 [ 1187.047253][T17678] ? ksys_write+0x248/0x270 [ 1187.047282][T17678] __sys_socket+0xd6/0x1b0 [ 1187.047301][T17678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.047321][T17678] __x64_sys_socket+0x7a/0x90 [ 1187.047341][T17678] do_syscall_64+0x174/0x580 [ 1187.047366][T17678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.047385][T17678] ? clear_bhb_loop+0x40/0x90 [ 1187.047407][T17678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.047426][T17678] RIP: 0033:0x7f59e432e019 [ 1187.047443][T17678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1187.047460][T17678] RSP: 002b:00007f59e2586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1187.047480][T17678] RAX: ffffffffffffffda RBX: 00007f59e45b5fa0 RCX: 00007f59e432e019 [ 1187.047494][T17678] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 1187.047505][T17678] RBP: 00007f59e2586090 R08: 0000000000000000 R09: 0000000000000000 [ 1187.047516][T17678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.047526][T17678] R13: 00007f59e45b6038 R14: 00007f59e45b5fa0 R15: 00007ffc14b26148 [ 1187.047552][T17678] [ 1187.047562][T17678] socket: no more sockets [ 1187.201211][T17696] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.3834'. [ 1188.106395][T14072] team0 (unregistering): Port device team_slave_1 removed [ 1188.201169][T14072] team0 (unregistering): Port device team_slave_0 removed [ 1188.910654][T17704] veth0_to_team: entered promiscuous mode [ 1188.910688][T17704] veth0_to_team: entered allmulticast mode [ 1189.083552][ T5255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1189.518933][T17720] ieee802154 phy0 wpan0: encryption failed: -22 [ 1189.765211][ T5603] Bluetooth: hci5: command 0x0406 tx timeout [ 1189.865531][T17726] netlink: 'syz.2.3842': attribute type 26 has an invalid length. [ 1189.865559][T17726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3842'. [ 1189.923387][ T5604] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1192.402002][T17749] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.3849'. [ 1192.725190][ T198] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1192.915768][ T198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.915806][ T198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1192.915831][ T198] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1192.915939][ T198] usb 3-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 1192.915966][ T198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.943891][ T198] usb 3-1: config 0 descriptor?? [ 1193.285828][T17773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3852'. [ 1193.285857][T17773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3852'. [ 1193.706605][ T10] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1193.732175][ T198] sony 0003:054C:1000.0005: unbalanced collection at end of report description [ 1193.746285][ T198] sony 0003:054C:1000.0005: parse failed [ 1193.746940][ T198] sony 0003:054C:1000.0005: probe with driver sony failed with error -22 [ 1193.860057][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1193.967619][ T198] usb 3-1: USB disconnect, device number 63 [ 1194.024884][ T10] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1194.112828][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1194.112936][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.112959][ T10] usb 5-1: Product: syz [ 1194.112976][ T10] usb 5-1: Manufacturer: syz [ 1194.112991][ T10] usb 5-1: SerialNumber: syz [ 1194.266653][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1194.266743][ T10] r8152-cfgselector 5-1: config 0 descriptor?? [ 1194.958982][ T5255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1195.146767][ T198] r8152-cfgselector 5-1: USB disconnect, device number 66 [ 1196.565210][ T5598] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 1196.734741][ T5598] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1196.734867][ T5598] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1196.734899][ T5598] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1196.734927][ T5598] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1196.753459][ T5598] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1196.795681][ T5598] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1196.795809][ T5598] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1196.795843][ T5598] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1196.795872][ T5598] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1196.796147][ T5598] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1196.798454][ T5598] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1196.798510][ T5598] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1196.798762][ T5598] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1196.798793][ T5598] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1196.798823][ T5598] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1196.884448][ T5598] usb 2-1: string descriptor 0 read error: -22 [ 1196.911957][ T5598] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1196.911990][ T5598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.122089][ T5598] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1197.678809][ T5604] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 1201.925884][ T5714] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1202.095394][ T5714] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1202.095423][ T5714] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1202.095442][ T5714] usb 3-1: config 0 has no interface number 0 [ 1202.095480][ T5714] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1202.095503][ T5714] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1202.095529][ T5714] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1202.095567][ T5714] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1202.095588][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.106476][ T5714] usb 3-1: config 0 descriptor?? [ 1202.108454][T17852] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1202.321500][ T48] usb 2-1: USB disconnect, device number 71 [ 1202.355613][ T198] usb 4-1: new low-speed USB device number 73 using dummy_hcd [ 1202.510320][ T198] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1202.519873][ T198] usb 4-1: config 8 has an invalid interface number: 59 but max is 3 [ 1202.519902][ T198] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.539623][ T198] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 1202.539656][ T198] usb 4-1: config 8 has no interface number 0 [ 1202.546771][ T198] usb 4-1: config 8 interface 59 altsetting 2 has an endpoint descriptor with address 0x1A, changing to 0xA [ 1202.546839][ T198] usb 4-1: config 8 interface 59 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 1202.546863][ T198] usb 4-1: config 8 interface 59 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1202.567245][ T198] usb 4-1: config 8 interface 59 has no altsetting 0 [ 1202.626664][ T198] usb 4-1: string descriptor 0 read error: -22 [ 1202.627700][ T198] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 1202.627740][ T198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.699614][ T198] ttusbir 4-1:8.59: cannot find expected altsetting [ 1202.890205][ T5714] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input35 [ 1203.270413][T17873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3876'. [ 1205.662778][T17850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.693081][T17850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.013500][T17852] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3873'. [ 1206.013525][T17852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3873'. [ 1206.303063][ T198] usb 4-1: USB disconnect, device number 73 [ 1206.421406][ T5986] usb 3-1: USB disconnect, device number 64 [ 1206.421501][ C1] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1207.426673][ T5604] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 1207.433839][T17904] netlink: 'syz.1.3881': attribute type 26 has an invalid length. [ 1207.433863][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3881'. [ 1207.471271][ T5604] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1207.945184][ T5986] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1208.041089][ T48] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1208.095161][ T5986] usb 3-1: Using ep0 maxpacket: 16 [ 1208.101441][ T5986] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1208.104621][ T5986] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.104721][ T5986] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1208.104752][ T5986] usb 3-1: config 1 interface 2 has no altsetting 0 [ 1208.123925][ T5986] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 1208.124073][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.124096][ T5986] usb 3-1: Product: ੰ発ﭢ链﫟ᙧ䪅윤ভ萴羘᰽飲凍ඌ銌ঽ瘌袵Ọፏ࠴筣П抙햔࢓䯫筿ϔ䙕韾ອ㯶⮯‶᛻い澴杶팥둤䆷镦⺋▰枭侜鍼ᜱ웽畇뙡⠗⒁ﱨ뽐똎韬个ꂝ䩭ꢇ踇焩껛归ḥ鮖胸Є쐶戡锔괌ໞ솘슐 [ 1208.124131][ T5986] usb 3-1: Manufacturer: Ѓ [ 1208.124158][ T5986] usb 3-1: SerialNumber: syz [ 1208.195142][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 1208.218833][ T48] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.218863][ T48] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1208.218932][ T48] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1208.222443][ T48] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1208.222476][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.222499][ T48] usb 5-1: Product: syz [ 1208.222517][ T48] usb 5-1: Manufacturer: syz [ 1208.222534][ T48] usb 5-1: SerialNumber: syz [ 1208.393252][ T5986] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1208.527673][ T5986] usb 3-1: selecting invalid altsetting 0 [ 1208.813633][ T5986] usb 3-1: USB disconnect, device number 65 [ 1208.834702][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3886'. [ 1209.021619][ T48] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1209.129783][ T48] usb 5-1: USB disconnect, device number 67 [ 1209.460106][T16430] udevd[16430]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 1211.405309][ T5714] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1211.617290][ T5714] usb 3-1: Using ep0 maxpacket: 16 [ 1211.619791][ T5714] usb 3-1: descriptor type invalid, skip [ 1211.619813][ T5714] usb 3-1: descriptor type invalid, skip [ 1211.621476][ T5714] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1211.653393][ T5714] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.40 [ 1211.653427][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.653449][ T5714] usb 3-1: Product: syz [ 1211.653474][ T5714] usb 3-1: Manufacturer: syz [ 1211.653491][ T5714] usb 3-1: SerialNumber: syz [ 1212.485413][ T48] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1212.642425][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 1212.654148][ T48] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1212.654248][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1212.654277][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1212.654302][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1212.654334][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1212.728317][ T48] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1212.728423][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.728447][ T48] usb 2-1: Product: syz [ 1212.728463][ T48] usb 2-1: Manufacturer: syz [ 1212.728479][ T48] usb 2-1: SerialNumber: syz [ 1212.794479][ T48] usb 2-1: config 0 descriptor?? [ 1213.020192][ T48] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1213.021551][ T48] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1213.038210][ T48] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1213.132974][T17974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1213.194167][T17974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1213.316569][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1213.317997][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1213.318677][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1213.319335][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1213.321023][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1213.331085][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1213.369876][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1213.370538][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1213.371175][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1213.412707][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1213.413406][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1213.414301][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1213.434892][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1213.441789][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1213.442425][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1213.443077][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1213.443215][ T48] input input37: Timeout waiting for response from device. [ 1213.566903][ T48] usb 2-1: USB disconnect, device number 72 [ 1214.431707][T17402] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1214.921407][T17402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1215.850617][T17402] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1216.281079][T18003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3907'. [ 1216.642087][T17402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1216.668115][T17402] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1216.960081][T17402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1216.964479][T17402] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1217.086118][T17402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1217.097580][ T5714] usbhid 3-1:1.0: can't add hid device: -71 [ 1217.097832][ T5714] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1217.159835][ T5714] usb 3-1: USB disconnect, device number 66 [ 1217.536277][T10442] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1217.685072][T10442] usb 4-1: Using ep0 maxpacket: 8 [ 1217.706526][T10442] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.706558][T10442] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1217.706683][T10442] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1217.781940][T10442] usb 4-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1217.782035][T10442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.782060][T10442] usb 4-1: Product: syz [ 1217.782075][T10442] usb 4-1: Manufacturer: syz [ 1217.782092][T10442] usb 4-1: SerialNumber: syz [ 1218.372914][T17402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1219.851068][T18063] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.3920'. [ 1219.920193][T10442] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1219.966179][T10442] usb 4-1: USB disconnect, device number 74 [ 1220.034344][T17402] 8021q: adding VLAN 0 to HW filter on device team0 [ 1220.067863][T14077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.069641][T14077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.128190][T16497] udevd[16497]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1220.296083][ T36] audit: type=1107 audit(2000000421.550:91): pid=18064 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1220.480602][ T5604] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 1220.983806][ T5603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1221.071589][ T5603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1221.074109][ T5603] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1221.090904][ T5603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1221.092632][ T5603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1223.523272][T18105] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3929'. [ 1223.859736][ T5604] Bluetooth: hci3: command tx timeout [ 1224.993057][T18132] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3937'. [ 1225.932842][ T5604] Bluetooth: hci3: command tx timeout [ 1226.638793][T18142] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3942'. [ 1228.005120][ T5604] Bluetooth: hci3: command tx timeout [ 1229.140690][T18174] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3950'. [ 1230.085806][ T5604] Bluetooth: hci3: command tx timeout [ 1230.464580][T18078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.464894][T18078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.480003][T18078] bridge_slave_0: entered allmulticast mode [ 1230.483423][T18078] bridge_slave_0: entered promiscuous mode [ 1230.499623][T18078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.499835][T18078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.500246][T18078] bridge_slave_1: entered allmulticast mode [ 1230.503279][T18078] bridge_slave_1: entered promiscuous mode [ 1230.828973][T18078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.880080][T18078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.027782][T18188] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3955'. [ 1232.389222][T18202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3961'. [ 1232.442669][T18205] netlink: 'syz.1.3961': attribute type 26 has an invalid length. [ 1232.442691][T18205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3961'. [ 1232.482839][ T5604] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1232.714143][T18078] team0: Port device team_slave_0 added [ 1232.799003][T18078] team0: Port device team_slave_1 added [ 1233.108648][T18078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1233.108732][T18078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1233.108767][T18078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1233.132031][T18078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1233.132050][T18078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1233.132509][T18078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1234.065505][T18215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3963'. [ 1234.128571][ T5604] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1234.528447][ T5598] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1234.949245][ T5598] usb 3-1: Using ep0 maxpacket: 8 [ 1235.038199][ T5598] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 1235.038234][ T5598] usb 3-1: config 0 has no interface number 1 [ 1235.038359][ T5598] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1235.038385][ T5598] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1235.038415][ T5598] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1235.038513][ T5598] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1235.038543][ T5598] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1235.038588][ T5598] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1235.038677][ T5598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 26232, setting to 64 [ 1235.042218][ T5598] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1235.042313][ T5598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.042339][ T5598] usb 3-1: Product: syz [ 1235.042355][ T5598] usb 3-1: Manufacturer: syz [ 1235.042372][ T5598] usb 3-1: SerialNumber: syz [ 1235.202491][ T5598] usb 3-1: config 0 descriptor?? [ 1235.208577][T18214] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1235.268357][ T5598] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1235.308775][ T5598] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1236.165229][ T48] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1236.317403][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 1236.335177][ T48] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1236.335230][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1236.335314][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1236.335341][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1236.335509][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1236.361820][ T48] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1236.361855][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.361877][ T48] usb 2-1: Product: syz [ 1236.361894][ T48] usb 2-1: Manufacturer: syz [ 1236.361911][ T48] usb 2-1: SerialNumber: syz [ 1236.485991][ T5598] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1236.608558][ T48] usb 2-1: config 0 descriptor?? [ 1236.667066][ T5598] usb 3-1: USB disconnect, device number 67 [ 1236.820065][ T48] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1236.824777][ T48] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1236.848105][ T48] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1237.174455][T16425] udevd[16425]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1237.863057][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1237.869774][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1237.870263][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1237.870858][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1237.871480][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1237.872303][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1237.872998][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1237.873711][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1237.874430][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1237.875217][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1237.875888][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1237.876557][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1237.877316][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1237.877983][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1237.878870][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1237.879581][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1237.879649][ T48] input input38: Timeout waiting for response from device. [ 1238.201776][ T48] usb 2-1: USB disconnect, device number 73 [ 1238.515183][T18244] FAULT_INJECTION: forcing a failure. [ 1238.515183][T18244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1238.515225][T18244] CPU: 0 UID: 0 PID: 18244 Comm: syz.3.3972 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1238.515257][T18244] Tainted: [L]=SOFTLOCKUP [ 1238.515266][T18244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1238.515281][T18244] Call Trace: [ 1238.515290][T18244] [ 1238.515301][T18244] dump_stack_lvl+0xe8/0x150 [ 1238.515343][T18244] should_fail_ex+0x467/0x600 [ 1238.515386][T18244] _copy_to_user+0x31/0xb0 [ 1238.515418][T18244] simple_read_from_buffer+0xe1/0x170 [ 1238.515450][T18244] proc_fail_nth_read+0x1be/0x230 [ 1238.515480][T18244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1238.515509][T18244] ? rw_verify_area+0x250/0x4d0 [ 1238.515542][T18244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1238.515568][T18244] vfs_read+0x219/0xa90 [ 1238.515606][T18244] ? __pfx_vfs_read+0x10/0x10 [ 1238.515638][T18244] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1238.515672][T18244] ? lockdep_hardirqs_on+0x7a/0x110 [ 1238.515705][T18244] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1238.515734][T18244] ? mutex_lock_nested+0x152/0x1d0 [ 1238.515758][T18244] ? fdget_pos+0x252/0x320 [ 1238.515792][T18244] ksys_read+0x156/0x270 [ 1238.515826][T18244] ? __pfx_ksys_read+0x10/0x10 [ 1238.515865][T18244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.515891][T18244] do_syscall_64+0x174/0x580 [ 1238.515921][T18244] ? trace_irq_disable+0x3b/0x140 [ 1238.515946][T18244] ? clear_bhb_loop+0x40/0x90 [ 1238.515975][T18244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.515998][T18244] RIP: 0033:0x7fb23edfe84e [ 1238.516020][T18244] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1238.516048][T18244] RSP: 002b:00007fb23d074fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1238.516072][T18244] RAX: ffffffffffffffda RBX: 00007fb23d0756c0 RCX: 00007fb23edfe84e [ 1238.516089][T18244] RDX: 000000000000000f RSI: 00007fb23d0750a0 RDI: 0000000000000006 [ 1238.516103][T18244] RBP: 00007fb23d075090 R08: 0000000000000000 R09: 0000000000000000 [ 1238.516117][T18244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1238.516130][T18244] R13: 00007fb23f0c6128 R14: 00007fb23f0c6090 R15: 00007ffdb46922a8 [ 1238.516166][T18244] [ 1239.128830][T18078] hsr_slave_0: entered promiscuous mode [ 1239.151018][T18078] hsr_slave_1: entered promiscuous mode [ 1239.189397][T18078] debugfs: 'hsr0' already exists in 'hsr' [ 1239.189430][T18078] Cannot create hsr debugfs directory [ 1239.561382][T18254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3977'. [ 1239.855799][ T48] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1240.300591][ T48] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.300624][ T48] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1240.300648][ T48] usb 4-1: config 1 has no interface number 0 [ 1240.300696][ T48] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1240.341099][ T48] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1240.341135][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.341159][ T48] usb 4-1: Product: syz [ 1240.341175][ T48] usb 4-1: Manufacturer: syz [ 1240.341192][ T48] usb 4-1: SerialNumber: syz [ 1240.500259][ T48] cdc_ncm 4-1:1.1: NCM or ECM functional descriptors missing [ 1240.500311][ T48] cdc_ncm 4-1:1.1: bind() failure [ 1240.688612][ T48] usb 4-1: USB disconnect, device number 75 [ 1241.165102][ T5986] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1241.317618][ T5986] usb 2-1: Using ep0 maxpacket: 8 [ 1241.321694][ T5986] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.321724][ T5986] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1241.321790][ T5986] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1241.324835][ T5986] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1241.324867][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.324889][ T5986] usb 2-1: Product: syz [ 1241.324906][ T5986] usb 2-1: Manufacturer: syz [ 1241.392159][ T5986] usb 2-1: SerialNumber: syz [ 1242.056389][ T5986] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1242.077058][ T5986] usb 2-1: USB disconnect, device number 74 [ 1242.158874][T18236] udevd[18236]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1242.898572][T18290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3987'. [ 1244.339121][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.339195][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.554754][T18303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3991'. [ 1245.036470][ T48] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1245.038322][T18290] bond1: entered promiscuous mode [ 1245.066717][T18290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1245.393637][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3994'. [ 1245.459014][T18317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3993'. [ 1245.459603][T18315] netlink: 'syz.3.3994': attribute type 26 has an invalid length. [ 1245.459617][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3994'. [ 1245.524319][T18318] netlink: 'syz.2.3993': attribute type 26 has an invalid length. [ 1245.524338][T18318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3993'. [ 1245.572854][ T5604] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1245.616424][ T5604] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1245.670225][T18321] tmpfs: Bad value for 'mpol' [ 1251.882498][T18345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4003'. [ 1255.050822][T18341] FAULT_INJECTION: forcing a failure. [ 1255.050822][T18341] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.051056][T18341] CPU: 1 UID: 0 PID: 18341 Comm: syz.1.3999 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1255.051090][T18341] Tainted: [L]=SOFTLOCKUP [ 1255.051099][T18341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1255.051114][T18341] Call Trace: [ 1255.051123][T18341] [ 1255.051133][T18341] dump_stack_lvl+0xe8/0x150 [ 1255.051176][T18341] should_fail_ex+0x467/0x600 [ 1255.051218][T18341] should_failslab+0xa8/0x100 [ 1255.051248][T18341] kmem_cache_alloc_noprof+0xa4/0x650 [ 1255.051274][T18341] ? do_getname+0x2e/0x250 [ 1255.051309][T18341] ? do_getname+0x2e/0x250 [ 1255.051353][T18341] do_getname+0x2e/0x250 [ 1255.051388][T18341] ? getname_flags+0x11/0x20 [ 1255.051424][T18341] do_sys_openat2+0xcc/0x200 [ 1255.051453][T18341] ? __pfx_do_sys_openat2+0x10/0x10 [ 1255.051478][T18341] ? ksys_write+0x248/0x270 [ 1255.051511][T18341] ? __pfx_ksys_write+0x10/0x10 [ 1255.051546][T18341] __x64_sys_openat+0x138/0x170 [ 1255.051574][T18341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.051599][T18341] do_syscall_64+0x174/0x580 [ 1255.051633][T18341] ? clear_bhb_loop+0x40/0x90 [ 1255.051671][T18341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.051695][T18341] RIP: 0033:0x7f4c5e75e019 [ 1255.051716][T18341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1255.051737][T18341] RSP: 002b:00007f4c5c974028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1255.051762][T18341] RAX: ffffffffffffffda RBX: 00007f4c5e9e6180 RCX: 00007f4c5e75e019 [ 1255.051779][T18341] RDX: 0000000000002003 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 1255.051796][T18341] RBP: 00007f4c5c974090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.051811][T18341] R10: 0000000000000106 R11: 0000000000000246 R12: 0000000000000001 [ 1255.051825][T18341] R13: 00007f4c5e9e6218 R14: 00007f4c5e9e6180 R15: 00007ffc8e340de8 [ 1255.051861][T18341] [ 1256.800984][T14072] bridge_slave_1: left allmulticast mode [ 1256.801087][T14072] bridge_slave_1: left promiscuous mode [ 1256.801585][T14072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.412532][T13558] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1257.755094][T13558] usb 5-1: device not accepting address 69, error -71 [ 1257.807752][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4009'. [ 1257.860444][T18375] netlink: 'syz.2.4009': attribute type 26 has an invalid length. [ 1257.860469][T18375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4009'. [ 1257.887326][ T5604] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1257.919836][T14072] bridge_slave_0: left allmulticast mode [ 1257.919881][T14072] bridge_slave_0: left promiscuous mode [ 1257.920174][T14072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.574703][T18387] netlink: 'syz.4.4011': attribute type 26 has an invalid length. [ 1258.574725][T18387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4011'. [ 1258.693738][ T5603] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1261.429330][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4015'. [ 1261.656042][T14072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1261.736133][T14072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1261.800076][T14072] bond0 (unregistering): Released all slaves [ 1261.888652][ T5255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1262.585322][T18412] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1262.892275][ T48] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 1263.860075][ T9347] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1263.935247][ T5986] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 1264.008164][ T9347] usb 4-1: Using ep0 maxpacket: 8 [ 1264.011001][ T9347] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1264.011033][ T9347] usb 4-1: config 179 has no interface number 0 [ 1264.011079][ T9347] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1264.011109][ T9347] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1264.011142][ T9347] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1264.011171][ T9347] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1264.011194][ T9347] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1264.011224][ T9347] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1264.011260][ T9347] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1264.011285][ T9347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.092780][ T5986] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1264.092889][ T5986] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1264.092929][ T5986] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1264.093000][ T5986] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1264.093046][ T5986] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1264.121986][ T5986] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1264.122106][ T5986] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1264.122144][ T5986] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1264.122183][ T5986] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1264.122442][ T5986] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1264.171204][ T5986] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1264.171331][ T5986] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1264.171363][ T5986] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1264.171393][ T5986] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1264.171422][ T5986] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1264.296077][ T5986] usb 3-1: string descriptor 0 read error: -22 [ 1264.296204][ T5986] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1264.296227][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.679313][ T5986] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1264.899725][T18452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4027'. [ 1264.957095][T18453] netlink: 'syz.1.4027': attribute type 26 has an invalid length. [ 1264.957135][T18453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4027'. [ 1264.996816][ T5603] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1265.439821][T18457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4028'. [ 1265.515867][T14072] hsr_slave_0: left promiscuous mode [ 1265.520161][ T9347] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input39 [ 1265.589928][T14072] hsr_slave_1: left promiscuous mode [ 1265.590794][T14072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1265.655338][T14072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1265.753583][ T9347] usb 4-1: USB disconnect, device number 76 [ 1265.754859][ T5986] usb 3-1: USB disconnect, device number 68 [ 1266.510889][T18467] FAULT_INJECTION: forcing a failure. [ 1266.510889][T18467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1266.511039][T18467] CPU: 1 UID: 0 PID: 18467 Comm: syz.3.4030 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1266.511075][T18467] Tainted: [L]=SOFTLOCKUP [ 1266.511084][T18467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1266.511099][T18467] Call Trace: [ 1266.511108][T18467] [ 1266.511118][T18467] dump_stack_lvl+0xe8/0x150 [ 1266.511161][T18467] should_fail_ex+0x467/0x600 [ 1266.511204][T18467] _copy_from_user+0x2d/0xb0 [ 1266.511236][T18467] ___sys_sendmsg+0x1c6/0x360 [ 1266.511269][T18467] ? __lock_acquire+0x683/0x2ce0 [ 1266.511300][T18467] ? __pfx____sys_sendmsg+0x10/0x10 [ 1266.511370][T18467] ? __fget_files+0x2a/0x420 [ 1266.511396][T18467] ? __fget_files+0x3a8/0x420 [ 1266.511435][T18467] __x64_sys_sendmsg+0x1b7/0x290 [ 1266.511470][T18467] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1266.511520][T18467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.511548][T18467] do_syscall_64+0x174/0x580 [ 1266.511605][T18467] ? clear_bhb_loop+0x40/0x90 [ 1266.511635][T18467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.511659][T18467] RIP: 0033:0x7fb23ee3e019 [ 1266.511682][T18467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1266.511702][T18467] RSP: 002b:00007fb23d075028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1266.511735][T18467] RAX: ffffffffffffffda RBX: 00007fb23f0c6090 RCX: 00007fb23ee3e019 [ 1266.511753][T18467] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 000000000000000a [ 1266.511769][T18467] RBP: 00007fb23d075090 R08: 0000000000000000 R09: 0000000000000000 [ 1266.511784][T18467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1266.511799][T18467] R13: 00007fb23f0c6128 R14: 00007fb23f0c6090 R15: 00007ffdb46922a8 [ 1266.511835][T18467] [ 1268.658034][ T5986] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1268.675110][ T10] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1268.786142][ T5986] usb 4-1: device descriptor read/64, error -71 [ 1269.055466][ T5986] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1269.105347][ T31] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1269.185463][ T5986] usb 4-1: device descriptor read/64, error -71 [ 1269.283023][ T31] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1269.283266][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.300478][ T5986] usb usb4-port1: attempt power cycle [ 1269.347826][ T31] usb 3-1: config 0 descriptor?? [ 1269.411048][ T31] cp210x 3-1:0.0: cp210x converter detected [ 1269.868085][ T5986] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1269.886953][ T5986] usb 4-1: device descriptor read/8, error -71 [ 1270.101913][ T31] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1270.155336][ T5986] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1270.179523][ T5986] usb 4-1: device descriptor read/8, error -71 [ 1270.290838][ T5986] usb usb4-port1: unable to enumerate USB device [ 1271.912668][T14072] team0 (unregistering): Port device team_slave_1 removed [ 1272.010937][ T31] usb 3-1: USB disconnect, device number 69 [ 1272.203639][ T10] usb 2-1: device descriptor read/all, error -71 [ 1272.237518][T14072] team0 (unregistering): Port device team_slave_0 removed [ 1272.241445][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1272.505881][ T31] cp210x 3-1:0.0: device disconnected [ 1274.586338][ T5255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1275.808328][T18509] netlink: 'syz.4.4041': attribute type 62 has an invalid length. [ 1276.045181][ T10] usb 4-1: new low-speed USB device number 81 using dummy_hcd [ 1276.111648][T18505] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4042'. [ 1276.218690][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1276.218812][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1276.218845][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1276.218873][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1276.218902][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1276.222219][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1276.222724][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1276.222757][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1276.222788][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1276.223242][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1276.331803][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1276.331924][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1276.331958][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1276.331986][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1276.332014][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1276.417690][ T10] usb 4-1: string descriptor 0 read error: -22 [ 1276.417999][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1276.418027][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.641802][ T10] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1278.278333][ T5986] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 1278.364537][T18549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4050'. [ 1278.431708][ T5986] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1278.455471][ T5986] usb 3-1: config 8 has an invalid interface number: 59 but max is 3 [ 1278.455503][ T5986] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.455526][ T5986] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 1278.455551][ T5986] usb 3-1: config 8 has no interface number 0 [ 1278.455609][ T5986] usb 3-1: config 8 interface 59 altsetting 2 has an endpoint descriptor with address 0x1A, changing to 0xA [ 1278.455638][ T5986] usb 3-1: config 8 interface 59 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 1278.455663][ T5986] usb 3-1: config 8 interface 59 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1278.455695][ T5986] usb 3-1: config 8 interface 59 has no altsetting 0 [ 1278.569740][ T5986] usb 3-1: string descriptor 0 read error: -22 [ 1278.570063][ T5986] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 1278.570135][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.605155][T18478] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1278.650058][ T5986] ttusbir 3-1:8.59: cannot find expected altsetting [ 1278.799459][T18478] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 1278.799494][T18478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.833221][T18478] usb 2-1: config 0 descriptor?? [ 1278.858652][T18478] pwc: Creative Labs Webcam 5 detected. [ 1279.109571][T18478] pwc: Failed to set LED on/off time (-71) [ 1279.110030][T18478] pwc: send_video_command error -71 [ 1279.110045][T18478] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1279.110172][T18478] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1279.113548][T18478] usb 2-1: USB disconnect, device number 77 [ 1279.311169][ T31] usb 4-1: USB disconnect, device number 81 [ 1279.510087][ T5986] usb 3-1: USB disconnect, device number 70 [ 1279.688527][T18559] FAULT_INJECTION: forcing a failure. [ 1279.688527][T18559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1279.688653][T18559] CPU: 1 UID: 0 PID: 18559 Comm: syz.4.4052 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1279.688687][T18559] Tainted: [L]=SOFTLOCKUP [ 1279.688697][T18559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1279.688712][T18559] Call Trace: [ 1279.688721][T18559] [ 1279.688731][T18559] dump_stack_lvl+0xe8/0x150 [ 1279.688772][T18559] should_fail_ex+0x467/0x600 [ 1279.688814][T18559] _copy_to_user+0x31/0xb0 [ 1279.688847][T18559] simple_read_from_buffer+0xe1/0x170 [ 1279.688880][T18559] proc_fail_nth_read+0x1be/0x230 [ 1279.688910][T18559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1279.688949][T18559] ? rw_verify_area+0x250/0x4d0 [ 1279.688980][T18559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1279.689005][T18559] vfs_read+0x219/0xa90 [ 1279.689045][T18559] ? __pfx_vfs_read+0x10/0x10 [ 1279.689077][T18559] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1279.689111][T18559] ? lockdep_hardirqs_on+0x7a/0x110 [ 1279.689143][T18559] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1279.689174][T18559] ? mutex_lock_nested+0x152/0x1d0 [ 1279.689197][T18559] ? fdget_pos+0x252/0x320 [ 1279.689232][T18559] ksys_read+0x156/0x270 [ 1279.689265][T18559] ? __pfx_ksys_read+0x10/0x10 [ 1279.689303][T18559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.689329][T18559] do_syscall_64+0x174/0x580 [ 1279.689361][T18559] ? trace_irq_disable+0x3b/0x140 [ 1279.689385][T18559] ? clear_bhb_loop+0x40/0x90 [ 1279.689413][T18559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.689435][T18559] RIP: 0033:0x7f6c3722e84e [ 1279.689456][T18559] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1279.689477][T18559] RSP: 002b:00007f6c354a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1279.689502][T18559] RAX: ffffffffffffffda RBX: 00007f6c354a56c0 RCX: 00007f6c3722e84e [ 1279.689520][T18559] RDX: 000000000000000f RSI: 00007f6c354a50a0 RDI: 0000000000000004 [ 1279.689535][T18559] RBP: 00007f6c354a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1279.689550][T18559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1279.689564][T18559] R13: 00007f6c374f6128 R14: 00007f6c374f6090 R15: 00007ffdead751c8 [ 1279.689599][T18559] [ 1281.399870][T18588] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4058'. [ 1281.752068][T18592] FAULT_INJECTION: forcing a failure. [ 1281.752068][T18592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1281.752105][T18592] CPU: 1 UID: 0 PID: 18592 Comm: syz.1.4059 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1281.752130][T18592] Tainted: [L]=SOFTLOCKUP [ 1281.752138][T18592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1281.752149][T18592] Call Trace: [ 1281.752157][T18592] [ 1281.752166][T18592] dump_stack_lvl+0xe8/0x150 [ 1281.752203][T18592] should_fail_ex+0x467/0x600 [ 1281.752241][T18592] _copy_from_user+0x2d/0xb0 [ 1281.752265][T18592] __se_sys_io_uring_setup+0x1b4/0x2c0 [ 1281.752296][T18592] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1281.752319][T18592] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1281.752361][T18592] ? __pfx_ksys_write+0x10/0x10 [ 1281.752395][T18592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.752416][T18592] do_syscall_64+0x174/0x580 [ 1281.752445][T18592] ? clear_bhb_loop+0x40/0x90 [ 1281.752470][T18592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.752495][T18592] RIP: 0033:0x7f4c5e75e019 [ 1281.752514][T18592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.752532][T18592] RSP: 002b:00007f4c5c9b5ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1281.752553][T18592] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f4c5e75e019 [ 1281.752569][T18592] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 1281.752584][T18592] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 1281.752597][T18592] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 1281.752611][T18592] R13: 0000200000000b10 R14: 00007f4c5c9b5fd8 R15: 0000000000000000 [ 1281.752637][T18592] [ 1281.989540][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1282.015156][ T5986] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1282.047223][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1282.062849][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1282.083076][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1282.084768][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1282.306398][ T5986] usb 5-1: Using ep0 maxpacket: 8 [ 1282.308741][ T5986] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1282.308786][ T5986] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1282.308813][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1282.308840][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1282.308869][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1282.308895][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1282.308917][ T5986] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1282.313995][ T5986] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1282.314041][ T5986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.314062][ T5986] usb 5-1: Product: syz [ 1282.314079][ T5986] usb 5-1: Manufacturer: syz [ 1282.314094][ T5986] usb 5-1: SerialNumber: syz [ 1282.504845][ T5986] usb 5-1: config 0 descriptor?? [ 1282.506077][T18596] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1282.533574][ T5986] ati_remote 5-1:0.0: Initializing ati_remote hardware failed. [ 1282.554373][ T5986] ati_remote 5-1:0.0: probe with driver ati_remote failed with error -5 [ 1283.116159][ T10] usb 5-1: USB disconnect, device number 72 [ 1283.471668][T18611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4061'. [ 1284.473091][T18634] FAULT_INJECTION: forcing a failure. [ 1284.473091][T18634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1284.473134][T18634] CPU: 1 UID: 0 PID: 18634 Comm: syz.1.4067 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1284.473171][T18634] Tainted: [L]=SOFTLOCKUP [ 1284.473180][T18634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1284.473194][T18634] Call Trace: [ 1284.473204][T18634] [ 1284.473215][T18634] dump_stack_lvl+0xe8/0x150 [ 1284.473257][T18634] should_fail_ex+0x467/0x600 [ 1284.473300][T18634] _copy_from_user+0x2d/0xb0 [ 1284.473331][T18634] ___sys_recvmsg+0x173/0x5a0 [ 1284.473370][T18634] ? __pfx____sys_recvmsg+0x10/0x10 [ 1284.473408][T18634] ? __fget_files+0x2a/0x420 [ 1284.473453][T18634] ? __fget_files+0x3a8/0x420 [ 1284.473488][T18634] __x64_sys_recvmsg+0x1b4/0x290 [ 1284.473526][T18634] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1284.473578][T18634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.473604][T18634] do_syscall_64+0x174/0x580 [ 1284.473636][T18634] ? trace_irq_disable+0x3b/0x140 [ 1284.473661][T18634] ? clear_bhb_loop+0x40/0x90 [ 1284.473689][T18634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.473713][T18634] RIP: 0033:0x7f4c5e75e019 [ 1284.473735][T18634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1284.473756][T18634] RSP: 002b:00007f4c5c9b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1284.473780][T18634] RAX: ffffffffffffffda RBX: 00007f4c5e9e5fa0 RCX: 00007f4c5e75e019 [ 1284.473798][T18634] RDX: 0000000000010150 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1284.473813][T18634] RBP: 00007f4c5c9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1284.473828][T18634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1284.473841][T18634] R13: 00007f4c5e9e6038 R14: 00007f4c5e9e5fa0 R15: 00007ffc8e340de8 [ 1284.473878][T18634] [ 1284.885161][ T5604] Bluetooth: hci0: command tx timeout [ 1286.970050][ T5604] Bluetooth: hci0: command tx timeout [ 1288.592211][T18659] Line length is too long: Should be less than 4094 [ 1289.057250][ T5604] Bluetooth: hci0: command tx timeout [ 1289.145863][T13558] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 1289.298493][T13558] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1289.298618][T13558] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1289.298650][T13558] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1289.298679][T13558] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1289.298710][T13558] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1289.300883][T13558] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1289.300941][T13558] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1289.301035][T13558] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1289.301064][T13558] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1289.301093][T13558] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1289.320299][T13558] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1289.322351][T13558] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1289.323070][T13558] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1289.325256][T13558] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1289.325290][T13558] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1289.508107][T13558] usb 5-1: string descriptor 0 read error: -22 [ 1289.508400][T13558] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1289.508429][T13558] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.896836][T13558] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1290.396752][T18687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4079'. [ 1290.396781][T18687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4079'. [ 1290.604153][ T5604] Bluetooth: hci2: unexpected event for opcode 0x200a [ 1291.125282][ T5604] Bluetooth: hci0: command tx timeout [ 1291.225079][T18478] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1291.375061][T18478] usb 3-1: Using ep0 maxpacket: 32 [ 1291.378473][T18478] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1291.378505][T18478] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1291.378554][T18478] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1291.378580][T18478] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1291.378610][T18478] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1291.479150][T18478] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1291.479185][T18478] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.479207][T18478] usb 3-1: Product: syz [ 1291.479223][T18478] usb 3-1: Manufacturer: syz [ 1291.479240][T18478] usb 3-1: SerialNumber: syz [ 1291.543060][T18478] usb 3-1: config 0 descriptor?? [ 1291.774662][T18478] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1291.791086][T18478] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1291.833489][T18478] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1292.124081][T18478] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1292.124562][T18478] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1292.141350][T18478] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1292.141920][T18478] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1292.142593][T18478] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1292.143972][T18478] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1292.170706][T18478] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1292.171194][T18478] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1292.171658][T18478] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1292.172859][T18478] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1292.173356][T18478] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1292.173814][T18478] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1292.214246][T18478] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1292.214740][T18478] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1292.227330][T18478] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1292.228392][T18478] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1292.228624][T18478] input input42: Timeout waiting for response from device. [ 1292.267775][T18478] usb 3-1: USB disconnect, device number 71 [ 1292.739674][T18478] usb 4-1: new low-speed USB device number 82 using dummy_hcd [ 1292.888382][T18478] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1292.888445][T18478] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1292.888475][T18478] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1292.888504][T18478] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1292.888531][T18478] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1293.006454][T18478] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1293.006516][T18478] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1293.006544][T18478] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1293.006578][T18478] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1293.006600][T18478] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1293.008977][T18478] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1293.009035][T18478] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1293.009057][T18478] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1293.009104][T18478] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1293.009134][T18478] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1293.139350][T18478] usb 4-1: string descriptor 0 read error: -22 [ 1293.139525][T18478] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1293.139551][T18478] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.319191][ T31] usb 5-1: USB disconnect, device number 73 [ 1293.392274][T18478] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1293.714507][T18732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4087'. [ 1293.716007][T18732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4087'. [ 1293.851215][T18734] FAULT_INJECTION: forcing a failure. [ 1293.851215][T18734] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.858291][T18734] CPU: 1 UID: 0 PID: 18734 Comm: syz.4.4086 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1293.858332][T18734] Tainted: [L]=SOFTLOCKUP [ 1293.858341][T18734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1293.858355][T18734] Call Trace: [ 1293.858364][T18734] [ 1293.858374][T18734] dump_stack_lvl+0xe8/0x150 [ 1293.858421][T18734] should_fail_ex+0x467/0x600 [ 1293.858468][T18734] should_failslab+0xa8/0x100 [ 1293.858503][T18734] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1293.858531][T18734] ? __alloc_skb+0x1d7/0x7a0 [ 1293.858558][T18734] ? __alloc_skb+0x1d7/0x7a0 [ 1293.858593][T18734] __alloc_skb+0x1d7/0x7a0 [ 1293.858616][T18734] netlink_sendmsg+0x5d4/0xb40 [ 1293.858746][T18734] ? _parse_integer_limit+0x192/0x1e0 [ 1293.858797][T18734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1293.858839][T18734] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1293.858880][T18734] ? get_pid_task+0x20/0x1f0 [ 1293.858917][T18734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1293.858950][T18734] sock_sendmsg_nosec+0x13a/0x180 [ 1293.858981][T18734] sock_write_iter+0x2e4/0x3f0 [ 1293.859028][T18734] ? __pfx_sock_write_iter+0x10/0x10 [ 1293.859072][T18734] ? bpf_lsm_file_permission+0x9/0x20 [ 1293.859106][T18734] ? security_file_permission+0x75/0x260 [ 1293.859142][T18734] vfs_write+0x61e/0xbb0 [ 1293.859184][T18734] ? __pfx_vfs_write+0x10/0x10 [ 1293.859226][T18734] ? __fget_files+0x2a/0x420 [ 1293.859260][T18734] ksys_write+0x156/0x270 [ 1293.859294][T18734] ? __pfx_ksys_write+0x10/0x10 [ 1293.859336][T18734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.859363][T18734] do_syscall_64+0x174/0x580 [ 1293.859397][T18734] ? trace_irq_disable+0x3b/0x140 [ 1293.859421][T18734] ? clear_bhb_loop+0x40/0x90 [ 1293.859447][T18734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.859469][T18734] RIP: 0033:0x7f6c3726e019 [ 1293.859490][T18734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1293.859510][T18734] RSP: 002b:00007f6c354c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1293.859534][T18734] RAX: ffffffffffffffda RBX: 00007f6c374f5fa0 RCX: 00007f6c3726e019 [ 1293.859551][T18734] RDX: 0000000000000029 RSI: 0000200000000440 RDI: 0000000000000004 [ 1293.859566][T18734] RBP: 00007f6c354c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1293.859580][T18734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1293.859594][T18734] R13: 00007f6c374f6038 R14: 00007f6c374f5fa0 R15: 00007ffdead751c8 [ 1293.859629][T18734] [ 1294.955277][T18478] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1295.925315][T18478] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1295.925410][T18478] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1295.925490][T18478] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1295.925572][T18478] usb 3-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1296.114414][T18478] usb 3-1: New USB device found, idVendor=17cc, idProduct=0d8d, bcdDevice= 0.40 [ 1296.114448][T18478] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.114471][T18478] usb 3-1: Product: Б [ 1296.114487][T18478] usb 3-1: Manufacturer: ⽼䝪뗫㭦ꂑ圀蝎먖ꡭ봧秲쇰ꔠ松堼툭ᖁ宵⦃㊸佴ᲂ幷쟆绪䭔⢊뢘ꑨṦ┴ƻ낁轾ซ㚲槿씱䄏嗱홡闸白﹗뉟豙㿹ཡ蔇ꨲ䚺⋒효ﶿ섺骥핡҄⭢粝婪扶┻黣侩鳗뚳줅뉞ቭΛꋀ씔⧙겉礑턢壟෨曣ꦉ⏊⒜䩈앪槱呙壥㟱Ž깍蹫僺㽢␳僧푡Ḑꬶꅋ䑩竳⑖ [ 1296.114524][T18478] usb 3-1: SerialNumber: 猽０懫둀₽ꁙ음科᫪쟃檷䓋䨉駡ꋸઆ㹠놟壄趎謯픺Ꙥ시鉃⩅ʊ苞뺠Ⳁ軦叭텩歁強Ẉ≫ﵛ꿐ⴄ佣鉻䮗⏱㧡룭疏ｉ鯓
點➇᧲㩠ွ毨쌉㵵袮谒皇끳菓쨱➑燠귄恵Ğ咗欝쪶ꁽ낒㎹⋝⑅祹ụ焎㋽欢ꧮ幞幕臲ಇ뻲㘀᳋ [ 1296.510338][T18740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.511367][T18740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.696760][ T5604] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 1296.812426][T18740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.819807][T18740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.893839][T18478] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1296.893921][T18478] usb 3-1: MIDIStreaming interface descriptor not found [ 1297.098239][ T5722] usb 4-1: USB disconnect, device number 82 [ 1297.892519][T18767] tipc: Started in network mode [ 1297.892560][T18767] tipc: Node identity 1000001, cluster identity 4711 [ 1297.892574][T18767] tipc: Node number set to 16777217 [ 1297.949172][T18769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.986598][T18769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.889039][ T5604] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 1299.908702][ T5854] usb 3-1: USB disconnect, device number 72 [ 1300.485904][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4107'. [ 1301.084655][T18812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4108'. [ 1301.276862][T18595] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.277089][T18595] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.277395][T18595] bridge_slave_0: entered allmulticast mode [ 1301.308928][T18595] bridge_slave_0: entered promiscuous mode [ 1301.462623][T18595] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.473215][T18595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.473433][T18595] bridge_slave_1: entered allmulticast mode [ 1301.505776][T18595] bridge_slave_1: entered promiscuous mode [ 1301.785530][T18595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.854309][T18595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1301.948641][T18829] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4119'. [ 1302.085702][T18595] team0: Port device team_slave_0 added [ 1302.119379][T18595] team0: Port device team_slave_1 added [ 1302.353965][T18830] 9p: Could not find request transport: fd [ 1302.518165][T18843] fuse: Bad value for 'fd' [ 1303.709895][T18853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4124'. [ 1304.121280][T18595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1304.121296][T18595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1304.121391][T18595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1304.322349][T18595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1304.322597][T18595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1304.322631][T18595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.195182][ T5854] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1305.245066][ T9347] usb 4-1: new low-speed USB device number 83 using dummy_hcd [ 1305.362618][ T5854] usb 3-1: Using ep0 maxpacket: 8 [ 1305.373504][ T5854] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.373533][ T5854] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1305.373666][ T5854] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1305.381597][ T5854] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1305.381692][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.381725][ T5854] usb 3-1: Product: syz [ 1305.381742][ T5854] usb 3-1: Manufacturer: syz [ 1305.381758][ T5854] usb 3-1: SerialNumber: syz [ 1305.466425][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.466576][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.463253][T18595] hsr_slave_0: entered promiscuous mode [ 1306.474654][T18595] hsr_slave_1: entered promiscuous mode [ 1306.613900][ T9347] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1306.613949][ T9347] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1306.613975][ T9347] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1306.613999][ T9347] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1306.614024][ T9347] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1306.625133][ T9347] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1306.625255][ T9347] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1306.625310][ T9347] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1306.625355][ T9347] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1306.625394][ T9347] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1306.633356][ T9347] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1306.633424][ T9347] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1306.633509][ T9347] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1306.633539][ T9347] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1306.633568][ T9347] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1306.705158][ T9347] usb 4-1: string descriptor 0 read error: -22 [ 1306.705449][ T9347] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1306.705492][ T9347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.917050][ T9347] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1308.057719][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4136'. [ 1308.350792][ T5854] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1308.416848][ T5854] usb 3-1: USB disconnect, device number 73 [ 1308.517165][T18236] udevd[18236]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1308.551321][T18907] program syz.2.4138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1309.225299][T14072] bridge_slave_1: left allmulticast mode [ 1309.225338][T14072] bridge_slave_1: left promiscuous mode [ 1309.279512][T14072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.894386][T14072] bridge_slave_0: left allmulticast mode [ 1309.894426][T14072] bridge_slave_0: left promiscuous mode [ 1309.907377][T14072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.880343][ T10] usb 4-1: USB disconnect, device number 83 [ 1311.130063][T18939] binder: 18938:18939 ioctl 4018620d 0 returned -22 [ 1311.142310][T18939] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1311.143447][T18939] CIFS: Attempting to mount //127.0.0.1/share [ 1311.575517][ T10] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1311.736850][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1311.769447][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.769477][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1311.769603][ T10] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1311.809284][ T10] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1311.809381][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.809406][ T10] usb 5-1: Product: syz [ 1311.809422][ T10] usb 5-1: Manufacturer: syz [ 1311.809438][ T10] usb 5-1: SerialNumber: syz [ 1311.947586][T14072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1312.033455][T18939] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1312.088515][T14072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1312.230784][T14072] bond0 (unregistering): Released all slaves [ 1312.286711][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1312.314608][ T10] usb 5-1: USB disconnect, device number 74 [ 1312.484744][T18236] udevd[18236]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1312.705072][ T31] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1312.737232][ T5255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1312.861330][ T31] usb 4-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config [ 1312.861363][ T31] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1312.861388][ T31] usb 4-1: config 0 has no interface number 0 [ 1312.880096][ T31] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1312.880140][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.880170][ T31] usb 4-1: Product: syz [ 1312.880187][ T31] usb 4-1: Manufacturer: syz [ 1312.880204][ T31] usb 4-1: SerialNumber: syz [ 1312.889310][T18954] FAULT_INJECTION: forcing a failure. [ 1312.889310][T18954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1312.889424][T18954] CPU: 1 UID: 0 PID: 18954 Comm: syz.4.4152 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1312.889457][T18954] Tainted: [L]=SOFTLOCKUP [ 1312.889466][T18954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1312.889496][T18954] Call Trace: [ 1312.889518][T18954] [ 1312.889562][T18954] dump_stack_lvl+0xe8/0x150 [ 1312.889624][T18954] should_fail_ex+0x467/0x600 [ 1312.889715][T18954] _copy_from_user+0x2d/0xb0 [ 1312.889776][T18954] ___sys_sendmsg+0x1c6/0x360 [ 1312.889809][T18954] ? __lock_acquire+0x683/0x2ce0 [ 1312.889839][T18954] ? __pfx____sys_sendmsg+0x10/0x10 [ 1312.889958][T18954] ? __fget_files+0x2a/0x420 [ 1312.889985][T18954] ? __fget_files+0x3a8/0x420 [ 1312.890081][T18954] __x64_sys_sendmsg+0x1b7/0x290 [ 1312.890123][T18954] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1312.890232][T18954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.890273][T18954] do_syscall_64+0x174/0x580 [ 1312.890306][T18954] ? trace_irq_disable+0x3b/0x140 [ 1312.890365][T18954] ? clear_bhb_loop+0x40/0x90 [ 1312.890428][T18954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.890451][T18954] RIP: 0033:0x7f6c3726e019 [ 1312.890474][T18954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1312.890529][T18954] RSP: 002b:00007f6c354c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1312.890591][T18954] RAX: ffffffffffffffda RBX: 00007f6c374f5fa0 RCX: 00007f6c3726e019 [ 1312.890610][T18954] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1312.890625][T18954] RBP: 00007f6c354c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1312.890640][T18954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1312.890684][T18954] R13: 00007f6c374f6038 R14: 00007f6c374f5fa0 R15: 00007ffdead751c8 [ 1312.890759][T18954] [ 1312.935618][ T31] usb 4-1: config 0 descriptor?? [ 1313.191463][T18956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4151'. [ 1313.230098][ T31] usb-storage 4-1:0.1: USB Mass Storage device detected [ 1313.427292][ T31] usb-storage 4-1:0.1: Quirks match for vid 1908 pid 1315: 20000 [ 1313.573124][ T31] usb 4-1: USB disconnect, device number 84 [ 1315.877452][T14072] hsr_slave_0: left promiscuous mode [ 1315.950649][T14072] hsr_slave_1: left promiscuous mode [ 1315.961149][T14072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1315.994461][T14072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1316.101304][T18992] FAULT_INJECTION: forcing a failure. [ 1316.101304][T18992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1316.101345][T18992] CPU: 1 UID: 0 PID: 18992 Comm: syz.2.4161 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1316.101377][T18992] Tainted: [L]=SOFTLOCKUP [ 1316.101385][T18992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1316.101399][T18992] Call Trace: [ 1316.101409][T18992] [ 1316.101428][T18992] dump_stack_lvl+0xe8/0x150 [ 1316.101472][T18992] should_fail_ex+0x467/0x600 [ 1316.101516][T18992] _copy_from_user+0x2d/0xb0 [ 1316.101547][T18992] ucma_write+0x166/0x2f0 [ 1316.101698][T18992] ? __pfx_ucma_write+0x10/0x10 [ 1316.101724][T18992] ? security_file_permission+0x75/0x260 [ 1316.101753][T18992] ? rw_verify_area+0x209/0x4d0 [ 1316.101786][T18992] ? __pfx_ucma_write+0x10/0x10 [ 1316.101813][T18992] vfs_write+0x29f/0xbb0 [ 1316.101852][T18992] ? __pfx_vfs_write+0x10/0x10 [ 1316.101882][T18992] ? __fget_files+0x2a/0x420 [ 1316.101910][T18992] ? __fget_files+0x2a/0x420 [ 1316.101933][T18992] ? __fget_files+0x3a8/0x420 [ 1316.101957][T18992] ? __fget_files+0x2a/0x420 [ 1316.101992][T18992] ksys_write+0x156/0x270 [ 1316.102025][T18992] ? __pfx_ksys_write+0x10/0x10 [ 1316.102064][T18992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.102090][T18992] do_syscall_64+0x174/0x580 [ 1316.102128][T18992] ? trace_irq_disable+0x3b/0x140 [ 1316.102153][T18992] ? clear_bhb_loop+0x40/0x90 [ 1316.102181][T18992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.102204][T18992] RIP: 0033:0x7f59e432e019 [ 1316.102226][T18992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1316.102247][T18992] RSP: 002b:00007f59e2586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1316.102271][T18992] RAX: ffffffffffffffda RBX: 00007f59e45b5fa0 RCX: 00007f59e432e019 [ 1316.102289][T18992] RDX: 0000000000000018 RSI: 0000200000000000 RDI: 0000000000000003 [ 1316.102304][T18992] RBP: 00007f59e2586090 R08: 0000000000000000 R09: 0000000000000000 [ 1316.102320][T18992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1316.102334][T18992] R13: 00007f59e45b6038 R14: 00007f59e45b5fa0 R15: 00007ffc14b26148 [ 1316.102368][T18992] [ 1316.546195][T18998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4164'. [ 1316.552815][T18997] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20000 [ 1317.801271][T14072] team0 (unregistering): Port device team_slave_1 removed [ 1318.860321][T14072] team0 (unregistering): Port device team_slave_0 removed [ 1319.753852][T19018] FAULT_INJECTION: forcing a failure. [ 1319.753852][T19018] name failslab, interval 1, probability 0, space 0, times 0 [ 1319.753894][T19018] CPU: 1 UID: 0 PID: 19018 Comm: syz.3.4167 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1319.753930][T19018] Tainted: [L]=SOFTLOCKUP [ 1319.753939][T19018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1319.753955][T19018] Call Trace: [ 1319.753964][T19018] [ 1319.753975][T19018] dump_stack_lvl+0xe8/0x150 [ 1319.754017][T19018] should_fail_ex+0x467/0x600 [ 1319.754061][T19018] should_failslab+0xa8/0x100 [ 1319.754094][T19018] __kmalloc_noprof+0xfe/0x780 [ 1319.754119][T19018] ? rcu_is_watching+0x15/0xb0 [ 1319.754151][T19018] ? tomoyo_realpath_from_path+0xef/0x640 [ 1319.754182][T19018] ? tomoyo_realpath_from_path+0xef/0x640 [ 1319.754223][T19018] tomoyo_realpath_from_path+0xef/0x640 [ 1319.754268][T19018] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1319.754296][T19018] tomoyo_path_number_perm+0x246/0x5f0 [ 1319.754326][T19018] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1319.754352][T19018] ? __lock_acquire+0x683/0x2ce0 [ 1319.754394][T19018] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1319.754429][T19018] ? hook_file_ioctl+0x1f3/0x600 [ 1319.754464][T19018] ? lockdep_hardirqs_on+0x7a/0x110 [ 1319.754515][T19018] ? __fget_files+0x2a/0x420 [ 1319.754552][T19018] ? __fget_files+0x2a/0x420 [ 1319.754577][T19018] ? __fget_files+0x3a8/0x420 [ 1319.754601][T19018] ? __fget_files+0x2a/0x420 [ 1319.754631][T19018] security_file_ioctl+0xc3/0x2a0 [ 1319.754661][T19018] __se_sys_ioctl+0x47/0x170 [ 1319.754693][T19018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.754720][T19018] do_syscall_64+0x174/0x580 [ 1319.754753][T19018] ? trace_irq_disable+0x3b/0x140 [ 1319.754777][T19018] ? clear_bhb_loop+0x40/0x90 [ 1319.754805][T19018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.754828][T19018] RIP: 0033:0x7fb23ee3e019 [ 1319.754849][T19018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1319.754868][T19018] RSP: 002b:00007fb23d075028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1319.754892][T19018] RAX: ffffffffffffffda RBX: 00007fb23f0c6090 RCX: 00007fb23ee3e019 [ 1319.754908][T19018] RDX: 0000200000000240 RSI: 00000000000007ac RDI: 0000000000000003 [ 1319.754923][T19018] RBP: 00007fb23d075090 R08: 0000000000000000 R09: 0000000000000000 [ 1319.754938][T19018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1319.754950][T19018] R13: 00007fb23f0c6128 R14: 00007fb23f0c6090 R15: 00007ffdb46922a8 [ 1319.754985][T19018] [ 1319.860919][T19018] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1322.216286][T19050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4178'. [ 1322.888271][T19060] netlink: 'syz.4.4180': attribute type 26 has an invalid length. [ 1322.888301][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4180'. [ 1322.966522][ T5604] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1323.575041][ T31] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1323.835050][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 1323.838373][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.838433][ T31] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x1E, changing to 0xE [ 1323.838463][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 4 [ 1323.838493][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1323.842053][ T31] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1323.842088][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1323.842110][ T31] usb 4-1: Product: syz [ 1323.842127][ T31] usb 4-1: Manufacturer: syz [ 1323.970502][ T31] sisusb 4-1:1.0: Invalid USB2VGA device [ 1323.970543][ T31] sisusb 4-1:1.0: probe with driver sisusb failed with error -22 [ 1324.074345][ T9347] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1324.255029][ T9347] usb 2-1: Using ep0 maxpacket: 32 [ 1324.257495][ T9347] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1324.257526][ T9347] usb 2-1: config 0 has no interface number 0 [ 1324.260532][ T9347] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1324.260565][ T9347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.260589][ T9347] usb 2-1: Product: syz [ 1324.260605][ T9347] usb 2-1: Manufacturer: syz [ 1324.260623][ T9347] usb 2-1: SerialNumber: syz [ 1324.409715][T19085] FAULT_INJECTION: forcing a failure. [ 1324.409715][T19085] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.409783][T19085] CPU: 1 UID: 0 PID: 19085 Comm: syz.4.4187 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1324.409817][T19085] Tainted: [L]=SOFTLOCKUP [ 1324.409826][T19085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1324.409841][T19085] Call Trace: [ 1324.409850][T19085] [ 1324.409860][T19085] dump_stack_lvl+0xe8/0x150 [ 1324.409903][T19085] should_fail_ex+0x467/0x600 [ 1324.409948][T19085] should_failslab+0xa8/0x100 [ 1324.409978][T19085] kmem_cache_alloc_noprof+0xa4/0x650 [ 1324.410003][T19085] ? vm_area_dup+0x28/0x670 [ 1324.410107][T19085] ? vm_area_dup+0x28/0x670 [ 1324.410142][T19085] vm_area_dup+0x28/0x670 [ 1324.410170][T19085] ? __split_vma+0x1ce/0xa40 [ 1324.410207][T19085] __split_vma+0x1e4/0xa40 [ 1324.410254][T19085] ? __pfx___split_vma+0x10/0x10 [ 1324.410310][T19085] vms_gather_munmap_vmas+0x322/0x1370 [ 1324.410352][T19085] ? mtree_range_walk+0x70a/0x8c0 [ 1324.410430][T19085] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1324.410473][T19085] ? mas_find+0xa23/0xcf0 [ 1324.410512][T19085] mmap_region+0x914/0x2310 [ 1324.410543][T19085] ? sched_clock+0x3f/0x60 [ 1324.410594][T19085] ? __pfx_mmap_region+0x10/0x10 [ 1324.410626][T19085] ? __lock_acquire+0x683/0x2ce0 [ 1324.410679][T19085] ? kvm_sched_clock_read+0x11/0x20 [ 1324.410799][T19085] ? irqentry_exit+0x218/0x8f0 [ 1324.410829][T19085] ? lockdep_hardirqs_on+0x7a/0x110 [ 1324.410861][T19085] ? irqentry_exit+0x218/0x8f0 [ 1324.410911][T19085] ? shmem_mapping+0xd/0x50 [ 1324.410996][T19085] ? memfd_check_seals_mmap+0xcb/0x210 [ 1324.411052][T19085] do_mmap+0xc1e/0x10b0 [ 1324.411100][T19085] ? __pfx_do_mmap+0x10/0x10 [ 1324.411135][T19085] ? rwbase_write_lock+0x550/0x720 [ 1324.411182][T19085] vm_mmap_pgoff+0x275/0x4e0 [ 1324.411253][T19085] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1324.411295][T19085] ? __fget_files+0x2a/0x420 [ 1324.411320][T19085] ? __fget_files+0x3a8/0x420 [ 1324.411345][T19085] ? __fget_files+0x2a/0x420 [ 1324.411374][T19085] ksys_mmap_pgoff+0x4a6/0x720 [ 1324.411399][T19085] ? __x64_sys_mmap+0x7f/0x140 [ 1324.411423][T19085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.411449][T19085] do_syscall_64+0x174/0x580 [ 1324.411482][T19085] ? clear_bhb_loop+0x40/0x90 [ 1324.411511][T19085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.411536][T19085] RIP: 0033:0x7f6c3726e019 [ 1324.411558][T19085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1324.411579][T19085] RSP: 002b:00007f6c35484028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1324.411603][T19085] RAX: ffffffffffffffda RBX: 00007f6c374f6180 RCX: 00007f6c3726e019 [ 1324.411621][T19085] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000fa2000 [ 1324.411636][T19085] RBP: 00007f6c35484090 R08: 0000000000000006 R09: 0000000000000000 [ 1324.411657][T19085] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1324.411672][T19085] R13: 00007f6c374f6218 R14: 00007f6c374f6180 R15: 00007ffdead751c8 [ 1324.411709][T19085] [ 1324.851522][ T9347] usb 2-1: config 0 descriptor?? [ 1325.253789][ T9347] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1325.510702][T19088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4188'. [ 1325.705957][ T9347] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1325.910629][ T9347] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1325.985534][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1326.081122][ T9347] usb 2-1: USB disconnect, device number 78 [ 1326.131631][ T9347] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1326.387425][ T9347] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1326.388552][ T9347] quatech2 2-1:0.51: device disconnected [ 1326.602759][ T5854] usb 4-1: USB disconnect, device number 85 [ 1327.170251][T19102] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4191'. [ 1328.691535][T19125] netlink: 'syz.4.4196': attribute type 26 has an invalid length. [ 1328.691563][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4196'. [ 1328.705182][ T5603] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1329.989465][T19143] comedi: No check for data length of config insn id 9 is implemented [ 1329.989484][T19143] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1329.989498][T19143] comedi: Assuming n=15 is correct [ 1330.887583][T19157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4203'. [ 1330.903753][T19157] netlink: 'syz.3.4203': attribute type 26 has an invalid length. [ 1330.903776][T19157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4203'. [ 1331.001894][ T5604] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1332.061072][ T5604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1332.123283][ T5604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1332.146268][ T5604] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1332.175768][ T5604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1332.198211][ T5604] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1333.455185][ T5854] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 1333.791998][ T5854] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1333.836269][ T5854] usb 2-1: config 8 has an invalid interface number: 59 but max is 3 [ 1333.836379][ T5854] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.836401][ T5854] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 1333.836424][ T5854] usb 2-1: config 8 has no interface number 0 [ 1333.836722][ T5854] usb 2-1: config 8 interface 59 altsetting 2 has an endpoint descriptor with address 0x1A, changing to 0xA [ 1333.836753][ T5854] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 1333.836778][ T5854] usb 2-1: config 8 interface 59 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1333.836879][ T5854] usb 2-1: config 8 interface 59 has no altsetting 0 [ 1333.843061][ T5854] usb 2-1: string descriptor 0 read error: -22 [ 1333.843606][ T5854] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 1333.844038][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.993165][ T5854] ttusbir 2-1:8.59: cannot find expected altsetting [ 1334.045791][T19195] FAULT_INJECTION: forcing a failure. [ 1334.045791][T19195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1334.045832][T19195] CPU: 0 UID: 0 PID: 19195 Comm: syz.3.4210 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1334.045864][T19195] Tainted: [L]=SOFTLOCKUP [ 1334.045873][T19195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1334.045890][T19195] Call Trace: [ 1334.045899][T19195] [ 1334.045910][T19195] dump_stack_lvl+0xe8/0x150 [ 1334.045952][T19195] should_fail_ex+0x467/0x600 [ 1334.045995][T19195] _copy_from_user+0x2d/0xb0 [ 1334.046025][T19195] ___sys_sendmsg+0x1c6/0x360 [ 1334.046057][T19195] ? __lock_acquire+0x683/0x2ce0 [ 1334.046086][T19195] ? __pfx____sys_sendmsg+0x10/0x10 [ 1334.046155][T19195] ? __fget_files+0x2a/0x420 [ 1334.046180][T19195] ? __fget_files+0x3a8/0x420 [ 1334.046221][T19195] __x64_sys_sendmsg+0x1b7/0x290 [ 1334.046257][T19195] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1334.046307][T19195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.046333][T19195] do_syscall_64+0x174/0x580 [ 1334.046375][T19195] ? clear_bhb_loop+0x40/0x90 [ 1334.046403][T19195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.046427][T19195] RIP: 0033:0x7fb23ee3e019 [ 1334.046448][T19195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1334.046467][T19195] RSP: 002b:00007fb23d096028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1334.046492][T19195] RAX: ffffffffffffffda RBX: 00007fb23f0c5fa0 RCX: 00007fb23ee3e019 [ 1334.046509][T19195] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1334.046525][T19195] RBP: 00007fb23d096090 R08: 0000000000000000 R09: 0000000000000000 [ 1334.046539][T19195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1334.046553][T19195] R13: 00007fb23f0c6038 R14: 00007fb23f0c5fa0 R15: 00007ffdb46922a8 [ 1334.046589][T19195] [ 1334.364655][T14065] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.410062][ T5604] Bluetooth: hci3: command tx timeout [ 1334.765236][ T10] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1335.149012][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1335.346011][ T10] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1335.364474][ T10] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1335.375000][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.375031][ T10] usb 4-1: Product: syz [ 1335.375048][ T10] usb 4-1: Manufacturer: syz [ 1335.375291][ T10] usb 4-1: SerialNumber: syz [ 1335.494757][ T10] usb 4-1: config 0 descriptor?? [ 1335.543879][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1335.544546][ T10] usb 4-1: setting power ON [ 1335.586545][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1335.650063][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1335.652992][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1335.653189][ T10] usb 4-1: media controller created [ 1335.746506][T19206] FAULT_INJECTION: forcing a failure. [ 1335.746506][T19206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1335.746548][T19206] CPU: 1 UID: 0 PID: 19206 Comm: syz.4.4213 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1335.746581][T19206] Tainted: [L]=SOFTLOCKUP [ 1335.746589][T19206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1335.746603][T19206] Call Trace: [ 1335.746611][T19206] [ 1335.746620][T19206] dump_stack_lvl+0xe8/0x150 [ 1335.746664][T19206] should_fail_ex+0x467/0x600 [ 1335.746710][T19206] _copy_to_user+0x31/0xb0 [ 1335.746742][T19206] simple_read_from_buffer+0xe1/0x170 [ 1335.746785][T19206] proc_fail_nth_read+0x1be/0x230 [ 1335.746813][T19206] ? key_put+0xb7/0x240 [ 1335.746925][T19206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1335.746955][T19206] ? rw_verify_area+0x250/0x4d0 [ 1335.746987][T19206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1335.747013][T19206] vfs_read+0x219/0xa90 [ 1335.747052][T19206] ? __pfx_vfs_read+0x10/0x10 [ 1335.747084][T19206] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1335.747125][T19206] ? lockdep_hardirqs_on+0x7a/0x110 [ 1335.747157][T19206] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1335.747189][T19206] ? mutex_lock_nested+0x152/0x1d0 [ 1335.747212][T19206] ? fdget_pos+0x252/0x320 [ 1335.747247][T19206] ksys_read+0x156/0x270 [ 1335.747279][T19206] ? __pfx_ksys_read+0x10/0x10 [ 1335.747316][T19206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.747342][T19206] do_syscall_64+0x174/0x580 [ 1335.747375][T19206] ? trace_irq_disable+0x3b/0x140 [ 1335.747400][T19206] ? clear_bhb_loop+0x40/0x90 [ 1335.747431][T19206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.747454][T19206] RIP: 0033:0x7f6c3722e84e [ 1335.747476][T19206] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1335.747496][T19206] RSP: 002b:00007f6c354c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1335.747520][T19206] RAX: ffffffffffffffda RBX: 00007f6c354c66c0 RCX: 00007f6c3722e84e [ 1335.747539][T19206] RDX: 000000000000000f RSI: 00007f6c354c60a0 RDI: 0000000000000003 [ 1335.747554][T19206] RBP: 00007f6c354c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1335.747569][T19206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1335.747584][T19206] R13: 00007f6c374f6038 R14: 00007f6c374f5fa0 R15: 00007ffdead751c8 [ 1335.747619][T19206] [ 1336.086160][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1336.106592][T19210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4214'. [ 1336.164685][T19211] netlink: 'syz.4.4214': attribute type 26 has an invalid length. [ 1336.164710][T19211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4214'. [ 1336.197061][ T5604] ================================================================== [ 1336.197079][ T5604] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 1336.197189][ T5604] Read of size 8 at addr ffffc9001d7a9008 by task kworker/u9:5/5604 [ 1336.197208][ T5604] [ 1336.197225][ T5604] CPU: 1 UID: 0 PID: 5604 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1336.197257][ T5604] Tainted: [L]=SOFTLOCKUP [ 1336.197266][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1336.197282][ T5604] Workqueue: hci4 hci_rx_work [ 1336.197313][ T5604] Call Trace: [ 1336.197322][ T5604] [ 1336.197332][ T5604] dump_stack_lvl+0xe8/0x150 [ 1336.197368][ T5604] print_address_description+0x55/0x1e0 [ 1336.197417][ T5604] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1336.197442][ T5604] print_report+0x58/0x70 [ 1336.197474][ T5604] kasan_report+0x117/0x150 [ 1336.197550][ T5604] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1336.197579][ T5604] __list_del_entry_valid_or_report+0xb5/0x190 [ 1336.197606][ T5604] kcov_remote_start+0x295/0x6f0 [ 1336.197702][ T5604] hci_rx_work+0x10f/0x1020 [ 1336.197734][ T5604] ? process_scheduled_works+0xa20/0x14e0 [ 1336.197764][ T5604] process_scheduled_works+0xa8e/0x14e0 [ 1336.197808][ T5604] ? __pfx_process_scheduled_works+0x10/0x10 [ 1336.197838][ T5604] ? assign_work+0x3cf/0x5d0 [ 1336.197871][ T5604] worker_thread+0xa47/0xfb0 [ 1336.197914][ T5604] kthread+0x388/0x470 [ 1336.197949][ T5604] ? __pfx_worker_thread+0x10/0x10 [ 1336.197975][ T5604] ? __pfx_kthread+0x10/0x10 [ 1336.198010][ T5604] ret_from_fork+0x514/0xb70 [ 1336.198047][ T5604] ? __pfx_ret_from_fork+0x10/0x10 [ 1336.198084][ T5604] ? __switch_to+0xc89/0x1420 [ 1336.198117][ T5604] ? __pfx_kthread+0x10/0x10 [ 1336.198152][ T5604] ret_from_fork_asm+0x1a/0x30 [ 1336.198183][ T5604] [ 1336.198193][ T5604] [ 1336.198199][ T5604] The buggy address belongs to a vmalloc virtual mapping [ 1336.198249][ T5604] Memory state around the buggy address: [ 1336.198292][ T5604] ffffc9001d7a8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1336.198308][ T5604] ffffc9001d7a8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1336.198324][ T5604] >ffffc9001d7a9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1336.198336][ T5604] ^ [ 1336.198374][ T5604] ffffc9001d7a9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1336.198390][ T5604] ffffc9001d7a9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1336.198404][ T5604] ================================================================== [ 1336.198437][ T5604] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1336.198457][ T5604] CPU: 1 UID: 0 PID: 5604 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1336.198487][ T5604] Tainted: [L]=SOFTLOCKUP [ 1336.198495][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1336.198510][ T5604] Workqueue: hci4 hci_rx_work [ 1336.198544][ T5604] Call Trace: [ 1336.198557][ T5604] [ 1336.198567][ T5604] vpanic+0x56c/0xa60 [ 1336.198589][ T5604] ? rcu_is_watching+0x15/0xb0 [ 1336.198621][ T5604] ? __pfx_vpanic+0x10/0x10 [ 1336.198649][ T5604] panic+0xc5/0xd0 [ 1336.198669][ T5604] ? __pfx_panic+0x10/0x10 [ 1336.198691][ T5604] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1336.198722][ T5604] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1336.198747][ T5604] check_panic_on_warn+0x89/0xb0 [ 1336.198808][ T5604] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1336.198833][ T5604] end_report+0x73/0x170 [ 1336.198858][ T5604] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1336.198881][ T5604] kasan_report+0x128/0x150 [ 1336.198909][ T5604] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1336.198939][ T5604] __list_del_entry_valid_or_report+0xb5/0x190 [ 1336.198966][ T5604] kcov_remote_start+0x295/0x6f0 [ 1336.199000][ T5604] hci_rx_work+0x10f/0x1020 [ 1336.199031][ T5604] ? process_scheduled_works+0xa20/0x14e0 [ 1336.199058][ T5604] process_scheduled_works+0xa8e/0x14e0 [ 1336.199102][ T5604] ? __pfx_process_scheduled_works+0x10/0x10 [ 1336.199134][ T5604] ? assign_work+0x3cf/0x5d0 [ 1336.199163][ T5604] worker_thread+0xa47/0xfb0 [ 1336.199206][ T5604] kthread+0x388/0x470 [ 1336.199240][ T5604] ? __pfx_worker_thread+0x10/0x10 [ 1336.199267][ T5604] ? __pfx_kthread+0x10/0x10 [ 1336.199303][ T5604] ret_from_fork+0x514/0xb70 [ 1336.199331][ T5604] ? __pfx_ret_from_fork+0x10/0x10 [ 1336.199357][ T5604] ? __switch_to+0xc89/0x1420 [ 1336.199382][ T5604] ? __pfx_kthread+0x10/0x10 [ 1336.199408][ T5604] ret_from_fork_asm+0x1a/0x30 [ 1336.199432][ T5604] [ 1336.201100][ T5604] Kernel Offset: disabled